Privacy Policy

Effective Date: February 21, 2026

NORMA ("we", "our", "the app") is a sports alerts and wager tracking application. This Privacy Policy explains what data we collect, how we use it, and your choices.

1. Data We Collect

• Account information: Email address, display name, and authentication credentials (via email/password or Apple Sign-In).
• Wager data: Wager descriptions, lines, odds, sportsbook selections, and bet slip images you choose to scan.
• Preferences: Favorite teams, notification settings, quiet hours, and timezone.
• Connections: Which streaming services and sportsbooks you indicate you use (no login credentials are stored for these services).
• Prediction market positions: If you connect Kalshi or Polymarket, your API credentials and position data.
• Device information: Push notification token (Expo Push), device type, and app version.

2. How We Use Your Data

• Deliver personalized game alerts based on your followed teams and active wagers.
• Track and display your wager history and outcomes.
• Send push notifications for games you follow.
• Provide deep links to streaming apps you have connected.

3. Third-Party Services

NORMA integrates with the following services:

• Supabase: Authentication, database, and serverless functions (data stored in Supabase's infrastructure).
• ESPN: Live game scores (public API, no user data shared).
• SportsDataIO: Game schedules and scores (no user data shared).
• Sportradar: Play-by-play and game summaries (no user data shared).
• The Odds API: Betting odds from DraftKings, FanDuel, BetMGM (no user data shared).
• Kalshi / Polymarket: Prediction market data (user-provided API credentials, stored securely).
• Expo Push Notifications: Delivering push notifications to your device.

4. Data Retention

We retain your data for as long as your account is active. You can delete your account at any time from the Profile tab, which permanently removes all your data from our systems.

5. Data Security

Your data is protected by Supabase's row-level security policies, ensuring you can only access your own data. Authentication tokens are stored securely on-device using Expo SecureStore. API credentials for third-party services are protected by row-level security.

6. Your Rights

• Access: View your data in the app at any time.
• Deletion: Delete your account and all associated data from the Profile tab.
• Portability: Contact us to request an export of your data.

7. Children's Privacy

NORMA is intended for users 18 years of age or older. We do not knowingly collect data from children under 18.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

9. Contact

For questions about this Privacy Policy, contact us at privacy@norma-app.com.