Privacy Policy

Last updated 7 September 2026

This policy explains what personal data the LastMinutesAI app, listed on the Apple App Store as LastMinutes: In-Play Value, and this website collect, why, and the choices you have. The data controller is LastMinutesAI Ltd ("we", "us", "our"). For anything privacy-related, email support@lastminutesai.com.

Anonymous by design

The app has no account and no login. There is no Sign in with Apple, no username, and no password. We never ask for your name, your email address, or your date of birth. Everything below is tied to a device, to a random identifier created on your device, or to your App Store purchase, not to your identity.

There is one exception, and we would rather point at it than bury it. Measuring which advertising campaign led you to install the app can involve Apple's advertising identifier, and that happens only if you allow it when the app asks. See Advertising and install measurement.

What the app collects, and why

• Push notification token: if you turn on match alerts, Apple gives us a device push token so we can send those notifications. It identifies your device, not you. Turn alerts off and we stop using it.
• Subscription status: when you buy Premium, we receive your App Store purchase receipt so we can unlock and maintain your access. We store the subscription state (which plan, active or lapsed) against the purchase's transaction identifier. This is processed on our servers and by our subscription provider (RevenueCat), which also receives your device's vendor identifier and IP address. It is not linked to your name.
• Referral attribution: if you arrive through a creator or partner link, or enter a partner code, the app stores an anonymous referral identifier and the short partner code so we can credit the right creator with a commission. This is first-party attribution only, handled by Insert Affiliate. Device fingerprinting is explicitly disabled in that integration: it is not used to track you across other apps or websites, and it is not linked to your identity.
• Server requests: like any online service, our servers process your device's IP address when the app requests match data, so we can deliver responses and protect the service from abuse. We do not use it to identify you or build a profile of you.
• Bet tracker entries: if you use the bet tracker, the bets you log are stored on our servers under a random tracker identifier created on your device. We record the market, the odds, the result, and the stake in units, an abstract and relative stake size. We never receive a currency amount: the app never asks what a unit is worth to you, so no monetary value of any kind leaves your device. Entries also carry their timestamps and the app version. Your bet records are held separately from our push-notification and subscription records, and we store no key that joins them. Resetting the tracker in the app clears your device and its iCloud copy; the pseudonymous server records are retained until you ask us to erase them (see "Your rights").
• iCloud sync: if you are signed in to iCloud, your bet tracker also syncs through your personal iCloud account, so it follows you across your devices and survives reinstalls. That copy lives in your private iCloud database and is processed by Apple under your own iCloud agreement. We cannot read it. It is not on our servers and we have no way to reach it.
• Reports you send us: if you send a problem report, or tell us a bookmaker settled a bet differently from us, we receive what you type, including (if you choose to give them) the bookmaker's name and the result they stated, together with the app version and platform. Reports carry no identifier at all. Not your tracker ID, not your device. We cannot tell who sent a report, and we cannot connect one to your bet tracker. The single exception is a report about a specific AI insight, which attaches the match and the insight text you are querying so that we can investigate it. Please do not include personal details in what you type.

Advertising and install measurement

We advertise the app, and we need to know which campaigns work. We use AppsFlyer to measure that. When you first run the app, iOS asks, through Apple's App Tracking Transparency prompt, whether you allow tracking. Your answer decides what happens:

• If you allow it: AppsFlyer receives your device's advertising identifier (IDFA) together with install and funnel events, such as finishing onboarding, starting a free trial, or subscribing, including the value of a subscription purchase. This lets your install be matched to the campaign that produced it. This is "tracking" as Apple defines it, and it is the only thing in the app that is.
• If you decline: no advertising identifier is used and nothing is matched to you. Measurement falls back to Apple's SKAdNetwork and AdAttributionKit, which tell us how campaigns performed in aggregate and do not identify you.

You can change your answer at any time in iOS Settings > Privacy & Security > Tracking. Where these events count your activity, they do so coarsely. An example is that you have logged twenty or fifty bets in total. No detail of any individual bet, and no stake, is included.

Usage analytics

We use Amplitude to understand how people use the app, so we can improve it. Amplitude acts as a data processor on our behalf, and your data is processed on servers in the European Union.

What we record are actions, not content. For example: that you opened a match, started logging a bet, completed or abandoned it, viewed a settled bet, changed a notification setting, saw an error, or reached the subscription screen. Where an action relates to a bet, we record only its coarse category (whether it was a goals, corners, cards or result market) and, for a settled bet, the outcome you were shown.

What we never collect through analytics:

• Your stakes, odds, returns, or profit and loss. No monetary value of any kind.
• Your name, email address, or postal address.
• Your advertising identifier, your device's vendor identifier, your mobile carrier, or your IP address. All of these are explicitly disabled in our configuration.
• Free text of any kind, including anything you type into a problem report.

You are identified only by the same pseudonymous identifier your bet tracker uses. It is not your name, not your email, and not an identifier issued by Apple or shared with other apps. It is a label only, and it never grants access to anything.

Why we do this, and your right to object. We rely on our legitimate interests (Article 6(1)(f) UK GDPR and EU GDPR) in understanding product usage well enough to improve the app. We have assessed this as proportionate because the data is coarse, pseudonymous, contains no financial detail, and is not used to make any decision about you.

You can object at any time, for no reason and with no effect on anything else. Go to Settings > More > Legal & About > Privacy and turn off "Share anonymous usage data". Collection stops on that device, and the analytics tool is not started again on future launches.

Because we cannot delete events already sent from within the app, turning that setting off stops future collection. It does not erase past events. If you want past events erased, email us and we will action it (see "Your rights").

This setting is not a consent gate. We do not ask you to consent to analytics, and turning it off is not withdrawing consent. It is exercising your right to object under Article 21.

What the website collects, and why

• Basic request data: our host, Cloudflare, processes your IP address and browser type to serve the page and block abuse. We only retain a truncated, scrambled version of the IP that cannot identify you, together with your country.
• Cookieless analytics: we use Cloudflare Web Analytics to count visits. It sets no cookies and does not identify you, which is why there is no cookie banner. We measure a few anonymous interactions the same way (for example, whether the intro film was played, skipped, or finished, and which button was clicked), so we know what works.
• Referral source: for your current browser session only, we note which link brought you to the site, so we know which channels work. It is cleared when you close the tab.
• Email, only if you give it: if you provide your email address (for example on a signup or waitlist form), we use it to contact you about the app and let you know about launches, and nothing else.

Legal bases

Under UK and EU GDPR we rely on:

• Performance of a contract: to deliver and maintain a subscription you have bought.
• Consent: for push notifications, for any marketing email you have given us, and for advertising measurement that uses your device's advertising identifier, which is the question the App Tracking Transparency prompt asks. You can withdraw any of these at any time: turn alerts off, unsubscribe, or change your tracking permission in iOS Settings.
• Legitimate interests (Article 6(1)(f)): keeping the Service secure, crediting the partners who refer users, and understanding how the app is used so we can improve it. Where we rely on legitimate interests you have the right to object; see "Your rights".

These are separate bases and we do not mix them. In particular, our product analytics run on legitimate interests, not on consent. The in-app toggle is an objection mechanism, not a consent switch.

What we do not do

We do not perform device fingerprinting. We do not sell your data. We show no advertising inside the app and run no third-party ad networks in it. We do advertise the app elsewhere and measure whether that advertising works, which is described in Advertising and install measurement above and happens only within the permission you gave.

Who processes your data

We use a small number of trusted providers, each acting under its own terms and only for the purposes above:

• Apple: the App Store, in-app purchases, push delivery, and iCloud sync of your bet tracker.
• Cloudflare: website hosting, security, and cookieless analytics.
• RevenueCat: subscription state and analytics.
• AppsFlyer: app-install and advertising campaign measurement.
• Amplitude: product usage analytics, processed on servers in the European Union.
• Insert Affiliate: the commission ledger for partner referrals.

Where your data is held

Amplitude processes our analytics data on servers in the European Union. Some of our other providers are based outside the UK, including in the United States. Where data is transferred internationally, it is protected by appropriate safeguards such as the providers' standard contractual clauses or equivalent approved mechanisms.

How long we keep it

We keep subscription records for as long as needed to provide Premium and to meet our legal and accounting obligations. Bet-tracker records are kept until you ask us to erase them (see "Your rights"). Product analytics events are retained for 12 months, after which they are deleted. Any email you have given us is kept until it has done its job or you ask us to remove it.

Your rights

You have the right to access, correct, delete, restrict, or object to our use of your personal data, and to data portability, where these apply.

Objecting to analytics is immediate and needs no request: turn off "Share anonymous usage data" in Settings > More > Legal & About > Privacy. That stops collection on that device. To have analytics events already collected erased, email us. The app cannot do it, so this one is a support request.

Erasing your bet tracker: copy your tracker ID (in the app's tracker settings, where it stays the same even after a reset) and email it to us. Because the identifier is random and unlinked, it is the only way we can find your records. For anything else we may similarly need information from you, such as your App Store transaction ID, to locate any data before we can act.

To exercise any right, email support@lastminutesai.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

Age

LastMinutesAI is for people aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes to this policy

We may update this policy from time to time. If we make material changes we will update the "last updated" date above and, where appropriate, tell you in the app.