Trust & Security

Shared responsibility

Probalytix runs on the Lovable platform, which provides hosting, the managed database, and authentication infrastructure. Probalytix is responsible for the application code, access policies, and how user data is handled inside the app. You are responsible for keeping your account credentials safe.

Authentication & access

• Email & password sign-in, and Google sign-in.
• Passwords are never stored by Probalytix — authentication is handled by the managed auth service.
• Every request to user-owned data is checked against row-level security policies so accounts can only see their own rows.
• Pro-only features are re-checked on the server before any premium computation runs; client-side checks are UX only.

Data we collect

• Account: email, optional display name, sign-in metadata.
• Subscription: a Stripe customer/subscription identifier and the current plan status, used to grant Pro access.
• Product usage strictly needed to operate features (e.g. which matches you opened recently).

Probalytix does not sell personal data and does not run third-party advertising trackers.

Payments

Payments are processed by Stripe. Probalytix never sees or stores your full card number, CVC, or bank details — Stripe handles card data directly. We only store the Stripe identifiers needed to keep your subscription in sync.

Subprocessors

• Lovable — application hosting and managed backend.
• Stripe — payment processing.
• Google — optional sign-in provider.
• Sports data providers used to compute fair odds and forecasts.

Encryption

Traffic to Probalytix is served over HTTPS. The managed database and storage layer encrypt data at rest. Secrets and API keys are stored in the platform's secret manager and are never embedded in the client-side app.

Retention & deletion

You can request deletion of your account and associated profile data by contacting us at the address below. Subscription records required for accounting and tax purposes may be retained for the period required by Norwegian law.

Reporting a security issue

If you believe you have found a security or privacy issue in Probalytix, please contact us via the contact page. Please include enough detail to reproduce the issue. We appreciate responsible disclosure and will respond as quickly as we can.

Compliance

Probalytix is operated by an individual in Norway. The service does not currently hold third-party compliance certifications (such as SOC 2 or ISO 27001). Statements on this page describe the controls currently enabled in the application, not any independent audit outcome.

See also the Terms and Conditions for the full legal terms of the service.