Privacy Policy

1. Data controller

The data controller is PATOUAH PARNASSE LTD ("we"), a Private Limited Company registered under number 14189040 (Companies House, England & Wales), whose registered office is at 5 Brayford Square, London E1 0SG, Royaume-Uni. For any question about your personal data: contact@pronext-app.com.

2. Data we process

• Account: email address, password (stored only in hashed form, including while your sign-up is being confirmed), first name and last name when you sign in with Apple or Google (as provided by those services), the technical identifier of your Apple or Google account, verification status, creation and update dates. The language and country of your account are inferred once only, when the account is created, from the language and region settings of your device or browser; we do not geolocate you. If you were a customer of the previous version of Pronext, your email address comes from that account.
• Age declaration: when signing up, you tick a box confirming that you are 18 or over. We do not verify this declaration and do not collect your date of birth.
• Sign-up origin: sign-up method (email, Apple or Google) and, only when ad measurement is active for you (section 4), acquisition channel, campaign parameters contained in the tracked link ("utm" parameters), ad click identifier (for example gclid or fbclid), referring site (without its parameters) and landing page (without the parameters that may contain account data, such as an email address or a token).
• Favourites: competitions, teams and matches you follow, synchronised with your account.
• Subscription: plan, status, current period, provider (Stripe, App Store or Google Play), Stripe customer and subscription identifiers, and the transaction identifiers and in-app purchase status provided by Apple or Google. We never have access to your bank details.
• Notifications: your device’s notification token, platform, device model and language (mobile application); the subscription address provided by your browser and your browser identification (web application); your notification opt-in preference.
• AI assistant and Pix’s voice: the messages you send, the context of the match concerned and the text read aloud, transmitted in order to generate the reply (see section 5).
• Ad measurement: the events and identifiers described in section 4, only under the conditions set out there.
• Support: your email address, a pseudonym (the part of your email address before the "@") and the content of your exchanges with our team.
• pronext-app.com website: contact-form data (name, email, subject, message), technical server logs (IP address, pages viewed, browser) and, only with your consent, audience-measurement data (see the cookie policy).
• Technical data: in order to display the Service, our servers and certain providers necessarily receive your IP address and information about your browser or application.

We do not process any biometric data: unlocking with Face ID, Touch ID or fingerprint is handled entirely by your device. We never record your voice.

3. Purposes and legal bases

• Creating and managing your account, providing the Service, synchronising your favourites, operating the AI assistant and Pix’s voice: performance of the contract between us (Terms of Use).
• Managing your subscriptions and payments: performance of the contract; retention of billing records by our payment providers: legal obligation.
• Sending emails relating to your account (sign-up confirmation, password reset, export of your data): performance of the contract.
• Sending you notifications: consent, given through the permission on your device or in your browser, which you may withdraw at any time.
• Responding to your support requests and to messages sent via the contact form: performance of the contract and legitimate interest in replying to you.
• Understanding where sign-ups come from (campaign parameters, ad click identifier, referring site) in order to manage our marketing investment: consent in countries where the law requires it, legitimate interest elsewhere, with a right to object (section 4).
• Informing customers of the previous version of Pronext about the move to the new application and enabling them to recover their account (migration email containing your address): legitimate interest, for people who were already customers; you may object by writing to contact@pronext-app.com.
• Measuring the effectiveness of our ads with Meta: consent in countries where the law requires it, legitimate interest elsewhere, with a right to object (section 4).
• Measuring the audience of the pronext-app.com website: consent, which you may withdraw at any time via "Manage cookies".
• Ensuring the security of the website and the application, preventing abuse and responding to requests from the authorities: legitimate interest and legal obligation.

We do not sell your personal data. We do not take any decision based solely on automated processing that produces legal effects concerning you: the predictions are about matches, not about you.

4. Ad measurement with Meta

We advertise on Facebook and Instagram. To find out whether these ads lead to installs, sign-ups or subscriptions, the Pronext application (not the pronext-app.com website) uses the measurement tools of Meta Platforms Ireland Ltd. (Ireland).

• Countries where your consent is required: the countries of the European Economic Area (including their outermost regions), the United Kingdom and Switzerland. We determine whether this applies to you from the settings of your device (mobile application: time zone and regions of your preferred languages) or of your browser (web application: time zone and languages), without using your IP address or geolocating you; if none of these signals can be used, or where in doubt, we treat your consent as required. In these countries, no data is sent to Meta for measurement purposes until you have accepted in the "Measuring our ads" window. Your choice is kept for 6 months, after which you are asked again.
• Other countries: measurement is active by default, on the basis of our legitimate interest in evaluating our campaigns. You may object at any time using the same switch; your objection is then kept indefinitely.
• Changing your mind: in the application, Profile → Privacy → "Ad measurement", "Allow ad measurement" switch. Refusing or turning it off has no effect on the Service. Withdrawal applies going forward; on the web application, it also deletes Meta’s cookies.
• Web application: the Meta Pixel sets the _fbp and _fbc cookies and transmits the address of the page viewed and that of the referring page, as well as the "page view", "offer viewed", "checkout started" and "purchase" events. We have disabled its automatic configuration, which detects button clicks and page information, and we do not pass your email address to the Pixel. It is neither loaded nor triggered on pages whose address, or that of the referring page, contains data linked to your account (migration link containing your email address, password reset page, parameters such as an email address or a token).
• Mobile application: Meta’s software development kit transmits the installation and opening of the application, the display of the subscription page and the start of a purchase, together with an anonymous installation identifier and technical characteristics of the device (model, operating system, language, screen size, etc.). Your device’s advertising identifier is only read when ad measurement is active for you (with your consent in countries where it is required, by default elsewhere, unless you object). On iPhone, you must also allow it through Apple’s tracking permission request, which is only shown to you if ad measurement is active for you and once you have completed sign-up. On Android, you can delete or reset it in your device’s Google settings.
• Our servers (Meta Conversions API): when you sign up or subscribe, we send Meta the event (and, for a subscription, the plan, its amount and its date), your email address, first name, last name, country and account identifier, each hashed (SHA-256) before sending, together with your IP address, your browser or device identification, the values of the _fbp and _fbc cookies on the web, the anonymous installation identifier and, under the conditions described above, the advertising identifier. On iPhone without Apple tracking permission, only the IP address, the device identification and the anonymous installation identifier are sent.

Without consent in the countries that require it, or after you have objected, none of these transmissions takes place and these identifiers are not recorded in our databases. The only exception: when you sign up by email, your IP address and your browser or device identification may be included in the temporary sign-up confirmation information, which is erased after 24 hours at the latest. Where a transmission is planned, the raw identifiers are erased from our servers as soon as they are transmitted or, at the latest, 7 days after collection (for example, for a payment started but not completed). To avoid duplicates, we keep a record of each sign-up or subscription concerned (event type, date, "sent" or "not sent" status and, as applicable, sign-up method or plan and amount), including where nothing is sent to Meta for lack of consent; this record contains no IP address and no browser, device or advertising identifier, and it is deleted with your account.

Meta processes the data it receives in accordance with its own privacy policy.

5. AI assistant and Pix’s voice

The assistant’s replies, the explanations of predictions and Pix’s voice are generated by Mistral AI (France). We send it your messages, the context of the match concerned (teams, competition, market, prediction, confidence level), the language and, for the voice, the text to be read. We do not send it your email address or your account identifier.

We do not store your conversations on our servers; Mistral AI, which processes them on our behalf, may retain them temporarily under the terms of its data processing agreement. Their history is stored only on your device: you can delete each conversation from the assistant’s history. Simply signing out does not erase it; deleting your account erases it on the device from which you delete your account.

Please do not include sensitive personal information in your messages: it is not needed for the assistant to work.

6. Notifications

Notifications are only sent if you allow them on your device or in your browser. You can turn them off at any time in the application (Profile → Preferences → "Push notifications") or in your device or browser settings.

On mobile, they are routed through Expo (650 Industries, Inc., United States), then through Apple’s notification service (APNs) or Google’s (Firebase Cloud Messaging). On the web application, they are routed through your browser’s notification service.

The notification token or subscription is deleted from our servers when you sign out, when the notification service informs us that it is no longer valid, and when you delete your account.

7. Recipients

Your data is accessible only to the members of our team who need it, and to the following providers, each for its own role:

• Hostinger International Ltd. — hosting of the pronext-app.com website and sending of emails relating to your account (from the address noreply@pronext-app.com);
• our hosting providers — hosting of the web application and of our servers (API);
• Stripe — payment of subscriptions purchased on the web; Stripe receives your email address, your name and your account identifier, and processes your payment details directly;
• Apple (App Store) and Google (Google Play) — in-app purchases on mobile; they process the payment, and we only receive transaction identifiers and the subscription status;
• Mistral AI (France) — AI assistant, explanations of predictions and Pix’s voice (section 5);
• Meta Platforms Ireland Ltd. (Ireland) — ad measurement for the application, under the conditions set out in section 4;
• Expo (650 Industries, Inc., United States), Apple and Google — delivery of notifications on mobile (section 6); Expo also distributes application updates;
• Crisp (Crisp IM SAS, France) — support chat; Crisp receives your email address and your pseudonym when you are signed in to the application, the content of your exchanges and, when the chat loads, your IP address; on the website, the chat is only loaded at your request;
• Google (Google Tag Manager, Google Analytics 4, Google Ireland Ltd.) — audience measurement of the pronext-app.com website, only after your consent;
• jsDelivr (content delivery network) and flagcdn — technical files for the application (Pix’s 3D rendering engine, flags); as with any website you visit, these services receive your IP address when the files are downloaded.

Our sports data provider receives no data about you. Finally, your data may be disclosed to the authorities where required by law.

8. Transfers outside the European Economic Area

The publisher of the Service, acting as data controller, is established in the United Kingdom: your data is processed there on the basis of the adequacy decision adopted by the European Commission in respect of the United Kingdom.

Some recipients (notably Expo, Apple, Google, Stripe, Meta, or their parent companies, as well as the jsDelivr and flagcdn content delivery networks) process data in the United States. These transfers rely on the EU-US Data Privacy Framework and its UK Extension where the recipient has signed up to it or, failing that, on the European Commission’s standard contractual clauses and their UK Addendum. You can ask us for information about these safeguards at contact@pronext-app.com.

9. Cookies, trackers and storage on your device

pronext-app.com website: the website only uses strictly necessary cookies, and audience-measurement cookies only after your consent. Their list, their duration and how to withdraw your consent are set out in the cookie policy.

Application: in order to work, the application stores on your device (or in your browser’s storage on the web) your login tokens (in the system’s secure storage on mobile, in browser storage on the web), your preferences (display mode "Guide me" or "Show all", language, Pix’s sound, biometric unlock), your bookmaker filter and default stakes (which never leave your device), your favourites, your selection, your recent searches, the AI assistant history, a copy of the sports data displayed and your ad measurement choice. These items are necessary for the Service and are not used for advertising tracking.

On the web application, when ad measurement is active for you (section 4), we also keep in browser storage the origin of your first visit (landing page address, including any campaign parameters and ad click identifier it contains, but without the parameters that may contain account data, such as an email address or a token, or the part after "#"; referring site address, without its parameters) for up to 30 days, so that it can be linked to your account if you sign up; it is erased when ad measurement stops being active for you (withdrawal, objection or expiry of your consent). We also keep any purchase in progress for up to 2 hours, while you return from the payment page. The application’s advertising identifiers are Meta’s cookies described in section 4, which are subject to the same consent or objection rules, and the ad click identifiers (for example fbclid or gclid) contained in the link that brought you to us: the latter are only stored, with the origin of your visit, when ad measurement is active for you, and are only used for Meta measurement under the conditions set out in section 4. The Crisp chat sets its own technical cookies when it loads.

Signing out erases your login tokens, favourites and subscription from the device. Deleting your account erases the data stored by the application on the device from which you delete your account, including, on the web application, Meta’s cookies, the origin of your first visit and any purchase in progress; only your ad measurement choice is kept there, so that your consent or refusal continues to be respected.

10. Retention periods

• Account, favourites, subscription, linked Apple or Google identities, sign-up origin and record of ad measurement events: for as long as your account exists, then deleted immediately when you delete your account.
• Email sign-up: the information entered (and the technical information from the request) is kept for up to 24 hours, while you click the confirmation link; after that, it is erased and the account is not created.
• Raw identifiers sent to Meta (IP address, browser or device identification, cookies, installation identifiers): erased as soon as the event is sent to Meta or abandoned, and at the latest 7 days after collection (for example, for a payment started but not completed).
• Notification tokens: until you sign out, until they become invalid or until you delete your account.
• Conversations with the assistant: on your device only, until you delete them, delete your account from that device or uninstall the application.
• Billing data held by Stripe, Apple and Google: in accordance with their own legal obligations, in particular accounting obligations, including after your account has been deleted.
• Exchanges with support in Crisp: for as long as they are useful for following up your request.
• Contact-form messages: they are not stored on the website but forwarded by email to our support team, which keeps them for 12 months after the last exchange.
• Website technical logs: 12 months maximum.
• Website cookie consent choice: 6 months; audience-measurement cookies: 13 months maximum (duration configured in our audience-measurement container).

11. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on our legitimate interest, in particular to ad measurement.

Where processing is based on your consent, you may withdraw it at any time, without affecting the processing carried out before its withdrawal.

If you reside in France, you may also set out instructions regarding the retention, erasure and communication of your data after your death.

You may lodge a complaint with the data protection authority of your country of residence: in the United Kingdom, the Information Commissioner’s Office; in France, the CNIL. We encourage you to contact us first: we will do our best to find a solution.

12. Exercising your rights

• Exporting your data: in the application, Profile → Privacy → "Export my data". We gather your account data and the data stored by the application on the device used, and send them to you as an attachment (JSON file) at your account email address within the next few minutes. You can make up to 3 requests per day. This automatic export does not include the history of your exchanges with support or the data held by our payment providers: to obtain these, or for any additional copy, write to us at contact@pronext-app.com.
• Deleting your account: Profile → Privacy → "Delete my account". Deletion is immediate and permanent: your account and your data are erased from our active databases and you are signed out of all your devices. A subscription purchased on the web is cancelled at the same time; a subscription purchased through the App Store or Google Play must be cancelled from your Apple or Google account, as deleting your account does not stop it. The following are not covered by this automatic deletion: the history of your exchanges with support (Crisp and email), which we erase on simple request to contact@pronext-app.com; the customer record kept by Stripe (email, name, invoices) for its legal obligations; data already sent to Meta, which processes it in accordance with its own policy.
• Ad measurement: Profile → Privacy → "Ad measurement".
• Notifications: Profile → Preferences → "Push notifications", or your device or browser settings.
• Website audience measurement: "Manage cookies" button in the footer.
• Any other request (rectification, restriction, objection, question): write to us at contact@pronext-app.com from your account email address, via the Contact page or via Profile → Help & support in the application.

We respond within one month, which may be extended in the cases provided for by law; we may ask you to prove your identity if there is any doubt.

13. Minors

The Service is restricted to persons aged 18 or over. We do not knowingly collect data about minors. If you believe that a minor has created an account, please write to us: we will delete it.

14. Security

Exchanges between the website or the application and our servers are encrypted (TLS). Passwords are stored in hashed form. On mobile, your login tokens are kept in the system’s secure storage. As no system is infallible, we will inform you, as well as the competent authority, of any personal data breach likely to result in a high risk to you, as required by law.

15. Changes

We may update this policy to reflect changes to the Service or to regulations. In the event of a substantial change, you will be informed in the application or on the website before it takes effect. The date of the last update appears at the top of this document.

16. Contact

For any question about this policy or your data: contact@pronext-app.com, by post to PATOUAH PARNASSE LTD, 5 Brayford Square, London E1 0SG, Royaume-Uni, via the Contact page or through the in-app support (Profile → Help & support).