Privacy Policy

This Privacy Policy explains what data the CHEQ mobile and web application ("CHEQ", "the app", "we", "us") collects, how we use it, who we share it with, and the choices you have. CHEQ is operated by JMH Capital Group LLC (Delaware, USA), through its CHEQ product line.

1. Information we collect

Account information

If you create an account, we collect your email address, a username you choose, and a password (stored only as a salted PBKDF2 hash — we never see your plaintext password). You can optionally select favorite teams for NBA, MLB, NHL, and NFL.

Device push token

When you enable notifications, your device generates an Expo push token. We store this token so we can deliver alerts when a player you track scores or when a parlay leg resolves. The token does not identify you personally.

Activity you create in the app

• Watchlist entries — players, stats, and thresholds you choose to track.
• Parlays — multi-leg bets you save, their legs, and live status (we track resolution to send notifications and update your view).
• Chat messages — messages you post in per-game chat rooms are public to other users in that room and stored with your username and account tier (Free or Pro).
• Usage logs — limited counters (for example, "watchlist add" events per day) used to enforce free-tier limits. These are tied to your account or device token.
• Promo code redemptions — if you redeem a code, we record that the code was used and update your account tier.

Screenshots you upload

If you use the "Import from Screenshot" feature inside Parlays (Pro), the screenshot image is sent to Anthropic's Claude API for parsing into structured parlay legs. The image is not stored on our servers after parsing and is subject to Anthropic's data handling policies (see "Third parties" below).

Advertising and attribution data

CHEQ advertises on Meta platforms (Facebook and Instagram). To measure whether those ads work, we include the Meta SDK, which sends a limited set of data to Meta Platforms, Inc.: that CHEQ was installed, and certain in-app events such as starting a free trial or subscribing. On iOS this may also include your device's advertising identifier — but only if you grant permission when the app shows the App Tracking Transparency prompt. If you decline that prompt, no advertising identifier is shared, and every feature of CHEQ works exactly the same. We never send your email, username, watchlist, parlays, or chat messages to Meta.

What we do not collect

• We do not collect your contacts, location, or microphone data.
• Other than the advertising measurement described directly above, we do not use third-party analytics or tracking SDKs.
• We do not sell your personal data for money.

2. How we use your information

• To provide the core service — scores, box scores, watchlist tracking, parlay tracking, and push notifications.
• To authenticate you and remember your preferences (theme, favorite teams).
• To enforce free-tier usage limits and apply Pro entitlements.
• To deliver push notifications you have opted into.
• To respond to support requests and investigate bugs or abuse.

3. Third parties

We rely on the following service providers. Each one only receives the data necessary for its function:

• Apple Push Notification Service (via Expo Push): delivers notifications to your device. Receives your push token and the notification payload.
• Anthropic (Claude API): processes parlay screenshots you upload, returning parsed leg data. Subject to Anthropic's privacy policy.
• Meta Platforms, Inc. (Facebook / Instagram): receives app-install and in-app event data — and, only with your permission on iOS, your device advertising identifier — so we can measure and attribute the performance of our advertising. Subject to Meta's privacy policy.
• Railway: hosts our backend servers and database in the United States.
• Vercel: hosts the CHEQ web application and this page.
• Sportradar: supplies live and historical game, player, and statistical data across the sports CHEQ covers (NBA, MLB, NHL, NFL, soccer, and tennis). We do not send any of your data to Sportradar.
• ESPN and official league data endpoints: supply supplementary public game data, team logos, and player images. We do not send any of your data to them.
• Google (Firebase Cloud Messaging): delivers push notifications to Android devices. Receives your push token and the notification payload.

4. Data retention

We retain your account data for as long as your account is active. Watchlist entries for single games are deleted automatically once the game is final. Season-long watches, parlays, chat messages, and account data persist until you request deletion. Usage logs are retained for limit enforcement and may be summarized over time.

5. Your rights

You can request to access, correct, or delete your personal data at any time by emailing support@cheqsports.com. We will respond within 30 days. If you are in a jurisdiction with specific data rights (such as the EU under GDPR or California under CCPA), those rights apply.

To delete your account and its data, use Account → Delete Account in the app, or follow the instructions on our account deletion page if you no longer have CHEQ installed.

California residents — Do Not Sell or Share My Personal Information

California's CCPA/CPRA treats sharing device or event data with an advertising partner for cross-context behavioral advertising as a "sale" or "share," even when no money changes hands. The advertising measurement described in Section 1 can fall under that definition. You can opt out of it at any time:

• On iOS: decline the App Tracking Transparency prompt, or turn off tracking later in iOS Settings → Privacy & Security → Tracking. This stops any advertising identifier from being shared with Meta.
• Any device: email support@cheqsports.com with the subject line "Do Not Sell or Share" and the email on your account, and we will suppress advertising-measurement sharing for you.

We do not sell your personal information for money, and we never share your email, username, or the content you create in the app — watchlists, parlays, or chat — with any advertising partner.

6. Security

Passwords are stored only as salted PBKDF2 hashes. Communication between the app and our servers is encrypted with HTTPS. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

7. Children

CHEQ is not directed to children under 13 and we do not knowingly collect data from children under 13. The app contains content related to sports betting and is intended for users 18 and older, in line with our Terms of Service. If you believe a child has provided us with personal data, please contact us so we can delete it.

8. International users

CHEQ is operated from the United States. If you access the app from outside the US, your information will be transferred to and processed in the US.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted by updating the "Last updated" date at the top. Continued use of the app after a change constitutes acceptance of the revised policy.

10. Contact