Privacy Policy

This language version is for reference only; if it differs from the Traditional Chinese version, the Traditional Chinese version prevails.

MatchQuant (the “Platform” / “we”) is a sports analysis and simulated prediction tool. The Platform is purely simulated scoring and never handles wagering money and offers no real-money wagering or withdrawal. Users may pay for Intel Points and digital analysis content; payments only buy those services. This policy explains what data we collect, how we use it, and your rights.

Effective date: 2026-07-20 · Last updated: 2026-11-13
2026-11-06 revision: sections 1, 3 and 4 add “AI Analysis Assistant free try for visitors”: visitors without an account can ask 1 question free each day; before sending they accept a notice and pass a human check, the question and the public match data looked up to answer it go to an external AI service with no account data attached, and we only count the day’s questions with a hash of the network address, deleted after two days. Section 3 also adds, for the AI Analysis Assistant and the free try: the service may see your network address and region when connecting.
2026-11-03 revision: sections 1, 3 and 4 add “Password-recovery email”: only after you link an address and tick the consent box do we pass it to our email delivery provider to send confirmation and reset messages; you can remove it at any time.
This revision: Section 1 adds “Push notifications”; Section 3 adds push services, our server host and the relay used by the AI Analysis Assistant; Section 4 states the per-account conversation limit, how team lead accounts are deleted and the internal IDs that remain after a player analyst deletes their account; Section 5 lists the preference cookies; Section 8 rewrites how policy updates are communicated. Sections 3 and 4 add that an encrypted copy of the database backup is kept on a DigitalOcean server, which does not hold the decryption key, for at most 30 days. 2026-10-31: Section 1 adds “Sign-up source statistics” — to know where new members come from, we record how many people sign up from each source per day; we count people only, without recording who they are or linking this to your account. 2026-10-28: Section 1 “Website traffic statistics” adds that pages opened in our apps are also counted per day (the Taipei date, the domain, and whether it is the iPhone or Android app, old or new version), with no data that can identify you. 2026-10-25: Section 3 adds that when a team partner has only a few members, the team lead may be able to work out the amount and approximate time of individual purchases from changes in the total. 2026-10-24: Section 1 adds “Website traffic statistics” — to know how many people visit the site, we keep an anonymous same-day count; the hash we use changes every day and cannot match the same person across days, we do not store IP addresses, and we use no tracking cookies. 2026-10-23: referral partners can form a referral team; the team lead only sees the combined purchase total of all members of each team partner, not your username or details (Section 3). 2026-10-21: adds a clause on the standing of each language version (the Traditional Chinese version prevails; Section 8). 2026-10-19: a referral partner’s dashboard also shows your remaining Intel Points, and the partner can gift you Intel Points from a quota the Platform allocates (Section 3). 2026-10-16: analysts may delete their own account without contacting support first (once every match with sold analysis is settled); a suspended account that cannot log in may request deletion via “Contact us”, and we delete it after verifying identity (Section 4). 2026-10-14: the AI Analysis Assistant now asks for your consent before first use, which you can withdraw at any time; referral partners must accept the data-use rules before they can see your data, and entering an invitation code at sign-up requires ticking consent; Section 3 adds third parties’ protection obligations. Earlier the same day: Section 2 added the “referral cooperation” purpose and Section 3 added “Referral partners” — how we use your data after you link a partner, and what they can and cannot see.

1. Data we collect

2026-11-07 update: Section 1 adds registration form activity counts. Only anonymous action counts are recorded and deleted after 90 days.

• Registration form activity counts: to improve the registration form, we record only the Taipei date, predefined action or outcome categories, and counts (viewing, starting to fill in, submitting, success or failure). These counts contain no form entries, account names, passwords, invitation codes or traffic sources, are not linked to accounts, and add no tracking cookies or personal identifiers. They are deleted after 90 days.
• Account data: the username and password you provide at sign-up (passwords are stored as a one-way PBKDF2 hash; we cannot recover or see your original password). Sign-up does not require an email, phone number or real identity; you may voluntarily leave a reply email in the support form.
• Usage, activity and purchase data: your simulated order records and sim points (virtual points, not money), Intel Points and unlock records, past subscription records and validity, payment order numbers, items, amounts and credit status, auto-simulation settings, and records generated by your browsing and actions on the Platform.
• Content you provide: profile (nickname, bio, avatar — chosen from the built-in gallery or uploaded yourself), posts, comments, chat messages, reports, and support messages (category, content and optional reply email).
• AI Analysis Assistant: the questions you ask the AI Analysis Assistant and its answers (regular conversations are stored on your account and visible across devices; temporary conversations are not saved), and the preferences you save with “Remember” or add yourself (assistant memory).
• AI Analysis Assistant free try for visitors: visitors without an account can ask 1 question free each day; that question and its answer aren’t kept, and we only count the day’s questions with a hash of the network address (see section 4).
• Push notifications: only if you turn on notifications under “My Home → Account & security → Phone notifications” do we store this device’s push endpoint and encryption keys, to send the reminders you choose; they are deleted when you turn notifications off or delete your account.
• Password-recovery email: (optional) the email address you link under “My page → Account & security”, used only to send email-confirmation and password-reset messages.
• Technical data: to prevent abuse and keep the service secure, we process your IP address (for sign-up/login rate limiting and anomaly detection) and basic device/browser information.
• Website traffic statistics: to know how many people visit the site, we record an anonymous same-day count for each page view: the Taipei date, the page you viewed, the referring site’s domain and the country code, plus a hash derived from your IP address and browser information that is valid only for that day (it avoids counting the same person twice; it changes every day and cannot match the same person across days). We do not store IP addresses or full browser information, and we use no tracking cookies. Pages opened in our apps are also counted per day: the Taipei date, the domain, and whether it is the iPhone or Android app (old or new version), with no data that can identify you. These counts are deleted after 90 days.
• Sign-up source counts without account links: to know where new members come from, when you first open this site your browser keeps in this tab the domain of the website that brought you, or the short source tag in the link (cleared when you close the tab; it is not a cookie). It is sent to us only when you press sign up, and only if the sign-up succeeds do we add one to that day’s count for that source: the Taipei date and the source (the domain of a search engine or other website, a source tag in a link, the iPhone or Android app, an invitation code, direct visit, or unknown). We count people only, without recording who you are or linking this to your account. When very few people sign up on a day, staff with database access could work out an individual’s source from the sign-up time; we do not make that comparison. This count is also deleted after 90 days.

The Platform We do not collect your real name, ID documents or precise location. Card numbers and payment-instrument data are handled directly by the payment processor and are never sent to or stored on the Platform.

2. How we use data

• Providing and operating core features (login, simulated scoring, personal record, analysis content, community interaction).
• Preventing abuse and protecting account security (rate limiting, anomaly detection, report handling).
• Improving service quality and fixing problems.
• Referral cooperation: if you have linked a referral partner, we use your purchase and point-usage records to settle our cooperation with that partner, and show the data listed under “Referral partners” in Section 3 in the partner dashboard.

We do not use your data for ad tracking or sell it.

3. Data sharing and third parties

• We never sell or rent your personal data.
• The service providers and referral partners listed below may use your data only for the stated purposes: providers process data under their terms or our agreement, with protection no weaker than this policy; referral partners must first accept our data-use rules (see “Referral partners” below).
• Hosting: the Platform runs on Cloudflare (content delivery and database); data is processed and stored on its infrastructure. Background jobs such as data sync run on a DigitalOcean server. An encrypted copy of the database backup is also kept there; the server does not hold the decryption key.
• Human verification: the sign-up page uses Cloudflare Turnstile to block bot registrations; the component is provided by Cloudflare and receives your IP address and browser signals to decide whether you are human.
• Push services: once you turn on notifications, their content is encrypted and delivered through the push service of your browser or device (Google, Mozilla, Apple or Microsoft); these services cannot read the content but do receive the delivery request.
• Payment processing: web payments are processed by PAYUNi. The Platform sends the order number, item name and amount to create the payment page; PAYUNi handles your payment-instrument data directly and returns the transaction status and its transaction number for crediting and reconciliation. The Platform never receives your full card number.
• Odds and results data sources: the live odds and scores shown are public market and results data from third-party sports data providers; we only read the data for analysis and simulated comparison, and do not send your personal data to those providers, nor place any wager on your behalf.
• Match images: some match pages show team crests or player photos served by the leagues’ official content servers; when loading them your browser requests them directly from that server (which therefore sees your IP). These images belong to the leagues and are used only to identify matches.
• AI Analysis Assistant: Before first use we explain and ask for your consent; once you consent, your question, the recent content of the conversation, the preferences you confirmed, and the public match data looked up for the answer are sent to an external AI service to generate the reply; we never attach your username, password or payment data (the service may see your network address and region when connecting). Under that service’s current terms, the content is kept for at most 30 days (for multi-step answers and abuse prevention) and is not used to train or improve that service. If the service cannot be reached directly from your region, this content is relayed through our DigitalOcean server, which does not store it. Please do not enter personal or sensitive data in questions or preferences. You can withdraw at any time under “Points and answers” on the AI Analysis Assistant page Withdraw consent; after withdrawing, your questions are no longer sent.
• AI Analysis Assistant free try for visitors: before a visitor without an account uses the free try, we likewise explain and ask for your consent, and confirm you are human with Cloudflare Turnstile (the widget collects your IP address and browser signals); once you agree, your question and the public match data looked up to answer it are sent to the same external AI service to generate the answer, with no account data attached (the service may see your network address and region when connecting); retention, the no-training condition and relaying through our DigitalOcean server work the same as in the previous item.
• Email delivery provider: only after you link a password-recovery email and tick the consent box do we pass that address to our email delivery provider (Resend, in the United States), solely to send email-confirmation and password-reset messages; the messages contain only your account name and a link, never your password. You can remove the address at any time under “My page → Account & security”.
• Referral partners: if you entered an invitation code at sign-up and ticked consent, or linked a referral partner under “My Home → Account & security → Invitation code”, that partner can see in their partner dashboard: your username, link date, your purchase amounts (points and membership plans), the amount of points used, your remaining Intel Points, and each point transaction’s purpose, points and time (for example which match’s analysis or which featured pick was unlocked, or a question to the AI Analysis Assistant). The partner can also gift you Intel Points from a quota the Platform allocates; your point ledger will show “gift from referral partner”. If this partner is a team partner in a referral team, the team lead’s own dashboard only shows the combined purchase total of all that team partner’s members, not your username or the details above; however, when that team partner has only a few members, the team lead may be able to work out the amount and approximate time of each of your purchases from changes in the total. The partner dashboard do not show your password, payment instruments, simulated orders, the content of analysis and questions, or chat and community records. The partner must first accept the data-use rules in the partner dashboard before seeing the data above: it may only be used to verify referral results and commissions, must not be screenshotted, leaked, passed on or published, must not be used to market other products or services to you, and must not be matched or merged with personal data from other sources; a breach ends their partner status and closes their dashboard. The link cannot be changed afterwards; after you delete your account, your username and usage details disappear from their dashboard.
• Legal requirements: where the law compels it, we may provide the necessary data as required.

4. Retention and deletion

• Your account data is kept for as long as the account exists.
• Deleting your account (your right): you can permanently delete your account at any time in the app under “My Home → Account & security → Delete account”. After deletion we remove your account, simulated orders and sim points, Intel Points and unlock records, subscription records, auto-simulation settings, profile and avatar, posts/comments/likes, chat messages, reports about you and reports you sent that were already handled. Two things keep only de-identified content after the account link is removed: reports you sent that are still pending (the reported content still needs moderation), and your purchase records of player-analyst analysis (analysts’ earnings records must reconcile). After a player analyst deletes their account, buyers’ transaction records still hold internal IDs containing the old username; these are used only for reconciliation and are never shown to any member. This action cannot be undone. A suspended account cannot log in and so cannot self-delete: request deletion via “Contact us”, and after verifying your identity an administrator deletes it for you; what is deleted and kept is the same as above (unsettled sold analysis and pending payments must be handled first). Team lead accounts also cannot be self-deleted: contact us through the same form and the Platform will deal with the team arrangements and then delete the account. Analysts can also delete their own account; but since other members may have paid to unlock your analysis, (if you ever sold analysis) deletion is possible only once every match with sold analysis is settled (or refunded after expiry) — this protects buyers and does not affect your right to request deletion. (Added 2026-08-31; 2026-09-24: sellers wait for sold matches to settle, pending reports and purchase records kept de-identified; 2026-09-25: only sold matches count, not all orders; 2026-10-16: analysts no longer need to contact support first; suspended accounts can be deleted by support after identity verification)
• Payment records: payment orders are kept for the period required by law and accounting reconciliation (currently at least 5 years). When you delete your account, the account link on orders is cleared immediately; only orders and transaction records that can no longer be tied to you are kept.
• Support data: support IPs are used only for short-term abuse prevention and cleared after 24 hours; the content, reply email and account link of closed messages are anonymised after 30 days; open messages are kept at most 180 days and then anonymised automatically.
• AI Analysis Assistant: regular conversations are deleted automatically, including their messages, after 180 days without use since the last message; each account keeps at most 200 conversations, and the oldest are deleted beyond that; you can also delete any conversation at any time under “Conversation history”. Assistant memory is kept until you change or delete it, and can be viewed, edited, deleted or cleared at any time under “Assistant memory”. Deleting your account deletes conversations and memory too. Temporary conversations are not saved. Your consent record for the AI Analysis Assistant is kept until you withdraw it or delete your account.
• AI Analysis Assistant free try for visitors: questions and answers aren’t kept; to prevent abuse we count the day’s free questions with a hash of the network address (it changes daily and the address itself isn’t stored), deleted after two days.
• Password-recovery email: deleted when you remove the address or delete your account; confirmation and reset links expire 30 minutes after they are sent and work only once.
• Sign-up source links are removed immediately when an account is deleted. Group counts retain the limits stated above. We do not resume these growth statistics from restored backups.
• System backups: to recover the service after a failure, the database is backed up once a day, with an encrypted copy also kept on a DigitalOcean server; backups are kept at most 30 days; data you delete also disappears from backups after that period.
• Other short-term security records such as login rate limits expire automatically and are cleared regularly; their retention is independent of account deletion (they protect against brute-force attacks).

5. Cookies

We use essential login cookies (HttpOnly, Secure) to keep you logged in, plus two preference cookies kept for one year that hold no personal data: interface language (lang) and the Android app marker (shell). We do not use third-party advertising or tracking cookies.

6. Age limit

The Platform contains sports analysis and simulated prediction play, content not suitable for minors, and is for users aged 18 and over only; it is not directed at children. We do not knowingly collect children’s data; if we learn that someone under the legal age has registered, we remove the account and its data.

7. Your rights

You can view and edit your profile, change your password, or permanently delete your account in the app at any time (see Section 4). If you are in a region covered by the GDPR, CCPA or personal data protection laws, you also have rights of access, correction, restriction of processing and data portability — please contact us through the channel below.

8. Policy changes

We may update this policy from time to time; major changes are described in the revision note above and the “last updated” date is refreshed.

This policy is written in Traditional Chinese. Versions in other languages are translations provided for reference only; if any language version differs from the Traditional Chinese version, the Traditional Chinese version prevails.

9. Contact us

For any question about this policy or your data, use the in-app Contact us form (no login required to send; leaving a reply email is up to you).
Operator: MatchQuant

See also Terms of Service & Community Guidelines.