Privacy Policy
Last Updated: 24.01.2026
Controller: DC SOFT BILISIM TEKNOLOJILERI LIMITED SIRKETI
Contact: support@scoutwise.ai
1. Introduction
This Privacy Policy explains how ScoutWise (“we”, “us”) collects, uses, and shares your personal data when you use our App, in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.
2. Data We Collect
We collect data in several ways: when you create an account, when you interact with features of the App (such as AI queries), and automatically through technical logs generated by your device and our servers while you use the App.
- Identification Information: Email address, password (stored in hashed form) and country. This data is collected when you create an account or update your profile information.
- Transaction Security Information: Logs, IP address, device information, and interactions within the App. This data is collected automatically when you access or use the App to help maintain security, troubleshoot issues, and improve our services, Player portfolio information and saved player selections that you create or manage inside the App. This data is stored so that your portfolio and related analytics can be displayed and maintained across sessions.
- Customer Transaction Information: Prompts, queries, and search history that you voluntarily submit when using AI-powered features within the App. These inputs are processed in order to generate responses and provide the requested functionality.
3. How We Collect Personal Data
We obtain personal data through the use of information available within our application, by automatic, partially automatic, or non-automatic means.
4. Purposes and Legal Basis (GDPR Art. 6)
| Purpose | Legal Basis (GDPR) |
|---|---|
| Providing the Service: Creating accounts, processing AI queries, delivering results. | Performance of Contract (Art. 6(1)(b)) |
| Security & Improvement: Preventing fraud, ensuring network security, fixing bugs. | Legitimate Interest (Art. 6(1)(f)) |
| Legal Compliance: Complying with tax and consumer laws. | Legal Obligation (Art. 6(1)(c)) |
| Marketing/Analytics: Personalized ads (if any) or tracking. | Consent (Art. 6(1)(a)) |
5. Data Storage and International Transfers
4.1. Storage Location: Our primary servers and database infrastructure are hosted by Supabase in Frankfurt, Germany (EU). This ensures your data remains within the EEA.
4.2. Transfer to Provider (Turkey): As the Provider is located in Türkiye (a “third country” under GDPR), your data may be accessed from outside the EEA for administration and support purposes.
- We rely on Article 49(1)(b) of the GDPR (transfer necessary for the performance of a contract) to provide the App services to you.
- Where applicable, we may also rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure the safety of your data.
6. Data Retention
- Account Data: Until you delete your account.
- Logs/Usage Data: Until you delete your account
- Prompt History: Until you delete your account
- Portfolio Data: Until you delete your account.
7. Your Rights (GDPR)
Under the GDPR, you have the following rights:
- Right of Access: Request a copy of your data.
- Right to Rectification: Correct inaccurate data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data.
- Right to Restriction: Limit how we use your data.
- Right to Data Portability: Receive your data in a structured format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw consent at any time (e.g., for marketing).
To exercise these rights, please contact us at: support@scoutwise.ai
8. Third-Party Services
- OpenAI API and DeepSeek API: To provide AI-powered features, we send the text of the queries you enter in the app to these providers. We do not send your password, payment information, or full account details, unless you choose to include personal information in your query.
- Supabase (Germany): We use Supabase for authentication and database services. The personal data processed and stored through Supabase may include your email address, hashed password, country, subscription status, session-based search history, and your in-app player portfolio data.
- Render (Germany): We use Render to host our backend and run scheduled background jobs. In doing so, Render may process the data available through Supabase, including user account information and session-related data, solely for service operation, maintenance, and automation purposes.
- Apple App Store and Google Play Store: These providers handle payment and subscription processing. We do not have access to your full credit card or other complete payment card details.
9. Supervisory Authority
If you believe your privacy rights have been violated, you have the right to lodge a complaint with a Data Protection Authority (DPA) in your country of residence.