Privacy Policy

Last updated: 11 August 2026

1. Controller

The controller within the meaning of the GDPR is:
Stefan Sperl
sp-services.de
Weihbischof-Flügel-Str. 7
93192 Wald
Germany
E-mail: kontakt@tipguru.app

2. General information on data processing

We process personal data only to the extent necessary to provide a functional prediction game app together with its content and services.

3. Categories of data processed

• Account data: e-mail address, display name, encrypted credentials
• Usage data within the app: prediction rounds, memberships, submitted predictions, points
• Technical data: server log files (e.g. IP address, timestamp, user agent, error logs)
• Communication data when you contact us by e-mail

4. Purposes and legal bases

• Provision of the app and performance of the contract (Art. 6 (1) (b) GDPR)
• Security measures, prevention of misuse and stable operation (Art. 6 (1) (f) GDPR)
• Compliance with legal obligations (Art. 6 (1) (c) GDPR)
• Processing based on consent, where obtained (Art. 6 (1) (a) GDPR)

5. Recipients and processors

For the technical provision of the service we use service providers as processors pursuant to Art. 28 GDPR. These are currently:

• Supabase (Supabase Inc., San Francisco, USA) - database, authentication and backend services. The database of the TipGuru instance is operated in the eu-west-1 (Ireland) region on Amazon Web Services infrastructure, which means account and prediction data are stored within the EU. As the parent company is based in the USA, access from a third country cannot be ruled out in the context of maintenance and support. This is based on the data processing agreement concluded with Supabase and on the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR).
• Web hosting for tipguru.app - operation of the website and the associated server services on a server in a data centre of IONOS SE in Germany.
• OpenLigaDB - retrieval of fixtures, live scores and results. Only sports data is retrieved; no personal data of our users is transmitted.

When you download the app from the Apple App Store or Google Play, Apple and Google process data as controllers in their own right (e.g. downloads, purchases, device information). We have no influence over this processing; the privacy policy of the respective provider applies. The app itself contains no analytics, tracking or advertising SDKs and does not integrate any third-party advertising networks.

6. Retention periods

Personal data is deleted as soon as the purpose of storage ceases to apply and no statutory retention obligations prevent deletion.

• Account and prediction data: stored until the account is deleted. Following deletion (in the app or on request) it is removed from the database immediately.
• Server log files: rotated daily and automatically deleted after 14 days.
• Communication data from contact and account requests: retained as evidence for up to 3 years (Art. 6 (1) (c) and (f) GDPR).

7. Your rights

Under the GDPR you have in particular the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

You can delete your account directly in the app at any time under Profile → Delete Account. This immediately and permanently removes your profile and the associated data (memberships in prediction rounds, submitted predictions, point totals) from the database and invalidates all existing sessions.

Alternatively, requests for access or erasure can be submitted via https://tipguru.app/konto or by e-mail to konto@tipguru.app.

8. Security

We use appropriate technical and organisational measures to protect data against loss, manipulation and unauthorised access.

9. App-specific information

• The app processes predictions and round data in order to provide competitions and leaderboards.
• The visibility of predictions may be restricted by time-based rules (e.g. until kick-off).
• Invitation codes are used to assign users to private prediction rounds.

10. External links

External links may be opened from within the app (e.g. to this privacy policy or to the legal notice). The privacy provisions of the respective external site apply to its content.

11. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements.

Account request | Legal notice | Home