Privacy Policy

Note: This is a courtesy translation. The legally binding version is the Spanish original available at /es/privacidad. In case of any discrepancy, the Spanish version prevails. This policy is governed by Colombian law (Law 1581 of 2012).

Last updated: May 22, 2026

1. Data controller

Predikt (hereafter "the Platform" or "we") is a web service operated by Predikt App 2026, a brand based in Bogotá, Colombia.

Data controller contact:

• Email: contact@predikt2026.app
• Address: Bogotá, Colombia

This policy is governed by Law 1581 of 2012 (Colombian Personal Data Protection Law), Decree 1377 of 2013 and related regulations.

2. Personal data we collect

When you use the Platform we collect the following personal data:

Data you provide directly:

• Email address (required for registration and communications)
• Name or display name that you choose to show
• Password (stored encrypted — we never have access to it in plain text)
• Profile picture / avatar (optional)
• Match predictions and special predictions you record in each pool

Data generated automatically:

• IP address (security and abuse prevention)
• Browser and device type
• Date and time of access
• Pages visited within the Platform

Data we do NOT collect:

• We do not collect financial data (we do not process payments)
• We do not collect government ID numbers
• We do not collect phone numbers
• We do not collect GPS location

3. Purposes of processing

Your personal data is processed exclusively for the following purposes:

1. Service operation: create and administer your account, enable participation in pools, calculate points and display rankings.
2. Transactional communications: account-related emails (verification, password recovery, pool approvals, prediction deadline reminders, new phase notifications).
3. Service improvement: aggregated and anonymous statistical analysis to optimize the Platform.
4. Security: prevent fraud, abuse, unauthorized access and misuse.
5. Legal compliance: respond to lawful requests from competent authorities.

4. Sharing your data with third parties (data processors)

To operate the Platform we use third-party services that act as data processors. Each one only accesses the data needed to deliver its service:

These providers are located in the United States, which implies international data transfer. They all comply with international security and privacy standards equivalent to or stricter than those required by Colombian law.

We do NOT sell your data to third parties for commercial or advertising purposes.

5. Your rights as a data subject (Habeas Data)

Under Law 1581 of 2012 you have the following rights regarding your personal data:

• Access what data we hold about you and how we use it
• Update or rectify inaccurate or incomplete data
• Request proof of authorization for processing
• Be informed about the use given to your data
• File complaints with the Colombian Superintendence of Industry and Commerce (SIC) for legal violations
• Revoke authorization and/or request deletion of your data
• Access your data free of charge

How to exercise your rights

To exercise any of these rights you can:

1. From the Platform: go to your profile and use the "Edit data" or "Delete my account" options
2. By email: write to contact@predikt2026.app with the subject "Habeas Data" describing your request

We will respond within a maximum of 15 business days from receipt of your request.

6. Account and data deletion

You can delete your account at any time from your profile. When you do:

• Your email, name and photo are deleted immediately
• Your predictions are anonymized (kept to preserve historical ranking integrity but without linking back to you)
• After 30 days, all your personal data is permanently removed from our systems

If you do not use your account for 24 consecutive months, we will notify you by email and proceed with automatic deletion if you do not respond within 30 days.

7. Information security

We implement reasonable technical and organizational measures to protect your data:

• Encrypted connections (HTTPS / TLS 1.3) on all communications
• Passwords stored with modern hash algorithms (bcrypt)
• Row-Level Security at the database level to ensure nobody accesses others' data
• Captcha (Cloudflare Turnstile) to prevent bots and abuse
• Continuous infrastructure monitoring

Despite these measures, no system on the internet is 100% secure. If we detect a security breach affecting your data, we will notify you within 72 hours and report the incident to the SIC as required by law.

8. Cookies and similar technologies

The Platform uses strictly necessary cookies for:

• Keeping you logged in
• Remembering your preferences (language, theme)
• Security features (Cloudflare Turnstile)

We do not use third-party advertising cookies or cross-site tracking cookies.

We use Vercel Analytics, an analytics service that does NOT require cookie consent because it does not individually track users.

9. Minors

The Platform is intended for users over 13 years old. For users between 13 and 17 we recommend supervision from a responsible adult. We do not knowingly collect data from minors under 13; if we detect such an account we will delete it immediately.

10. Changes to this policy

We may update this policy to reflect changes in our practices or applicable law. When we make material changes:

• We will notify you by email at least 15 days before they take effect
• We will request express acceptance if the changes significantly affect your rights
• The updated version will always be available at /privacidad with its last-modified date

11. Jurisdiction and applicable law

This policy is governed by the laws of the Republic of Colombia. Any dispute will be resolved before the courts of Bogotá, Colombia, without prejudice to consumer-protection rights where applicable.

For formal complaints about personal data processing, you can also go directly to the Superintendence of Industry and Commerce (SIC) — Delegatura for Personal Data Protection:

• Web: www.sic.gov.co
• Address: Carrera 13 # 27-00, Bogotá

12. Acceptance

By signing up for Predikt, you declare that you have read, understood and accepted this Privacy Policy and you expressly authorize processing of your personal data for the purposes described herein.

If you do not agree with this policy, you must not register or use the Platform.