Privacy Policy

Last updated: 04/16/2026

Your privacy matters. This policy explains what data we collect, how we use it, and the choices you have. We do not sell your personal data. We do not use your data for third-party advertising. Questions? Contact support@varyx.app.

01 — Information We Collect

(a) Information You Provide

Email address — used for authentication (OTP sign-in) and account management
Saved picks — prop picks you add to your tracker, including player, prop type, line, and direction
Subscription tier — Free, Pro, or Sharp, associated with your account
Favorites — players you mark as favorites for quick access
AI queries — text you enter into AI Tools (Correlation, Value Gap, Matchup, Custom Query) and the Sharp tier Daily Briefing
Feedback and support messages — if you contact us via email

(b) Collected Automatically

Usage patterns — which views you visit, how often you use AI tools, sport toggle preferences
AI request history — query summaries stored for Sharp tier AI Memory personalization
Device and browser data — browser type, operating system, screen resolution, PWA status
IP address — collected by Cloudflare for rate limiting and security purposes
Error reports — crash data and performance issues collected via Sentry

(c) Payment Information

Payment processing is handled entirely by Stripe. We never receive or store your full card number. We only receive: last 4 digits, expiration date, card brand, and billing address — as provided by Stripe after a successful transaction.

02 — How We Use Your Information

Authentication — verify your identity via OTP and maintain your session
Syncing — sync your saved picks, favorites, and preferences across devices
Quota enforcement — track daily usage limits for Free tier users (game views, player views, AI calls)
Billing — manage your subscription status with Stripe
Analytics — understand aggregate feature usage to improve the product (via Google Analytics, loaded only with your consent)
Communications — send transactional emails (OTP codes, subscription confirmations, policy change notices)
Troubleshooting — diagnose errors and performance issues via Sentry error reports
Fraud prevention and security — detect and block abuse, rate limit API usage, protect account integrity
AI personalization (Sharp tier) — use stored AI query history to provide contextually relevant responses in subsequent AI tool sessions

We do NOT use your data for third-party advertising, data brokerage, or any purpose not listed above.

03 — Data Storage and Security

All data transmitted between your device and our servers is encrypted using HTTPS/TLS. We use industry-standard security practices including authentication guards, rate limiting, and input validation.

Your data is processed and stored through the following third-party service providers:

Provider	Purpose
Supabase	Authentication, user database, session management
Cloudflare	API proxy, caching, DDoS protection, rate limiting
Vercel	Frontend hosting, CDN delivery
Stripe	Payment processing and subscription billing
Sentry	Error monitoring and performance tracking
Anthropic	AI analysis processing (Claude API)

Each processor is bound by their own privacy and security policies. We only share data with these processors as necessary to operate the Service.

04 — Data Sharing

We do not sell your personal data. We do not share your data with advertisers, data brokers, or any third party for commercial purposes. We share data only in these limited circumstances:

Service providers — the processors listed in Section 03, strictly as required to operate the Service
Legal requirements — when required by law, court order, or governmental authority; or to protect the rights, property, or safety of Nexlyr LLC, our users, or the public
Business transfers — in connection with a merger, acquisition, or sale of assets, with notice provided to you

05 — Cookies and Tracking

We use minimal cookies and localStorage data to operate the Service. Here is a full breakdown:

Name	Type	Purpose
hq_session	Essential cookie	Authentication session token for iOS PWA fallback
varyx_cookie_consent	Essential cookie	Stores your cookie consent preference
_ga, _gid	Analytics cookie	Google Analytics — loaded only after you grant consent
localStorage	Functional storage	User preferences, cached game data (5-min TTL), saved picks, theme selection, favorites

Analytics cookies are only activated after you provide explicit consent via the cookie consent banner. You may withdraw consent at any time via Settings.

06 — AI Data Disclosure

When you use Varyx AI Tools (Correlation, Value Gap, Matchup, Custom Query, or Daily Briefing), your query text is sent to Anthropic's Claude API for processing. This includes the text you type as well as relevant player statistics and game context assembled by Varyx.

Sharp tier AI Memory: If you subscribe to the Sharp tier, your AI query summaries and results are stored in our database and used to build a personalized context profile. This profile is injected into future AI sessions to provide more relevant responses based on your research history. You can delete your AI memory at any time from the Settings page.
Anthropic does not use API data to train their models. Data sent via API is not used for any purpose beyond generating the immediate response.
Anthropic's data processing is governed by their Privacy Policy.

07 — Data Retention

Account data (email, picks, favorites, preferences) — retained for the duration of your account; deleted within 30 days of account deletion request
Analytics data — retained for up to 12 months
Payment records — retained for 7 years as required by financial regulations
Error reports — retained for 90 days in Sentry
AI Memory (Sharp tier) — retained until you manually delete it in Settings, or when your account is deleted

Upon receiving a verified deletion request, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records).

08 — Your Rights

You have the following rights regarding your personal data:

Right	Description
Access	Request a copy of data we hold about you
Correction	Request correction of inaccurate data
Deletion	Request deletion of your account and data
Portability	Receive your data in a portable format
Withdrawal	Withdraw consent for analytics at any time
Opt-Out	Opt out of non-essential data collection

To exercise any of these rights, contact us at support@varyx.app. We will respond to verified requests within 30 days. We do not charge fees for privacy rights requests.

09 — California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months
Right to Delete — you may request deletion of personal information we have collected, subject to certain exceptions
Right to Opt-Out of Sale — we do not sell your personal information. There is nothing to opt out of.
Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact support@varyx.app. We will respond within 45 days. You may designate an authorized agent to submit requests on your behalf.

10 — Children's Privacy

The Varyx Service requires users to be 21 years of age or older. We do not knowingly collect personal information from anyone under the age of 13. If we learn that we have inadvertently collected data from a person under 13, we will delete that data promptly. If you believe we may have collected data from a minor, please contact us immediately at support@varyx.app.

11 — Changes to This Policy

We reserve the right to update this Privacy Policy at any time. For material changes, we will provide at least 30 days advance notice via email to the address associated with your account or via an in-app notification before the changes take effect. The "Last updated" date at the top of this page reflects when the current version took effect. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12 — Contact

For privacy-related questions, requests, or concerns, contact us at:

support@varyx.app
Nexlyr LLC

We aim to respond to all privacy inquiries within 5 business days. For formal rights requests (CCPA), we respond within the statutory timeframes noted above.

Questions? Contact support@varyx.app