Privacy policy
BkSmrt Privacy Policy
BkSmrt is an invitation-only sports analysis service for people aged 18 and over. It does not accept or place bets. Account access is not currently publicly available. BkSmrt is operated personally by Zak Miller Porter Marr in Australia. For privacy questions or requests, contact hello@bksmrt.bet.
Information we collect
We collect information needed to provide access, keep accounts secure and respond to members:
- Account details: your email address, account identifier, invitation and membership status, account role, and relevant account dates.
- Login and security information: authentication and recovery records, session identifiers, and technical information used to detect errors and prevent misuse. Infrastructure providers may process IP addresses, browser information, request times and security logs.
- Communications: information you provide when contacting us, including support requests and product feedback.
- Service email records: your email address, the account emails sent to you and their delivery status.
You provide information when accepting an invitation, signing in, recovering your account or contacting us. We may also receive your email address from someone requesting an invitation for you.
Account and security information is necessary for access. You can decline an invitation or contact us without creating an account.
How we use it
We use personal information to invite authorised members, manage access, verify identity, maintain sessions and recover accounts. We also use it to send account and security messages, respond to questions, investigate faults, prevent misuse and meet applicable legal obligations.
Sports predictions and analysis concern sporting events and participants. They are separate from members’ login and contact information.
The current release does not collect payment-card details or process subscription payments. We will explain any additional information handling before introducing payments.
Who helps us run BkSmrt
- Cloudflare: website hosting, application data storage, network security and forwarding messages sent to our support address. Read Cloudflare’s Privacy Policy.
- Supabase: account authentication, password management, email verification and account recovery. Read Supabase’s data residency and transfers information.
- Mailjet: delivery of invitation, verification and account-recovery emails. Read Mailjet’s security and privacy information and Mailjet’s data-storage information.
- Google: Gmail receives support messages. Google also receives technical requests when YouTube thumbnails load in the app; opening a video takes you to YouTube. Read Google’s Privacy Policy.
These providers process information needed to perform those services. Information may also be disclosed where required by law or reasonably necessary to investigate misuse or protect legal rights.
We do not sell members’ personal information or provide it to bookmakers for marketing.
Where information is handled
Our authentication project is configured in Sydney. This does not mean all information stays in Australia.
Our providers operate internationally. Depending on the service, information may be processed in Australia, the United States, Singapore, Germany and Belgium, and other countries where their authorised service providers operate. Mailjet identifies Germany and Belgium as its data-storage locations. Support, security logs, email delivery and global network services may involve additional overseas processing.
Cookies and account security
BkSmrt uses an essential session cookie to keep you signed in. Blocking or clearing this cookie can prevent access or sign you out.
Our authentication design includes secure, HTTP-only session cookies, hashed application session tokens and membership checks. Passwords are managed through Supabase authentication rather than stored in BkSmrt’s membership database.
No online service can guarantee absolute security. Do not share your password or account-recovery links. Contact us if you suspect unauthorised access.
Mailjet open and click tracking are disabled for account emails. Your browser also stores saved shortlist selections. They stop appearing after seven days, but stored entries may remain until replaced, removed or browser data is cleared. Setup and recovery links use temporary browser session storage to complete the account action. Clear browser data on shared devices.
Keeping and deleting information
We keep information for the purposes described in this policy, including account administration, security, support and any applicable legal requirements.
You can ask us to close your account or delete information. We will explain what can be removed and whether anything needs to be retained. Backups and provider records may remain until their applicable retention periods end.
We do not currently apply a fixed automatic deletion period to all account records. Application sessions expire after seven days, but expiry does not itself delete the stored record. Account closure and deletion requests are handled individually, including checks for records needed for security or legal reasons.
Your requests and complaints
Email hello@bksmrt.bet to request access to your personal information, correct it, close your account or raise a privacy concern.
We may need to verify your identity before acting. If we cannot fulfil a request, we will explain why.
We aim to respond to privacy complaints within 30 days. If resolving a complaint takes longer, we will explain the delay.
If you remain concerned, the Office of the Australian Information Commissioner provides information about privacy complaints and whether it can investigate your matter: oaic.gov.au/privacy/privacy-complaints.
Changes
We will update this policy when our information-handling practices change. The date above shows the latest version. We will bring material changes affecting members to their attention.