Privacy Policy

Last updated: 21 June 2026.

This Privacy Policy explains how we collect, use, share and protect your personal data when you use SwiftScore. We have published it for transparency and we encourage you to read it in full. It should be read alongside our Cookie Policy, Terms of Use and Disclaimer.

1. Who we are (data controller)

The data controller responsible for your personal data is PatchPilot Ltd, a company registered in England & Wales, trading as “SwiftScore”.

Company number: available on request ahead of launch
Registered office: available on request ahead of launch
ICO data-protection registration: available on request ahead of launch
Contact for data-protection enquiries: support@patchpilot.co.uk

If you have any questions about this policy or about how we handle your personal data, please contact us using the email address above.

2. The personal data we collect

We collect and process the following categories of personal data:

Account data: your email address and a securely hashed (not plain-text) password. If you choose a display name, we collect that too.
Usage and analytics data: how you interact with the site — pages visited, predictions viewed, games played, features used and approximate session activity. Where required, this is collected only with your consent.
Cookies and similar technologies: a session cookie to keep you logged in, plus age-confirmation and consent cookies, and (with your consent) analytics and advertising cookies. See our Cookie Policy for the full list.
Payment metadata (via Stripe): if you buy a Premium subscription or credits, our payment processor Stripe handles your card details. We never see or store your full card number. We receive only limited metadata such as a subscription or transaction reference, the amount, the date, the outcome (success or failure) and the card type/last four digits.
Technical and device data: your IP address, browser type, device and operating system, and standard server log information generated when you access the site.
Support correspondence: the content of any emails or messages you send us, so we can respond and keep a record.

We do not knowingly collect special-category (sensitive) personal data, and we ask that you do not send it to us.

3. Our lawful bases for processing

Under the UK GDPR we must have a lawful basis for each use of your personal data. The bases we rely on are:

Contract: to create and run your account, deliver the free service, provide Premium features, sell and apply credits, and process payments — this is necessary to perform our contract with you (our Terms of Use).
Legitimate interests: to operate, secure, maintain and improve the service, prevent fraud and abuse, keep our records and understand how the site is used. We balance these interests against your rights and only rely on this basis where your interests do not override ours.
Consent: for non-essential analytics and advertising cookies, and for any marketing communications. You can withdraw consent at any time without affecting processing carried out before withdrawal.
Legal obligation: to comply with our legal and regulatory duties, including tax, accounting and record-keeping requirements, and to respond to lawful requests from authorities.

4. How we use your personal data

We use your personal data to:

create, authenticate and manage your account;
provide free AI football predictions, statistics and content;
provide Premium subscription features and process credit purchases used to open virtual collectible card packs;
take and confirm payments through Stripe, and manage renewals, refunds and disputes;
respond to your enquiries and provide support;
keep the service secure, detect and prevent fraud, abuse and misuse, and enforce our Terms of Use;
measure and improve the performance and content of the site; and
meet our legal, regulatory and accounting obligations.

We do not sell your personal data.

5. Who we share your personal data with

We share personal data only where necessary, and only with parties who are required to protect it. These include:

Stripe (payment processor): card payments are processed by Stripe Payments Europe, Ltd. and Stripe, Inc., acting as our payment processor. Stripe handles your card details directly under its own terms and privacy policy; we never store your full card number.
Hosting and infrastructure providers: who store and serve the site and our databases on our behalf, under data-processing terms.
Analytics providers: who help us understand how the site is used, where you have consented to analytics cookies.
Advertising partners: who serve third-party advertising, where you have consented to advertising cookies. These partners may set their own cookies and act as separate controllers under their own privacy policies.
Affiliate operators: when you click an affiliate link to a UK Gambling Commission-licensed betting operator, you leave our site and any data you then provide is handled by that operator under its own privacy policy. See our Affiliate Disclosure.
Professional advisers and authorities: such as our accountants, auditors and legal advisers, or regulators, courts and law-enforcement agencies, where required by law or to protect our rights.
Successors: if we reorganise, sell or transfer our business, in which case your data may transfer to the new owner under this policy.

6. International transfers

Some of our providers (for example Stripe and certain analytics or advertising partners) may process personal data outside the UK. Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place — such as a UK adequacy regulation, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses — so that your data continues to receive an equivalent level of protection.

7. How long we keep your data (retention)

We keep personal data only for as long as we need it for the purposes set out in this policy:

Account data: for as long as your account is active. If you close your account or ask us to delete it, we delete or anonymise your account data within a reasonable period, unless we must keep some of it to meet a legal obligation.
Payment and transaction records: retained for up to seven years to meet tax, accounting and audit requirements.
Usage, analytics and log data: retained for a limited period for security and performance purposes, then deleted or aggregated.
Support correspondence: retained for as long as needed to handle your query and for a reasonable period afterwards for our records.

8. Your rights under UK GDPR

You have the following rights over your personal data. We will respond to a valid request within one month, and we will not charge a fee in most cases.

Access: obtain a copy of the personal data we hold about you.
Rectification: have inaccurate or incomplete data corrected.
Erasure: ask us to delete your data where there is no good reason for us to keep it.
Restriction: ask us to limit how we use your data in certain circumstances.
Portability: receive certain data in a structured, commonly used, machine-readable format, or have it sent to another controller.
Objection: object to processing based on our legitimate interests, and to any direct marketing.
Withdraw consent: withdraw consent at any time where we rely on consent (for example, analytics or advertising cookies, or marketing).

To exercise any of these rights, email us at support@patchpilot.co.uk. We may need to verify your identity before acting on a request.

9. Cookies

We use cookies and similar technologies for essential functions (such as keeping you logged in and remembering your age confirmation) and, with your consent, for analytics and advertising. You can manage your preferences and find a full list of the cookies we use in our Cookie Policy.

10. Automated decision-making

Our football predictions are generated by statistical and AI models, but these models analyse match and team data — not your personal data — and they do not make any decision that produces a legal or similarly significant effect on you. We do not carry out automated decision-making of the kind described in Article 22 of the UK GDPR. Predictions are statistical estimates only, not guarantees, and are not betting or financial advice (see our Disclaimer).

11. Children

SwiftScore is strictly for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, please contact us and we will delete it.

12. How we keep your data secure

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, hashing of passwords, access controls and the use of reputable processors such as Stripe for payments. No method of transmission or storage is completely secure, but we take reasonable steps to protect your data and to respond appropriately to any incident.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you. Please check this page periodically to stay informed.

14. Complaints and the ICO

If you have a concern about how we handle your personal data, please contact us first at support@patchpilot.co.uk so we can try to resolve it. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by calling 0303 123 1113.

15. Governing law

This Privacy Policy and any dispute arising from it are governed by the laws of England & Wales, and the courts of England & Wales have jurisdiction.