ML XI Privacy Policy

AN26.ai LLC · Effective date: October 14, 2026 · Last updated: October 14, 2026

1. Introduction

This Privacy Policy (the “Policy”) describes how AN26.ai LLC, an Indiana limited liability company (“ML XI,” “we,” “us” or “our”) collects, uses, shares and protects personal information in connection with the ML XI application for Android, distributed through Google Play, and for iPhone, distributed through the App Store (the “App”), the website at mlxi.app, which presents and describes the App (the “Website”), and the ML XI Pro subscription (together, the “Service”). The Website is not the App: it carries information about the App, these documents and links to the App’s store listings. Its App screens are demonstration images, not live data. We are the controller of the personal information described in this Policy.

By using the Service you acknowledge that you have read this Policy. If you do not agree with it, do not use the Service. Our Terms of Use, available in the App and at https://mlxi.app/terms.html, govern your use of the Service.

2. Information We Collect

2.1 Information you provide to us. There is no ML XI account, registration, profile or login, and the Service has no forms. The only information you provide is what you choose to send us by e-mail: your e-mail address and the content of your message, including any request you make under this Policy or the Terms of Use.

2.2 Information collected automatically when you use the Service. Connection data. When the App loads fixtures, results, live scores, statistics, model output or its own files, your device connects to our servers, which are hosted for us in the United States. Like almost every internet service, that infrastructure records technical details of each connection in server logs: your IP address, the date and time, the resource requested, the response status and the app or browser version (user agent). We do not combine connection data with any other information to identify you.

Subscription verification data. If you subscribe to ML XI Pro through Google Play, the App sends our server the purchase token issued by Google Play, the product identifier and the App’s package name, so that we can confirm with Google Play that the subscription is valid and acknowledge the purchase. That request is processed in memory and is not stored in any database of ours; what remains is the ordinary server log described above.

If you subscribe through the App Store on iPhone, the App sends our server, in the same way, the transaction record Apple signs for your purchase, together with the product identifier and the App’s identifier. That record carries Apple’s transaction numbers, the product, the purchase and expiry dates and the store country; it carries no name, e-mail address or payment details. We check Apple’s signature on it and ask Apple whether the subscription is active. The request is processed in memory and is not stored in any database of ours; the server log keeps only a short one-way code derived from the subscription, not its transaction numbers.

Purchase-failure report. If a purchase attempt fails, either because the Google Play purchase sheet cannot be opened or because we cannot confirm a purchase with Google Play, the App sends our server a short technical report so that we can find and fix the cause: the name and message of the error as your browser reported it, the product identifier, the App’s version, your browser’s user agent, the address the App was opened from (its own icon or a web page) and whether it is running as an installed app or in a browser tab. The report contains no purchase token, no account details and no identifier of you. It is written to our server log and kept with it (Section 7).

Nothing else. Apart from the purchase-failure report described above, we run no analytics, no crash reporting, no advertising and no tracking. We do not collect device identifiers, advertising identifiers, precise or approximate location, contacts, photos, health data, browsing history or usage analytics, and we do not track you across other apps or websites. The App contains no analytics, product-measurement, crash-reporting, advertising, attribution or marketing software. On Android, its security policy technically prevents it from sending data anywhere other than our own servers, the font host described in Section 5 and one Google Play address (play.google.com), which your browser is permitted to check as part of opening the Google Play purchase sheet; the App’s own code sends nothing to that address. On iPhone, the App’s code sends data only to our own servers, and purchases are made through Apple’s own purchase system.

2.3 Information stored on your device only. The App keeps your settings, the matches and forecasts you have chosen to follow, content it has cached so it can open quickly and work offline, and your Pro entitlement status in your device’s storage for our site. This information is never transmitted to us; we have no copy of it and cannot restore it. You can remove it at any time by clearing the App’s storage (Android: App info > Storage; iPhone: deleting the App removes it).

2.4 Information we receive from third parties. Google Play. When you subscribe, Google Play processes your payment and reports to us, through the Google Play Developer API, the status of the subscription (for example active, in grace period, on hold, paused, cancelled or expired), its renewal and expiry dates and its acknowledgement state. We never receive your name, e-mail address, card or bank details from Google Play.

Apple. When you subscribe on iPhone, Apple processes your payment. When we check a subscription, Apple reports to us, through the App Store Server API, the status of the subscription (for example active, in its billing grace period, in billing retry, expired or revoked) and the related transaction records. We never receive your name, e-mail address, card or bank details from Apple.

Sports-data providers. The football data shown in the Service comes from licensed sports-data providers. None of your information flows to them, and nothing we receive from them identifies you.

3. How We Use Information

We use the information described in Section 2 only to:

• operate the Service and deliver its content to your device;
• confirm that a device is entitled to ML XI Pro features, acknowledge purchases with Google Play and verify purchases with Apple;
• secure, monitor and troubleshoot the Service, and prevent abuse, including scraping, trial abuse and attempts to bypass subscription controls;
• respond to your messages and honour the requests you make, including requests to close your access and arbitration opt-outs under the Terms of Use; and
• comply with our legal, tax and accounting obligations, and establish, exercise or defend legal claims.

We do not use personal information for advertising or profiling, we make no automated decisions that produce legal or similarly significant effects, and we do not use personal information to train artificial-intelligence models.

4. Legal Bases for Processing (EEA, United Kingdom and Switzerland)

Where the GDPR, the UK GDPR or the Swiss FADP applies, we process personal information on the following legal bases: performance of a contract with you (subscription verification and delivery of the Service); our legitimate interests in operating, securing and improving the Service, preventing abuse and answering correspondence, which we have balanced against your rights; compliance with legal obligations (tax and accounting records); and, where the law requires it, your consent, which you may withdraw at any time without affecting the lawfulness of processing before the withdrawal. Notifications are raised by the App on your device with the permission you grant in the operating system; no notification is sent from a server.

5. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share information only as follows:

• Service providers. Our servers and the Website are operated for us by third-party hosting and content-delivery providers, which process information only on our documented instructions under data-processing terms that bind them to confidentiality and security. Google Play sells the subscription and processes your payment as an independent controller under its own privacy policy (https://policies.google.com/privacy). When you open the purchase sheet, your browser also checks Google Play’s payment-method address (play.google.com) as part of that process. On iPhone, Apple sells the subscription and processes your payment as an independent controller under its own privacy policy (https://www.apple.com/legal/privacy/).
• Typeface and artwork. The App’s typeface is carried inside the App and served from our own servers, so no font request reaches a third-party host. Country flags and club badges are drawn from artwork carried inside the App, and competition logos, where shown, are served from our own servers; none of them involves a third-party host.
• Legal requirements. We may disclose information where required by law, regulation, legal process or a competent authority, to establish, exercise or defend legal claims, or to protect the rights, property or safety of ML XI, our users or others.
• Business transfers. If AN26.ai LLC or the Service is reorganised, merged, sold or otherwise transferred, information may be transferred as part of that transaction, subject to this Policy.

We share nothing with analytics providers, ad networks, data brokers or AI services, because we use none.

6. Cookies and Similar Technologies

The Service sets no cookies. The App uses browser storage (localStorage) and a service-worker cache (CacheStorage) on your device to keep your settings and to make the App load quickly and work offline. These technologies store information on your device only; they do not identify you to us and are not used for tracking or advertising. You can clear them as described in Section 2.3.

7. Data Retention

We keep personal information only as long as needed for the purposes in Section 3:

• Connection logs and purchase-failure reports: about 30 days in our hosting provider’s logging, after which they are deleted.
• Subscription verification requests: not stored beyond the request itself. The transaction record is held by Google Play or Apple under their policies; reporting we receive from Google or Apple about sales is kept as long as tax and accounting law requires, up to seven years.
• Correspondence: two years after the last message, or until any dispute it relates to is resolved.
• Requests to close access and arbitration opt-outs: for as long as they need to be honoured.
• Information on your device: until you clear it.

8. Security

We protect information with technical and organisational measures appropriate to the little we hold: every connection is encrypted in transit (HTTPS/TLS); no third-party script runs in the App; credentials are never held on your device; and access to our systems is limited to the persons who operate them. We do not describe our security measures in more detail here, because doing so helps the people they defend against. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

We are based in the United States and our servers are located in the United States. If you use the Service from the EEA, the United Kingdom, Switzerland or another jurisdiction that restricts data transfers, your information is transferred to the United States. Where such transfers require safeguards, we rely on the European Commission’s Standard Contractual Clauses and, as applicable, the UK Addendum or International Data Transfer Agreement, including as incorporated in the data-processing terms of the hosting and content-delivery providers described in Section 5. You may request a copy of the relevant safeguards by contacting us.

10. Your Privacy Rights

10.1 EEA, United Kingdom and Switzerland. You have the right to access the personal information we hold about you, to have it rectified or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you have given. You also have the right to lodge a complaint with your supervisory authority (in the UK, the Information Commissioner’s Office).

10.2 California. In the preceding twelve months we have collected the following categories of personal information, as defined by the California Consumer Privacy Act: identifiers (IP address; your e-mail address if you write to us); internet or other network activity (connection logs and purchase-failure reports); and commercial information (the status of a subscription as reported by Google Play or Apple). We collect it from your device, from you, from Google Play and from Apple, for the purposes in Section 3, and retain it as described in Section 7. We do not sell or share personal information, we do not collect or process sensitive personal information, and we do not use or disclose personal information for cross-context behavioural advertising. You have the right to know what personal information we collect and how we use and disclose it, to request its deletion, to request its correction, and not to be discriminated against for exercising your rights. You may designate an authorised agent to make a request on your behalf. Because we recognise Global Privacy Control signals by design (we track nothing), there is no opt-out to perform. Under California’s “Shine the Light” law (Civil Code section 1798.83), we disclose no personal information to third parties for their direct marketing purposes.

10.3 Other United States states. Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with comprehensive privacy laws have similar rights to access, correct, delete and obtain a copy of their personal information and to opt out of targeted advertising, sales and profiling, none of which we carry out. If we refuse a request, you may appeal by replying to our decision, and we will answer the appeal within the time the applicable law sets.

10.4 How to exercise your rights. E-mail contact@mlxi.app from the address concerned. We verify requests by asking you to write from the address involved and, where needed, for information that lets us match you to what we hold. We respond within the time the applicable law sets (generally 45 days in the United States and one month in the EEA and the UK), free of charge. Because we hold so little, the honest answer to most requests is that there is nothing to produce beyond what Section 2 lists. These rights carry the exceptions the law allows, including information we must keep to meet a legal obligation or to defend a legal claim. A manifestly unfounded, excessive or repetitive request may carry a reasonable fee or be declined, with our reasons and how to appeal.

11. Children’s Privacy

The Service is intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age (or under any higher age of majority that applies where they live). If you believe a child has provided us with personal information, contact us at contact@mlxi.app and we will delete it.

12. Third-Party Links and Services

The Service links to third parties, including Google Play, the App Store and organisations that offer help with gambling concerns. Those sites and services are governed by their own privacy policies, which we encourage you to read; this Policy does not apply to them.

13. Do Not Track and Global Privacy Control

The Service does not track you across other websites or services, so there is no tracking for a browser’s “Do Not Track” setting or a Global Privacy Control signal to switch off. We honour both by design.

14. Changes to This Policy

If we change this Policy we will post the new version in the App and at https://mlxi.app/privacy.html with a new effective date, and for material changes we will say so in the App before they take effect. We will never change it to permit tracking or the sale of personal information retroactively.

15. Contact Us

AN26.ai LLC · 1048B Sagamore Pkwy W, PMB 1065, West Lafayette, IN 47906-1446, United States · contact@mlxi.app