ML XI Privacy Policy
1. Introduction
This Privacy Policy (the “Policy”) describes how AN26.AI LLC, an Indiana limited liability company (“ML XI,” “we,” “us” or “our”) collects, uses, shares and protects personal information in connection with the ML XI application for Android distributed through Google Play (the “App”), the website at mlxi.app, which presents and describes the App (the “Website”), and the ML XI Pro subscription (together, the “Service”). The Website is not the App: it carries information about the App, these documents and a link to the App’s Google Play listing, and it does not show fixtures, forecasts or results. The App is an Android application; there is no browser version of it. We are the controller of the personal information described in this Policy.
By using the Service you acknowledge that you have read this Policy. If you do not agree with it, do not use the Service. Our Terms of Use, available in the App and at https://mlxi.app/terms.html, govern your use of the Service.
2. Information We Collect
2.1 Information you provide to us. There is no ML XI account, registration, profile or login, and the Service has no forms. The only information you provide is what you choose to send us by e-mail: your e-mail address and the content of your message, including any request you make under this Policy or the Terms of Use.
2.2 Information collected automatically when you use the Service. Connection data. When the App loads fixtures, results, live scores, statistics, model output or its own files, your device connects to our servers, which are hosted for us in the United States. Like almost every internet service, that infrastructure records technical details of each connection in server logs: your IP address, the date and time, the resource requested, the response status and the app or browser version (user agent). We do not combine connection data with any other information to identify you.
Subscription verification data. If you subscribe to ML XI Pro through Google Play, the App sends our server the purchase token issued by Google Play, the product identifier and the App’s package name, so that we can confirm with Google that the subscription is valid and acknowledge the purchase. That request is processed in memory and is not stored in any database of ours; what remains is the ordinary server log described above.
Nothing else. We run no analytics, no crash reporting, no advertising and no tracking. We do not collect device identifiers, advertising identifiers, precise or approximate location, contacts, photos, health data, browsing history or usage analytics, and we do not track you across other apps or websites. The App contains no analytics, product-measurement, crash-reporting, advertising, attribution or marketing software, and its security policy technically prevents it from sending data anywhere other than our own servers and the two image and font hosts described in Section 5.
2.3 Information stored on your device only. The App keeps your settings, the matches and forecasts you have chosen to follow, content it has cached so it can open quickly and work offline, and your Pro entitlement status in your device’s storage for our site. This information is never transmitted to us; we have no copy of it and cannot restore it. You can remove it at any time by clearing the App’s storage (Android: App info > Storage) or your browser’s site data for mlxi.app.
2.4 Information we receive from third parties. Google Play. When you subscribe, Google LLC processes your payment and reports to us, through the Google Play Developer API, the status of the subscription (for example active, in grace period, on hold, paused, cancelled or expired), its renewal and expiry dates and its acknowledgement state. We never receive your name, e-mail address, card or bank details from Google.
Sports-data providers. The football data shown in the Service comes from licensed sports-data providers. None of your information flows to them, and nothing we receive from them identifies you.
3. How We Use Information
We use the information described in Section 2 only to:
operate the Service and deliver its content to your device;
confirm that a device is entitled to ML XI Pro features and acknowledge purchases with Google Play;
secure, monitor and troubleshoot the Service, and prevent abuse, including scraping, trial abuse and attempts to bypass subscription controls;
respond to your messages and honour the requests you make, including requests to close your access and arbitration opt-outs under the Terms of Use; and
comply with our legal, tax and accounting obligations, and establish, exercise or defend legal claims.
We do not use personal information for advertising or profiling, we make no automated decisions that produce legal or similarly significant effects, and we do not use personal information to train artificial-intelligence models.
4. Legal Bases for Processing (EEA, United Kingdom and Switzerland)
Where the GDPR, the UK GDPR or the Swiss FADP applies, we process personal information on the following legal bases: performance of a contract with you (subscription verification and delivery of the Service); our legitimate interests in operating, securing and improving the Service, preventing abuse and answering correspondence, which we have balanced against your rights; compliance with legal obligations (tax and accounting records); and, where the law requires it, your consent, which you may withdraw at any time without affecting the lawfulness of processing before the withdrawal. Notifications are raised by the App on your device with the permission you grant in the operating system; no notification is sent from a server.
5. How We Share Information
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We share information only as follows:
Service providers. Google LLC hosts our servers in the United States and processes information on our instructions under Google’s data-processing terms. Google Play sells the subscription and processes your payment as an independent controller under its own privacy policy (https://policies.google.com/privacy).
Image and font hosts. Country flags load from flagcdn.com (Flagpedia) and the App’s typeface loads from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Like any resource fetched from a third-party host, those requests reveal your IP address and user agent to that host; the App attaches no identifier, cookie or other information to them. Club badges involve no third-party host at all.
Legal requirements. We may disclose information where required by law, regulation, legal process or a competent authority, to establish, exercise or defend legal claims, or to protect the rights, property or safety of ML XI, our users or others.
Business transfers. If AN26.AI LLC or the Service is reorganised, merged, sold or otherwise transferred, information may be transferred as part of that transaction, subject to this Policy.
We share nothing with analytics providers, ad networks, data brokers or AI services, because we use none.
6. Cookies and Similar Technologies
The Service sets no cookies. The App uses browser storage (localStorage) and a service-worker cache (CacheStorage) on your device to keep your settings and to make the App load quickly and work offline. These technologies store information on your device only; they do not identify you to us and are not used for tracking or advertising. You can clear them as described in Section 2.3.
7. Data Retention
We keep personal information only as long as needed for the purposes in Section 3:
Connection logs: about 30 days in our hosting provider’s logging, after which they are deleted.
Subscription verification requests: not stored beyond the request itself. The transaction record is held by Google Play under its policies; reporting we receive from Google about sales is kept as long as tax and accounting law requires, up to seven years.
Correspondence: two years after the last message, or until any dispute it relates to is resolved.
Requests to close access and arbitration opt-outs: for as long as they need to be honoured.
Information on your device: until you clear it.
8. Security
We protect information with technical and organisational measures appropriate to the little we hold: every connection is encrypted in transit (HTTPS/TLS); no third-party script runs in the App; credentials are never held on your device; and access to our systems is limited to the persons who operate them. We do not describe our security measures in more detail here, because doing so helps the people they defend against. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. International Data Transfers
We are based in the United States and our servers are located in the United States. If you use the Service from the EEA, the United Kingdom, Switzerland or another jurisdiction that restricts data transfers, your information is transferred to the United States. Where such transfers require safeguards, we rely on the European Commission’s Standard Contractual Clauses and, as applicable, the UK Addendum or International Data Transfer Agreement, including as incorporated in Google’s data-processing terms for the hosting described in Section 5. You may request a copy of the relevant safeguards by contacting us.
10. Your Privacy Rights
10.1 EEA, United Kingdom and Switzerland. You have the right to access the personal information we hold about you, to have it rectified or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you have given. You also have the right to lodge a complaint with your supervisory authority (in the UK, the Information Commissioner’s Office).
10.2 California. In the preceding twelve months we have collected the following categories of personal information, as defined by the California Consumer Privacy Act: identifiers (IP address; your e-mail address if you write to us); internet or other network activity (connection logs); and commercial information (the status of a subscription as reported by Google Play). We collect it from your device, from you and from Google Play, for the purposes in Section 3, and retain it as described in Section 7. We do not sell or share personal information, we do not collect or process sensitive personal information, and we do not use or disclose personal information for cross-context behavioural advertising. You have the right to know what personal information we collect and how we use and disclose it, to request its deletion, to request its correction, and not to be discriminated against for exercising your rights. You may designate an authorised agent to make a request on your behalf. Because we recognise Global Privacy Control signals by design (we track nothing), there is no opt-out to perform. Under California’s “Shine the Light” law (Civil Code section 1798.83), we disclose no personal information to third parties for their direct marketing purposes.
10.3 Other United States states. Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with comprehensive privacy laws have similar rights to access, correct, delete and obtain a copy of their personal information and to opt out of targeted advertising, sales and profiling, none of which we carry out. If we refuse a request, you may appeal by replying to our decision, and we will answer the appeal within the time the applicable law sets.
10.4 How to exercise your rights. E-mail contact@mlxi.app from the address concerned. We verify requests by asking you to write from the address involved and, where needed, for information that lets us match you to what we hold. We respond within the time the applicable law sets (generally 45 days in the United States and one month in the EEA and the UK), free of charge. Because we hold so little, the honest answer to most requests is that there is nothing to produce beyond what Section 2 lists.
11. Children’s Privacy
The Service is intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18 years of age (or under any higher age of majority that applies where they live). If you believe a child has provided us with personal information, contact us at contact@mlxi.app and we will delete it.
12. Third-Party Links and Services
The Service links to third parties, including Google Play and organisations that offer help with gambling concerns. Those sites and services are governed by their own privacy policies, which we encourage you to read; this Policy does not apply to them.
13. Do Not Track and Global Privacy Control
The Service does not track you across other websites or services, so there is no tracking for a browser’s “Do Not Track” setting or a Global Privacy Control signal to switch off. We honour both by design.
14. Changes to This Policy
If we change this Policy we will post the new version in the App and at https://mlxi.app/privacy.html with a new effective date, and for material changes we will say so in the App before they take effect. We will never change it to permit tracking or the sale of personal information retroactively.
15. Contact Us
AN26.AI LLC · 1048B Sagamore Pkwy W, PMB 1065, West Lafayette, IN 47906-1446, United States · contact@mlxi.app