Privacy Policy

Personal data processing policy of the Value Finder app. Version of 3 November 2026.

1. Who processes the data

1.1. The personal data operator is Denis Aleksandrovich Plakhotnikov, self-employed (Taxpayer ID 310207425702), "we". Email for questions about data: valuefinder.noreply@yandex.ru. Registration number in the Roskomnadzor register of personal data operators: 31-26-033502.

1.2. This policy follows Russian Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and applies to the Android app and to the web version.

2. The short version

2.1. The app runs on your device. Your betting journal, bankroll, settings, The Odds API key and scan results are stored only there and are not sent to us. Only your sign-in email, your consent and your subscription reach our server (section 3).

2.2. We do not collect names, addresses, phone numbers, card or account numbers, location, contacts, photos or advertising IDs. The app has no ads and no analytics counters. The website has the VK Ads counter, which you can turn off (5.8). Built-in third-party components: the RuStore update module, used to remind you about a new version and update the app (5.6), and the Google ML Kit library, used to read odds from a screenshot you choose yourself (5.4).

2.3. The personal data we process is your email address for signing in, the record of your consent, subscription and payment details and the messages you send us (section 3). It is stored on our server in Russia (5.2).

3. What data, why, and how long we keep it

3.1. Email address. Why: signing in with a code sent by email, linking a Pro subscription to your account (so it is not lost when you change phones), replying to your messages. Kept while you have an account.

3.2. Pro details: plan, price, start and end dates, free trial. Why: unlocking Pro for the paid period, refunds. Kept while you have an account.

3.3. Payment details: the YooKassa payment ID, amount, plan, status and date. Why: turning on Pro after payment, refunds, tax records. After an account is deleted, payments are kept without the email and without any link to you, so they cannot identify who paid.

3.4. The record of your consent to the processing of personal data: the document version and when you gave it. Why: to prove the consent was obtained (Article 9(3) of Law No. 152-FZ). Kept while you have an account.

3.5. Sign-in code: while the code is valid (10 minutes), the server keeps the email and a signature of the code (not the code itself); the record is deleted after you sign in or the code expires.

3.6. Messages to us: the email you wrote from and the text. Why: to reply and resolve the issue. Kept as long as needed to reply.

3.7. Fingerprint of The Odds API key — the "one email, one key" rule. The key itself stays on your device; the app sends our server only its fingerprint (an irreversible SHA-256 transform), and the server keeps a signature of that fingerprint — the key cannot be recovered from it. Kept while you have an account.

3.8. We do not record the IP addresses of visitors to the website or app users. Server logs contain only failure information, without emails or other personal data. The one exception is scanning without signing in: so that the number of free scans cannot be bypassed by clearing the browser, the server counts such requests by connection address. For this, the server keeps in memory for one day only an irreversible fingerprint of the address (SHA-256 with a random salt that changes every day) and the number of requests; the address itself is not saved, nothing is written to disk or the database, and the fingerprint is deleted after a day.

4. Data that stays on your device

4.1. Betting journal, bankroll, Kelly fraction, scan settings, language and theme, The Odds API key, the last scan, records of accepted documents. They are kept in the app's storage on Android or in the browser storage in the web version.

4.2. We have no access to this data. You can delete it in the app (More → Delete account and data), by deleting the app or by clearing the site data in your browser.

4.3. You make journal backups yourself by exporting a CSV; on Android the app also saves a copy to the Downloads folder on your phone. You decide where to keep the file.

4.4. Without internet the app remembers the last known subscription status — it is also kept on your device.

5. Third-party services

5.1. The Odds API (the-odds-api.com). When you run a scan or check your key, your device contacts this service directly and sends it your key and the request parameters (sports, markets). The service sees your connection address (IP). We do not receive these requests. The service processes data under its own rules; you get the key from it yourself. In Pro without your own key, scans go through our server: the app sends it the request and your sign-in token, and our server queries the service with its own key — your email and connection address are not passed to the service.

5.2. Server and database: a cloud server of JSC Selectel in Moscow. The data is stored in Russia. A copy of the database is made every night and kept for 14 days, then deleted.

5.3. Emails with sign-in codes are sent through the mail service of YANDEX LLC (Yandex Mail) from our mailbox valuefinder.noreply@yandex.ru: the service receives your email address and the text of the email with the code.

5.4. Odds from a screenshot (Pro, Android app). The screenshot you choose is read on the phone by the Google ML Kit library. The screenshot itself and the recognised text are not sent to us or to Google and are not stored. The library sends Google technical information about how it works — performance and use of the recognition feature (ML Kit terms: developers.google.com/ml-kit/terms).

5.5. Payments go through YooKassa (NCO YooMoney LLC). You go to the YooKassa page and enter your card details there; we do not receive them. We send YooKassa only the amount, the plan and an internal account number — without your email. The payment method is not saved. YooKassa processes data under its own rules.

5.6. The RuStore app store processes data under its own rules when you download and update the app. The RuStore update module in the app talks to the RuStore app on your phone: whether there is a new version, downloading and installing it.

5.7. We do not sell your personal data or pass it on to third parties, except as described in this section and where the law requires it.

5.8. The VK Ads counter — only on the valuefinder.ru website; the banner at the bottom of the site tells you about it. It helps us see whether people come from our ads on VK and use the site, and show ads to people who may be interested. The counter is a service of VK LLC (VK Ads, Top.Mail.Ru): it receives a browser identifier in a cookie, your connection address (IP), browser and device details, the addresses of the site pages you open and the events "looked around without signing in", "opened the sample scan", "requested a code", "signed in". Your email, journal, odds and other data are not sent to the counter. VK LLC processes data under its own rules. To turn it off, tap "Turn off" in the banner or go to More → "Turn off" under the documents: after that the counter receives nothing more. The site works the same without it. The Android app has no counter. Legal ground: our legitimate interest in knowing whether our ads work (Article 6(1)(7) of Federal Law No. 152-FZ), with your right to object at any time.

6. Legal grounds

6.1. Your consent to the processing of personal data (Article 6(1)(1) of Law No. 152-FZ), a separate document you accept in the app.

6.2. Performance of a contract to which you are a party: the Terms of Use and the subscription (Article 6(1)(5) of Law No. 152-FZ).

7. How we process data

7.1. Actions with data: collection, recording, systematisation, storage, correction, use, transfer (5.3, 5.5), deletion and destruction. Processing is automated.

7.2. Data is sent only over a secure connection (HTTPS). The server is reachable from the internet only over HTTPS, the database only from inside the server. The Odds API key never reaches the server and never appears in error messages or app logs.

8. Deleting data and withdrawing consent

8.1. In the app: More → Delete account and data. This immediately deletes your email, Pro details and consent record on the server, then all data from the device, signs you out and withdraws your consent to the processing of personal data. Internet is needed: without a connection to the server the app deletes nothing and asks you to try again.

8.2. By email to valuefinder.noreply@yandex.ru, from the address your account is linked to.

8.3. After you withdraw consent or delete your account, we stop processing and destroy your data within 30 days at most (Article 21(5) of Law No. 152-FZ): on the server immediately, in the nightly database copies after 14 days. Payment records remain without the email (3.3).

8.4. The app cannot be used without consent: to continue, you need to accept the documents again.

9. Your rights

9.1. You have the right to know what data of yours we process and why (Article 14 of Law No. 152-FZ), to ask us to correct or delete it, and to withdraw consent.

9.2. If you believe we are violating your rights, you can complain to Roskomnadzor (the Russian data protection authority) or go to court. But please write to us first, and we will try to resolve it quickly.

10. Age

10.1. The app is for adults only (18+). We do not knowingly collect data from minors; if we learn of such data, we will delete it.

11. Changes to this policy

11.1. A new version is published in the app with its date. If the data, purposes or methods of processing change, the app will ask you to accept the policy and the consent again.

11.2. The policy is made in Russian and English. If the texts differ, the Russian text prevails.