1. Introduction

Predicts is a consumer chatbot that appears as a contact in your Messages app, operated by Loki Labs ("Loki", "we", "our"). You text Predicts like a friend to search prediction markets, get grounded live odds, and set alerts for new and moving markets. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy applies to the Predicts service and to the predicts.chat website. Predicts provides information and analysis only; it is not financial, investment, or trading advice.

2. Data Controller

For the purposes of the EU General Data Protection Regulation (GDPR), the Polish Personal Data Protection Act, and the UK GDPR, the data controller is:

Loki Labs
Poland
Email: privacy@lokimessages.com

The supervisory authority in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), uodo.gov.pl.

3. Information We Collect

Contact information

The phone number or iMessage handle you text Predicts from, which is how Predicts reaches you
Any name or details you choose to share in conversation

Messages and metadata

The messages you send to and receive from Predicts, including any attachments
Message timestamps, delivery and read receipts, and reactions
The market alerts, watches, and preferences you ask Predicts to keep

Billing information

If and when paid plans are offered, payment method details are processed by Stripe; we store only a token reference and the last 4 digits of the card
Credit balance, invoice history, usage metrics, and tax identifiers

Technical data

IP address, user agent, device identifiers
Cloudflare and Sentry logs for security and reliability

4. How We Use Information

To deliver, operate, and improve Predicts
To answer your questions grounded in prediction-market data and to run the market alerts and watches you set up
To protect against abuse and keep the Service secure
To bill you (if you purchase a plan) and comply with tax and accounting obligations
To send you the messages and alerts you asked for
To respond to support requests
To comply with legal obligations and enforce our Terms

We do not sell personal information, and we do not use your messages to train third-party AI models.

5. Legal Bases for Processing (GDPR)

Under the GDPR and the UK GDPR, we process personal data on the following legal bases:

Contract (Art. 6(1)(b)): to provide the Predicts service you asked for
Legitimate interests (Art. 6(1)(f)): to secure the Service, prevent fraud and abuse, and improve reliability
Legal obligation (Art. 6(1)(c)): to retain records required by tax, accounting, or communications law
Consent (Art. 6(1)(a)): where required, for example for website analytics

6. AI Model Providers

Predicts routes your messages to third-party AI model providers (such as Anthropic and Cloudflare Workers AI) to understand what you ask and to generate a reply. These providers process the message text needed to generate a response under their own privacy and data-retention terms. Where supported, we use the providers' zero-retention or no-training endpoints.

7. Sharing

We share information only with:

Service providers: Cloudflare (hosting and email), Apple (iMessage delivery), Stripe (billing), Sentry (error monitoring), PostHog (privacy-friendly website analytics), and the AI model providers described above
Legal disclosures: when required by law, subpoena, or to protect rights and safety
Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you

Prediction-market data shown by Predicts is public market data sourced from prediction-market venues (such as Polymarket). Your conversations are never shared with those venues.

8. Retention

We retain your information while your number is active with Predicts and for a reasonable period afterward to satisfy legal and audit obligations. You can ask Predicts to delete your conversation and data at any time, or email privacy@lokimessages.com. Backups are purged on a rolling basis (typically within 30 days).

9. Security

We use industry-standard controls including TLS for data in transit, encryption at rest for our Cloudflare storage, ES256-signed session tokens, and least-privilege access for personnel. No system is perfectly secure; please report suspected vulnerabilities to security@lokimessages.com.

10. Your Rights

To exercise any right below, contact privacy@lokimessages.com. We may need to verify your identity before responding and will reply within the timeframes required by applicable law.

EU / EEA / UK residents (GDPR, UK GDPR): you have the right to access, rectify, erase, restrict, and object to processing of your personal data; the right to data portability; and the right to withdraw consent at any time (withdrawal does not affect the lawfulness of prior processing). You also have the right to lodge a complaint with your national supervisory authority. In Poland, this is the President of UODO (uodo.gov.pl).

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any sale or sharing. We do not sell personal information. Authorized agents may submit requests on your behalf with proper documentation.

Other jurisdictions: you may have similar rights under local law. We honor substantive rights on a global basis where operationally feasible.

11. Children

Predicts is not directed to children. You must be 18 or older to use Predicts, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact privacy@lokimessages.com and we will delete it.

12. International Transfers

We operate primarily on Cloudflare's global edge network, which means your data may be processed in countries outside the EEA (including the United States). Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards under Chapter V of the GDPR, such as the European Commission's Standard Contractual Clauses (SCCs), adequacy decisions, or processor commitments under the EU to U.S. Data Privacy Framework where applicable.

13. Cookies and analytics

predicts.chat uses PostHog, a privacy-friendly product-analytics service, to understand how the site is used so we can improve it. With your consent, PostHog stores a first-party analytics identifier in a cookie and in your browser's local storage; it is used only to count and understand visits — never for advertising, and we never sell your data. In the EU, EEA, UK and Switzerland, analytics loads only after you accept it in the consent banner; elsewhere you are given notice and can decline at any time. Declining stops analytics and clears the identifier.

A single strictly necessary cookie may also be used to keep you signed in if you open a billing or account portal; it is exempt from consent under the ePrivacy Directive. We do not use advertising cookies or third-party advertising trackers.

14. Changes

We may update this policy from time to time. Material changes will be communicated by text or on predicts.chat at least 30 days before they take effect.

15. Contact

Loki Labs
Poland
Privacy requests: privacy@lokimessages.com
General: loki@predicts.chat