Privacy Policy

Tylt is operated by HRH Labs LLC, a New York limited liability company (“Tylt”, “we”, “us”). This policy covers the Tylt iOS app and the tylt.bet website.

Information you give us

• Account. When you sign in with Apple we receive a unique Apple identifier and, only if you choose to share them, your name and email address. If you use Apple’s Hide My Email, we receive a private relay address instead of your real one — that relay address is all we ever see.
• Profile. A handle, display name and avatar if you set one; your date of birth and state, used to confirm you are eligible before you connect a sportsbook; and preferences such as the unit size you bet in.
• Waitlist (historical). tylt.bet no longer asks for an email address, and no longer accepts one: anyone can download Tylt and sign in, the form is gone, and the database no longer permits the write it used to make. We still hold the addresses submitted while it did.
• Invite code (historical). Which code you redeemed to get in, from when Tylt was invite-only.
• Bets you enter yourself. Anything you log by hand or import from a screenshot.
• Messages to the assistant. The questions you type to Tylt’s AI assistant, and your conversation history so you can come back to it.

Information from a sportsbook you connect (optional)

If you choose to connect a sportsbook, our provider SharpSports gives us read-only access to your betting history: your bets and their legs, the odds and lines, the stake, the result, and when each was placed and settled. This connection cannot place, change or cancel a bet, and cannot move money.

For a sportsbook our provider cannot service, Tylt opens that sportsbook’s own website inside the app so you can sign in directly. We never see your password. We store the resulting session credentials, encrypted, so we can keep reading your own bet history. They are used for nothing else, and are deleted when you disconnect that sportsbook or delete your account.

Information collected automatically

• Location — only while you are connecting a sportsbook. SharpSports uses it to work out which sportsbooks you are able to connect in your state, which needs an accurate fix to get right near a state line. We do not track your location in the background, and never use it for advertising.
• Notifications. If you turn them on, a device token from Apple plus your notification preferences and quiet hours.
• Diagnostics. The SharpSports SDK bundled in our app includes its own diagnostic reporting (Datadog), used to detect failed sportsbook connections.
• Website analytics. The tylt.bet website counts page views, through Vercel Web Analytics. It sets no cookies, assigns you no identifier, and follows you nowhere. The site has no form, so there is nothing you type into it for us to record. None of this runs inside the app.
• How you arrived at tylt.bet, stored on your own device. When you first land on the site it writes three things into your browser’s session storage: the campaign tags in the link you followed (the utm_ ones), where you came from, and which page you landed on. That is your browser’s own memory, not ours — it never reaches us, it is not tied to you, and closing the tab erases it. It used to be attached to a waitlist submission; with the form gone, nothing currently reads it back at all. We are telling you anyway, because it is still something the site puts on your device.

Information we work out from the above

Your record, return on investment, closing-line value, streaks and similar figures are calculated from your bets. We store the results so the app is fast.

• To run the app: your account, your bets, your record.
• To grade bets and compute your results, including against the closing line.
• To answer your questions about your own betting.
• To send notifications you have asked for.
• To keep Tylt working and secure, and to debug problems.
• To improve the product, including the pricing research described in section 6.

When you ask Tylt’s assistant a question, your question and the relevant details of your own betting record — odds, lines, results — are sent to Anthropic, our AI provider, so it can generate a reply. We do not send your name or your email address. Anthropic processes this on our behalf under commercial terms that do not permit training their models on it.

The assistant describes your own record and answers factual questions. It is not betting advice, and it will not tell you what to bet or how much.

We use a small number of service providers, who may only process your information to provide their service to us:

• Supabase — database, sign-in and file storage.
• Railway — hosting for the servers that grade bets and answer questions.
• Vercel — hosting for the tylt.bet website, and its cookieless page-view analytics.
• Apple — Sign in with Apple, and delivery of notifications.
• SharpSports — sportsbook connections and bet import.
• Anthropic — the AI assistant (section 4).

We may also disclose information if the law requires it, to protect the rights or safety of someone, or as part of a merger, acquisition or sale of assets — in which case we will tell you before your information becomes subject to a different policy.

We keep your information for as long as your account exists. You can delete your account from inside the app at any time: Settings → Help & About → Delete account. It takes effect immediately and removes your profile, your bets and their legs, your sportsbook connections and stored session credentials, your notification tokens, your assistant conversations, and your sign-in identity itself. Signing in again afterwards starts a genuinely new, empty account.

What we keep afterwards

One thing deletion cannot reach, and how to fix it

If you joined our waitlist with one email address, back when tylt.bet had a waitlist, and later signed in with a different one — which is exactly what happens when you use Apple’s Hide My Email — we have no way to connect those two records to each other. Deleting your account therefore does not remove that waitlist entry. We would rather tell you than let you assume otherwise. Email support@tylt.bet from that address and we will delete it.

Residual copies may remain in encrypted backups for a limited period after deletion, and we may keep the minimum needed to comply with a legal obligation.

You can access and correct most of your information directly in the app, and you can delete all of it as described in section 6. You may also ask us to access, correct, delete or export your information by emailing support@tylt.bet. We will not treat you differently for exercising these rights.

California residents. Under the CCPA/CPRA you have the right to know what we collect and why, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share personal information, so there is nothing to opt out of. The categories we collect are listed in section 2, our purposes in section 3, and our processors in section 5.

Information is encrypted in transit. Access to your rows in our database is enforced at the database level, so one member cannot read another’s. Sportsbook session credentials are encrypted before they are stored, and the key is held separately. No system is perfectly secure, and we do not claim otherwise — if a breach ever affects you, we will tell you as required by law.

Tylt is for adults aged 21 and over. It is not directed to children, and we do not knowingly collect information from anyone under 18. If you believe a minor has given us information, email support@tylt.bet and we will delete it.

If we change this policy we will update the date at the top, and for material changes we will tell you in the app before they take effect.

HRH Labs LLC — support@tylt.bet