Privacy Policy
Note: This is a technical draft aligned with the current app. Legal review is recommended before a commercial launch.
1. Data controller
Privacy contact:
2. What we process
- Account: Google profile (sub, email, name, picture) via OAuth.
- Trainer data: hands played, decisions, EV estimates, cards in simulation.
- Imported sessions: parsed hand history and GTO analysis (uploaded .txt).
- Raw session files: stored only on your device (not synced to cloud).
- AI Coach (optional): hand/session poker data you explicitly send after consent.
3. Purposes and legal bases (GDPR)
- Provide the service: contract performance.
- AI Coach: consent.
- Non-essential analytics (if enabled): consent.
4. Processors
Google (login & AI), Supabase (database/sync), payment processor when subscriptions are live, GitHub Pages (hosting).
5. Your rights
Access, rectification, erasure, portability, restriction, objection. Use Export my data and Delete my account in the account menu, or email the controller.
6. Retention
While your account is active; deleted on account erasure (cloud + local on confirmation).