Privacy Policy

PokerCom ("the App") is operated by Stackr AS ("we", "us", "our"). This policy explains what data we collect, why we collect it, and how we handle it.

Effective date: May 11, 2026

1. Data We Collect

Account information

• Email address and password (or third-party login via Google or Apple)
• Display name and full name
• Profile photo (if provided)
• Phone number (optional, provided by you)

Gameplay data

• Group memberships and roles
• Game participation, buy-ins, cash-outs, and results
• Statistics derived from gameplay (rankings, streaks, achievements)

Device information

• Expo push notification token (to deliver push notifications)

Subscription information

If you purchase a Pro subscription:

• Apple App Store or Google Play handles your payment. We do not receive or store your card details, billing address, or any other payment information.
• We use RevenueCat to manage subscription state. RevenueCat receives a pseudonymous app user identifier (your account ID), your email address (used only to support customer-service workflows for subscription issues), the product identifier you purchased, and the transaction status from Apple or Google.
• Our database stores your subscription tier (free or Pro), the expiry date, the platform you purchased on (App Store or Google Play), and a platform-issued transaction identifier. These are used to unlock Pro features in the App and to keep your subscription state in sync if you reinstall or change devices.

Advertising information

If you are a free-tier user, we display interstitial ads using Google AdMob. AdMob may collect:

• The device's Advertising ID (Apple IDFA on iOS, Google Advertising ID on Android) for ad attribution, frequency capping, and — only with your consent — personalization
• Coarse (city / country-level) location derived from IP address
• Standard ad-serving signals such as device model, OS version, and app version

On iOS, you will see an App Tracking Transparency prompt asking whether you allow tracking. Declining it does not affect any other functionality, but ads served afterwards will be non-personalized. In the European Economic Area, the United Kingdom, and Switzerland, before any ads load you will see a Google-provided consent form (built on the IAB Transparency & Consent Framework). If you decline the relevant purposes, you will either see no ads or only non-personalized ads. Pro subscribers do not see ads and the ads SDK is not initialized for them.

Permissions

• Camera: Used solely to scan QR codes for joining groups. We do not store photos or video.
• Contacts: Used solely to pick a contact when inviting someone. Contact data is not uploaded or stored on our servers.

2. How We Use Your Data

• To create and manage your account
• To enable group and game functionality
• To calculate and display statistics, leaderboards, and achievements
• To send push notifications you have opted into (game updates, buy-in approvals, invitations)

3. Data Sharing

We do not sell your personal data. Your data is shared only in the following ways:

• Within your groups: Group members can see your display name, profile photo, and gameplay statistics for that group.
• Service providers: We use Supabase for authentication and data storage, and Expo for push notifications. These providers process data on our behalf.
• Payment and subscription processors (Pro users): Apple (on iOS) or Google (on Android) processes your subscription payment, and RevenueCat orchestrates subscription state on our behalf.
• Advertising (free users): Google AdMob serves interstitial ads to free-tier users and may use device-level signals as described in the Advertising information section above.

4. Data Storage and Security

Your data is stored on Supabase infrastructure with row-level security policies. All communication between the App and our servers uses HTTPS encryption.

5. Data Retention

Your account and gameplay data are retained as long as your account exists. If you delete your account, your personal information will be removed. Anonymized gameplay records may be retained for group history integrity.

6. Your Rights

You can:

• View and edit your profile information within the App
• Control which push notifications you receive via notification preferences
• Request deletion of your account and associated data by contacting us

For users in the European Economic Area (EEA)

Under the General Data Protection Regulation (GDPR), you also have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Data portability — request your data in a structured, machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests

Our legal basis for processing your data is: (a) performance of contract (providing the App's functionality), (b) your consent (push notifications, optional profile fields), and (c) legitimate interest (security, abuse prevention).

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

7. International Data Transfers

Our service providers may process data outside the EEA. Where this occurs, we ensure appropriate safeguards are in place (such as the provider's compliance with recognized data protection frameworks).

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes through the App or by updating the effective date above.

10. Contact

If you have questions about this policy, contact us at:

Stackr AS
Email: post@pokercom.app