Privacy Policy

This Privacy Policy describes how PokerRoll ("we", "our", "the application") collects, uses and protects your personal data when you use our poker bankroll management application available at pokerroll.app and related services (web and mobile).

By using PokerRoll you accept the practices described in this policy. If you do not agree, please do not use our services.

The data controller is PokerRoll. You can contact us at: [email protected].

We collect only the data necessary to provide and improve our services:

Account data: e-mail address and name (or identifier) from Google when you sign in with Google OAuth; we do not store your Google password.

Session and bankroll data: data you enter in the app (sessions, buy-ins, rebuys, cash-outs, bankroll entries, goals, notes) to provide bankroll tracking and statistics.

Technical data: IP address, browser/device type, language preferences and similar technical data for security and correct operation of the service.

We do not collect sensitive payment card data; any payment-related data is handled by third-party payment providers if we introduce paid features in the future.

We use your data to: provide and maintain the service; authenticate you and manage your account; store and display your sessions and bankroll; calculate statistics and analytics you request; send important service-related messages (e.g. security or policy changes); improve the application and fix errors; and comply with legal obligations.

We do not use your session or bankroll data for advertising or selling to third parties.

If you are in the European Economic Area (EEA) or UK: we process your data on the basis of contract performance (providing the service you use), legitimate interests (security, improvement, analytics), and where required by law. Where we rely on consent, we will ask for it explicitly.

We retain your account and session data for as long as your account exists. If you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we must retain it for legal or security reasons.

Technical logs may be kept for a limited period for security and troubleshooting.

We use essential cookies and local storage for authentication, session management and preferences so the application works correctly. We may use analytics cookies to understand how the app is used and to improve it. You can control non-essential cookies through your browser settings.

We use trusted third-party services: Google (for sign-in and, where applicable, analytics), hosting and infrastructure providers to run the application. These providers process data according to their privacy policies and our instructions. We do not sell your personal data to third parties.

PokeAI is an optional AI coaching feature. It is switched off until you explicitly accept a separate notice describing what it can access; until then it processes nothing. The legal basis is your consent (Art. 6(1)(a) GDPR), recorded with a timestamp and the version of the notice you accepted, and withdrawable at any time from inside the feature.

When enabled, PokeAI reads your tracked sessions, results, bankroll entries and goals in order to answer with your own numbers. This access is strictly read-only and technically scoped to your account: the assistant cannot create, change or delete any of your data, and cannot reach another user's data.

PokeAI keeps short notes about what you are working on so a new conversation continues from the last one — for example a concept you find difficult, or how you tend to react after a losing session. These notes may constitute inferences about your behaviour. They never include your financial figures, which are read live at the moment of each question instead of being stored. You can erase these notes at any time, and withdrawing consent erases them automatically along with switching the feature off.

To generate answers, the content of your messages and the relevant context is sent to an external model provider (OpenRouter, routing to Google's Gemini models). This transfer may involve processing outside the European Economic Area under the provider's own safeguards. Conversations are stored in our database so you can return to them, and you can delete any conversation yourself.

PokeAI is a study aid. It is not a financial adviser, not a tax adviser and not a therapist, and it does not replace professional help. Where a conversation suggests gambling-related harm, it will stop giving strategy advice and point to independent support services.

Depending on your location, you may have the right to: access your data; correct inaccurate data; request deletion of your data; request a copy of your data (portability); object to certain processing; withdraw consent where applicable; and lodge a complaint with a supervisory authority (e.g. in the EEA).

To exercise these rights, contact us at [email protected]. You can also delete your account and associated data from the application settings where available.

We apply appropriate technical and organisational measures to protect your data (e.g. encryption in transit, access controls, secure hosting). No method of transmission over the internet is 100% secure; we strive to minimise risks.

For any questions about this Privacy Policy or your data: [email protected].

We may update this Privacy Policy from time to time. We will post the updated version on this page and indicate the date of the last update. Continued use of the service after changes constitutes acceptance of the updated policy. For material changes we may notify you by e-mail or in-app notice where appropriate.