PokerFolio

Privacy Policy

Last updated: September 8, 2026

PokerFolio ("the app," "we," "our") is a poker session, hand-tracking, and analysis app published by Apuri Studio Inc., a Canadian federal corporation and the data controller for the limited data described below. This page explains what data the app collects, how it's stored, and who it's shared with.

The short version: your poker data — sessions, hands, locations, opponent notes — stays on your device. There are no accounts, we don't sell data, and we don't use ad-tracking or product-analytics SDKs. A few things do leave your phone, and every one of them is listed below: a hand you deliberately share, anonymous crash reports, exchange-rate lookups, and subscription events from the app store. Nothing else.

What's stored on your device

Everything you enter into PokerFolio — sessions, hands, buy-ins/cash-outs, locations, opponent notes, bankroll settings, and app preferences — is stored locally on your device in a local database. We don't run a server that holds it, and it isn't transmitted to us as you use the app. If you use the CSV import or export feature, that file is read from or written to your device only, via your device's own file/share system. The one deliberate exception is a hand you choose to share — see below.

Hands you choose to share

When you tap Share on a hand, PokerFolio creates a link that opens a replay of that hand. To make the link short enough to send and to let messaging apps show a preview, that single hand is uploaded to our server and stored there, and the link is a reference to it. This happens only for hands you explicitly share, and only at the moment you share them — nothing else in the app is uploaded.

What gets stored is the hand itself — the cards, the actions, the amounts, the stakes, the table size and the currency it was played in. Your locations, opponent notes, session history and bankroll are never part of it. It carries no name, no account and no device identifier, because the app has none. Anyone who has the link can view that replay, so treat a share link as public. If the upload fails, the app falls back to a longer link that carries the hand inside the URL itself, and no copy is kept in our database — though that link is still opened through our site, so it appears in our ordinary web request logs.

Exchange rates are the other thing that leaves your device: when auto-convert is on, the app fetches published European Central Bank rates from Frankfurter. Each request names the currencies to convert between and, when converting a session you played in the past, that session's date. So the rates service sees which dates you played and which currencies were involved, and nothing else about you.

Subscriptions and purchases

Subscriptions are sold through Apple's App Store or Google Play and processed by them — we never see or store your payment card details. To manage entitlements (i.e., know which plan you're on), we use RevenueCat, a subscription-management service. RevenueCat receives an anonymous app-user identifier and purchase/subscription events (product purchased, renewal, cancellation). We also keep our own copy of those events in our database so we can reconcile revenue. That copy holds, against that same anonymous identifier: the event's own identifier and what kind of event it was (purchase, renewal, cancellation, billing issue, expiry), the product, the amount and the currency it was charged in, which store it was bought from, whether it was a live or a test purchase, when it happened, and when access is set to expire. We deliberately do not keep the rest of what RevenueCat sends us — including the country the purchase was made in — because none of it is needed to reconcile revenue. It carries no name and no email, because we never receive either. If you redeem an offer code from Apple or Google, the store tells us a code was used so the subscription can be attributed — the code itself contains no personal information.

Contacting us

The in-app "Contact Us" feature opens your device's own mail app with a pre-filled message — it sends directly from your email address to ours through your own mail provider. We don't operate a server that intercepts or stores this message separately.

Crash and error reporting

PokerFolio uses Sentry to report app crashes and errors, so we can find and fix bugs that happen on devices we don't have access to. When the app crashes or hits an unexpected error, Sentry receives a crash/error report containing the stack trace, device model, OS version, app version, and an anonymous, per-install identifier. We have configured Sentry not to store IP addresses and not to derive location from them, so a crash report doesn't tell us where you are. None of your poker data — sessions, hands, locations, opponent notes — is included in a crash report. PokerFolio has no user accounts, so nothing here is tied to your identity beyond that per-install identifier. There's no switch to turn crash reporting off; it's on for everyone, which is why it's declared as required rather than optional on the app stores' privacy forms.

Third parties we use

We do not use advertising networks or third-party product-analytics SDKs, and we don't sell data to third parties. RevenueCat's dashboard does give us subscription revenue reporting, which is why purchases are declared for analytics as well as app functionality on the app stores' privacy forms.

Data deletion

Since your poker data lives on your device, uninstalling the app removes it. Within the app, Settings has a "Clear All Data" option (permanently erase all sessions, hands, locations, and opponent notes without uninstalling), which is available on every plan. Settings also has an "Export Data" option for saving a CSV copy first; that one is part of the Plus plan. Whatever your plan, you can ask us for a copy of anything we hold at the address below.

A hand you shared is stored separately, on our server, and uninstalling the app does not remove it. To have one removed, email the replay link to [email protected] and we will delete the stored copy. Please send the link itself: the app keeps no record of the links it has created, so the link is the only thing that identifies which stored hand you mean, and if you no longer have it we have no way to find it for you. This is a manual process handled by a person, not an automated one. We also have no way to tell who originally created a given link, so we act on any deletion request that arrives with the link — deleting a shared hand reveals nothing about anyone, so we would rather honour a request than interrogate it.

Once deleted, that link stops working for everyone who has it. What we cannot reach: copies the people you shared with have already saved, and preview cards cached by the messaging apps that carried the link. And if the app fell back to the longer link that carries the hand inside the URL itself, there is no stored copy to delete — that link keeps working as long as whoever holds it keeps it.

Children's privacy

PokerFolio is not directed at children and we do not knowingly collect data from anyone under 13. The app is for adults in any case: the Terms of Use set eligibility at 18 or older. The two ages answer different questions — 13 is the age children's-privacy law is written around, and it's the line for the commitment above; 18 is who we permit to use PokerFolio at all — so it's the 18 in the Terms, not the 13 here, that decides whether you may use the app.

Changes to this policy

If this policy changes, we'll update the date at the top of this page.

Contact

Questions about this policy: [email protected]