At Preflop Shark, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our poker training application and services.

By using Preflop Shark, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the application.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect the following personal information:

• Email Address: Used for account creation, authentication, and communication
• Name: Collected from your Google account profile (if you sign in with Google OAuth)
• Profile Picture: Collected from your Google account (if you sign in with Google OAuth)
• Authentication Data: Login credentials and session tokens for secure access

Usage Data

We automatically collect certain information when you use Preflop Shark, including:

• Training session data (hands practiced, accuracy rates, time spent)
• Range selections and preferences
• Device information (browser type, operating system)
• IP address and general location data
• App interactions and feature usage patterns

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.

2. How We Use Your Information

We use the collected data for various purposes:

• Provide and maintain our service: To enable core functionality and features
• Improve user experience: To understand how users interact with our app and optimize performance
• Personalize content: To tailor training recommendations and range selections
• Account management: To manage your account and provide customer support
• Communication: To send updates, announcements, and respond to inquiries
• Analytics: To monitor usage patterns and improve our service using Google Analytics
• Security: To detect, prevent, and address technical issues and fraudulent activity

3. Third-Party Services

We work with trusted third-party service providers to operate our application:

Google OAuth

We use Google OAuth for authentication. When you sign in with Google, we receive your email address, name, and profile picture from Google. This data is used solely for authentication and account management. Google's use of your information is governed by Google's Privacy Policy.

Supabase

We use Supabase as our backend database and authentication provider. Supabase stores your account information, training data, and session information. Supabase is compliant with GDPR and implements industry-standard security measures. Learn more at Supabase Privacy Policy.

Google Analytics

We use Google Analytics to analyze how users interact with our application. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. We use this information to improve our service.

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission using SSL/TLS
• Secure authentication protocols
• Regular security assessments and updates
• Access controls and authorization systems
• Secure cloud infrastructure via Supabase

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Data Retention

We will retain your personal information only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Your Privacy Rights

You have certain rights regarding your personal information:

Access and Portability

You have the right to request access to the personal information we hold about you and receive a copy of your data in a portable format.

Correction

You have the right to request correction of any inaccurate or incomplete personal information.

Deletion

You have the right to request deletion of your personal information, subject to certain legal obligations.

Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

Object to Processing

You have the right to object to our processing of your personal information in certain circumstances.

7. Children's Privacy

Preflop Shark is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from children without verification of parental consent, we will take steps to remove that information from our servers.

8. International Data Transfers

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

We will notify you via email and/or a prominent notice within our application before any significant changes take effect and update the "Last Updated" date.

10. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your CCPA rights

To exercise these rights, please contact us at support@preflopshark.com.

11. GDPR Compliance

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information.

Under GDPR, the lawful bases we rely on for processing your information include:

• Consent: You have given clear consent for us to process your personal information for a specific purpose
• Contract: Processing is necessary for a contract you have with us
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party