Privacy Policy for HandWizard

This Privacy Policy describes how HandWizard ("we," "our," or "us") collects, uses, and protects your information when you use our mobile application (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address and authentication data when you create an account
• Poker Hand Data: Hand histories, session data, game statistics, and personal notes you create
• Payment Information: Processed securely through Apple App Store or Google Play Store (we do not store payment details)

1.2 Automatically Collected Information

• Usage Analytics: App performance, feature usage, crash reports, and user interaction patterns
• Device Information: Device type, operating system version, app version, and unique device identifiers
• Technical Data: IP address, session duration, and app performance metrics

2. How We Use Your Information

We use your information to:

• Provide and maintain the HandWizard service
• Store and sync your poker hand data across devices
• Process subscription payments and manage your account
• Improve app performance and user experience
• Provide customer support and respond to inquiries
• Send important service updates and notifications
• Analyze usage patterns to enhance features

3. Data Storage and Security

Your data is stored securely using industry-standard practices:

• Cloud Storage: Data is stored on Supabase (built on PostgreSQL) with encryption at rest and in transit
• Authentication: Secure authentication through Supabase Auth with industry-standard protocols
• Access Controls: Strict access controls ensure only you can access your poker data
• Data Backup: Regular automated backups to prevent data loss

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these limited circumstances:

• Service Providers: With trusted third-party services (Supabase for data storage, app stores for payments)
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets (with user notification)

5. Third-Party Services

HandWizard integrates with the following third-party services:

• Supabase: Database and authentication services
• Apple App Store / Google Play: Payment processing and app distribution
• Analytics Services: Usage analytics to improve the app (anonymized data only)

6. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Data Export: Export your poker hand data in a portable format
• Opt-Out: Disable analytics data collection in app settings

7. Data Retention

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: Data is permanently deleted within 30 days of account deletion
• Analytics Data: Anonymized analytics data may be retained for up to 2 years
• Legal Requirements: Some data may be retained longer if required by law

8. Children's Privacy

HandWizard is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy in the app
• Sending an email notification (if applicable)
• Displaying a prominent notice in the app

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

12. European Union Users (GDPR)

If you are in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: Legitimate interest and contract performance
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with supervisory authorities