Privacy Policy
This policy explains what data OctoCoach collects, why, and your rights over it.
1. Data We Collect
Account data (email, display name, profile photo from Google Sign-In, date of birth, gender, stated game plan and optional monthly poker budget, consent records). Session data you log (game type, buy-ins, hands, notes, mood, energy). AI chat history. Subscription status. Usage analytics (feature-use events linked to your account, with basic device information, approximate country derived from your device's time-zone setting, and coarse session characteristics - see section 7 - plus masked session recordings in which all text and numbers are hidden; you can turn both off in Settings). Notes you write about opponents are stored under pseudonymous identifiers (e.g. 'Opponent #1234') and are never linked to verified third-party platform identities. When you first arrive, we also record how you found us - campaign parameters carried by the link (such as UTM tags or ad click identifiers) and the referring site, if any - and store this once with your account as its acquisition source.
2. How We Use Data
To provide the service, personalize the AI coach, track your subscription, and improve the product. We do not sell your data and do not share it for advertising purposes.
3. Sub-Processors
OctoCoach uses the following sub-processors: Google LLC (Firebase Auth, Firestore, Hosting, Cloud Functions, BigQuery for our own usage-event records, and reCAPTCHA via App Check - Ireland and United States); Anthropic PBC (Claude AI - United States); Google LLC (Gemini AI via proxy - United States); OpenAI, L.L.C. (hand-screenshot image analysis via proxy - United States); Whop Inc. (payment processing and merchant of record - United States); Amplitude, Inc. (product-usage analytics and masked session recordings - United States; events are routed through our own servers, while session recordings upload directly from your browser to Amplitude; you can opt out in Settings). Each sub-processor is bound by a data processing agreement and by their own privacy policy. We do not currently run a third-party error monitoring service; if we enable one in the future, we will update this list and provide a way to opt out.
4. International Transfers
Some sub-processors process data in the United States (including Amplitude for usage analytics). Transfers from the European Economic Area to the United States are made under Standard Contractual Clauses (SCCs) and, where applicable, under the EU-US Data Privacy Framework. Transfers from Israel rely on the Israeli adequacy regime plus contractual safeguards. Copies of relevant data processing agreements are available upon request.
5. Your Rights (GDPR + Israeli Privacy Law)
You can access, correct, export, or delete your data at any time. The 'Download My Data' button in Settings exports your sessions, hands, players, home games, opponent notes, chats, polls, usage data, and account profile as a single JSON file (right of access); the usage-data part of the export lists your feature-use event types and times, and full event detail (including subscription-lifecycle events) is available on request. The 'Delete Account' button in Settings permanently removes everything: sessions, hands, opponent notes, coach chats, insights, usage data, support tickets, your public polls and shared links, and the account itself. Account deletion also erases the analytics copies of your usage events held in Google BigQuery (within hours) and in Amplitude (deletion jobs there can take up to 30 days to complete). For anything not covered by the export (such as support correspondence), or any other data request, email privacy@octocoach.app; we respond to all data subject requests within 30 days.
6. Retention
Account data is kept while your account is active. Deleted accounts are removed within 30 days of deletion request (backup rotation may retain data slightly longer, after which it is fully purged). Usage-analytics events are retained for up to 24 months and then deleted.
7. Cookies and Local Storage
We use browser local storage (localStorage) to remember your language preference, UI preferences, and accessibility preferences, plus an offline cache, an anonymous device identifier for analytics, and, on your first visit, the campaign parameters described in section 1 (UTM tags / ad click identifiers and the referring site), kept for up to 60 days. So the app keeps working without a connection, a copy of your own account data (sessions, hands, notes and opponent profiles) is also kept in your browser's storage on this device (IndexedDB); it is deleted from the device when you sign out or delete your account. We measure product usage with Amplitude: feature-use events are sent through our own servers (no Amplitude cookies, pixels or tracking SDK for events on your device), and masked session recordings - in which all text and numbers are hidden - help us improve the product. Both are linked to your account id, never sold, and never used for advertising. Feature-use events reach Amplitude only from our servers, so they carry no IP address of yours; session recordings upload directly from your browser to Amplitude, and like any direct web connection Amplitude's servers do see your IP address for those uploads (it is not attached to your analytics profile by us). Events include basic device information derived from standard browser headers (browser and operating-system type, the language your browser reports, and the app's interface language), your approximate country as derived on your device from its time-zone setting (not from your IP address), and coarse session characteristics such as game type, a bucketed stakes range, session length range, and whether a session ended in a win or a loss - never monetary amounts. You can turn this off at any time with the 'Usage analytics' switch in Settings, Data section. We do not use third-party advertising cookies or tracking pixels. For security and abuse prevention we use Google reCAPTCHA (as part of Firebase App Check), which may set its own cookies. We do not currently run third-party error monitoring; if we enable it in the future, we will update this policy and provide a way to opt out in Settings.
8. Children
OctoCoach is for users aged 18 or older. We do not knowingly collect data from minors. If we learn that we have inadvertently collected data from a minor, we will delete it promptly.
9. Your California Rights
California residents have additional rights under the CCPA/CPRA, including the right to know what personal information we hold, the right to delete, the right to correct, and the right to opt out of any sale or sharing of personal information. OctoCoach does not sell personal information. Submit California-specific requests via the contact method in Section 13.
10. EU Representative
An EU representative will be designated under GDPR Article 27 once OctoCoach establishes a regular presence in the European Union (expected upon first paying EU subscriber). Until then, EU-related privacy inquiries should be sent directly to the contact email in Section 13.
11. Data Security and Incidents
Data is encrypted in transit and access is restricted to the account owner. Our infrastructure is hosted on Google Cloud's secure platform. In the unlikely event of a data breach affecting your personal data, we will notify you and, where required, the relevant regulator (Israeli Privacy Protection Authority and/or EU supervisory authorities) within the timeframes required by law.
12. Live Tournament Sharing
When you create a 'Live share' link from an active tournament session, we store a publicly-readable copy of the tournament data in a separate Firestore collection under a random share ID. Anyone holding the URL can read it - no login is required. You choose ahead of time which fields are exposed (buy-in, prizes, casino name, energy/focus, notes) via a 'Staker' preset, 'Friends' preset, or a custom selection. Fields you do not select are never written to the public copy at all. Hand-by-hand data, opponent names, and your coach chat are never included. The link auto-expires within 7 days, or 24 hours after the session ends (whichever is sooner). You can revoke the link manually at any time and the public copy is deleted immediately.
13. Home Game Summary Links and Handoff
When you run a home game, participants appear under labels you type (a first name or a nickname, no surname). They are stored in your account only and are not added to your players list. If you create a 'Summary link for the table', we store a publicly-readable copy of the game summary in a separate Firestore collection under a random link ID, and anyone holding the link can view it without logging in. The copy contains only the game title, the participant labels, how much each participant put in, the state of the cash box, and after the settle-up the list of transfers and their paid marks. It never contains stacks, per-player results, notes, or account identifiers. The link expires 30 days after the last change and is deleted automatically, and you can turn it off at any time. 'Hand off management' creates a one-time link valid for up to 48 hours: whoever redeems it receives a copy of the game in their own account, the summary link moves to them, and your copy becomes read-only. Before sending a link to a group, it is your responsibility to make sure the participants are fine with their labels and amounts appearing in it. Home game data and links are included in your data export and are deleted with your account.
14. Contact
For privacy questions or to exercise your rights (access, correction, export, or deletion), contact us at privacy@octocoach.app. This address is also listed under Settings → Support.
Last updated: October 2026