Privacy Policy

Pokwise (pokwise.com) is a poker study and training tool. We collect only what the service needs to work. This policy explains what we collect, why, who we share it with, how long we keep it and what your rights are, under the EU General Data Protection Regulation (GDPR), Brazil's General Data Protection Law (LGPD) and the data protection laws that apply in your country.

Who is responsible for your data

The controller of your data is Pedro Henrique Skonieski, an individual based in Brazil, who operates Pokwise. For any privacy matter, including requests about your data: [email protected].

Data we collect

• Email address — when you sign in with Google or with a code sent by email. It's what identifies your account.
• Google sign-in — if you choose to sign in with Google, we use your email address, the confirmation that it's verified and your Google account ID, only to confirm who you are. We never receive your password, and we don't store your name or photo.
• Devices and session — a random code created in your browser identifies each device, along with the date of its last access. It keeps you signed in (sessions last up to 90 days) and enforces the limit of 2 devices per account.
• Training progress — when you're signed in, your progress is saved to your account so it shows up on all your devices: total hands and correct answers, your best streak of correct answers, results by type of spot and by position, day streak, hands trained today and your Daily Challenge results. Without an account, it stays in your browser only.
• Account and plan data — when the account was created and when you accepted our Terms and this policy, your chosen language (so we can talk to you in it), your free-trial status, your referral code and referral records (who invited whom, to give out bonuses) and your Pro status (for example, when a PIX payment expires or whether you have a lifetime plan). We also keep your account's country: Cloudflare works it out from your connection when you sign in and when you start the free trial. We store only the country, not your IP address. We use it to pick the currency and payment method shown in our emails (for example, Brazilian reais and PIX only for people in Brazil); the language of the emails is the one you chose in the app.
• Payments — payment details stay with Mercado Pago (in Brazil) or Paddle (outside Brazil). We never see or store your card number. For Paddle purchases, we keep the subscription status, the plan, your Paddle customer, subscription, transaction and refund IDs, the next billing date and the links to manage your subscription.
• Anonymous usage counts — we add up, per day, how many visits the site got and what kind of link they came from (for example, Instagram or an ad), how many hands were trained and how many times certain buttons were tapped. These counts don't include your email or your device code: they're just totals.
• Support messages — if you write to [email protected], we keep the conversation so we can reply.
• Technical data — like any website, our server receives technical data with each request (such as IP address and browser type) to deliver pages and protect the site from attacks. Pokwise doesn't store your IP address in your account.

What stays in your browser

The app keeps what it needs to work in your browser's local storage: your session, the email you signed in with, the device code, your language, your progress, training filters, your cookie choice and other preferences. Pokwise doesn't set any cookies of its own; the Meta Pixel sets a measurement cookie (_fbp) on our domain, and the Google sign-in button may set Google cookies (see below). The app and our pricing pages also look at your device's time zone to decide which prices and payment methods to show and whether they need to ask for your cookie consent. This check happens in your browser, and the time zone isn't sent to us. But the time zone isn't the only way we tell your region: your account's country comes from your connection (see “Account and plan data”), and Paddle's script uses data from the request to show prices in your currency (see “Who we share it with”).

How we use it

• To create and maintain your account, sign you in and unlock Pro on your devices.
• To save and sync your training progress.
• To process payments, subscriptions, the free trial and referral bonuses.
• To send service emails: sign-in codes, a welcome email and a notice when your free trial starts. We also send reminder emails: when your free trial is about to end, a few days after it ends (reminding you of our plans) and before Pro paid by PIX (Brazil) expires. To stop getting reminder emails, reply STOP to any of them or write to [email protected]; we'll flag your account so you don't get any more.
• To prevent abuse: device limits, one free trial per account and limits on code requests.
• To understand, through anonymous numbers, how the app is used, so we can improve it.
• To measure whether our ads work (Meta Pixel, explained below).
• To handle support requests and meet legal obligations.

We don't sell or rent your data, and we don't use it for anything beyond what's in this policy.

Legal bases

We use your data to perform our contract with you (account, progress, plan and payments); based on our legitimate interests (security, abuse prevention, anonymous counts, emails about your trial and our plans, and ad measurement outside Europe); with your consent, where we ask for it (Meta Pixel in Europe); and to comply with legal obligations.

Ad measurement (Meta Pixel)

When we promote Pokwise with ads, we use the Meta Pixel (Facebook/Instagram) to measure whether the ads work — for example, how many people who saw an ad created an account, started the trial or subscribed. It runs only in the app and on the /pro page. The Pixel sets a measurement cookie (_fbp) on our domain and sends Meta events such as “viewed page”, “created account”, “started trial”, “opened checkout” and “subscribed” (with the plan's value), along with technical browser data. We don't send your email to Meta ourselves; the Pixel's advanced matching is turned off. We also don't send the content of your study or any payment data other than the plan's value.

In Europe (the European Union, the European Economic Area and the United Kingdom, including Cyprus, Ceuta, Melilla and the EU's outermost regions, such as the Canary Islands, Madeira and the Azores), the Pixel is only turned on if you accept it in the cookie notice, both in the app and on the /pro page. We work out the region from your device's time zone. You can change your choice at any time through the “Cookies” link in the app's footer. Outside Europe, it turns on as soon as you open the app or the /pro page. Anywhere, you can block it through Meta's ad settings or with a browser blocker; Pokwise works normally without it.

Who we share it with

Only with the services we need to run Pokwise, each with its own privacy policy:

• Cloudflare — website hosting, the app's servers and database, and forwarding of our support email. Policy
• Google — Google sign-in, if you choose it. The sign-in button is loaded from Google's servers. Policy
• Resend — sending the app's emails (sign-in codes and notices). Policy
• Mercado Pago — payments in Brazil. It receives your email and your Pokwise account ID, to link the payment to your account. Policy
• Paddle — payments outside Brazil. As our authorized reseller (Merchant of Record), Paddle collects at checkout the data it needs (such as name, email, country and payment details) and is responsible for it under its own policy. We send Paddle your email (to fill in the checkout) and a random code, which is not your email, to link the purchase to your account. When the app or the pricing page shows international prices, Paddle's script is loaded and receives technical data about the request (such as your IP address) to work out the price in your currency. Policy
• Meta — ad measurement (Meta Pixel), as explained above. Policy
• Microsoft — messages sent to support are read in an Outlook mailbox. Policy

We may also share data when the law or an order from an authority requires it.

International transfers

Some of these services store or process data outside your country (for example, in the United States). In those cases, we rely on the safeguards these providers offer for international transfers, such as standard contractual clauses.

How long we keep it

• Account, plan and progress: for as long as your account exists. If you ask us to delete it, we delete it.
• Sign-in session: up to 90 days, or until you sign out.
• Email sign-in code: 10 minutes.
• Link between an international checkout and your account: when you open Paddle's checkout, we create a random code (not your email) that links the checkout to your account. We keep that code for as long as your account exists, even if you never pay; a temporary copy of it is deleted after 2 days. If you buy, Paddle's transaction and refund IDs are also kept for as long as your account exists.
• Anonymous usage counts: 120 days.
• Support messages: as long as needed to help you and keep a record of the conversation.
• Payment records: Mercado Pago and Paddle keep them for as long as the law (including tax law) requires, even after you delete your account.

Your rights

Under the GDPR and the LGPD, you can at any time:

• confirm whether we process your data and get access to it;
• correct incomplete or inaccurate data;
• ask us to delete your account and data;
• receive your data in an open format (portability);
• find out who we share your data with;
• withdraw consent you've given (for example, for the Meta Pixel) and object to uses based on legitimate interests.

To exercise these rights, email [email protected] from the address on your account (so we can confirm it's you). We reply within 15 days. If you're not satisfied, you can complain to the data protection authority in your country, or to Brazil's ANPD (National Data Protection Authority).

You can delete the data stored in your browser yourself by clearing the site's data in your browser settings.

Minors

Pokwise is intended for people aged 18 and over. We don't knowingly collect data from minors; if we learn that an account belongs to a minor, we'll delete it.

Security

The site uses an encrypted connection (HTTPS), sign-in doesn't use passwords (so there are none to leak), access to data is restricted and we don't store card details. No system is 100% secure; if an incident affects your data, we'll notify you and the authorities where the law requires it.

Changes to this policy

We may update this policy. The date at the top shows the current version; we'll announce relevant changes in the app or by email.

Contact

Questions or requests about privacy: [email protected]