1. Information we collect
Account and profile information
You can use much of Stakemate without an account. To sign in you use Sign in with Apple or Sign in with Google. We don’t receive or store a password. We receive what Apple or Google share with us — typically your email address (which may be an Apple “hide my email” relay address) and your name — and we create an account and profile. You can add optional profile details: username, bio, photo, country or location, and links or handles for social and poker sites (for example Instagram, YouTube, Twitch, Discord, Hendon Mob). We also record when you accepted our Terms, an optional marketing opt-in, and, if you provide one, how you heard about Stakemate or a referral code.
Poker information you record
Sessions (cash games and tournaments, including venue, stakes, buy-in, cash-out, duration, results and notes), tournament and calendar entries, hand notes, notes about other players, casino balance entries, home-game records (including player display names, buy-ins, cash-outs, expenses and rake), staking listings and claims, and your app settings. If you are not signed in, this information is stored only on your device. If you sign in, it is also synced to our servers so you can back it up and use it on other devices.
Community information
If you use the community features: posts (including shared sessions, results and hands), comments, reactions, who you follow, direct messages, items you share with other users, users you block, reports you make, and images you upload to posts, comments, sessions or your profile.
Subscription information
Pro and Elite subscriptions are sold and billed by Apple (App Store) or Google (Google Play). We don’t receive or store your payment card details. Through the store’s purchase service we learn which plan you hold and whether it is active, and we save your plan level (free, Pro or Elite) on your profile so features unlock across devices. Apple and Google handle receipts, billing, trials, renewals and refunds under their own policies.
AI Coach information
If you use AI Coach or AI note enhance/compress, the hand description or notes you submit are sent from the app to our server and on to a third-party AI provider to produce a response. We record only how many AI Coach uses your account has made in a month (to apply plan limits). We do not keep the text you submit or the response on our servers.
Device and usage information
Our analytics provider records app usage events (for example, that a session was logged or a tool was opened) along with device type, operating system and app version. We also store the time you were last active, and your push-notification token if you allow notifications. Our servers and providers see your IP address when your device connects. We don’t use a separate crash-reporting service; Apple and Google may share aggregated crash information with us if you have chosen to share diagnostics with developers.
Location
If you allow it, the app reads your approximate device location to suggest nearby venues, tournaments and cash games and show distances. This is used on your device to sort results and is not uploaded to or stored on our servers. You can also type a location into your profile yourself, which is stored.
2. How we use your information
- To provide Stakemate: tracking your sessions and bankroll, showing statistics, syncing and backing up your data across devices.
- To create and manage your account and sign you in securely.
- To provide community features: showing your profile, posts and messages to other users as you choose.
- To provide subscriptions: unlocking Pro or Elite features and applying plan limits.
- To send notifications you allow, such as messages, activity and event reminders, and (only if you opted in) promotional messages.
- To keep the community safe: handling reports and blocks and acting on abuse.
- To provide support and respond to your requests.
- To understand how the app is used, fix problems and improve reliability and features.
We don’t sell your personal information.
3. Who we share it with
We use service providers to run Stakemate. They process information on our behalf, or, in the case of Apple and Google, under their own terms:
| Provider | What it does for Stakemate | Information involved |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions | Account, profile, poker records, community content, uploaded images |
| Apple | Sign in with Apple; App Store purchases; push notifications; app distribution | Sign-in identity, purchase status, notification delivery |
| Sign in with Google; Google Play billing and distribution; push notifications | Sign-in identity, purchase status, notification delivery | |
| Expo | Delivers push notifications and app updates | Push token, device and app-version information, IP address |
| PostHog | Product analytics | Usage events, device type, OS and app version, your user ID and email |
| Anthropic | Generates AI Coach and AI note responses | The hand or note text you submit (not your name or email) |
| Render | Hosts the server that relays AI requests | Hand or note text in transit; your sign-in token to check your plan |
| Frankfurter (exchange-rate service) | Currency converter rates | Your IP address only |
We may also disclose information if required by law, to protect the rights, safety or property of Stakemate or others, or as part of a business sale or restructure (we’ll tell you if your information becomes subject to a different privacy policy).
4. Community visibility
- Your username, display name, photo, bio and any profile links can be seen by other signed-in users.
- Posts, comments and reactions are visible according to the visibility you choose for the post (for example, everyone or friends).
- Images you upload are stored in public storage. Anyone who has an image’s link can open it, even if they aren’t signed in. Don’t upload images you wouldn’t want others to see.
- Direct messages are stored on our servers so they can be delivered and synced. They are not end-to-end encrypted.
- Staking listings and claims are visible to the users involved and, for listings, to people who can browse them. Stakemate is a record-keeping tool and doesn’t process payments between users.
5. Device permissions
Stakemate asks for permission before it uses these features, and you can change them in your device settings:
- Location — approximate location to suggest nearby venues and games (see above).
- Notifications — to send messages, activity and event reminders.
- Calendar — to add tournaments to your device calendar and set reminders. Calendar events stay on your device.
- Photos — to choose an image to upload, and to save images (such as a shared result card) to your library.
6. Analytics
The app uses PostHog (hosted in the United States) to record product usage events, such as onboarding steps, sessions logged and tools opened, so we can understand which features are used and fix problems. When you sign in, these events are linked to your Stakemate user ID and email address. The Stakemate website does not use analytics or advertising cookies.
7. International data
Stakemate is operated from Australia. Our main database and file storage run on Supabase in Singapore. Other providers listed above — including PostHog, Anthropic, Expo and Render — may process information in the United States or other countries, and Apple and Google operate globally. By using Stakemate you understand your information may be handled outside Australia. We choose providers that publish their own privacy and security commitments.
8. Retention and deletion
- While your account is active we keep your information so the app works. Local-only data stays on your device until you delete it or the app.
- When you delete your account, we delete your account, profile, synced poker records, community activity, messages, uploaded images, notifications and staking records straight away. See how to delete your account for the full list.
- What may remain: tournament listings you submitted stay with your name removed; moderation reports about you are kept with the link to your account removed; deleted data may remain in provider backups for a limited period until they expire; and analytics events held by PostHog aren’t removed automatically — email us and we’ll arrange deletion.
- Deleting your account does not cancel an App Store or Google Play subscription. You must cancel that with Apple or Google.
- Emails you send to support are kept for as long as needed to help you and meet our obligations.
9. Security
We take reasonable steps to protect your information. Data is encrypted in transit using TLS, our database applies access rules so users can only read and change their own private records, and our servers use authentication. No method of storage or transmission is completely secure, so we can’t guarantee absolute security. Please keep your device and your Apple or Google account secure.
10. Your choices and rights
- Access and correction: you can see and edit your profile and records in the app. To ask for a copy of information we hold, or to correct it, email us.
- Deletion: use the account deletion page.
- Marketing: promotional messages only apply if you opted in; you can change this in the app.
- Notifications, location, calendar and photos: change these in your device settings.
- Where the Privacy Act 1988 (Cth) or another law applies to you, you may have further rights, including to complain to the Office of the Australian Information Commissioner. We ask that you contact us first so we can try to fix the problem.
We respond to privacy requests within 30 days.
11. Children
Stakemate is intended for adults aged 18 and over, and is not directed at children. We don’t knowingly collect personal information from anyone under 18. If you believe a child has given us information, contact us and we’ll delete it.
12. This website
The Stakemate website doesn’t use analytics or advertising cookies. Our hosting provider (Vercel) may keep standard server logs such as IP address, browser and pages requested for security and operation. If you use the account deletion page, you sign in with Google through our authentication provider (Supabase); your sign-in token is held in your browser’s memory only for that visit and is not stored.
13. Changes to this policy
We may update this policy as Stakemate changes. We’ll update the date at the top and, for material changes, tell you in the app or by email where required.
14. Contact
Questions or requests about your privacy: support@stakemate.com.au.
