Privacy Policy

Last updated: October 24, 2026

The Poker Brothers (“the app”, “we”, “us”) is a poker training app for tournament players, operated by ICS, based in Brazil. This policy explains what we collect when you use the app, why we collect it, and the choices you have. Questions? Email support@thepokerbrothers.com.

1. Information we collect

Information you give us

• Account details: your email address, password and username. Passwords are handled by Firebase Authentication and are never visible to us.
• Community posts: the text you post, with your username and the time, and any image (such as a screenshot of your results) you choose to attach. We remove the image’s metadata, such as location, before uploading it. Posts are visible to other users of the app.
• Player profile: your answers to the welcome questions when you first open the app, as a guest or with an account — your main goal in poker, whether you play live or online, your typical buy-in, roughly how many tournaments you play a month and how long you’ve been playing. Each answer is a choice from a fixed list, never free text. You can change your answers any time in Settings.
• Reports: if you report a post, the reason you chose and a copy of that post.
• Support messages and bug reports: what you write to us by email or with Report a bug in the app, any screenshot you choose to attach (we remove its metadata first), your account email if you have one, and your app and operating system versions.

Information created as you use the app

• Training data: lesson and quiz progress, exam scores, trainer drill results, streaks and daily goals, skill points and rank, Leak Finder results and your last session summary.
• Training history: a record of each finished training session — the drill, your score, and for each spot the hand class (for example “AKs”), the action you chose and the solver’s action. This is your own hand history: it is stored under your account, only you can read it, and it is deleted with your account.
• Community preferences: the users you block and the posts you report.
• Moderation records: how many people reported a post, and whether your posting is suspended while a moderator reviews one of your posts.
• Guest mode: if you continue as a guest, we create an anonymous identifier and store your training data against it. We don’t collect an email address or name.

Information collected automatically

• Technical data processed by our infrastructure provider, Google Firebase, to deliver and secure the service — such as IP address, device type, operating system and app version.
• App integrity checks: Firebase App Check uses Apple App Attest / DeviceCheck or Google Play Integrity to confirm that requests come from a genuine copy of the app. These checks produce device attestation tokens; we don’t use them to identify or track you.
• Usage analytics: we use Google Analytics for Firebase to understand how the app is used in aggregate — which screens you open and how long you stay on them, which lessons and drills are started and finished, session scores, and general device, country and app-version information. These events carry your account identifier, whether you are a guest and your player-profile answers (so we can see, for example, how live and online players use the app differently), but never your email, your messages or the cards in a hand. We do not use this data for advertising, and it is never shared with data brokers or used to track you across other apps or websites. These analytics are part of how the app operates and there is no in-app switch for them; if you want us to stop processing your usage data, email us (see Your rights) or stop using the app — deleting your account also clears the identifiers tied to these events.
• Crash reports: if the app crashes, Firebase Crashlytics sends us a diagnostic report with the error, a stack trace, and device model and operating-system version, so we can fix it.
• Fonts: the app may download its typeface from Google Fonts, which receives your IP address.

Purchases

If you buy a subscription, payment is handled by Apple (App Store) or Google (Google Play). We never receive your payment card details — only information about your subscription, such as which plan you bought, when, and whether it’s active, so we can unlock paid features. Subscriptions are processed through RevenueCat, which checks purchases with the store on our behalf; it receives your account identifier (not your email) and your purchase history.

What we don’t collect

We don’t collect your precise location, contacts or advertising identifiers, and we can’t browse your photos: the app only receives an image you pick yourself to attach to a post. The app contains no advertising SDKs. The analytics described above are used only to improve the app — never to build an advertising profile or to track you across other companies’ apps and websites.

2. How we use your information

• To create and secure your account and sync your progress across devices.
• To provide lessons, the trainer, progress tracking and community features.
• To understand who our players are — their goals, formats and stakes — so we can shape training around them.
• To moderate the community: review reports, remove content that breaks our Community Guidelines, and suspend accounts.
• To prevent fraud, abuse and unauthorized access.
• To understand in aggregate which parts of the app are used and where people get stuck, so we know what to improve and what to teach next.
• To diagnose crashes and fix bugs.
• To respond to your support requests.
• To comply with our legal obligations.

3. Legal bases

Where the law requires a legal basis — including Brazil’s General Data Protection Law (LGPD) and, for users in the EEA and UK, the GDPR — we rely on:

• Performance of our contract with you: your account, progress, community features and subscription.
• Legitimate interests: security, abuse prevention, moderation, diagnosing crashes, and measuring in aggregate how the app is used so we can improve it — balanced against your rights, and never for advertising or profiling.
• Legal obligations we must comply with.
• Consent, where required. You can withdraw it at any time.

4. How we share information

We don’t sell or rent personal information, and we don’t share it for advertising. We share it only:

• With service providers that process it on our behalf: Google LLC (Firebase Authentication, Cloud Firestore, Cloud Storage, App Check, Hosting, Google Analytics for Firebase and Crashlytics), RevenueCat, Inc. (subscription management), and Apple and Google as app store and payment providers.
• With other users: your username and community posts.
• When required by law, or to protect the rights, safety and property of our users or others.
• In a business transfer, such as a merger or sale of assets, in which case this policy continues to apply to your information.

5. International transfers

We’re based in Brazil, and our service providers may store and process data in the United States and other countries. Where the law requires it, these transfers rely on appropriate safeguards such as standard contractual clauses.

6. How long we keep information

• Account and training data: while your account exists. It’s deleted when you delete your account.
• Community posts: until you delete them or your account, or we remove them.
• Reports: up to 12 months after they’re resolved, so we can deal with repeated abuse. A report contains the reporter’s user ID but no other account details.
• Bug reports: up to 12 months after the problem is fixed. Email us to have yours deleted sooner.
• Guest data: until you delete it in the app. Once you sign out of guest mode, we can no longer link that data to you, so use Delete guest data first if you want it removed.
• Training history: while your account exists; deleted with your account.
• Analytics events: up to 14 months, then deleted automatically by Google Analytics.
• Crash reports: up to 90 days, per Firebase Crashlytics’ retention.
• Residual copies in our providers’ logs or backups may persist for up to 30 days after deletion.

7. Your rights

Depending on where you live — including under the LGPD, the GDPR and US state privacy laws such as the CCPA — you may have the right to:

• confirm whether we process your information and access it;
• correct inaccurate information;
• delete your information;
• receive a copy in a portable format;
• object to or restrict certain processing, and withdraw consent;
• know which entities we share your information with.

To exercise these rights, email support@thepokerbrothers.com from the address on your account. We’ll respond within the time the law requires (for example, 15 days under the LGPD). You can also complain to your data protection authority — in Brazil, the ANPD. We won’t treat you differently for exercising your rights.

8. Deleting your account

In the app, go to Account → Delete account (guests: Delete guest data). This permanently deletes your account, username, training data and community posts. You can also request deletion without the app — see Delete your account.

9. Children

The app is intended for adults aged 18 or over. It isn’t directed at children, and we don’t knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we’ll delete it.

10. Security

Data is encrypted in transit, access is restricted by security rules so each user can only reach their own data, and App Check helps block requests that don’t come from the genuine app. No method of transmission or storage is completely secure, but we work to protect your information.

11. Changes to this policy

We may update this policy. We’ll change the date above and, for material changes, let you know in the app before they take effect.

12. Contact

ICS
Email: support@thepokerbrothers.com