Privacy Policy
Effective date: July 24, 2026
Poker Ryu is developed and operated by Mad Cat Studio. This Privacy Policy explains how information is handled when you use the Poker Ryu mobile application.
1. User accounts and information we collect
Creating an account is optional. You can use Poker Ryu's core training features without an account. Your training progress and settings are stored locally on your device.
If you choose to create an account, the following information is collected and processed:
- Email address — used to create and identify your account, send a verification email, and allow password recovery.
- Password — stored as a secure hash; Mad Cat Studio never has access to your plain-text password.
- Training data — your session history, mastery progress, and settings are uploaded to cloud storage when you are signed in, so your progress is available across devices.
- Account identifiers — a unique user ID is assigned when you register. This ID may be shared with RevenueCat to link your subscription to your account.
Poker Ryu does not collect your name, precise location, contacts, or payment card details.
2. Authentication and cloud sync
Account creation, sign-in, email verification, and password recovery are powered by Supabase, a third-party backend-as-a-service provider. Supabase stores your email address and hashed password securely in its infrastructure. Transactional emails (email verification links, one-time passcodes, and password-reset links) are sent via Supabase's email infrastructure. You can review Supabase's privacy practices at supabase.com/privacy.
When you are signed in, your training progress is automatically synchronised to the cloud so you can pick up where you left off on any device. This cloud sync is only active when you have an account and are signed in.
If you use the app without an account, all data stays on your device and is not sent to Mad Cat Studio's servers.
Live event participation
Supervised Shortstack Survival Event Mode is separate from account-free personal training. Before event registration, players are told that their chosen display name and official result may appear on an account-free public final leaderboard after the organizer approves it. That page contains only event context, final rank, chosen name, hands survived and official decision time. It does not contain email addresses, internal player or run identifiers, tablet authorizations or synchronization evidence.
Players may optionally request one final-results email. Offline tablet requests are encrypted before durable saving, and server-retained email addresses are encrypted. Consent is recorded for this single requested email; offline requests must be acknowledged by the server before use. Only authorized organizers can privately reveal a retained contact or correct a pending address with the participant's confirmation. Address syntax checks do not prove mailbox ownership. Server-retained event addresses are removed at the existing 30-day deadline after closure, or earlier on an authorized erasure request. Organizers must synchronize and clear retained tablet requests under the existing offline retention procedures; this is not a promise of remote erasure from an unavailable tablet. Final competition records remain under the existing event retention policy.
App practice information and official download links in that one email require a separate optional opt-in. Without it, including for historical requests, the email is results-only. Neither choice subscribes the player to a newsletter or ongoing marketing. An organizer must separately approve publication and sending; finishing, reconnecting, synchronization and finalization do not send mail automatically. Requested event emails use the existing Brevo transactional service; provider acceptance is not confirmation of mailbox delivery.
3. Purchases and subscriptions
Poker Ryu offers optional in-app purchases and subscriptions processed by the platform store (Apple App Store or Google Play). Mad Cat Studio does not receive or store your payment card details.
Poker Ryu uses RevenueCat to manage subscription status and purchase entitlements. RevenueCat and the relevant app store may process:
- purchased product or subscription identifiers;
- purchase history and transaction receipts;
- subscription status and expiry dates;
- an app-specific or account-linked user identifier;
- app, platform, and technical information required to validate or restore purchases.
This information is used only to process purchases, determine subscription access, restore purchases, prevent fraud, provide customer support, and maintain the subscription service.
4. Third-party service providers
Poker Ryu may share or transmit limited information to the following service providers when necessary to provide app functionality:
- Supabase — authentication and cloud data storage for signed-in users;
- RevenueCat — subscription management and purchase validation;
- Apple and the Apple App Store — app distribution and in-app purchases;
- Google Play and Google Play Billing — app distribution and in-app purchases.
These providers process information under their own privacy policies and security practices. Mad Cat Studio does not sell user data and does not share user data for third-party advertising.
5. Advertising
Poker Ryu does not display third-party advertisements and does not use personal information for advertising or behavioural profiling.
6. Data security
Reasonable technical and organisational measures are used to protect information processed through Poker Ryu. Data in transit is encrypted using TLS. Supabase enforces encryption at rest for stored data.
No method of electronic transmission or storage can be guaranteed to be completely secure.
7. Data retention and deletion
Locally stored training progress and settings remain on your device until you clear the app's data or uninstall the app.
If you have an account, your cloud data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at support@pokerryu.com. We will delete your account data within 30 days of a verified deletion request, except where retention is required by law, for fraud prevention, or for the administration of an active subscription.
Purchase and subscription transaction records may be retained by Apple, Google, or RevenueCat in accordance with their policies and applicable legal obligations.
8. Your rights
Depending on your location, you may have the right to:
- Access — request a copy of the personal data we hold about you;
- Deletion — request that your account and associated data be deleted;
- Portability — request your training data in a machine-readable format;
- Correction — request that inaccurate data be corrected.
To exercise any of these rights, contact us at support@pokerryu.com.
9. Children
Poker Ryu is intended for adults and is not directed at children under the age of 13 (or 16 in the EEA). Mad Cat Studio does not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
10. Changes to this Privacy Policy
This Privacy Policy may be updated when the app, its services, or legal requirements change. The latest version will always be available on this page, with the effective date shown above. Continued use of the app after a policy update constitutes acceptance of the revised policy.
11. Contact
For privacy questions, data requests, or complaints, contact:
Mad Cat Studio
support@pokerryu.com