Privacy Policy

Last Updated: 23 August 2026

This Privacy Policy explains how GTO Solutions AS ("we," "us," or "our") handles information when you use Short Deck Poker Tools, which may be listed as Short Deck Poker Trainer in an app store (the "App"). The App is a poker study and training tool and does not offer real-money gambling or prizes.

1. Who Is Responsible for Your Data

GTO Solutions AS is the controller of personal data described in this policy. Our contact details are in Section 12.

2. Information We Collect

2.1 App, Device, Crash, and Diagnostic Information

To operate, secure, and improve the App, we and our service providers may process:

• App and device details: Device manufacturer and model, operating system and version, platform, app version, build number, and device locale.
• Pseudonymous identifiers: Random app-installation, crash-reporting, and subscription-service identifiers. The App does not require a GTO Gecko account and does not give RevenueCat your name or email as an account identifier.
• Crash and error data: Stack traces, exception messages, error type, relevant app state, current and previous screen, session timing, and recent in-app action breadcrumbs.
• Operational diagnostics: Error, loading, and fallback reports sent to Firebase Crashlytics and, for some events, Firebase Realtime Database.
• Network and security data: Service providers may process IP address and request metadata to deliver their services, prevent abuse, and protect the feedback endpoints. On Android, Google Play Integrity may return app, installation/licensing, and device-integrity signals through Firebase App Check.

2.2 Subscription and Purchase Information

The App uses RevenueCat and the applicable app store to provide subscriptions. They may process an anonymous RevenueCat App User ID, store and product, purchase and restore events, transaction and renewal dates, expiration status, entitlement status, subscription status, locale, and currency. We receive subscription status and related transaction metadata, but we do not receive or store your full payment-card number or card security code.

2.3 Aggregate Engagement Information

For the All-In Commitment drill, the App stores counters such as sessions started and completed, answers, boundary and repeat-answer results, and paywall views. Full hand histories and individual cards remain on your device. At certain milestones, aggregate counters and the paywall source are sent to RevenueCat as attributes tied to its anonymous subscriber ID. We use these attributes to understand feature usefulness and subscription context, not for advertising.

2.4 Information You Submit in Feedback

Submitting a bug report or feature request is optional. If you do, we process:

• The report type and free-text description.
• An optional email address, if you want a follow-up.
• Diagnostics shown in the feedback form before submission, such as app/device details, plan status, current screen, recent in-app actions, and remaining free daily usage.
• Any images or videos you choose to attach. Media may contain personal information visible in the file, so only attach content needed to explain the issue.

The App stores an email address you enter locally so it can prefill a later report. When you submit a report, that email is sent with the report.

2.5 Information Kept on Your Device

Most study and preference data stays locally on your device, including training progress, settings, card style, daily-use counters, and full hand/card history. The aggregate All-In Commitment counters described above are the exception when they are synchronized to RevenueCat.

2.6 Information We Do Not Intentionally Collect

• The App does not require account creation or login.
• We do not request your name, phone number, address book, precise location, health data, or payment-card details.
• We do not include third-party advertising SDKs, sell personal data, or use personal data for cross-app advertising or tracking.

3. How and Why We Use Information

• Provide paid features: Verify purchases, restore access, display subscription options, and manage entitlements.
• Maintain reliability: Detect, reproduce, diagnose, and fix crashes, errors, and performance problems.
• Respond to feedback: Investigate reports, communicate with you if requested, and prioritize improvements.
• Improve the App: Understand aggregate feature engagement and whether training flows are useful.
• Protect the service: Validate genuine app requests, limit abuse, and secure our systems.
• Meet legal obligations: Maintain purchase, support, and compliance records where required.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and improving the App, compliance with legal obligations, and your choice to submit optional feedback and media.

4. Service Providers and Data Sharing

We disclose information only as needed to operate the App, process purchases, handle feedback, comply with law, or protect rights and security. The main recipients are:

4.1 Firebase and Google

• Firebase Crashlytics: Processes crash reports, diagnostic details, and associated installation identifiers.
• Firebase Realtime Database: Receives operational error logs and queues submitted feedback.
• Firebase Storage: Temporarily stores images and videos you attach to feedback.
• Firebase App Check / Google Play Integrity: Helps verify that Android requests come from our genuine App on a qualifying device or environment.

See Privacy and Security in Firebase and Google's Privacy Policy.

4.2 RevenueCat

RevenueCat processes the anonymous App User ID, purchase history, subscription status, entitlements, and the aggregate engagement attributes described in Section 2.3. See RevenueCat's Privacy Policy.

4.3 Apple App Store and Google Play

The store where you obtain a subscription processes payment and transaction information under its own terms and privacy policy. See Apple's Privacy Policy and Google's Privacy Policy.

4.4 GitHub

A private relay converts submitted feedback into issues in a private GitHub repository. The issue can contain your description, optional email, diagnostics, and chosen attachments. See GitHub's Privacy Statement.

We do not sell personal data or share it with advertising networks. We may disclose information if required by law, to protect people or systems, or as part of a corporate transaction subject to appropriate safeguards.

5. Data Retention

• Crashlytics: Firebase states that crash stack traces and associated identifiers are retained for 90 days before removal begins.
• Operational diagnostics: Firebase Realtime Database entries are retained only as long as reasonably needed to diagnose and prevent recurring problems, normally no longer than 12 months.
• Feedback queue: Submitted reports and media are normally deleted from Firebase after the private relay creates the corresponding GitHub issue. If processing fails or the daily relay limit is reached, they remain queued until processing succeeds or we remove them manually.
• Private feedback issues: GitHub issues and copied attachments are kept as long as reasonably necessary to investigate the report, maintain a development record, and handle follow-up or legal obligations.
• Subscriptions: RevenueCat and the app stores keep subscription and transaction records according to their policies and applicable legal, tax, fraud-prevention, and accounting requirements.
• Local data: Stored until you clear the App's data or uninstall it, subject to device backup behavior.

We may retain a minimal record of a deletion request where necessary to document compliance, resolve disputes, or meet legal obligations.

6. Security

We use safeguards designed to protect information, including encrypted transport, private Firebase reads, create-only client feedback paths, file and submission limits, App Check on Android, and private GitHub storage. No security measure can guarantee absolute protection.

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data, and to complain to a data protection authority. You may also:

• Avoid sending optional feedback, email, images, or videos.
• Remove locally stored App data by clearing App storage or uninstalling the App.
• Manage or cancel a subscription through the Apple App Store or Google Play.

8. Deletion Requests

To request access or deletion, email info@gtogecko.com with the subject "Short Deck privacy request." Because the App has no account and most identifiers are pseudonymous, include only the information needed to locate your data, such as the email used in a report, an approximate report date, or relevant purchase details. We may need to verify that you are entitled to make the request. If we cannot reasonably link anonymous diagnostics to you, we will explain that limitation.

9. Children's Privacy

The App is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, contact us and we will take appropriate steps to remove it.

10. International Data Transfers

Our service providers may process information outside your country, including in the United States. Where required, we use contracts and other legally recognized safeguards for international transfers.

11. Changes to This Policy

We may update this Privacy Policy when the App or legal requirements change. We will publish the revised policy at this URL and update the date above. Material changes may also be communicated in the App or store listing where appropriate.

12. Contact Information

For privacy questions or requests, contact:

• Email: info@gtogecko.com
• Company: GTO Solutions AS
• Address: Fredrik Meltzers gate 13b, Bergen, Norway