Privacy Policy
Last updated: March 8, 2026
Overview
Handsight (“the App”) is a poker hand scanning and odds calculator developed by Olli Siitonen, based in Finland. We respect your privacy and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.
This policy explains what data we collect, the legal basis for processing it, how we use it, and your rights.
On-Device Processing
Card detection is performed entirely on your device using an on-device machine vision model. No camera images are sent to our servers for the purpose of card detection. Your poker hands and game data are processed locally.
Data We Collect
- Account data: If you create an account, we store your email address and authentication credentials.
- Hand history: Saved hands, notes, and game data are stored locally on your device and synced via Apple’s iCloud. We do not have access to this data.
- Training images (opt-in only): You may optionally choose to share card detection images to help improve our AI model. These images are stored securely and automatically deleted after 3 months.
- Analytics: We use PostHog to collect anonymous usage analytics (e.g., feature usage, app performance). No personally identifiable information is collected through analytics.
- Subscription data: Subscription and purchase information is managed by RevenueCat and Apple. We do not store your payment details.
- Technical data: Device type, OS version, app version, and anonymized usage patterns for the purpose of improving the App.
Legal Basis for Processing
We process your data under the following legal bases as defined by GDPR Article 6:
- Contract (Art. 6(1)(b)): Account data and hand history are necessary to provide the App’s core functionality and sync services.
- Legitimate interest (Art. 6(1)(f)): Technical data and anonymous analytics are used to maintain, secure, and improve the App.
- Consent (Art. 6(1)(a)): Training image sharing is strictly opt-in. You can withdraw consent at any time via the App’s settings.
How We Use Your Data
- To provide and improve the App’s functionality
- To sync your hand history across devices
- To process subscriptions and in-app purchases
- To improve card detection accuracy (only with your opt-in consent)
- To understand usage patterns and improve the App
Data Storage and Security
Account data and opt-in training images are stored on Supabase servers located in the EU. Hand history and game data are stored locally on your device and synced via Apple’s iCloud — we do not have access to this data. All data in transit is encrypted via TLS. We maintain Data Processing Agreements (DPAs) with all third-party service providers to ensure GDPR compliance.
Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion or 12 months of inactivity |
| Hand history | Stored in your iCloud — managed by you |
| Training images (opt-in) | 3 months, then automatically deleted |
| Analytics data | 12 months maximum |
| Technical data | 6 months maximum |
| Payment records | 7 years (legal requirement) |
You can delete your account and all associated data at any time from the App’s settings.
Third-Party Services
- Supabase: Authentication and opt-in training image storage (EU-hosted)
- Apple iCloud: Hand history and game data sync
- RevenueCat: Subscription management
- PostHog: Anonymous analytics
- Apple: App distribution and payment processing
All third-party providers are bound by Data Processing Agreements that include GDPR compliance obligations.
Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Delete your account and all associated data (via App settings)
- Data portability — request a copy of your data in a portable format
- Withdraw consent for training image sharing at any time
- Object to processing based on legitimate interest
- Lodge a complaint with your supervisory authority (see below)
To exercise any of these rights, contact us at support@handsight.app or use the relevant option in the App’s settings.
Children’s Privacy
The App is rated 17+ and is not intended for use by children under 17. We do not knowingly collect data from children. If we discover that an account belongs to a person under 17, the account will be suspended immediately and all associated data will be deleted within 30 days.
Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes through the App or by email. Continued use of the App after changes constitutes acceptance of the updated policy.
Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman:
Office of the Data Protection Ombudsman
tietosuoja.fi
Contact
If you have questions about this privacy policy, contact us at support@handsight.app.