T Poker is a poker strategy-study app with a home-game scorekeeping tool, operated by Tay Shofer (trading as True Story Labs). This policy explains what data the app handles, where it lives, and what control you have over it.
You can use T Poker without creating an account. Your game data — games you run on this device (players, buy-ins, cash-outs, settlements), your bankroll entries, your study progress, and your streaks — is stored only on your device and is never sent to our servers, though usage analytics, if you share them, report some of what you do with it — such as a quiz score — to PostHog (see below). Deleting the app deletes this data. Player names you enter in a game refer to other people at your table; they are stored only in your device's local storage and are never sent to us. Deleting a game in the app hides it, but its record — including those names and its amounts — stays in the app's storage on this device until you delete the app (on the web, until you clear this site's data). This is true whether or not you are signed in — games you run on this device stay on this device.
Separately from your game data, after you choose how to start the app (guest or sign-in) we collect usage analytics: events about what you do in the app, including study results and your answers to the setup questions — see the next section. You can turn this off any time — signed in, in Profile → Privacy; as a guest, at the bottom of the Home tab.
To understand which features help players and which need work, we collect usage events — for example "a quiz was completed" or "a game night was started" — using PostHog, processed and stored on servers in the European Union. Nothing is sent before you make your choice on the welcome screen. Two events from that screen itself — that it appeared, and which option you picked — are held on your device until then and sent only once you choose; if you close the app without choosing, they are discarded and never leave your device. You can switch sharing off any time in "Share usage analytics" — signed in, in Profile → Privacy; as a guest, at the bottom of the Home tab.
What these events include: the feature you used, where in the app, and when, and — where there is one — the result: a quiz's topic, number of questions and score; whether a training answer was right, and your score band for a round; a placement drill's score and the level it gives you; which lesson you finished; that you unlocked an achievement (never which one, nor how rare it is); the new rank you reached, which counts activity, not money. They also include how you signed up (email, Google or Apple), your answers to the setup questions — your goal, how you rate your skill and the format you play, and whether you entered a name, never the name itself — and, for a game, only its type and a rough number of players, never who played; for a bankroll entry, only its type and whether it was played through T Poker. PostHog's library, which the app uses to send them, adds to each event, where your device reports them: the app's name, package identifier, version and build; your device's type, manufacturer and model, whether it is a simulator, and its operating system and version; its language-and-region setting (such as en-US) and time zone; its screen size; whether you are signed in; a random identifier for each app session; and the library's own name and version.
What they never include: your game amounts, buy-ins or settlements, player names, hand contents, messages, or your location — the app tells PostHog not to add a location from your IP address to its events, and asks PostHog for nothing else that would carry your identifiers. Before you sign in, events carry a random identifier that is not linked to your name or email. When you sign in, the app sends PostHog your account ID together with that identifier, linking the two, so we can count active players; signing out starts a new random identifier. We do not sell this data or use it for advertising.
If you create an account, we store:
What other players can see. Your username can be seen by other players: by members of groups you belong to; by everyone who can see a game you play — its other players and its creator, and for a group game every member of that group — in that game's player list, buy-in history, hand records, results and settlements; in the notifications your actions send them, such as an invitation or a buy-in you record; by anyone you invite to a group, whether or not you share one; and, for a game you create, by anyone signed in who opens its invite link, before they join. Your avatar appears next to your username in lists of players, in search and on your player profile.
Members of any group you belong to can open your player profile. It includes your results across every finished game you have a seat in, including a seat another player gave you that you never accepted: your total and average profit or loss, your best win and biggest loss, how many games you won, lost or broke even, your win rate, your streaks and your recent form. It also lists your ten most recent finished games, each with its name, its group's name (or “Personal”), the date and your result. That includes games and groups they were not part of. Anyone who can see a finished game can also export or share its results outside the app — as a CSV file, a PDF or an image — and those carry the players' usernames.
Push notifications from our server go only to phones and tablets that you have signed in on and allowed notifications for — even if you allowed them before signing in, for example for study reminders — never to the web app. When you allow them, your device registers with Expo, the service that relays our notifications: it sends Expo the push token Apple or Google issued to the device, together with a random identifier for this installation of the app, and gets back an Expo push token, which the app sends to us. When one of the events below concerns you, our server sends Expo that token, the notification's title and text, and its type and internal ids, which the app uses to open the right screen. Expo passes the notification to Apple's or Google's push service, which delivers it to your device. The same title and text are kept in your in-app notifications.
What the text can include: usernames, names typed into a game, group and game names, and amounts (as plain numbers):
When you log out, the app asks our server to stop sending notifications to that device. If you are signed out any other way — for example when your sign-in lapses after a long time away — or that request fails, our server can keep sending your notifications to that device until another account signs in on it or the app is removed. Turning notifications off in your device's settings stops them being shown.
Reports. Signed in, you can report a group, a game or another player. Reporting opens an email to us in your own email app, filled in with what you are reporting — its name and ID — and your username (and email address, if your account has one), with room for you to say what happened. You can change it before sending, and nothing reaches us unless you send it. Neither the app nor our servers keep a copy: a report reaches us only as that email, at truestorylabs@gmail.com, and we use it to review what was reported. If another player reports you, their email includes your username, your account ID and whatever they write. A report is not part of your account, so deleting your account does not delete reports you sent — email us if you want that.
Blocks. You can block another player from their profile. We store that you blocked them, and when. Only you can see your list of blocked players, in Profile → Blocked players, where unblocking someone deletes that record. While a block stands it limits new contact between the two of you, and you stop receiving notifications caused by their actions, except notices about your own money. A block does not remove either of you from groups or games you already share. Blocks are deleted when either account is deleted.
Word filter. Before our server saves new text that other players can see — usernames and avatars, group names and descriptions, game names and notes, guest names, and hand winners and notes — it checks the text against a short list of offensive words. The check runs on our own server, without any outside service. Text it refuses is not saved, and we keep no record of what was refused.
In a game you play while signed in, with a seat of your own, the app offers three optional tools: a check-in while the game is live (three quick answers — how clear your head is, your energy, and whether you are there to play well or to blow off steam), limits that tell you when you are down or up by an amount you choose, and a note about the game once it has ended. What you save is stored on our server with your account and that game: your check-in answers and when you gave them, your limits, when the app first told you that you had reached each one, and your note and when you wrote it.
We use them only to show them back to you and to tell you, once, when you reach a limit. The app shows them to you alone — as the check-in and the note say, “Saved to your account. The other players can’t see it.” They are never part of analytics. They are deleted when you delete your account, or if the game itself is deleted. In a game you run on this device instead, they stay on this device with that game and are never sent to us.
To run T Poker we rely on a few service providers that process data on our behalf, only to provide their service to us: hosting providers (Railway for our API server and its database, Vercel for the web app), PostHog for usage analytics (EU servers), Google and Apple for optional sign-in, and Expo for relaying push notifications, which Apple's and Google's push services then deliver. We do not sell your data to any of them or allow them to use it for their own purposes. Our support address is a Gmail account, which holds the emails you send us, reports and data requests included.
Nothing in T Poker is currently purchasable. Premium features are shown as "Coming soon" and cannot be bought anywhere in the app or on the web. When premium launches, payments will be processed by the app stores (Apple App Store / Google Play) — we will not see or store your card details, and this policy will be updated before anything goes on sale. This is separate from poker buy-ins and settlements, which T Poker only tracks and never processes — settling up happens between you and your friends, outside the app.
Sign-in uses short-lived access tokens with rotating refresh tokens. In the iOS and Android apps, tokens are stored in your device's secure storage (Keychain on iOS, Keystore on Android); on the web, in your browser's local storage — or its session storage, if you sign in by email with “Stay signed in” unticked. Passwords are hashed with bcrypt. Refresh tokens are stored hashed on our servers.
In the app: Profile → Delete Account. If you own a group you'll be asked to hand it over or leave it first, so the group isn't left without an owner. Deleting removes, straight away: your profile and login credentials, your group memberships and any invitations you sent or received, your notifications, your push device tokens, your achievements, your check-ins, limits and notes from games, any blocks between you and another player, and any cloud backup. It also removes the settlement records that name you — including any unpaid balance between you and another player, which disappears from their ledger as well as yours. Cloud Sync, which would keep a cloud backup, is not available in the app yet.
What stays, and why. T Poker records games played with other people, and those records belong to everyone who was at the table. Sessions you played in are kept, with your seat and its buy-in and cash-out amounts disconnected from your account — the amounts stay so the night still adds up for the other players. Your display name can still appear in their record of games you played together: in a group's activity feed, in a game's buy-in and cash-out history as the player who entered, changed or voided an amount, as the winner named on a hand, and in notifications already delivered to them. It is also kept, though never shown, where you restored an amount and in the record of a player's removal from a game, whether you were the player removed or the one who removed them. Text you typed for other players — a game's name and notes, guest names, the winners and notes on hands, and the names and descriptions of groups — stays in that game's or group's record. Entries your account created or acted on — a session you started, an invite link you generated, an invite you accepted, a buy-in or cash-out you entered, changed, voided or restored — also keep an internal identifier for it. Apart from the settlements above, we don't rewrite other players' record of a shared game night.
Without the app (e.g. after uninstalling): email truestorylabs@gmail.com from the address on your account with the subject "Account deletion request". We verify ownership and delete the account within 30 days, with confirmation.
Guest-mode game data never reaches our servers. Deleting a game in the app hides it, but its record stays in the app's storage on this device until you delete the app (on the web, until you clear this site's data). Usage analytics can be switched off any time — signed in, in Profile → Privacy; as a guest, at the bottom of the Home tab. Deleting your account does not by itself delete analytics events already collected — email us with your approximate usage dates to request that.
Our API server and the PostgreSQL database that stores account data are hosted on Railway, which also holds the server's log of warnings and errors. We keep that log to help us fix problems; an entry can include your account ID and the text of an error. The web app is served via Vercel. Depending on those providers' regions, your data may be processed or stored on servers located in the United States or elsewhere. Usage analytics are processed by PostHog on servers in the European Union. Push notifications pass through Expo and Apple's or Google's push service, and emails you send us — reports included — are held in our Gmail inbox; these providers may also process data in the United States or elsewhere. Local guest game data never leaves your device.
You can request access to, a copy of, or correction of the personal data we hold about you, and you can delete your account and data at any time (see above). To make a request, email truestorylabs@gmail.com.
We keep your account data while your account is active, and delete it on request or within 30 days of account deletion. Depending on where you live, you may have additional rights under laws such as the GDPR (EU/UK) or CCPA (California); we honor those rights where they apply.
T Poker is a poker strategy-study app with a home-game scorekeeping tool, intended for adults 18 and older. It is not directed at or intended for children. T Poker does not offer, host, or encourage real-money gambling — it only records the buy-ins, cash-outs, and settlements that players track among themselves, like a shared ledger.
Poker played for money can be risky and, for some people, addictive. Please play responsibly and within the laws of your jurisdiction.
Tay Shofer (True Story Labs) — questions or data requests: truestorylabs@gmail.com