Privacy Policy

Draft — not yet reviewed by counsel

This is a starting draft, not a finished legal document. It's written to accurately describe what this specific app actually collects and does with data — based on the real code, not generic boilerplate — but it still needs a real privacy lawyer's review before launch, especially around any jurisdiction-specific requirements (GDPR, CCPA, etc.) that apply to where your users actually are.

1. What We Collect

Data	Why
Email, username, password (hashed, never stored in plain text)	Account creation and login
Call Sign	Your identity at the table — never your real name, shown to Tiger and (eventually) other features
Real-life poker experience, prior study (Hero Profile)	Personalizing your starting point
Pup Tank placement answers	Deciding where you start in the curriculum
Subscription tier, Stripe customer reference	Managing your paid access — we never see or store your full card number
Feedback you submit	Improving the product. If you delete your account, your feedback is kept but disconnected from your identity.

We do not currently store a persistent history of individual poker hands you play against your account — hand state exists only for the duration of an active hand.

2. Third Parties We Share Data With

Stripe — processes payments. We never see your full card details.
Anthropic — when you ask Tiger a question or use Hand Analysis, your question and relevant hand context are sent to Anthropic's API to generate Tiger's response.
OpenAI — when Tiger speaks aloud, the text of his response is sent to OpenAI's text-to-speech API to generate the audio.

We don't sell your data to anyone, for any reason.

3. Your Rights

You can see and update your account info in Settings at any time.
You can delete your account at any time — this is real and permanent (requires re-entering your password to confirm).
You can request a copy of your data or ask us questions about it: info@feltshark.com

4. Security

Passwords are hashed, never stored in plain text. Password reset and email verification use single-use, time-limited tokens. We use industry-standard practices, but no system is perfectly secure — we'll notify affected users promptly in the event of a real data breach.

5. Children

Felt Shark isn't intended for anyone under 18. We don't knowingly collect data from minors.

6. Changes

We may update this policy as the product changes. Material changes will be communicated through the app or by email.

8. Who Controls Your Data

The data controller is Felt Shark LLC, registered at 1932 Montebello Drive West, Colorado Springs, CO 80918. You can reach us at info@feltshark.com.

7. Contact

Questions about this policy: info@feltshark.com