FeltIQ Privacy Policy #
Effective Date: April 23, 2026 Last Updated: October 15, 2026 Company: Virgee LLC Contact: [email protected]
What Changed on October 15, 2026 #
We rewrote this policy so it describes exactly what FeltIQ does today. The main changes:
- Advertising attribution. If you install FeltIQ from an Apple Search Ads ad, we now learn which campaign and keyword led to the install (see Section 5). This uses Apple's privacy-preserving AdServices framework — no advertising identifier (IDFA) and no cross-app tracking.
- More complete list of service providers, including push notifications (OneSignal), Google Sign-In, email delivery (Resend), bot protection (Cloudflare Turnstile), web analytics (Vercel), and web subscription billing (RevenueCat Web Billing with Stripe).
- More precise descriptions of what our AI provider receives, how product analytics are linked to your account, photos and camera use, and venue locations.
- Account deletion is immediate. Deleting your account permanently removes your data right away; there is no recovery window.
- Removed references to a crash-reporting service we don't currently use, and to features described as "coming later" that have since shipped.
The Short Version #
We collect what we need to run FeltIQ. We don't sell your data, we don't show ads in the app, and we don't track you across other companies' apps or websites. Here's the quick summary:
| What we collect | Why | Who else processes it |
|---|---|---|
| Email, name, username, profile photo | Create and run your account and profile | Supabase (hosting); Apple or Google if you sign in with them |
| Session data (buy-ins, cashouts, stakes, notes), bankrolls, goals, hand journal | Core app functionality — tracking your poker results | Supabase (hosting); Anthropic when you request AI coaching |
| Venue names and addresses | Tag sessions by venue | Supabase (hosting); Apple Maps for address search |
| Posts, comments, photos, direct messages | Social features you choose to use | Supabase (hosting); OneSignal for notification previews |
| App usage events | Improve the app | PostHog (linked to your account ID); Vercel (web, aggregated) |
| Purchases and, for Apple Search Ads installs, the ad campaign that led to install | Manage subscriptions; measure which marketing works | RevenueCat; Stripe for web payments |
We never:
- Sell your personal data to anyone
- Show third-party ads in FeltIQ or share your data with advertising networks
- Share your poker results publicly unless you choose to post them
- Send your name, email address, username, or exact location to AI services
- Use the advertising identifier (IDFA) or track you across other companies' apps and websites
If you want the full details, keep reading. If you want to delete your data, jump to Your Rights & Choices.
1. Who We Are #
FeltIQ is operated by Virgee LLC ("we," "us," "our"). We provide a poker performance tracking and analytics platform through our iOS app (including its Apple Watch app, widgets, and Live Activities) and our website and web dashboard at feltiq.app (collectively, the "Service").
If you have questions about this policy, contact us at [email protected].
2. What Data We Collect #
2.1 Data You Provide Directly #
| Data | When collected | Required? | Purpose and visibility |
|---|---|---|---|
| Email address | Account creation | Yes | Authentication, account recovery, service notifications. Private. |
| Display name | Account setup | Yes | Shown in the app and on your profile. |
| Username | Account setup | No | Your public profile and profile URL. |
| Profile photo | If you add one (photo library or camera) | No | Shown on your profile. Stored in publicly accessible storage, so anyone with the image link can view it. |
| Session data | When you log a session | Yes (for core feature) | Buy-in, cashout, rebuys, stakes, game type, duration, mood, notes, and related records (bankrolls, goals, session presets). Private unless you share it. |
| Venue locations | When you add a venue | No | Venue name, and the address and map coordinates you choose through address search (Apple Maps). Synced to our servers so they appear on all your devices. FeltIQ does not request access to your device's GPS location. |
| Hand journal entries | When you log a hand | No | Personal hand review and study. Private. |
| Player notes | When you add notes about other players | No | A nickname, description, playing style, and notes about opponents you play against. Private to you. Please don't record anything about others that you wouldn't want them to see. |
| Social posts, comments, and photos | When you post (photo library or camera) | No | Shown in the community feed according to your visibility settings. Post images and share cards are stored in publicly accessible storage. |
| Direct messages | When you send a message | No | Delivered to the recipient. See Direct message privacy. |
| AI coaching questions | When you ask a follow-up question | No | Answering your question (see Section 4). |
| Imported files | When you import sessions from another app (CSV) | No | Converting your history into FeltIQ sessions. The uploaded file is deleted automatically after 7 days. |
| Feedback and support messages | When you send feedback or contact support | No | Responding to you and improving FeltIQ. Includes the email address you provide. |
| Waitlist email | If you join a waitlist on feltiq.app | No | Confirming your signup and contacting you about launch. Unconfirmed signups are deleted after 7 days. |
Photos you attach are checked on your device for explicit content (using Apple's on-device image classification) before upload; that check never leaves your device.
2.2 Data We Collect Automatically #
| Data | Source | Purpose |
|---|---|---|
| Device type, OS, and app version | Your device | Compatibility and support |
| Feature usage events | PostHog (app; some web forms) | Understand which features are used. Events are linked to your FeltIQ account ID (not your name or email). |
| Web page visits | Vercel Analytics (website) | Aggregated website traffic statistics |
| Push notification token | Your device, via OneSignal | Delivering notifications you've allowed. Linked to your account ID. |
| Purchase history | Apple / Stripe, via RevenueCat | Managing your subscription and entitlements |
| Ad attribution (Apple Search Ads) | Apple AdServices, via RevenueCat | If you installed FeltIQ from an Apple Search Ads ad: the campaign, ad group, and keyword. See Section 5. |
| IP address | Server logs | Security and abuse prevention. Not stored long-term. |
2.3 Data We Do NOT Collect #
- We do not access your contacts, text messages, or call logs
- We do not access your photo library or camera except when you choose a photo or take one to attach
- We do not use your microphone
- We do not access your device's GPS location
- We do not collect your Apple ID password or financial account credentials, and we never see your full payment card number
- We do not use the Identifier for Advertisers (IDFA) or track you across other companies' apps and websites
- We do not collect biometric data — Face ID unlock is handled entirely by Apple's LocalAuthentication framework on your device; we never see or store your biometric information
3. How We Use Your Data #
We use your data for these purposes:
| Purpose | Legal basis (GDPR) | Data used |
|---|---|---|
| Provide the Service | Contract performance | Account info, session data, venues, journal, notes |
| Sync data across your devices | Contract performance | All content you create |
| Social features and messaging | Contract performance | Profile, posts, comments, photos, direct messages |
| Generate AI coaching and hand reviews | Contract performance | The data described in Section 4 |
| Send notifications | Contract performance | Email, push token, notification content |
| Process subscriptions | Contract performance | Purchase history, account ID |
| Improve the app | Legitimate interest | Usage events (linked to your account ID), website traffic |
| Measure our marketing | Legitimate interest | Apple Search Ads campaign, ad group, and keyword for your install |
| Keep the platform safe | Legitimate interest | Message filtering, reports, IP address, usage patterns |
| Respond to support requests | Contract performance | Account info, support and feedback messages |
| Comply with legal obligations | Legal obligation | As required by law |
We do not use your data for:
- Showing ads or ad targeting inside FeltIQ
- Selling to data brokers
- Building profiles for third parties
4. AI Coaching & Your Privacy #
FeltIQ uses the Claude API (by Anthropic) to generate AI coaching reports, answer follow-up questions about a report, and review hands you log. Here is exactly what is sent:
AI coaching reports receive your session records for the selected period — date, game type, stakes, buy-in, cashout, profit, and duration — plus the mood and notes you entered. Before notes are sent, we automatically remove email addresses and phone numbers and shorten long notes. Other text in your notes, including names you may have written, is sent as written.
Follow-up questions send your question (with email addresses and phone numbers removed) together with the report it relates to and your earlier questions and answers in that conversation.
Hand reviews receive the hand you logged — cards, positions, stacks, actions — including the labels you gave to players in that hand.
What we never send to the AI:
- Your name, email address, or username
- Your venue addresses or map coordinates
- Your payment or financial account information
Tip: if you'd rather not share other players' identities with our AI provider, refer to them generically (for example, "Villain 1") in notes and hand labels.
AI-generated reports are stored on our servers and associated with your account. Under Anthropic's commercial API terms, data sent through the API is not used to train their models.
5. Third-Party Services #
We use these service providers. Each receives only what it needs for its purpose:
| Service | Provider | Purpose | Data shared | Privacy policy |
|---|---|---|---|---|
| Supabase | Supabase Inc. | Database, authentication, file storage, real-time sync | All account data and content you create (encrypted in transit and at rest) | supabase.com/privacy |
| Claude API | Anthropic PBC | AI coaching, follow-ups, and hand reviews | The data described in Section 4 | anthropic.com/privacy |
| RevenueCat | RevenueCat Inc. | Subscription management and purchase analytics | Account ID, purchase history, and Apple Search Ads attribution (campaign, ad group, keyword) | revenuecat.com/privacy |
| Stripe | Stripe, Inc. | Card payments for web subscriptions (via RevenueCat) | Payment details you enter at web checkout | stripe.com/privacy |
| Apple Search Ads (AdServices) | Apple Inc. | Telling us which ad campaign led to an install | Apple shares campaign-level attribution for your install; no IDFA is used | apple.com/legal/privacy |
| OneSignal | OneSignal, Inc. | Push notifications | Account ID, push token, and notification content (for example, a direct-message preview and the sender's name) | onesignal.com/privacy_policy |
| PostHog | PostHog Inc. | Product analytics (app and some web forms) | Usage events linked to your account ID; no name or email | posthog.com/privacy |
| Vercel | Vercel Inc. | Website hosting and aggregated web analytics | Website requests and page views | vercel.com/legal/privacy-policy |
| Resend | Resend, Inc. | Sending email (for example, waitlist confirmations) | Your email address and the message content | resend.com/legal/privacy-policy |
| Cloudflare Turnstile | Cloudflare, Inc. | Bot protection on web forms | Browser signals needed to tell people from bots | cloudflare.com/privacypolicy |
| Sign in with Apple | Apple Inc. | Authentication | Email (can be hidden via Apple's relay) and name | apple.com/privacy |
| Google Sign-In | Google LLC | Authentication | Email and name from your Google account | policies.google.com/privacy |
| Apple Maps | Apple Inc. | Address search when adding a venue | The search text you type | apple.com/privacy |
About Apple Search Ads attribution: we advertise FeltIQ on the App Store. When you install from one of those ads, Apple's AdServices framework tells RevenueCat which campaign, ad group, and keyword led to the install. We use this only to see which ads bring people who find FeltIQ valuable. It does not use your advertising identifier, does not require tracking permission, and is not combined with data from other companies' apps or websites.
FeltIQ contains no advertising SDKs and shows no ads.
6. Data Storage & Security #
Where your data is stored #
- On your device: Your data is stored locally so FeltIQ works offline, and it syncs to the cloud when you're connected.
- In the cloud: Supabase PostgreSQL database and file storage, hosted on AWS in the United States. Data is encrypted at rest and in transit.
- Authentication tokens: Stored in the iOS Keychain.
- Public files: Profile photos, post images, and share cards are stored so that anyone with the image link can view them. Everything else you create is private to your account unless you share it.
Security measures #
- HTTPS/TLS for all data in transit
- Encryption at rest for cloud-stored data
- Row-Level Security (RLS) policies ensuring you can only access your own private data
- Short-lived authentication tokens (1-hour access tokens) with rotating refresh tokens
- Rate limiting to prevent abuse
- Input validation and parameterized queries throughout
Direct message privacy #
Direct messages you send in FeltIQ are not end-to-end encrypted (E2EE). They are encrypted in transit using TLS 1.3 and at rest using AES-256 (our database provider's disk encryption). Because they are not end-to-end encrypted, our systems can access message content where it is necessary to keep the platform safe — for example, to run the automated content filter described below and to review messages that you or other users report.
Automated content filtering. When you send a direct message, it is checked against an automated word list before it is delivered. We do this to protect users from abuse and to keep the platform safe. Our legal basis for this processing is our legitimate interest in platform safety and user protection (GDPR Article 6(1)(f)). We do not perform semantic analysis or machine-learning content scanning of your messages beyond this word-list check.
Notification previews. If the recipient has notifications enabled, a short preview of your message and your display name are sent to our push provider (OneSignal) to deliver the notification.
Retention of filtered content. Messages that are flagged by the filter or through a report are retained for moderation review and are deleted no later than 30 days after that review is resolved. Other messages are kept until the account that sent them is deleted (see "Data Retention" below).
Appealing a moderation decision. If one of your messages is blocked or actioned, you can appeal the decision through in-app support.
7. Data Retention #
| Data type | Retention period | Notes |
|---|---|---|
| Account and profile data | Until you delete your account | |
| Sessions, bankrolls, presets | Until you delete them or your account | Items you delete are permanently removed 30 days later |
| Hand journal, player notes, goals | Until you delete them or your account | |
| AI coaching reports and chats | Until you delete your account | |
| Posts, comments, and images | Until you delete them or your account | Deleted posts are permanently removed 30 days later |
| Direct messages you sent | Until you delete your account | Flagged or reported messages: see Direct message privacy |
| Conversations with a deleted user | Your own messages stay in your conversation | When someone deletes their account, the messages they sent are deleted and they appear as "Deleted User" |
| In-app notifications | 90 days | Removed automatically |
| Imported files | 7 days | The sessions created from them stay until you delete them |
| Unconfirmed waitlist signups | 7 days | |
| Feedback and support correspondence | Until no longer needed to handle your request | Ask us to delete it at any time |
| Usage analytics | Up to 12 months | Stored by PostHog |
| Server logs (IP addresses) | Up to 30 days |
When you delete your account, your personal data is permanently deleted immediately — there is no recovery window. Messages you sent are deleted; the people you talked with keep the messages they sent, with you shown as "Deleted User." We keep a minimal internal log entry that an account deletion occurred, for security and legal purposes. Data held by our service providers (for example, analytics and subscription records) is deleted or expires according to their retention schedules; contact [email protected] to request deletion from a specific provider. Anonymized, aggregated statistics (for example, total user counts) may be kept because they cannot identify you.
8. Your Rights & Choices #
For all users #
You have the right to:
- Access your data — Export your sessions as CSV from the app at any time, and download your direct messages from Settings → Account on feltiq.app
- Correct your data — Edit any session, venue, note, or profile information in the app
- Delete your data — Delete individual items, or delete your entire account from Settings → Account → Delete Account, or at feltiq.app/delete-account
- Opt out of analytics — Contact [email protected] and we'll exclude your account from product analytics
- Control permissions — Turn off notifications, photo access, or camera access in iOS Settings at any time
For EU/EEA residents (GDPR) #
In addition to the above, you have the right to:
- Data portability — Receive your data in a structured, machine-readable format (CSV export)
- Object to processing — Object to processing based on legitimate interest, including marketing measurement
- Restrict processing — Request we limit how we use your data
- Lodge a complaint — File a complaint with your local data protection authority
- Not be subject to automated decision-making — AI coaching reports are informational only and do not make decisions that affect your legal rights
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
For California residents (CCPA/CPRA) #
You have the right to:
- Know what personal information we collect and how we use it (this policy)
- Delete your personal information
- Correct inaccurate personal information
- Opt out of sale or sharing — We do not sell your personal information or share it for cross-context behavioral advertising.
- Non-discrimination — We will not treat you differently for exercising your rights
Categories of personal information collected in the last 12 months:
| CCPA Category | Examples | Sold? | Shared for cross-context behavioral advertising? |
|---|---|---|---|
| Identifiers | Email, name, username, account ID, IP address, push token | No | No |
| Commercial information | Subscription purchase history | No | No |
| Financial information | Poker session buy-ins and cashouts (not payment card data) | No | No |
| Geolocation | Venue names and addresses you enter (not device GPS) | No | No |
| Internet or other activity | App usage events, website visits, Apple Search Ads campaign for install | No | No |
| Audio/visual information | Profile photos and post images you upload | No | No |
| User content and communications | Posts, comments, direct messages, notes, hand journal | No | No |
| Inferences | AI coaching insights drawn from session data | No | No |
9. Children's Privacy #
FeltIQ is not intended for anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it promptly.
10. International Data Transfers #
Your data is processed in the United States, where our servers and most of our service providers are located. If you are located outside the United States, we rely on appropriate safeguards for these transfers, such as standard contractual clauses where required, in compliance with applicable data protection laws.
11. Changes to This Policy #
When we make changes to this policy:
- Minor changes (clarifications, formatting): We update this page and the "Last Updated" date.
- Material changes (new data collection, new third-party services, changes to your rights): We notify you via email or in-app notification and summarize the changes at the top of this page.
You can always find the current version at feltiq.app/privacy.
12. Contact Us #
If you have questions, concerns, or requests regarding your privacy:
- Email: [email protected]
- Mail:
Virgee LLC
2501 Chatham Rd #4000
Springfield, IL 62704
USA - Response time: Within 30 days for formal requests; typically much faster for general questions
This privacy policy was written in plain language because we believe you deserve to understand how your data is handled without needing a law degree. If anything is unclear, please reach out — we're happy to explain.