Privacy Policy

Last updated: September 2026

1. Who We Are

Wrap is a live poker hand journal application developed and operated as an independent app. The data controller is Tom Smeets, operating under the Wrap brand. If you have any questions about this policy, contact us at support@wrap.poker.

2. What We Collect

When you use Wrap, we collect the following information:

• Account information — your email address, used to create and authenticate your account.
• Hand data — hole cards, board cards, positions, actions, pot sizes, and notes you log within the app.
• Session data — game type, stakes, venue name, buy-in amounts, and cash-out amounts.
• Player profiles — names, nicknames, physical descriptions, tags, and notes you create about opponents.
• App settings — currency preference, stored locally on your device.

We do not collect location data, contacts, payment information, or any data from outside the app.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contract performance — processing your account data is necessary to provide the service you signed up for.
• Legitimate interest — storing your hand and session data is necessary to deliver the core functionality of the app.
• Consent — where applicable, such as optional features or communications.

4. How We Use Your Data

Your data is used exclusively to provide the app's features:

• Storing and displaying your hand history and session records
• Calculating your P&L and session statistics
• Maintaining your player profiles and opponent notes
• Syncing your data across devices when you are signed in

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all associated data — hands, sessions, player profiles, notes, and tags — is permanently deleted immediately and cannot be recovered. We do not retain backups of deleted user data beyond 30 days.

6. Data Storage & Security

Your data is stored securely using Supabase, a third-party cloud database provider based in the United States. Data is encrypted in transit (TLS) and at rest. Supabase's privacy policy is available at supabase.com/privacy.

Account emails — such as your sign-up confirmation — are delivered by Resend, an email delivery provider based in the United States, which processes your email address for that purpose only. Resend's privacy policy is available at resend.com/legal/privacy-policy.

Your currency preference is stored locally on your device using secure storage and is never transmitted to our servers.

Transfers of data outside the European Economic Area (EEA) — including to Supabase and Resend in the United States — are covered by appropriate safeguards in accordance with GDPR.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

• Supabase — as our database infrastructure provider, solely to operate the service.
• Resend — as our email delivery provider, solely to send account emails such as sign-up confirmation. Resend receives your email address and no other data.
• Legal requirements — if required by law or to protect the rights and safety of users.

Hand sharing is always initiated by you — when you tap Share Hand, you choose where and with whom to share it.

8. Your Rights

Under GDPR, you have the following rights:

• Access — all your data is visible within the app at any time.
• Deletion — you can delete your account and all associated data directly from Settings → Delete Account within the app. Deletion is immediate and permanent.
• Rectification — you can edit or correct your data within the app at any time.
• Portability — you can request a copy of your data by contacting us at support@wrap.poker.
• Objection — you may object to processing of your personal data by contacting us.
• Complaint — you have the right to lodge a complaint with your national data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

9. Children

Wrap is intended for adults only. The app involves poker, a gambling-related activity. We do not knowingly collect data from anyone under the age of 18. If you believe a minor has created an account, contact us immediately at support@wrap.poker.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use of Wrap after changes are posted constitutes acceptance of the updated policy. The date at the top of this page reflects the most recent update.

11. Contact

Questions, requests, or concerns: support@wrap.poker