Legal
Privacy Policy
Last updated October 5, 2026
This page explains, in plain language, what data Flop52 collects in the app and on this website, and how we use and protect it.
Data we collect
When you create an account, we store your email address, your username and your password, which is kept only as a secure hash. You can add a name and a profile photo. As you learn and play, we record gameplay data such as hand histories, match results, puzzle attempts, ratings and lesson progress.
During account setup, we record your confirmation that you are 18 or older and the version of the Terms you accept. We also store the poker experience and first activity you choose to guide your welcome. These setup details are private and do not set your competitive rating. We do not collect your date of birth in this flow.
When you use the app or the website, our servers also receive technical information such as your IP address, device type, operating system and app version. We use it to run the service and keep it secure.
Flop52 uses play chips only. Nothing can be bought, so we don't collect payment details.
Sign in with Apple and Google
If you sign in with Apple, Apple sends us an ID that is unique to Flop52, your email address and, the first time you sign in, the name you choose to share. If you choose Hide My Email, we receive an Apple relay address instead of your own. We also keep a token from Apple so that, when you delete your account, we can ask Apple to remove Flop52's access to your Apple ID.
If you sign in with Google, Google sends us your Google account ID, email address, name and a link to your Google profile photo. We use these details only to create your account and sign you in. We never see your Apple or Google password.
Finding friends from your contacts
Connect Contacts is optional. The app asks for access to your contacts only when you tap Connect Contacts on the Contacts tab of the Friends screen, and your phone asks you to allow it first.
When you tap Connect Contacts, email addresses from your contacts are sent to our server only to find Flop52 accounts that use them. They are not stored, and we don't share them with anyone. You see the players we found and choose who to add. You can turn off contacts access at any time in your phone's settings.
Profile photos
If you upload a profile photo, we store it on Amazon S3, a storage service from Amazon Web Services. Other players can see it next to your username, for example on leaderboards and your profile. The app reads only the photo you pick.
If you sign in with Google and haven't uploaded a photo, we may show your Google profile photo instead.
Push notifications
If you allow notifications, we store a push token for your device and send notifications through Firebase Cloud Messaging, a Google service. We use them for friend requests, accepted requests, game invites and occasional messages from us about your account.
You can turn notifications off at any time in the app's settings or in your phone's settings.
AI coach
The AI coach reviews a match you played, explains your key decisions and answers your questions about those hands. It runs only when you ask for it. The first time, Flop52 asks for your permission before it sends anything, and saves your answer to your account.
When you agree, we send Anthropic (Claude) or OpenAI (GPT), depending on the coach used, a summary of the match you ask about: your cards, the board, the decisions you made and the game engine's numbers for them, and the questions you type to the coach. Your opponent's cards are included only when they were shown at the end of a hand. We don't send your name, email address, username, contact details or other players' names. Players are labelled Hero and Opponent, and we take your name, username and email address out of your questions before they are sent. The provider uses this data to write your coaching. Both providers exclude API data from model training by default. Providers may retain requests for abuse monitoring under their API policies; turning the coach off deletes the reviews saved by Flop52, but does not delete provider logs. Follow-up questions go to the provider that wrote the review.
Your AI reviews and the questions you asked are saved to your account for up to one year so you can read them again. You can turn the AI coach off in Settings, in the app or on the website, which stops sending and deletes your saved AI reviews. To apply the limit on how many AI reviews you can ask for, we also keep a count of the reviews you've used and what each request cost to run. Turning the coach off doesn't reset that count. Your AI reviews and these counts are deleted when you delete your account.
If you don't agree, nothing is sent, and the rest of Flop52 works as normal.
Diagnostics and analytics
The app uses EAS Observe, a service from Expo, to measure how quickly the app starts and becomes ready to use. It sends those timings with the device model, operating system and app version, and it isn't linked to your account. The app also checks Expo's update service for app updates.
Apart from this, the app and the website don't use analytics, crash-reporting or advertising services, and we don't track you across other companies' apps or websites.
How we use it
We use your data to run Flop52: to sign you in, keep your ratings, puzzles and lesson progress, pair you with opponents, show leaderboards, and build Match Review and your playstyle report. We email you only about your account: verification and password reset codes, and one welcome email after you verify your address.
We may use aggregated data that doesn't identify you to improve lessons and balance the computer opponents.
Third parties
We don't sell your personal information, and we don't share it for advertising.
These providers help us run Flop52 and handle data only to provide their service to us: Heroku and MongoDB Atlas (our servers and database), Vercel (this website), Amazon Web Services (profile photos on Amazon S3), Google Firebase Cloud Messaging (push notifications), Expo (app updates and launch timings), Apple and Google (sign-in, if you use it), our email provider (account codes) and Anthropic or OpenAI (the AI coach, only after you agree).
We may also disclose data when the law requires it.
Security
We protect your data with encryption in transit, hashed passwords and access controls. No method of transmission or storage is perfectly secure, but we work to safeguard your information.
If we become aware of a breach that affects you, we will notify you and take steps to address it as required by applicable law.
How long we keep it
We keep your account data until you delete your account. Hand histories are deleted automatically after one year. Server logs are kept for a short time for security and troubleshooting.
Deleting your account
You can delete your account in the app from More, then Settings, then Account, then Delete Account. You can also use the delete account page on the web, or email us from the address on your account and we will delete it for you.
Deletion is immediate and can't be undone. It removes your account and profile, including your email address, username, name, photo, chips, friends and push tokens, and the gameplay records tied to your account. A hand you played against another person stays in that player's history with your name and account ID removed. We may keep limited records where the law requires it.
Children
Flop52 is for adults. You must be 18 or older to create an account, and we don't knowingly collect data from children. If you think a child has created an account, email us and we will delete it.
Your rights
Depending on where you live, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. You can change your profile and settings in the app and delete your account at any time.
To exercise any right that isn't available in the app, contact us using the details below. We will respond within the time required by applicable law.
Contact
Questions about this policy or how we handle your data? Email us and we will get back to you.
Email: create@bitblurs.com. We may update this policy as Flop52 changes. The date at the top of this page shows when it last changed.