Legal

Privacy Policy

Last updated: November 2026

Chips Story is operated by Smaipa AI UG (haftungsbeschränkt), registered in Germany. We take your privacy seriously. This policy explains what data we collect, why we collect it, how we handle it, and how you can control or delete it.

1. Data Controller

Smaipa AI UG (haftungsbeschränkt)
Weilburger Straße 16
60326 Frankfurt am Main, Germany
Email: privacy@chipsstory.com

2. Data We Collect

When you use Chips Story, we may collect the following categories of data:

  • Account information — email address and display name provided via Apple Sign-In or Google Sign-In.
  • Camera & chip stack photos — photos taken within the app of your chip stacks, used to count and record chip denominations. Camera access is requested only when you use the chip-scanning feature.
  • Hand reel videos — the video clips you pick or record to make a hand reel. When a hand is read, sampled frames of the clip and a copy of the clip itself, reduced to 1080p, are uploaded to our private storage. A clip can show other people at the table, and what they say.
  • Chip stack data — the denomination counts you enter or confirm per chip color, stored against your account.
  • Tournament data — tournament names, dates, and chip color-denomination mappings you configure.
  • Usage analytics — anonymous interaction data such as screens visited, features used, and session duration, collected via Mixpanel. Your chip photos and stack counts are never sent to Mixpanel.
  • Device information — device type, operating system version, and app version, used for diagnostics and compatibility.

Waitlist

If you join the waitlist on this website, we store your email address, the time you joined, and which form you used. We use it only to tell you when the app launches. We don't use it for anything else, and we don't share or sell it.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by submitting the form. You can withdraw it at any time by emailing us at the address below, and we will delete your email. The list is stored in Supabase (see Section 6). We keep it until you ask us to remove you or we close the waitlist after launch, whichever comes first.

3. Why We Collect Your Data

  • To provide the core service: storing your chip counts and displaying your tournament progression.
  • To sync your data securely across your devices via your account.
  • To improve the app experience based on anonymised usage patterns.
  • To develop and improve AI-powered chip counting — see Section 4 for full details and your opt-out rights.
  • To read the hands in your hand reel videos, read them again when our reader improves, and see what you filmed when you ask us for help.
  • To feature hand reels in our marketing, but only clips you let us feature — see Section 5.

4. AI Features & Third-Party AI

Chips Story uses and is developing machine-learning models to automatically count chip stacks from photos. Here is exactly how your data is involved and what control you have.

Your explicit consent is required. Before any chip photos or associated count data are used to train machine-learning models or shared with third-party AI services, you will be shown a clear consent prompt within the app. You can withdraw this consent at any time in Settings → Privacy → AI Training.

What may be used (with your consent): Photos of chip stacks and the denomination counts you confirm. This data is processed in aggregate and is de-identified before being used for model training — it is not linked to your name or email during training.

Third-party AI disclosure (Apple guideline 5.1.2): If your chip photos or data are processed by any third-party AI platform (e.g., a cloud vision API or external model provider), we will disclose this explicitly at the point of consent and name the service in this policy. Currently, on-device and internal models are used; this section will be updated before any external AI provider is introduced.

Opting out: You can opt out of AI training at any time in Settings → Privacy → AI Training. Opting out does not affect your ability to use the app. Anonymised data already incorporated into trained models cannot be retroactively removed, as it is no longer personally identifiable.

5. How We Obtain Your Consent

Where required — including for camera access, analytics, and AI training — we obtain your consent through clear in-app prompts before data collection begins. You may withdraw consent at any time:

  • Camera access: revoke via iOS Settings → Chips Story → Camera.
  • Analytics: opt out via Settings → Privacy → Analytics inside the app.
  • AI training: opt out via Settings → Privacy → AI Training inside the app.
  • Featuring your hands: turn off the switch on a reel's Ready to post sheet, or Profile → Let us feature your hands for all of them.
  • Full account deletion: available via Settings → Account → Delete Account (see Section 9).

Featuring your hands in our marketing.When a hand reel is ready to post, the app shows a switch, “Let Poker Creator feature this hand”. It is on unless you have turned it off in Profile. While it is on, we may use that clip and the reel you made from it in our own marketing (our social media accounts, website, app store listings and ads) and edit them for it. We record when you set the switch and the wording you saw. Turn it off on that reel, or for every clip in Profile, and we stop using those clips in anything new; posts already published may stay up. Leave it on only if you are allowed to share the clip, including by the people who can be seen or heard in it.

6. Data Storage & Processing

Your data is stored in Supabase, a cloud database platform hosted on AWS in the EU (Frankfurt, eu-central-1). All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).

Photos and videos are kept in Supabase Storage in the same region. Hand reel videos are stored privately: only you, through the app, and our team can reach them. We keep them until you delete your account.

7. Third-Party Services

We use the following third-party services. Each is contractually required to provide the same level of data protection as stated in this policy and as required by Apple's App Review Guidelines and GDPR:

  • Supabase(database, authentication & file storage) — stores your account and app data on EU infrastructure. Privacy policy: supabase.com/privacy
  • Apple Sign-In / Google Sign-In — used for authentication only. We receive only your name and email; we do not access any other data from your Apple or Google account.
  • Mixpanel (analytics) — receives anonymous usage events only. Mixpanel does not receive your name, email, chip photos, or stack counts. Privacy policy: mixpanel.com/legal/privacy-policy

8. Your Rights (GDPR)

As a user in the EU, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data (see Section 9)
  • Export your data in a portable format
  • Object to or restrict processing of your data
  • Withdraw consent at any time (see Section 5)
  • Lodge a complaint with your national data protection authority
To exercise any of these rights, contact us at privacy@chipsstory.com. We will respond within 30 days.

9. Account & Data Deletion

You can delete your account and all associated personal data directly within the app:

In-app: Go to Settings → Account → Delete Account and confirm. Your account and all personal data will be permanently deleted within 30 days.

Alternatively, you can request deletion by emailing privacy@chipsstory.com. Chip stack photos and hand reel videos are deleted alongside your account. Anonymised, aggregated data that has already been incorporated into AI model training may be retained, as it is no longer personally identifiable.

10. Data Retention

Waitlist emails are kept until you ask us to remove them or we close the waitlist after launch. We retain your personal data for as long as your account is active. Upon account deletion, all personal data, chip stack photos and hand reel videos are permanently deleted within 30 days. Aggregated, anonymised data derived from your data (e.g., trained model weights) may be retained indefinitely as it cannot be traced back to you.

11. Data Sharing

We do not sell your personal data. We do not share your data with third parties except as described in Section 7 (service providers necessary to operate the app). We may disclose data if required by applicable law or a valid legal process. Any third party that receives your data is contractually bound to protect it to the same standard described in this policy.

12. Children's Privacy

Chips Story is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us at privacy@chipsstory.com and we will delete the data promptly.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via an in-app notification or email at least 14 days before changes take effect. Continued use of the app after the effective date constitutes acceptance of the updated policy. The date at the top of this page always reflects the most recent revision.

14. Contact & Complaints

If you have questions about this privacy policy, your data, or wish to exercise your rights:

Smaipa AI UG (haftungsbeschränkt)
Weilburger Straße 16
60326 Frankfurt am Main, Germany
Email: privacy@chipsstory.com

You also have the right to lodge a complaint with the competent data protection supervisory authority. In Germany, this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).