Privacy Policy

Last updated: [date]

DRAFT — to be reviewed by a lawyer before launch. Items in [brackets] must be filled in.

This policy explains how [legal entity name] ("we") handles personal data in One Host, in line with Singapore's Personal Data Protection Act 2012 (PDPA). Our Data Protection Officer can be reached at [DPO email].

1. What we collect

Account data: your email address, group name, and a securely hashed password.
Game records you enter: player names, buy-ins, cash-outs, insurance and adjustment records, remarks, dates, locations, and photos of cards or tables you choose to upload.
Payment data: handled by Stripe. We receive your subscription status and plan, not your card details.
Device data: if you turn on notifications, a push subscription identifier for your device; basic server logs (such as IP address) used for security and rate limiting.

2. Other people's data you enter

Hosts often enter their players' names. By doing so you confirm you have their consent, or another lawful basis, for us to store those names as part of your group's records.

3. How we use it

To run the service: sign-in, keeping your group's games, syncing them between your group's devices, and sending emails you ask for (verification, password reset, invites, results).
To read cards from photos you upload, which are sent to Anthropic's AI service for analysis.
To bill subscriptions, prevent abuse, and keep the service secure.

We do not sell personal data and we do not use your game records for advertising.

4. Who processes it for us

Render (application hosting and database) — [region].
Anthropic (card recognition from photos).
Stripe (payments).
[Email provider] (sending emails).

Some of these providers may process data outside Singapore; we use them under terms that protect it to a standard comparable to the PDPA.

5. Who can see your group's data

Only members of your group. Each group's games are kept separate and are not visible to other groups.

6. How long we keep it

Until you delete it. The group owner can delete the whole group — every game, photo, member and setting — from Account → Delete group; members can remove their own login from Account → Leave group. Deleted data is removed from the live database immediately and from backups within [backup retention period].

7. Your rights

You may ask to access or correct your personal data, or withdraw consent, by contacting [DPO email]. We will respond within 30 days.

8. Security

Passwords and PINs are stored hashed, connections are encrypted, and access to each group's data is checked on every request. No system is perfectly secure; if a breach affecting you occurs we will notify you and the PDPC where required.

9. Changes

We will post updates here and, for material changes, tell you in the app or by email.