Privacy policy.
This policy explains what Potio collects, why we collect it, how it is stored, and the rights you have over your data.
Last updated: 23 July 2026
1. Who we are
Potio (“Potio”, “we”, “us”) provides a platform for managing private poker clubs and home games. This policy applies to potio.gg, potio.net, and any subdomains, apps, or services that link to it (the “Service”). If you have questions, email privacy@potio.gg.
2. Information we collect
We only collect what we need to run the Service. That falls into a few categories:
Account information
Your display name, username, email address, password (stored as a salted hash), profile icon, and optional bio. If you sign in with Google, we receive your name, email, and profile picture from Google.
Club and game data
The clubs you create or join, memberships and roles, games you record (buy-ins, cash-outs, rebuys, adjustments), notes, invitations, RSVPs, and settlement statuses. This information is visible to other members of the same club, in line with the permissions of their role.
Communications
Notifications you send or receive through the Service, and any messages you send us for support or feedback.
Technical information
Basic device and browser information, IP address, and log data needed to keep the Service secure and available. We use privacy-respecting analytics to understand aggregate usage. We do not build advertising profiles.
3. How we use your information
- To provide, maintain, and improve the Service.
- To authenticate you, secure your account, and prevent abuse.
- To display your profile, clubs, games, and balances to the members you have chosen to share them with.
- To send you in-app notifications about activity that involves you.
- To respond to support requests and legal obligations.
4. Legal bases (UK / EEA users)
We rely on the following legal bases under UK GDPR and EU GDPR: performance of a contract (to run your account and clubs), our legitimate interests (to keep the Service secure and improve it), your consent (where required, such as for optional communications), and compliance with legal obligations.
5. Sharing your information
We do not sell your personal data. We share it only in the following situations:
- With other members of your clubs, based on their role and the visibility settings you choose.
- With trusted service providers that host our infrastructure, database, email delivery, and analytics. These providers process data on our behalf under strict contractual terms.
- When required by law, or to protect the rights, safety, or property of Potio, our users, or the public.
- In a corporate transaction, such as a merger or acquisition, with continued protection of your data.
6. Data retention
We keep your information for as long as your account is active. If you delete your account, we remove or anonymise your personal information within 30 days, except where we are required to keep it for legal, accounting, or security reasons. Game records inside clubs you left may remain visible to other members so their own history stays intact, but they are no longer linked to your account.
7. Security
We use industry-standard measures to protect your data, including encryption in transit, hashed passwords, row-level access controls in our database, and least-privilege access for staff. No system is perfectly secure. If you suspect an issue with your account, contact us immediately.
8. Your rights
Depending on where you live, you may have the right to:
- Access, correct, or download your personal data.
- Delete your account and associated personal data.
- Object to or restrict certain processing.
- Withdraw consent at any time.
- Lodge a complaint with your local data protection authority.
You can exercise most of these rights directly from your account settings. For anything else, email privacy@potio.gg.
9. Children
Potio is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.
10. International transfers
Our infrastructure operates in multiple regions. Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses.
11. Real-money activity
Potio is a tracking and coordination tool. Any real-money settlements happen directly between players outside the Service. Potio does not process, hold, or transfer funds, and does not verify the accuracy of amounts entered by members.
12. Changes to this policy
If we make material changes, we will notify you inside the Service and update the “Last updated” date above. Continued use of Potio after changes take effect means you accept the updated policy.
13. Contact
Questions, requests, or complaints about privacy: privacy@potio.gg.