PokerLight Privacy Policy

1. Information We Collect and Use

Local timing, connections, and TV synchronization

Tournament settings, blind levels, timer state, seat settings, language, theme, voice preferences, device names and identifiers, local IP addresses, ports, and pairing information are primarily stored on your phone, TV, or connected hardware. They support timing, connections, control, and restoring your working state.

When you choose to synchronize, the relevant tournament data, brand text, images, audio, video, or resource packs are sent to your selected TV or hardware for display and playback. Registering or signing in alone does not automatically upload local tournament plans or all your assets to the account server. Cloud speech generation is described separately below.

Registration, sign-in, and profiles

• Phone and verification information: phone registration, sign-in, and password recovery involve your phone number, password, verification code, and verification requests and results. These identify you, create your account, or reset your password. Servers store a password verification value rather than a plain-text account password. The app does not persist the password you enter.
• Nickname and avatar: saving your profile uploads your nickname and selected avatar to our server for display in the app, account website, and associated TVs. The avatar is cropped, compressed, and stripped of EXIF and other image metadata before upload. Selecting an image does not upload your entire photo library.
• WeChat authorization: when available and selected by you, WeChat sign-in or account linking provides identifiers (OpenID and, when supplied, UnionID), nickname, and avatar URL. These identify your account, link a sign-in method, and display your profile. We do not obtain your WeChat password or chat history.
• Sign-in state: we issue a sign-in credential and store its verification value on the server. The app uses system secure storage for that credential and cached account information, allowing you to stay signed in and view recently retrieved information.

Avatars are profile images, not private file storage: anyone holding an avatar’s image URL can access it. Do not use identity documents or other sensitive material as your avatar. Replacing an avatar stops the old URL from serving it, although previously loaded copies may remain cached for a time.

TV binding and plan authorization

Online TV services submit an app-generated installation identifier, device name, app version, and authorization-check requests. We store device codes, account associations, plan type, TV allowance, trial status, validity, and authorization state to bind devices, verify benefits, and manage devices. Associated TVs can display necessary profile and plan information. Authorize only devices you are entitled to manage.

Orders and payments

Creating or checking a TV plan order involves its account association, order number, plan name, amount, creation and payment times, status, payment channel, transaction reference, and refund records. These support payment verification, activation, support, and reconciliation. Necessary payer identifiers returned by the payment provider may also be used to check a transaction.

Payment occurs only when you actively confirm it through an available purchase channel. The payment provider handles payment authorization and bank-card verification. PokerLight does not obtain your bank-card PIN or WeChat Pay password. Available purchase options vary by platform; this policy does not mean payments are available on every platform.

Speech generation and announcements

Generating cloud voice packs or previewing cloud speech sends the text to be spoken, language, selected voice, and settings such as speech rate to Microsoft’s online speech service. Generated audio is received and saved locally or synchronized to selected devices. The service also receives connection information such as your IP address. Cloud speech is not entirely offline. Avoid including unnecessary personal or sensitive information in announcement text.

System speech sends announcement text to the speech engine selected on your device. Whether that engine connects online depends on its settings and service rules. Playing an existing audio file does not require resubmitting its text to the cloud speech service.

Security, updates, and support

When you access account APIs or online pages, check for updates, or download resources, the relevant servers process request paths, IP addresses, access times, and necessary version information. Sign-in and SMS verification also record hashed network identifiers, request counts, times, and results to prevent abuse and troubleshoot failures. Necessary account, device, and order actions are retained in security audit records.

When you contact support, we process the contact details, issue descriptions, screenshots, logs, or order information you provide. Include only what is needed; do not send passwords, complete sign-in credentials, or SMS verification codes.

2. System Permissions

• Network, Wi-Fi, and local network: for device discovery and connections, local synchronization, account access, online speech, downloads, and update checks.
• Photos, media, or files: for selection thumbnails and reading the avatar, images, audio, video, or resource packs you choose. Older Android versions may use storage-read permission. Saving exported images may require permission to add to your photo library.
• Camera: requested when you actively use supported photo or scanning features, depending on your version and system. The app does not take pictures without your action.
• Location while in use: some systems require it to identify the current Wi-Fi network or discover local devices. It is not used to continuously record your location history.

The actual system prompts determine which permissions are requested. You may refuse or revoke them in settings. This may affect dependent features but should not affect unrelated features. The app does not need access to your contacts or SMS inbox; you enter verification codes yourself or use system-assisted input.

3. Storage, Protection, and Disclosure

Local settings and assets remain on your devices and in export locations you choose. Account, avatar, binding, plan, order, and security records are stored on account-service servers and necessary backups. Sign-in credentials use system secure storage; account APIs use HTTPS; server-side passwords and sessions use verification values. Authentication and access controls restrict data access.

Retention depends on purpose: you manage local data; account profiles support continuing account services until no longer needed or a deletion request is lawfully handled; codes and sign-in credentials expire; order, payment, refund, and necessary audit records are retained for service delivery, disputes, or legal obligations. Data should be deleted or anonymized when its applicable retention period ends or purpose is fulfilled. Records still required by law are processed only as necessary. Backup copies follow backup-clearing arrangements.

Deleting a closed order in the app hides it from that app’s order list. It does not erase the original server-side order, payment, refund, or audit records. Signing out does not delete an account. Offline sign-out clears local credentials first; a server session that cannot immediately be revoked remains subject to its existing expiry.

We do not sell personal information. Necessary third-party processing is described below. Devices you synchronize to and recipients you choose to share with also receive the relevant content. Disclosure to other personal-information handlers, public disclosure, or cross-border provision requires the notices, separate consent, and other steps required by applicable law. Accepting this policy as a whole does not replace those requirements.

Local network transfers differ from internet services; use trusted networks for device synchronization. Third-party cloud speech and system speech engines may use processing locations in different countries or regions and should not be assumed to operate entirely on-device or within China. If a personal-information security incident occurs, we will take necessary remedial measures and provide legally required notifications.

4. Third-Party SDKs and Services

WeChat Open SDK

Provider: 深圳市腾讯计算机系统有限公司 (Tencent). Used for available WeChat sign-in, account linking, and payment launch features. It handles the selected authorization or payment request and may check whether WeChat is installed and process necessary device and network information. See the WeChat Open SDK Personal Information Processing Rules.

WeChat Pay

Payment provider: 财付通支付科技有限公司 (Tenpay). For WeChat Pay transactions, we submit necessary order details, descriptions, and amounts, and receive payment or refund results. Its handling of payment identity and financial information is described in the Tenpay Privacy Policy.

Alibaba Cloud SMS, accessed by our server

Used to send registration or password-recovery codes you request. Our server submits the phone number, code, SMS template, and request identifier to Alibaba Cloud SMS. This does not require the app to read your SMS inbox. See Alibaba Cloud SMS and the Alibaba Cloud Privacy Policy.

Microsoft online speech and system speech engines

Cloud speech uses edge_tts to access Microsoft’s online speech service, as described in Section 1. See the Microsoft Privacy Statement for processing, storage locations, and rights requests. System announcements use flutter_tts to call your selected device engine, subject to that provider’s rules. You can avoid cloud speech or select an engine that supports offline operation.

System features and external pages

Flutter and plugins for image selection, media processing, and local storage support the corresponding device features. Sharing passes your chosen content to the system share sheet and the app you select. Agreement links open in a system browser view; websites and browsers handle network requests under their own rules. We do not use these components for cross-app advertising profiles.

When providers or processing practices change, we will update these notices and seek additional consent where required. Service availability depends on your version and the features actually enabled.

5. Protection of Minors

PokerLight is not directed at children and does not aim to collect their information. Minors should review this policy with a guardian. If a guardian believes we have handled a child’s data without appropriate consent, contact us for investigation and lawful deletion. Processing information about children under fourteen requires guardian consent and appropriate safeguards under applicable law.

6. Your Choices and Rights

• Access and correction: view information under your account, profile, linked TVs, and order history. Use available controls to edit your nickname and avatar; contact support for corrections you cannot make yourself.
• Permissions and consent: disable system permissions, stop using optional services, or email us to withdraw consent. Withdrawal does not affect prior lawful processing; stopping necessary processing may prevent the related feature from working.
• Copies, deletion, and account closure: email us to request a copy of your personal information, deletion, or account closure. We will reasonably verify identity, explain the handling of pending orders, active benefits, and legally retained records, and process your request according to law.
• Local data: remove custom assets, exported files, or app data. Phones, TVs, hardware, and external backups may hold separate copies that you must manage separately. Uninstalling the phone app does not automatically remove TV assets or your server-side account.

We will respond within a reasonable time. If we cannot fulfill a request, we will explain why and identify available remedies. You may also complain to a competent authority. We will not ask you to email a password, SMS code, or complete sign-in credential to verify your identity.

7. Policy Updates

We may update this policy as the product or law changes and will show the update date here. Changes to processing purposes, methods, information categories, or important rights will be brought to your attention appropriately, with renewed consent where required.

8. Contact Us

Personal information handler: 北京风在吹文化娱乐有限公司（风在吹文化）

For privacy questions, account closure, or personal-information rights requests, email marsplate@163.com.

For service terms, see the PokerLight User Agreement.