Privacy Policy

Last updated October 8, 2026

Who we are

Kohunter is operated by Vincent Morin, independent worker registered in Portugal (NIF 309129800), Rua Giovanni Antinori 1, 1300-670 Lisboa, Portugal, who is the controller of your personal data. For anything in this policy, contact contact@kohunter.com.

What we collect

Using Kohunter requires an account. We collect:

• Account data — your email address and password (the password itself is never visible to us; Supabase, our authentication provider, stores it hashed).
• Tournament screenshots you upload — precise mode and the Mystery bounty helper read a payout table and bounty panel from a screenshot you provide (file upload or a pasted image link). The image is sent to Google's Gemini API to extract the numbers, and stored afterward so we can review extraction accuracy and let a second person reuse a recent screenshot of the same live tournament instead of paying for another read. A screenshot can show other players' screen names. On a remaining-bounties list we read each row's screen name, only to match the same player across two screenshots so their bounty updates correctly.
• Calculation inputs and results — the room, format, buy-in, field size and similar numbers you enter or that get read from a screenshot, along with the result shown.
• Training history — in the trainer, the spots you were shown, your answers and how long you took, and your trainer settings (the rooms you picked, your placement test).
• Feedback you submit — the "Something wrong?" button sends your comment plus a snapshot of what the calculator was showing at the time. Answers to an in-app survey (such as the pricing question) are kept the same way, and if you joined through a group invite link, we keep the email you redeemed it with.
• Billing data — handled directly by Stripe; we only keep a reference (Stripe's customer/subscription id) to know your plan is active. We never see or store your card number.
• Technical data — sign-in timestamps and a per-session identifier used to enforce one active login per account, and standard web server logs (IP address, browser) kept briefly by our hosting providers for operating and securing the service.

Why we collect it

Every use above exists to run the service you signed up for:

• Providing the calculation itself (contract performance).
• Reading a screenshot you chose to upload, so you don't have to type the numbers by hand.
• Billing you for the subscription via Stripe.
• Security and abuse prevention — rate-limiting screenshot reads, enforcing one active session per account, investigating reported issues (legitimate interest).
• Improving extraction accuracy over time by reviewing how screenshots were read, and reading your feedback and survey answers to improve the product (legitimate interest).
• Letting another user reuse a recent read of the same live tournament, which keeps reads fast and cheap for everyone (legitimate interest). What's shared is the tournament data read from the screenshots (room, name, buy-in, field, payouts, bounties) — never who uploaded them.
• Running the trainer: scheduling your next reviews from your past answers (contract performance). Its practice tables are drawn from tournament numbers read from screenshots, including ones users uploaded (field, payouts, bounties, stacks) — numbers only: no image is shown, and never a screen name or who uploaded it (legitimate interest).

We do not sell your data, and we do not use it for advertising.

Who else sees it

We use a small number of providers to run Kohunter, each processing only what they need to:

• Supabase — our database, authentication and file storage provider.
• Google (Gemini API) — receives the screenshot you upload, purely to read the numbers off it. We use the paid Gemini API, under which Google does not use your screenshots to improve its products; Google's own terms govern how they handle that request.
• Stripe — processes your subscription payment. Stripe's own privacy policy governs your payment data.
• OVH — hosts the server Kohunter runs on, standard hosting logs only.
• Cloudflare — DNS and network routing for kohunter.com, and forwarding for our contact inbox.
• Brevo — sends account emails (confirming your address, password resets).

Some of these providers may process data outside the European Economic Area (notably Google and Stripe, both US-based). Where that happens, it relies on the safeguards those providers publish (such as Standard Contractual Clauses) — see their own privacy policies for details.

We don't share your data with poker rooms. We have no data agreement with any of them, and we don't hand over who uses Kohunter or which tournaments they uploaded. We disclose user data only when the law requires it (for example a court order), and we'll tell you about it unless the law forbids us to.

How long we keep it

• Account data (email, sign-in data, Stripe reference, survey answers, invite-link email) and training history — for as long as your account exists; your training history is erased with it.
• Screenshots, extraction results, calculation history and feedback — for as long as they remain useful to improve Kohunter's screenshot reading and calculations, which is how the tool gets more accurate over time.
• Other players' screen names read from a screenshot — removed from the stored results automatically after 7 days; they're only needed while a tournament is being played.
• Billing records — as long as tax law requires (Stripe keeps the invoices themselves).

When your account is deleted, your email and account data are erased, and your screenshots, extraction results, calculation history and feedback are detached from it — kept only as anonymous data, with nothing linking them back to you. If you'd also like your screenshots themselves deleted (they can show your own screen name), just say so in your request. Account deletion isn't self-service yet: email us and we'll do it within 30 days.

Your rights

Under the GDPR, you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to some of our processing, or receive it in a portable format. Email contact@kohunter.com and we'll act on it. You can also lodge a complaint with Portugal's data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), cnpd.pt.

Cookies & local storage

We use only the cookies needed to keep you signed in (set by Supabase Auth) — no advertising or third-party tracking cookies. The calculator also saves a few display preferences in your browser's local storage (such as showing results in big blinds, and stack sizes you entered recently) so they're still there next time; they never leave your device.

Security

Data is encrypted in transit (HTTPS). Access to the database and file storage is restricted to the backend service; uploaded screenshots are kept in a private storage bucket, never public. We run regular reviews of the app's own security as it develops.

Who can use Kohunter

Kohunter is meant for adults (18 and over) who are legally permitted to play the poker formats it covers in their jurisdiction. We don't knowingly collect data from children.

Changes to this policy

We'll update this page if what we collect or why changes, and update the date at the top. For material changes, we'll also email active accounts.