← Back to home

Croupier Academy — Privacy Policy

Last updated: 11 July 2026

Contents
  1. 1. Device-registry data we collect
  2. 2. Why we process this data
  3. 3. What we do NOT collect for this purpose
  4. 4. How the data is linked and who processes it
  5. 5. Retention and deletion
  6. 6. Lawful bases (GDPR)
  7. 7. Your rights and how to contact us

This policy explains how Croupier Academy ("we") processes personal data, with a focus on the device registry used to authorize your app installations. It complements the rest of our privacy information and does not replace your statutory rights.

1. Device-registry data we collect

To manage authorized installations of your account, we collect and store the following limited data per installation:

  • Firebase account identifier (UID) — the stable identifier of your account;
  • a random per-installation identifier (UUID) — generated once on the device, not derived from your hardware, email, or nickname;
  • platform — iOS or Android;
  • a generic device label — e.g. "iOS device" / "Android device";
  • app version;
  • device-record creation time;
  • last successful authorization / use time;
  • authorization status — active or removed.

2. Why we process this data

  • to authenticate and protect your account;
  • to enforce the licence limit of 3 authorized installations;
  • to prevent and investigate account sharing or other misuse;
  • to let you replace an authorized installation with another;
  • to provide technical support;
  • to secure purchases and Pro access.

3. What we do NOT collect for this purpose

The device registry does not intentionally collect, and is not designed to collect:

  • IMEI;
  • hardware serial number;
  • MAC address;
  • advertising identifier (IDFA / GAID);
  • your contacts;
  • precise location;
  • your Apple or Google password.

4. How the data is linked and who processes it

  • Device records are linked to your Firebase account (your UID).
  • Firebase / Google Cloud hosts and processes the device registry on our behalf.
  • RevenueCat processes purchase-entitlement information (whether your account has Pro access), identified only by your account identifier.
  • Apple (on iOS) or Google (on Android) provides the platform authentication used to sign in.

5. Retention and deletion

Device records are kept while your account exists and for as long as needed for the purposes above. When you delete your account, the device registry for your account (the account record and its installation records) is deleted together with your other account data. Our providers (for example Firebase / Google Cloud) may retain limited operational backups or logs for a period governed by their own policies; we do not set or represent specific retention periods for those provider systems.

6. Lawful bases (GDPR)

Where the GDPR applies, we rely on:

  • Performance of a contract (Art. 6(1)(b)) — to provide the account, authenticate your installations, enforce the licence limit, and secure purchases and Pro access;
  • Legitimate interests (Art. 6(1)(f)) — to prevent and investigate account sharing and misuse and to keep the service secure, balanced against your rights.

We do not rely on consent for this device-registry processing, and the App does not ask you to consent to it, because the processing is necessary to provide and protect the service.

7. Your rights and how to contact us

Subject to applicable law, you may request access to, correction of, deletion of, or portability of your personal data, and you may object to or request restriction of certain processing. You can exercise these rights, or ask questions about this policy, through our support page. You also have the right to lodge a complaint with your local data-protection authority.

Related pages: Terms of Use · Support