MobileHH

Privacy policy

Last updated 11 October 2026

Your hands stay on your phone unless you export or share them, or report one to us, with every player's name and PPPoker ID replaced. Our server knows your account, your subscription, which phones you've paired, and any hands you report.

MobileHH is run by an individual sole trader based in Australia. Questions and requests about your data go to [email protected].

On your phone

  • Capture uses a local VPN on your phone. Only PPPoker's traffic is routed through it; all other traffic bypasses it.
  • The app reads PPPoker's game messages to build hand histories. Login messages, which carry your PPPoker account and password, are discarded on sight and never stored.
  • Hands are stored in the app's private storage and written to the export folder you choose. They're sent somewhere else only when you share them or report one. They're deleted when you use Settings › Delete all hands or uninstall the app.
  • So a hand you report can be checked, the app also keeps the PPPoker table messages each hand was built from (seats, stacks, cards, actions, and the screen names and PPPoker IDs of the players at the table) for 14 days, then deletes them. Login, chat and account messages are never kept. Delete all hands removes these too.
  • If the app crashes, the crash log stays on the phone unless you share it.

What the app sends us

The app talks to mobilehh.com for these things, and nothing else:

  • Pairing a phone with your account: a random ID the app creates when it's installed, and the phone's model name (for example "Pixel 11 Pro"), so you can tell your devices apart on your account page.
  • License checks, about once a day: that same device ID, the license the server issued to it, and how many hands the app has captured so far: a single number, nothing about the hands themselves.
  • Updates: the app asks for the latest version number. Downloading an update sends the device ID and license so the server can confirm the download is yours.
  • Hand reports, only when you tap Report a problem on a hand and confirm: that hand as the app decoded it, the PPPoker table messages behind it, your note if you write one, and the app version. Before it's sent, every player's screen name and PPPoker ID, yours included, is replaced with a stand-in such as "Player 2", so no one at the table can be identified from it.
  • Shared hands, only if you turn on "Help improve MobileHH" (offered during setup and in Settings; off unless you choose it): up to 10 hands a day, sent automatically, that looked wrong, contained a game type, action or card the app didn't recognise, or were the first of a game type on that version of the app. They're anonymised exactly like hand reports.
  • Diagnostics, only when you tap Send diagnostics (in Settings, or on the notification MobileHH shows when PPPoker can't reach its game server through it): the app's recent capture log, which lists the addresses, ports and server names PPPoker connected to, how much was sent (never what was sent) and why each connection ended, and the type of network your phone was on (Wi-Fi or mobile data) and when that changed. It also includes your phone's make, model and Android version, the app version, and anything you write in the optional note.

None of these include your PPPoker login, your contacts, your location, or anything about other apps. Apart from hands you report or choose to share, none include your hands.

What the website stores

  • Your account: your email address and your password, stored only as a salted hash. While you're logged in, your session also records your IP address and browser.
  • Your subscription: your Stripe customer and subscription IDs, plan, status, renewal and cancellation dates, and whether you've used a free trial. We also keep Stripe's fingerprint of your card, a code Stripe derives from it, not the card number, so the same card can't start repeated free trials. Your card details go to Stripe and never reach us.
  • Invites: your invite code, and for each friend who subscribed with it, who invited whom, when, and whether it earned a free month. On your account page you see each friend only as the first two letters of their email address and its domain, and they never see yours. We email you when a friend joins with your code and when your free month is credited.
  • Your devices: each paired phone's device ID and model name, and when it was paired, last checked in, or removed.
  • Hand counts: how many hands each of your paired phones captured each day, as numbers only. We use them to see how much MobileHH is used, and may show a total across all users on this site, never anyone's own count.
  • Downloads: when you downloaded the app, which version, and whether from the website or the app's own update check.
  • Setup emails: which of our setup-help emails we've sent you, and when. When you start using MobileHH, we may send up to three short emails at the points where people often get stuck: installing and pairing the app, capturing the first hands, and getting them into your tracker. Each goes once, based on whether you've downloaded the app, paired a phone and captured any hands. Reply "stop" and we won't send more.
  • A log of activations and license checks (which device, when, and the result), used for support and to spot abuse.
  • Hand reports, shared hands and diagnostics you've sent, linked to your account and device. Only the developer reads them, and only to find and fix decoding and capture problems.

The only cookie is the one that keeps you logged in. We count visits to the website with Umami, which we run ourselves: it records the page, the site you came from, your browser and device type, and your country, without cookies and without following you to other sites. There are no ads.

Your browser also remembers which link or site first brought you to MobileHH (for example a forum thread). It stays in your browser until you start a subscription, when it's sent to Stripe with the checkout so we can see which places bring customers. If you arrive by an invite link, it also remembers the code, so it can be applied when you subscribe.

Who else sees it

  • OVHcloud hosts the server, in Sydney, Australia. Everything this page lists as stored is stored there.
  • Resend sends account emails, such as password reset links, so it receives your email address.
  • Stripe handles payments and holds your billing details, including any code you subscribed with and any free-month credit on your account.
  • Cloudflare sits in front of mobilehh.com, so it handles every request to the site and the app's server calls, including your IP address.
  • The website loads its fonts from Google Fonts, which sees your IP address when a page loads.

These providers may process data outside Australia. We don't sell your data or share it with anyone else, unless the law requires us to.

How long we keep it, and deleting it

We keep your account, subscription, device, and license records while your account exists. Hand reports, shared hands and diagnostics are deleted after 90 days, or sooner if you ask. When you remove a phone on your account page, it can't download updates from then on, and it stops capturing at its next license check, within about a day. Its record stays, marked as removed.

The database is backed up every night. Backups are encrypted and kept for 30 days, so something deleted is gone from them within 30 days.

To see what we hold about you, correct it, or delete your account, email [email protected] from your account's email address. Deleting your account removes your account, devices, hand counts, downloads, setup emails sent, license records, invites, hand reports, shared hands, and diagnostics. Stripe keeps its own billing records for as long as the law requires.

Changes

If this policy changes, the new version goes on this page with a new date. If a change affects what the app sends, the app's release notes will say so.