Bankroll Tracker Privacy Policy

The sessions you log in Bankroll Tracker are stored on your device and are never uploaded to us. There is no account required to track your bankroll. Two things do involve the network, and both are described in full below: the free tier is supported by ads, and the optional Lounge community requires an account. Neither of them ever receives your session history.

Everything you record about a session is written to a local database using Apple’s SwiftData framework, and stays there:

• Buy-in and cash-out amounts, and the resulting profit or loss
• Game type, date, and time
• Optional venue text and free-text notes you type yourself
• Session photos you attach, held in the app’s private sandbox
• Your starting bankroll, display currency, and app preferences
• Your App Lock PIN, stored only as a hash in the iOS Keychain, and any intruder selfies captured after failed unlock attempts

None of this is transmitted to 18Yard. It is included in your encrypted iPhone backup if you have backups enabled, and it is deleted permanently when you delete the app.

The free tier of Bankroll Tracker displays banner and occasional full-screen ads supplied by Google AdMob. AdMob is a third party: it receives standard ad-request information such as your device type, coarse region, and — only if you allow it — your device advertising identifier (IDFA). iOS asks for that permission through the App Tracking Transparency prompt, and declining it does not remove any app functionality.

Your sessions, amounts, notes, photos, and statistics are never shared with AdMob or any other advertiser. Bankroll Tracker Pro removes all ads entirely — for Pro users the AdMob SDK is not initialised at all, so no ad request is ever made.

The Lounge is an opt-in community feature in Bankroll Tracker Pro. If you choose to use it, you create an account and the following is stored on our Supabase backend so the community can function:

• Your profile: username, display name, bio, avatar, favourite game, and whether the profile is public or private
• Follow relationships, and emoji reactions you send or receive
• Only the sessions you explicitly share, at the level of detail you pick — result only, profit only, or full details
• Your push notification device token, so we can alert you about follows, reactions, and shared sessions. It is removed when you sign out.

Sign-in is handled by Supabase Auth, using either Sign In with Apple (which gives us an Apple user identifier and an optional, possibly relayed email) or an email and password. Deleting your Lounge account from inside the app removes your profile, shared sessions, follows, reactions, and device tokens. If you never open the Lounge, none of this data is ever created.

Bankroll TrackerPro is sold through Apple’s In-App Purchase system and managed with RevenueCat. Apple processes the payment and we never see or store your card details. RevenueCat receives the purchase transaction, a device identifier, and your entitlement status so the app knows whether Pro is active. Monthly and annual plans renew automatically unless cancelled at least 24 hours before the period ends; the lifetime plan is a one-time purchase. Refunds are handled by Apple under the standard App Store policy.

• Camera — only if you enable App Lock with the intruder selfie option, which photographs whoever fails the PIN. Those photos stay on your device.
• Face ID / Touch ID— only if you turn on biometric unlock. Handled entirely by Apple’s LocalAuthentication framework; we never receive biometric data.
• Photo library — only when you attach a photo to a session or set a Lounge avatar.
• Push notifications — for Lounge activity. You can decline, or switch off individual categories in settings.
• Tracking (ATT) — for ad personalisation in the free tier. Declining changes nothing else about the app.

• Google AdMob — ad requests in the free tier. Never receives session data.
• Supabase — Lounge accounts, profiles, shared sessions, avatars, and device tokens. Only if you use the Lounge.
• RevenueCat — purchase and entitlement status.
• Apple — payments, Sign In with Apple, and push delivery via APNs.

All network traffic uses HTTPS/TLS. Your PIN is stored as a hash in the hardware-encrypted iOS Keychain, and Lounge data is protected with Postgres row-level security so one account cannot read another’s private data. Because Supabase operates internationally, Lounge data may be processed outside your country. Local session data never travels at all.

bankrolltracker.app uses Vercel Web Analytics, which counts page views without cookies and without building a cross-site profile of you. It has no connection whatsoever to the session data inside the app, and the site sets no advertising or tracking cookies.

Bankroll Tracker is rated 17+ on the App Store for simulated gambling and is not directed at children. We do not knowingly collect information from anyone under that age.

You can edit or delete any individual session inside the app, export your full history to CSV or PDF with Pro, delete your Lounge account from within the app, and erase everything on-device permanently by deleting the app. For local data there is no server-side copy for us to return or delete on your behalf, because none was ever made.

Bankroll Tracker is a record-keeping tool. It does not facilitate betting, does not accept wagers, and offers no gambling of any kind; the strategy guides are educational, not advice. If tracking your results reveals a pattern that concerns you, please contact a support service in your country — such as Gambling Help Online in Australia, or the National Council on Problem Gambling in the United States.

If this policy changes we will update the date at the top of this page. Questions about privacy, or a request about your data, can go to domenic@18yard.dev — Bankroll Tracker is built by 18Yard, an independent iOS studio, so support goes straight to the people who write the app.