Privacy policy
Who handles the data
The korapoker.com site and the KoraPoker system are operated by MW Tecnologia (Brazilian company number, CNPJ, 41.097.044/0001-69), based in Palotina, PR, Brazil. For questions about your data, message us on WhatsApp at +55 44 99826‑6416.
What the site stores
The site and app.korapoker.com use the Google Analytics cookie to count visits and see where they come from, such as a Google search or a link on another site. Google receives the page opened, the device, the browser and the approximate region. At app.korapoker.com it also receives the internal account code and what was done, such as creating a house or subscribing to a plan, without names, emails or anything the house registers. Google's advertising features are turned off.
When you contact us on WhatsApp, we receive your number and what you wrote.
What we use it for
To reply to your message and, if you create an account, to operate the system you use.
What the app stores
In the KoraPoker app for iPhone and Android, and at app.korapoker.com, we store the email, name, profile photo, language and theme of each person with an account.
Each house keeps in the system the records of its players and staff (name, nickname, phone, email, ID document, date of birth, address, photo and notes) and the movement of the night: sales, payments and prizes. This data belongs to the house, which decides what to register. The CPF (Brazilian tax ID) is kept only as a verification code and its last digits.
Staff sign-ins are logged with the date, the IP address and the device. The app shows no ads and does not track anyone across apps.
To find where the app gets in the way, we record how it is used: the screens opened, taps, errors, response times and a recording of the screen, including the names and amounts shown on it. The recording leaves out anything typed, phone numbers, emails and ID documents. Sign-in, the two-step code, the release password and bank accounts are kept out of it.
Who runs each part
- Supabase: the database and sign-in, in São Paulo.
- Vercel: the site, the app at app.korapoker.com and the API.
- Resend: the sign-in email.
- RevenueCat: subscriptions, on the web and in the stores.
- Stripe: the card, on the web.
- PostHog: usage analytics and the app screen recording, in the United States.
- Google Analytics: visit counts for the site and app.korapoker.com.
- Apple and Google: the store purchase and sign-in with Apple or Google.
How long we keep it
The data stays as long as the account or the house exists. When you delete the account, the email, the sign-in, the profile and the photo are removed right away. In other people's houses, your staff record is switched off, with the name replaced by "Conta excluída" (Deleted account) and no email. The phone, address, date of birth and ID document are the house's records and stay with it. Access and audit logs also stay with the house. The database has a daily backup, kept for 7 days and then deleted.
Who we share it with
With the site host (Vercel), with Google Analytics, which counts visits, and with WhatsApp, when you choose to contact us there.
The data is not sold or used for advertising. The services that receive it are listed under "Who runs each part", above.
The database is in São Paulo. RevenueCat, Stripe, Resend, PostHog and Google process data outside Brazil, and the transfer follows art. 33 of the LGPD.
Your rights
Under Brazil's General Data Protection Law (LGPD), you can ask to see, correct or delete your data at any time, on WhatsApp at +55 44 99826‑6416.
If you have an account, you can correct your name and photo under My account and delete the account in the app itself. If a house registered you and you want to see or correct that record, ask the house, which maintains it. If you do not know which house, ask through the contact page.
How to delete your account and what goes with it: Delete your KoraPoker account
Changes to this policy
Updated on October 20, 2026. Changes are posted on this page.