Privacy Policy

A session record holds the facts of your play: the machine you identified, credits and bet amounts as read from the screen, timestamps, cash-in and cash-out amounts, quick notes you confirm, and photos you take of tickets, meters, and payouts. Records are created through your own actions — the camera, the confirmations you tap, and the clock. Typed entry exists only for backlogging an offline trip from photos you have already taken; the app does not ask you to key in figures while you play.

When you move between machines during a session, the record keeps a machine-by-machine history: each machine, the time you arrived, the balance carried over, any new money added, and what you left with. The casino name read from a photo is compared with the open session only to ask whether you want to close it and start a new one. That comparison happens when you take the photo; your location is not tracked.

Session records, expense and filing entries, trip details, and photos are stored in private cloud infrastructure — a managed database and private file storage, not public pages. Access rules at the database level mean your records are readable and writable only through your signed-in account. Other players cannot see them, and no casino, manufacturer, or third party receives them from us.

Your account is protected by sign-in credentials and, once you enroll, multi-factor authentication. Session sealing is tamper-evident: once a session is closed, its entries are hash-chained and append-only — corrections are added as new, dated entries rather than quietly editing the past. Security settings, sign-in events, and access events are logged, and you can review that history in your security center.

Evidence photos are uploaded to a private storage area owned by your account, and a fingerprint (hash) of each file is recorded with your session so an accountant can confirm the image has not changed. Photos are not public and are not used for advertising. You control how long originals are kept through your retention settings.

A photo fingerprint is a cryptographic file hash, not a biometric identifier. New session photos may also have capture-order links and append-only account anchors. A check can flag missing links, reordered records, or changed originals; it cannot establish whether the photographed facts are true. If an original has expired under your retention settings, its bytes cannot be checked and the review reports that limitation.

When automatic capture runs, a size-limited copy of a photo is processed by an AI reading service to extract what the image shows — ticket values, meter readings, game titles, timestamps. The result fills your record; the image is not used to advertise to you, and we do not sell it. Accuracy is not guaranteed, which is why recognized values are shown for your confirmation before they are sealed into the record.

Tax form photos (W-2G, 1099) can show identifying numbers. The reader is instructed not to return Social Security or taxpayer numbers, and the form photo is not stored by the app — only the figures you confirm and save. The optional accountant cover note sends your year's totals (not photos, names of other people, or identifying numbers) to the same AI service to phrase the note; if the draft contains any figure not in your record it is discarded and a standard note is used instead.

If you back up records locally for offline recovery, the archive is encrypted on your device before it is stored, using a passphrase that never leaves your device. We cannot read or recover an encrypted backup for you — if the passphrase is lost, the backup cannot be opened.

You control how long photo originals are retained. In your security center you choose a retention window for stored originals — 36, 60, 84, or 120 months (3 to 10 years); 84 months (7 years) is the default. When a photo original ages past the window you chose, the picture itself is removed. The session entry, its fingerprint hash, and the sealed chain remain intact, so the record still verifies and still exports — it simply no longer carries the image.

Session entries, the tax ledger, and sealed history are never silently deleted. Sealed sessions are append-only: corrections are added as new, dated entries rather than editing the past, so your history remains defensible for as long as you keep the account. If you want a complete copy first, you can export your records — the annual tax package and the evidence package in the document gallery cover sessions, expenses, and photos.

To delete your account and its records entirely, request deletion through the account support channel. Deletion is carried out subject to legal, billing, security, backup, and dispute requirements, and access or acceptance records may be retained to document authorization. Because a sealed ledger is built to survive, deletion is deliberate and complete when it happens — not something that can be undone quietly.

Your records are never visible to an accounting firm just because the firm uses the platform. Access begins only with an invitation or share authorization you create. Those links expire, can be revoked at any time, and grant read-only access within the scope you set. When a firm opens a report or signs off, that event is logged.

Your session and expense records are used to build the exports, summaries, and filing reports you request — including the documents you hand to a tax preparer. We do not file returns, do not submit anything to tax software companies or the IRS on your behalf, and do not share your ledger with them. Threshold logic (such as W-2G amounts) is informational; your preparer makes the filing decision.

If trip tracking is on, location is used to group your play by venue and property. Location details remain private to your account and the firms you authorize. You can turn tracking off at any time.

• We do not sell your personal data or your play history.
• We do not share your records with casinos, machine manufacturers, or data brokers.
• We do not use your sessions or photos to advertise to you.
• We do not publish, rank, or expose anyone's results.

Product analytics are limited to a short list of events, including aggregate views and completions for the five recordkeeping steps. They never include your identity, device fingerprint, casino or machine details, ledger contents, photos, or location history.

Depending on use, this includes account and subscription details; session, bankroll, expense, trip, loyalty, and tax-document records; images and file fingerprints; device, time, and optional location details; firm identity and jurisdiction details; invitations, comments, review decisions, security settings, and access history.

Information is used to provide requested records and reports, maintain integrity and security controls, operate subscriptions and referrals, support client-authorized firm access, respond to support requests, and meet legal obligations. Analytics are limited to listed product events and are not an authorization to expose player ledgers.

Player records are not visible to a firm merely because the firm has an account. Access starts through a client invitation or share authorization and remains subject to its role, scope, expiration, and revocation controls. Service providers may process information where necessary to operate the platform under contractual and security restrictions.

Users can configure supported evidence-retention periods and request account deletion, subject to legal, billing, security, backup, dispute, and immutable-history requirements. Sealed financial history uses reversals rather than silent alteration; access and acceptance records may be retained to document authorization.

The service uses access controls, private storage, audit histories, and optional encryption controls. No system is risk-free. Firms remain responsible for their own written security program, staff access, device security, vendor review, incident response, and notices required by law.

Privacy, breach-notification, tax-information, and professional-confidentiality duties vary by location and role. Submit access, correction, deletion, or consent questions through the account support channel. Identity and authority may be verified before a request is completed.

Record-keeping should serve discipline, not escalation. If gambling has stopped being a choice, confidential help is available around the clock at 1-800-GAMBLER.