00:00Privacy — TOMATO

TOMATO Privacy Policy

TOMATO is built local-first: your training data lives on your device, and the app does not ask for your name, email or password.

Last updated: 2026-07-22 · Effective: 2026-07-22

1. Operator & contact

TOMATO is operated by WHaM Pictures (representative: Jaeheon Oh, Republic of Korea). Privacy inquiries: support@whathappensatmidnight.xyz.

2. Data we collect

TOMATO does not collect your name, email address, phone number or contacts. The app handles the following data:

  • On-device data (stays on your device): training progress, quiz results, hand history, simulation records and app settings, stored in local app storage.
  • Anonymous identifier: on first launch the app creates an anonymous, device-scoped account ID (no email, no password). It is used to rate-limit server requests and to link in-app purchases to your device.
  • AI analysis requests: when you request an AI hand analysis, the hand data you submit (cards, positions, actions) is sent to our server to generate the analysis.
  • Purchase information: if you buy paid content, the purchase is processed by Apple. Our purchase-management provider (RevenueCat) receives the anonymous ID and receipt data to validate and restore purchases. We never see your payment card details.

3. What we do not do

  • No advertising SDKs and no sale of personal data.
  • No third-party behavioral analytics or tracking across apps.
  • No push notifications requiring a push token.
  • No real-money gambling; virtual chips have no cash value.

4. Service providers

  • Supabase — server infrastructure for the anonymous session and AI analysis proxy.
  • RevenueCat — in-app purchase validation and restore.
  • Apple — App Store payment processing under Apple's own terms and privacy policy.

5. Retention & deletion

On-device data is deleted when you delete the app. Server-side data tied to the anonymous ID (session record, AI analysis requests, purchase records) is retained while the anonymous account exists and deleted upon a deletion request, except where purchase records must be kept to meet legal bookkeeping obligations.

To request deletion of server-side data, email support@whathappensatmidnight.xyz — see the account deletion guide at https://whathappensatmidnight.xyz/account-deletion/tomato.

6. Your rights

You may request access to, correction of, or deletion of data associated with your anonymous ID, and you may withdraw consent to processing at any time, by contacting the email above. Because the ID is anonymous, we may ask you to send the request from within the app or provide the ID shown in the app so we can locate your data.

7. Children

TOMATO is a poker strategy education app and is not directed at children. The app follows the age rating assigned on the App Store, and we do not knowingly collect personal data from children under 14.

8. Changes to this policy

If this policy changes, the updated version will be posted at this address with a new revision date. Material changes will also be announced in the app.