Privacy policy

Updated 17 September 2026

AnteVeil is operated by Shenzhen Zhishi Intelligent Co., Ltd. (深圳市知世智能有限公司). Contact us at hanshuangnana@gmail.com about this policy or your data.

Your account and saved game

We store a server-issued account identifier, authentication records, your poker progress, hand history, character observations and memories, private notes, saved hands, and preferences. The server keeps the authoritative game state; your device holds a replaceable display cache. A guest account also has a server save. Losing an unbound guest credential may make that save inaccessible.

Sign in with Apple gives us an app-specific identity and authorization tokens. The app does not request your name or email from Apple. Authorization credentials are protected separately from gameplay records and are not placed in ordinary diagnostic logs.

Device eligibility and purchases

Apple DeviceCheck helps verify a device’s one-time welcome eligibility. This marker does not identify an old guest save or contain a remaining-hand balance. Apple processes payments; we do not receive your payment-card details. We verify subscription transactions, their account association, and entitlement status to maintain your hand allowance.

Character decisions

We use DeepSeek to help generate character poker decisions. Current table dialogue and observation wording use predefined text rather than open-ended AI chat. Requests contain the acting character’s permitted game information and relevant observed play. Private note text, other players’ hidden cards, and the future deck are not sent for these decisions. Service providers process the limited information needed to provide their services under their applicable terms.

Usage and diagnostics

We record limited app-opening, introduction, page-opening, observation-viewing, membership-flow, and feedback-entry events to understand use. These events may include the app version, a per-visit identifier, entry point, character identifier, and observation-change identifier. They are linked to your server account and do not include private note text, email content, or advertising identifiers. Unsent events are held in a bounded on-device queue and cleared when the app clears or switches accounts. Pending events older than six days are discarded when the queue next runs. Opening an email app does not tell us whether you sent an email. We also record request outcomes, latency, and model token counts to understand operating costs. We also keep private server-side game audit records to investigate reported problems and improve the playing experience. These include all players’ dealt cards, the deck and game events, the information and prompts actually sent for AI decisions or dialogue, model responses, and the actions ultimately applied. Hidden cards in these audit records are not exposed through other players’ game screens or sent to an AI character that is not permitted to see them. Account-linked records are not anonymous. Audit and usage records do not include private note text, raw login credentials, or API keys. We do not use advertising identifiers or cross-app advertising trackers. This website has no advertising cookies or third-party analytics scripts.

Where information is processed

Our production application server is hosted in the United States on Alibaba Cloud. TestFlight uses a separate test service hosted in Singapore; test accounts, saved games and subscription entitlements are not transferred to production. Apple DeviceCheck eligibility is shared across the two environments. Apple and DeepSeek may process service information in other countries. Internet requests necessarily expose connection information to the infrastructure that delivers them. Access to private application records is restricted to authorized service components and operators.

Retention and deletion

Your saved poker data and private game audit records are retained until you delete the account. Private game audit records currently have no automatic time-based expiry and are removed with the account’s live records.

Guests and Apple account users can use “Delete account” to start an automatic server task. The app shows progress and reports completion after live account records have been removed. Apple authorization is revoked for an Apple-linked account. There is no undo period. Deleting an account does not cancel an Apple subscription; use Apple’s subscription settings to cancel renewal.

Detailed product events and aggregate model-usage diagnostics are kept for up to 90 days. This limit does not apply to the separate private game audit records described above. Processed purchase-notification entries are kept for up to 30 days. A limited deletion-status receipt is kept for up to 90 days. Operational database backups expire within 30 days; deletion records must be applied before a backup is restored to service. Backups are not an account-recovery option.

We retain minimal protected identity and purchase markers to prevent repeated welcome grants, reuse of deleted-account purchases, or restoration of erased data. These markers contain no poker history or private notes and are retained for those prevention purposes while the corresponding service remains in operation. Apple’s device eligibility marker is not reset by account deletion.

Your choices

You can view and edit supported account data in the app or request automatic account deletion. Contact us for access, correction, portability, or other privacy requests that cannot be completed in the app. We may need to verify control of the account. If service changes affect this policy, we will update this page.