Privacy Policy

Last updated: June 26, 2026

This policy describes how the Gin Rummy iOS app ("the app") and its online services collect, use, and delete information. The app is built for playing Gin Rummy with friends.

Information we collect

• Account information. If you create an account, we collect your email address and password. Passwords are handled by our authentication provider; we do not store your password in plain text.
• Profile information. We store a display name for your account (initially derived from your email address, and editable in Account settings) so friends can see who invited them to a lobby.
• Gameplay and lobby data. To run multiplayer games we store lobby membership, invite codes, game state, move history, scores, match point totals within a match, session recaps, and related metadata needed to keep games in sync and let you resume play.
• In-game chat. If you send chat messages during a game, we store the message text, your user ID, and the associated game.
• Device session data. The app stores your sign-in session (access token, refresh token, and email) in the iOS Keychain on your device so you stay signed in.
• Local score sheet (optional). If you use the in-app manual scorecard for an in-person game, names and scores are saved only on your device using iOS local storage. That data is not uploaded to our servers.

How we use information

We use the information above solely to provide and improve the game: authentication, matchmaking, real-time updates, chat, scorekeeping, and customer support. We do not sell your personal data.

Service providers

• Supabase — authentication, PostgreSQL database, and real-time subscriptions for in-game updates. Supabase processes account and gameplay data on our behalf.
• Railway (or similar backend hosting) — hosts our game API that validates moves, manages lobbies, and serves invite links. Server logs may include technical metadata such as request timestamps and internal user IDs for troubleshooting.

Analytics and advertising

We do not currently use third-party analytics, advertising, or crash-reporting SDKs (for example Firebase Analytics, Google Analytics, or Sentry). Game move history and hand summaries are stored in our database to operate the game and show session recaps; that is first-party gameplay data, not third-party tracking.

Data retention and deletion

Game and account data are kept while your account exists and as needed to operate active games. You can delete your account at any time from Account → Delete account in the app. Deletion permanently removes your Supabase auth account and associated profile, lobby, and game records stored on our servers. Local manual scorecard data remains on your device until you reset it or uninstall the app.

You can also email us to request account deletion or ask privacy questions: lowellwjones@gmail.com.

Children

The app is not directed at children under 13, and we do not knowingly collect personal information from them.

Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do.

Contact

Privacy and support: lowellwjones@gmail.com