Privacy Policy

This policy explains what ShuffleUp (“we”, “us”) collects when you use the ShuffleUp mobile app on iOS and Android, why we collect it, and what control you have over it. We have tried to keep it in plain language.

The short version: guest play does not require an email address, but it does create an anonymous Firebase account. We store account-linked settings, saved setups, card customizations and play activity. Google also processes information to provide advertising, subject to the privacy choices described below.

1. Information we collect

Account information

Guest mode automatically creates an anonymous Firebase Authentication account with a unique identifier. Guest settings and content are stored under that identifier. If you register or sign in with email, Google or Apple, we also process the details supplied by that method:

• A unique account identifier issued by Firebase Authentication.
• Your email address, if you sign up with email, Google or Apple and choose to share it. If you use Sign in with Apple and select “Hide My Email”, we only ever see Apple’s relay address.
• A display name, if your sign-in provider supplies one or you set one.

Email passwords are sent to Firebase Authentication to sign you in; they are not stored in ShuffleUp’s app database.

App content you create

• Saved game setups: setup names, selected tools, dice type and quantity, timer duration, player names and colors, target score, deck name, and creation and last-played times.
• Card customizations: the text of cards you add or hide, associated deck identifiers, and update times.
• Sound Effects and Haptic Feedback preferences, stored locally and in your account.
• Play statistics and recent activity: counters, event types and times, dice counts and types, timer durations, player counts, and deck names. These power your in-app statistics and activity history.

These records are stored in Cloud Firestore for guest and registered accounts. Player names and custom-card text can contain personal information, so use nicknames and avoid sensitive details.

Information stored only on your device

Active game state, including individual dice results, current scores, timer state and recent drawn-card history, is saved locally for resuming play. This is separate from the settings, saved setups and activity summaries uploaded above. On supported iPhones, timer information and player names/scores can appear in Live Activities on your lock screen. The app also keeps local account/content caches and convenience preferences, such as whether you have seen the welcome screen.

Advertising information

ShuffleUp requests non-personalised banner ads from Google AdMob after Google’s User Messaging Platform (UMP) reports that ads may be requested. UMP checks consent requirements at app launch and displays a privacy message when required. Where available, you can revisit your choices in Settings → Advertising privacy.

Non-personalised ads still involve data processing. Google may process IP addresses (including approximate location), device or app identifiers, ad views and interactions, and diagnostic and performance information for ad delivery, measurement and fraud prevention. See Google’s privacy information and its explanation of non-personalised ads. ShuffleUp does not currently request Apple App Tracking Transparency permission. On Android, advertising-ID controls are available in your device settings.

Information we do not collect

ShuffleUp does not install a separate app analytics or crash-reporting SDK and does not access your contacts, photos, microphone or precise location. AdMob’s own diagnostic and advertising processing is described above; the app’s account-linked play statistics are also described above.

2. How we use information

• To sign you in and keep you signed in.
• To store and sync your saved setups, card customizations and preferences.
• To show you your own play statistics inside the app.
• To operate and improve the app, including delivering configuration changes remotely.
• To display advertising that keeps the app free.

We do not send saved player names, custom-card text or saved setups to AdMob as ad-targeting parameters.

3. Service providers

We rely on a small number of providers who process data on our behalf:

• Google Firebase (Authentication, Cloud Firestore, Remote Config) — authentication; storage of settings, setups, custom cards and activity; and remote app configuration. These services also process technical information needed to operate, such as network and installation identifiers.
• Google AdMob — advertising delivery.
• Apple and Google — app distribution and, where you use them, sign-in.

4. Data retention and deletion

We keep your account data for as long as your account exists. You can delete your account at any time in Settings: under Account, open your account or Guest account, then tap Delete account. Successful deletion removes your Firebase Authentication account, account preferences, saved setups, card customizations, play statistics and recent activity. Account-owned local session state is cleared. The app then creates a new empty guest account so you can continue playing. Deletion is permanent and cannot be undone. See Delete your account for step-by-step instructions.

5. Your rights

Depending on where you live, you may have the right to access, correct, export or delete the personal information we hold about you, and to object to certain processing. You can exercise the deletion right directly in the app. For anything else, write to hello@shuffleup.app and we will respond within 30 days.

If you are in the European Economic Area or the UK, our legal bases for processing are: performing our contract with you (running your account and syncing your setups), your consent (advertising-related processing where required), and our legitimate interests (keeping the app secure and working).

6. Children

ShuffleUp is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

7. International transfers

Our providers store and process data on servers that may be located outside your country, including in the United States. Where required, transfers rely on standard contractual clauses or equivalent safeguards offered by those providers.

8. Security

Data in transit is encrypted with TLS, and access to stored data is restricted by Firebase security rules so that you can only read and write your own records. No system is perfectly secure, but we take reasonable measures to protect your information.

9. Changes to this policy

If we make a material change, we will update the date at the top of this page and, where appropriate, notify you in the app.

10. Contact

Questions about this policy or your data: hello@shuffleup.app.