1. Introduction
This app is a game where photos you take become silhouette pieces you stack. Photos are the raw material of the game, so we describe how they are handled as concretely as we can.
When you play alone, the photos you take never leave your device. A photo is sent only when an online match needs to show your piece to your opponent.
2. Information we collect
- Photos taken inside the game: cut out on your device and turned into pieces. They are sent, encrypted, to your opponent's device during online matches only (see section 3).
- Player name: the display name you enter. Shown to opponents in online matches and on leaderboards.
- Play statistics: matches played, best records, coin balance, and similar. If you link an account, these are stored in the cloud so they carry over to a new device.
- Device and usage statistics: anonymous usage such as launches and matches (Google Analytics), and the information required to serve ads (Google AdMob).
We do not collect your name, address, phone number, date of birth, or location. Payment information is handled by Apple and never reaches us.
3. How photos are handled in online matches
In an online match your photo is sent because your piece has to appear on your opponent's screen. Three things happen when it does.
- The transfer is encrypted with a key unique to that one match. The key never leaves the two devices playing, so nothing in transit — including the relay servers — can read the contents.
- Inappropriate images are handled through reports. There is no automated screening before an image is sent. If you are shown something objectionable you can report it from inside the app; we review it and take action, such as excluding the reported player from matchmaking (a ban).
- Short-term retention for safety review: so that we can act on reports, images sent in online matches are kept in encrypted form for 30 days and then deleted automatically. See the next section.
4. About retention for handling reports
In online matches your piece is shown to people you do not know. That means we sometimes receive reports along the lines of "I was shown something offensive" — and if we cannot look at what was reported, we can neither act on it nor prevent it happening again. Images sent in online matches are retained for that purpose and no other.
Specifically:
- Only images actually sent to an opponent in an online match are retained.
- They remain encrypted while stored.
- They are viewed only when a report or a technical investigation requires it.
- They are deleted automatically after 30 days.
- They are never used for advertising, for training machine-learning models, or for any other purpose, and are never provided or sold to third parties.
Deleting your account deletes these images too. The one exception is when a report about you is outstanding: in that case they are kept until the review is finished (and still deleted automatically within 30 days at the latest). If someone could stop a report from being looked at simply by deleting their account, we could not protect the person who reported it.
5. Purposes of use
- Providing and maintaining the app (image sync during matches, saving records)
- Keeping play safe (responding to reports, reviewing reported images, excluding abusive players from matchmaking)
- Statistical analysis to improve the app (in a form that does not identify individuals)
- Serving advertisements (section 7)
6. Disclosure to third parties and processors
We do not provide collected information to third parties except with your consent, where required by law (for example a formal request from a court or law-enforcement agency), or where necessary to protect a person's life, body, or property.
We use the following processors:
- Google LLC (Firebase Realtime Database / Firebase Storage / Cloud Functions): match synchronisation, relay and storage of encrypted images.
- Google LLC (Google Analytics / AdMob): anonymous usage analysis and ad delivery.
- Apple Inc.: app distribution, in-app purchase processing, Sign in with Apple.
7. Advertising and tracking
This app displays advertisements (Google AdMob). On iOS, the App Tracking Transparency prompt is shown before any cross-app tracking takes place. Declining only means ads are not personalised to you; no app feature is restricted. Ads can be removed via an in-app purchase.
8. Retention periods
- Images relayed during a match: deleted when the match ends or a rematch begins, and in any case removed by a server-side rule within 24 hours.
- Images retained for safety review (section 4): automatically deleted after 30 days.
- Play statistics and account information: kept until you delete your account, which you can do from the in-app settings screen.
9. Your rights
To request disclosure, correction, or deletion of your data, contact com.yy.app@gmail.com. You can also delete your account from the in-app settings screen.
10. Children's privacy
This app is rated for ages 4 and up. If you are under 13, please use it with a guardian's consent. Because online matches show your photo to people you do not know, we ask that a guardian review this before a child plays.
11. Camera access
The app requests camera access in order to create game pieces. If you decline, you cannot start an online match, but every other feature remains available. You can change the permission at any time in your device settings.
12. Changes to this policy
We may change this policy when we consider it necessary. Significant changes will be announced in the app or on the support site.
13. Contact
Questions about this policy: com.yy.app@gmail.com