Privacy Policy for UnderCover Party

1. Information We Collect

UnderCover Party collects limited personal information to provide authentication and premium purchase services. The information we collect includes:

• Authentication data: When you sign in with Google, we collect your Google account information (as described in Section 3)
• Purchase data: When you purchase premium features (as described in Section 4)
• Advertising data: Collected by Google AdMob (as described in Section 5)
• Analytics data: App usage information collected by Firebase Analytics (as described in Section 6)

2. Data Storage

Your data is stored in the following locations:

• Firebase servers: Authentication data (email, name, profile picture, Google user ID) and analytics data
• Firebase Realtime Database: May store temporary app-specific data for sync features (see app-specific sections below)
• Local device storage: App preferences and settings
• RevenueCat servers: Purchase and payment information

We do NOT collect or store:

• Location data
• Contacts or phone numbers

3. Authentication (Google Firebase & Google Sign-In)

UnderCover Party uses Google Firebase Authentication with Google Sign-In (OAuth) to manage user accounts. When you sign in with your Google account, the following information is collected:

3.1 Information Collected via Google Sign-In

• Email Address: Your Google account email
• Display Name: Your Google account name
• Profile Picture: Your Google account profile photo (if available)
• Google User ID: A unique identifier from Google
• Firebase User ID: A unique identifier generated by Firebase

3.2 How Authentication Data is Used

Your authentication data is used to:

• Create and maintain your user account
• Authenticate you when you sign in
• Sync your premium purchase status across devices
• Personalize your in-app experience
• Provide customer support

3.3 Firebase & Google Privacy

Firebase is operated by Google. When you use Google Sign-In, your authentication is handled by both Firebase and Google. For detailed information, please review:

• Firebase Privacy and Security
• Google Privacy Policy
• How Google uses data when you use partner sites

Important: When you sign in with Google, Google may collect additional data according to their privacy policy. Firebase stores your authentication data securely on Google's servers. You can delete your account and all associated data by contacting us at arouaystudio@gmail.com.

4. Purchase Management (RevenueCat)

UnderCover Party offers premium features managed through RevenueCat. When you purchase premium features, the following information is collected and processed:

4.1 Information Collected for Purchases

• Email Address: Used to manage your purchase and send receipts
• Purchase Information: Purchase status, purchase dates, and transaction details
• Device Information: Device ID for purchase verification
• Payment Information: Processed by Apple App Store or Google Play Store (we do not store credit card details)

4.2 How Purchase Data is Used

Your purchase data is used to:

• Process and verify your purchase
• Verify your premium access across devices
• Send purchase confirmations and receipts to your email
• Provide customer support for billing issues

4.3 Email Sharing with Payment Processors

Your email address is shared with payment processors (Apple and Google) to complete transactions and send receipts. This sharing is necessary to process your payment.

4.4 RevenueCat Privacy

RevenueCat acts as a purchase management service. For detailed information about how RevenueCat handles your data, please review:

• RevenueCat Privacy Policy
• RevenueCat Data Processing Agreement

Important: RevenueCat processes purchase data on our behalf. Your email and purchase information are stored securely and used solely for purchase management. You can request deletion of your purchase data by contacting us at arouaystudio@gmail.com.

5. Advertising (Google AdMob)

UnderCover Party displays advertisements provided by Google AdMob. AdMob automatically collects certain information to show relevant ads:

5.1 Information Collected by AdMob

• Advertising ID: A unique identifier for advertising (IDFA on iOS, Google Advertising ID on Android)
• Device Information: Device type, operating system version
• IP Address: Your approximate location
• Ad Interaction Data: Which ads you view or click

5.2 Purpose of Advertising Data

This data is used by Google to:

• Display personalized advertisements
• Measure ad performance
• Improve ad targeting

5.3 Google's Privacy Policy

AdMob is operated by Google. For detailed information about how Google handles your data, please review:

• Google Privacy Policy
• Google AdMob & Privacy

Important: We (UnderCover Party) do NOT have access to the advertising data collected by Google AdMob. Google operates as an independent data controller for advertising data.

6. Analytics (Firebase Analytics)

UnderCover Party uses Firebase Analytics (Google Analytics for Firebase) to understand how users interact with the app and improve the user experience.

6.1 Information Collected by Firebase Analytics

• App Usage Data: Screens viewed, features used, and user interactions
• Session Data: Session duration, frequency of use, and engagement metrics
• Device Information: Device model, operating system version, language, and screen size
• App Performance Data: Crash reports, app launch time, and performance metrics
• Approximate Location: Country and region based on IP address (not precise location)

6.2 Purpose of Analytics Data

This data is used to:

• Understand how users interact with the app
• Identify and fix bugs or performance issues
• Improve app features and user experience
• Make data-driven decisions for future development

6.3 Firebase Analytics Privacy

Firebase Analytics is operated by Google. For detailed information about how Google handles analytics data, please review:

• Firebase Privacy and Security
• Google Analytics Data Collection
• Google Privacy Policy

Important: Analytics data is collected in aggregate form and is used solely to improve the app. We do not use analytics data to identify individual users or for advertising purposes.

7. Your Analytics Choices

You can limit analytics data collection:

On Android:

1. Go to Settings > Google > Ads
2. Select "Opt out of Ads Personalization" (this also limits some analytics tracking)

On iOS:

1. Go to Settings > Privacy & Security > Analytics & Improvements
2. Turn off "Share iPhone Analytics"

Note: Some basic analytics data may still be collected to ensure app functionality and security.

8. Your Advertising Choices

You can control personalized advertising at any time:

On Android:

1. Go to Settings > Google > Ads
2. Select "Opt out of Ads Personalization" or "Reset advertising ID"

On iOS:

1. Go to Settings > Privacy & Security > Tracking
2. Turn off "Allow Apps to Request to Track"
3. Or go to Settings > Privacy & Security > Apple Advertising > Reset Advertising Identifier

Manage Your Google Ad Data:

Visit My Ad Center to view and manage your advertising preferences with Google.

9. Your Privacy Rights (GDPR/CCPA)

For European Users (GDPR):

If you are in the European Union, you have the following rights:

• Right to Access: Request information about your data
• Right to Erasure: Request deletion of your data
• Right to Object: Object to data processing
• Right to Withdraw Consent: Withdraw consent for personalized ads

For local app data: Simply uninstall the app to remove all local data.

For Firebase account and authentication data: Contact us at arouaystudio@gmail.com to request account deletion. We will delete your authentication data from Firebase within 30 days.

For purchase data: Contact us at arouaystudio@gmail.com to request access, correction, or deletion of your purchase information. You can delete purchase data without deleting your account.

For AdMob advertising data: Visit My Ad Center or contact Google directly.

For Firebase Analytics data: Analytics data is collected in aggregate form. You can limit analytics collection through your device settings (see Section 7) or contact us to request data deletion.

Partial Data Deletion: You can delete specific data (purchase history, advertising data, analytics data) without deleting your entire account. Visit our Account Deletion page for detailed instructions on partial data deletion options.

For California Residents (CCPA):

You have the right to:

• Know what personal information is collected
• Request deletion of your information
• Opt-out of the "sale" of your information

To exercise these rights regarding AdMob data, visit My Ad Center.

10. Age Restrictions

UnderCover Party is intended for users aged 13 years and older.

For users under 16 in the European Union, parental consent is required for personalized advertising. A consent dialog will appear when you first open the app.

11. Data We Share

We share data only with the following third-party services:

• Google Firebase: Your Google account information (email, name, profile picture, Google User ID) is stored on Firebase servers for authentication purposes (as described in Section 3)
• Firebase Analytics: App usage and analytics data is collected and processed by Google (as described in Section 6)
• RevenueCat: Your email address and Firebase User ID are shared for purchase management and payment processing (as described in Section 4)
• Payment Processors (Apple/Google): Your email address is shared with Apple App Store and Google Play Store to process payments and send receipts
• Google AdMob: Advertising data is collected and processed by Google (as described in Section 5)

We do NOT sell your personal information to anyone.

Important: All third-party services listed above are operated by Google (Firebase, AdMob, Google Play) or trusted partners (RevenueCat, Apple). Your data is protected by their respective privacy policies and security measures.

12. Data Security

We take data security seriously and implement the following measures:

• Firebase Authentication: Uses industry-standard OAuth 2.0 protocol with encrypted connections
• Data Encryption in Transit: All communication with Firebase, RevenueCat, and payment processors is encrypted via HTTPS/TLS
• Data Encryption at Rest: Firebase stores your authentication data encrypted on Google's secure servers
• Google Security: Firebase and AdMob benefit from Google's enterprise-grade security infrastructure
• Payment Security: Payment card information is never stored in our app - it is handled directly by Apple and Google
• Local Storage: App preferences stored on your device are protected by your device's security features
• Access Control: Only authorized services can access your data, and we follow the principle of least privilege

13. Data Retention

Different types of data are retained for different periods:

• Firebase Authentication data: Stored on Firebase servers until you delete your account. To delete your account and all authentication data, contact us at arouaystudio@gmail.com
• Firebase Analytics data: Retained by Google for up to 14 months (default setting). You can request deletion through your Google account settings
• Local app data: Stored on your device until you uninstall the app or clear app data
• Purchase data: Retained by RevenueCat for up to 12 months for accounting and legal compliance
• AdMob data: Retained by Google according to their policies (typically up to 26 months)

Account Deletion: When you request account deletion, we will delete your Firebase authentication data and RevenueCat purchase data. However, some data may be retained for legal compliance (e.g., tax records) or technical reasons (e.g., backups for up to 90 days). Google AdMob data must be deleted through Google's My Ad Center.

12. Multiplayer & Game Sessions (Firebase Realtime Database)

UnderCover Party uses Firebase Realtime Database to enable multiplayer features, allowing you to connect multiple devices and play together in real-time.

12.1 Information Collected for Multiplayer

When you use multi-device mode, the following information is temporarily collected:

• Player Names: The names you enter for each player in the game
• Room Codes: Unique 6-character codes used to join game sessions
• Session Data: Active game state during multiplayer sessions (current round, voting status, role assignments)
• Device Connection Status: Anonymous identifiers to sync game state between devices

12.2 How Multiplayer Data is Used

Your multiplayer data is used exclusively to:

• Enable real-time synchronization between devices in the same game session
• Allow players to join game sessions using room codes
• Display player names to all participants in the same session
• Maintain game state consistency during active sessions (rounds, votes, reveals)
• Automatically reconnect devices if temporarily disconnected

12.3 Data Retention for Multiplayer

Multiplayer data is temporary and ephemeral:

• Automatic deletion: All player names and room data are automatically deleted after 48 hours of inactivity
• No long-term storage: We do not permanently store player names, game history, or session results
• Automatic cleanup: Expired sessions are automatically purged from Firebase servers
• Session-based: Data only exists while the game session is active or recently active

12.4 Privacy in Multiplayer Mode

• Minimal data collection: We only collect player names necessary for gameplay
• No account required: Multi-device mode works without Google Sign-In
• Local alternative: You can play offline in single-device mode without any data sync
• Temporary storage: All data is ephemeral and auto-deleted
• No tracking: We do not link multiplayer sessions to user accounts or devices
• Shared visibility: Player names and game state are visible to all participants in the same room session

12.5 Firebase Realtime Database Privacy

Firebase Realtime Database is operated by Google. For detailed information about how Google handles your data, please review:

• Firebase Privacy and Security
• Google Privacy Policy

Important: When you use multi-device mode, player names and game state are temporarily stored on Firebase Realtime Database servers operated by Google. This data is visible to all players who join the same room using your room code and is automatically deleted within 48 hours of inactivity. Multi-device mode is entirely optional - you can play offline in single-device mode without any data synchronization.

13. Offline Functionality

UnderCover Party works completely offline in single-device mode. However:

• Multi-device mode requires an internet connection to sync game state between devices
• Advertisements require an internet connection to load (you may see cached ads or no ads offline)
• Single-device mode works completely offline without any data sync
• All core game features (themes, word pairs, gameplay) work offline

14. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated within the app.