Privacy Policy

1. Introduction

This Privacy Policy explains how RummyKub (“the app”, “we”, “us”), an application published by Shayne, handles information when you use the RummyKub mobile app and this website. RummyKub is an independent implementation of a rummy-style tile game. We've tried to collect as little as possible and to be plain about what we do collect.

By using RummyKub, you agree to this policy. If you don't agree, please don't use the app.

2. Information we collect

Account & identity

You can start playing solo games without an account. To play online or subscribe, you sign in using one of:

• Sign in with Apple — Apple provides us a unique identifier and, depending on your choice, your name and a real or private-relay email address. We never receive your Apple password.
• Guest / anonymous sign-in — we create an anonymous account tied to a random identifier on your device, with no email or personal details.

You may also set a display name that other players in your room can see. Authentication and accounts are handled by our backend provider, Supabase.

Gameplay data

When you play — especially online — we process game state so the match works: the rooms you create or join, room codes, the tiles and moves in a game, turn order, and results. Room codes are short and shared by you with the people you invite.

Subscriptions & purchases

If you join RummyKub Club, the purchase is processed by the Apple App Store or Google Play — not by us. The store sends us a receipt or purchase token that we verify to unlock membership. We store your subscription status, renewal/expiry date, and your monthly voice-credit usage (in seconds/minutes). We never receive or store your credit-card or payment details.

AI voice opponent audio

If you play the optional Voice AI mode, the app uses your device microphone and streams audio in real time to OpenAI to generate the opponent's speech and understand what you say. This is described in detail in Section 3. If you never use Voice AI, no microphone audio is captured.

Leaderboards & achievements

If you opt in, rankings and achievements are handled through Apple Game Center and Google Play Games under your platform gaming profile. Your use of those features is also governed by Apple's and Google's privacy policies.

Device & technical data

Like most apps, basic technical data (such as device/OS type and app version) may be processed to deliver and maintain the service, including over-the-air updates via Expo. We do not use third-party advertising SDKs, and we do not sell your data.

3. The AI voice opponent

The voice opponent is powered by OpenAI's realtime speech service. Because it involves your microphone, we want to be especially clear. There are two ways it can run:

• RummyKub Club (managed): our server issues a short-lived access token, and your audio is sent from your device directly to OpenAI to run the live session. We receive the number of seconds used (to meter your monthly credits), but we do not receive or store the audio itself.
• Bring your own key (BYOK): if you add your own OpenAI API key, it is stored only on your device using the operating system's secure storage. Your audio and your key are sent directly to OpenAI and never pass through our servers.

4. How we use information

• To create and authenticate your account and keep you signed in.
• To run games — matchmaking rooms, syncing moves, and determining winners.
• To provide the AI voice opponent and meter Club voice credits.
• To verify purchases and manage your subscription.
• To power leaderboards and achievements where you opt in.
• To maintain, secure, debug, and improve the app.
• To comply with legal obligations and enforce our Terms of Service.

5. How information is shared

We do not sell your personal information. We share it only with service providers that make the app work, and only as needed:

• Supabase — authentication, database, realtime multiplayer, and server functions.
• OpenAI — the realtime AI voice opponent (see Section 3).
• Apple — Sign in with Apple, App Store purchases, and Game Center.
• Google — Google Play purchases and Play Games services.
• Expo — app delivery and over-the-air updates.

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer. Each provider processes data under its own privacy policy.

6. Data retention

We keep account and subscription data for as long as your account is active and as needed to provide the service or meet legal, tax, and accounting requirements. Transient game state may be cleared after a match ends. You can ask us to delete your account and associated data (see Section 7).

7. Your choices & rights

• Microphone: Voice AI is optional. You can decline or revoke the microphone permission in your device settings at any time; other modes keep working.
• Access & deletion: you may request a copy of your data, correction, or deletion of your account by emailing us at [email protected].
• Your OpenAI key: if you use BYOK, you can remove your key from the app's Settings at any time; it lives only on your device.
• Regional rights: depending on where you live (for example the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of your data, and to lodge a complaint with a regulator. Contact us to exercise them.

8. Children's privacy

RummyKub is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

9. Security

We use reputable providers and industry-standard measures — including encrypted transport (HTTPS/TLS) and the device's secure storage for sensitive values like your OpenAI key. No method of transmission or storage is perfectly secure, but we work to protect your information.

10. International users

Our providers may process and store data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers. By using the app you understand your information may be processed in these locations.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the “Last updated” date above and, for material changes, provide notice in the app or on this site. Continued use after changes take effect means you accept the updated policy.

12. Contact us

Questions, requests, or concerns about privacy? Email [email protected] and we'll get back to you.