← Home

This Privacy Policy describes how SayTheSame ("we", "our", or "us") collects, uses, and protects your information when you use our iOS app. By using the app, you agree to this policy.

1. Who we are

SayTheSame is an independent iOS game. Our backend is powered by Supabase, hosted on AWS infrastructure in the EU region. For questions about this policy, contact us at support@saythesame.app.

2. What data we collect

We collect only what's necessary to run the game:

• Apple User ID — a unique identifier provided by Sign in with Apple. We never receive your name or real email unless you choose to share them.
• Display name (alias) — a nickname you set in the app, shown to your game partners.
• Gravatar hash — an MD5 hash of your email, used to display a profile image via Gravatar. We never store your email directly.
• Game data — the words you submit during matches, match results, and timestamps.
• Push notification token — your device's APNs token, used to send you game notifications. Never shared with third parties.

We do not collect your location, contacts, browsing history, or any other personal data beyond what's listed above.

3. How we use your data

• To run and sync your games across sessions.
• To send you push notifications when it's your turn or a match is found.
• To display your alias and avatar to your game partners.

We do not use your data for advertising profiling, analytics, or any purpose beyond providing the game.

4. Third-party services

We use the following third-party services to operate the app:

• Supabase — database and backend. Data is stored in the EU. Privacy Policy →
• Sign in with Apple — authentication. Apple Privacy Policy →
• Gravatar (Automattic) — optional profile images via email hash. Privacy Policy →
• Google AdMob — we plan to show non-intrusive ads in a future version. When enabled, Google may collect device identifiers (IDFA) for ad delivery. You can limit ad tracking in iOS Settings → Privacy → Tracking. Google Privacy Policy →

5. Push notifications

We use Apple Push Notification service (APNs) to notify you when it's your turn or a game event occurs. Your push token is stored securely and never shared with third parties. You can disable notifications anytime in iOS Settings → Notifications → SayTheSame.

6. Data retention

We retain your data for as long as your account is active. When you delete your account, all your data — Apple ID, alias, push token, and all game records — is permanently and immediately removed from our servers.

7. Account deletion

You can delete your account at any time from within the app: go to Profile → Delete Account. Deletion is immediate and irreversible. No data is retained after deletion.

8. Children's privacy

SayTheSame is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it immediately.

9. Your rights (GDPR & CCPA)

If you are in the EU or California, you have the right to access, correct, delete, or export your personal data. You can delete your account directly in the app. For other requests, contact us at support@saythesame.app — we'll respond within 30 days.

10. Data security

We use HTTPS for all data in transit and row-level security in our database. No plaintext storage of sensitive identifiers. If you discover a security issue, please contact us immediately.

11. Changes to this policy

We may update this policy from time to time. If changes are significant, we'll notify you via the app or by updating the date at the top of this page.

12. Contact

Questions? Email us at support@saythesame.app. We're a small team and will get back to you as soon as we can.