Privacy Policy
Owner facts still needed before this policy can be final
- Legal entity name (and jurisdiction) that operates Love Bluff: [TBD — owner to confirm]
- Confirmed domain this policy will be served from: [TBD — owner to confirm; domain ownership not yet verified]
- Support / privacy contact email: [SUPPORT EMAIL TBD — owner to confirm]
- Mailing address for the operator: [TBD — owner to confirm]
- AI provider choice for the optional assist feature: [AI PROVIDER TBD — owner to confirm]
- Effective date: [TBD — set at launch]
Who we are
Love Bluff is a two-player couples bluffing game for iPhone and Android, operated by [LEGAL ENTITY TBD — owner to confirm]. When this policy refers to “we,” it means that operator, once confirmed.
What we collect — and what we do not
| Data | Why | Notes |
|---|---|---|
| Account email and sign-in identifiers | Sign-in, recovery, security | Email and/or platform sign-in. Apple relay addresses are handled as provided by Apple. No phone verification unless genuinely required. |
| Nickname and profile settings | Display to your paired partner | No legal name, gender, orientation, relationship length, or anniversary is required. |
| Adult eligibility confirmation and consent records | 18+ gate; terms/privacy acceptance | Consent version and timestamp are stored. |
| Gameplay content: prompts served, your true and fake answers, the one-question/one-reply per round, guesses, certainty-token use, scores | Running matches and scoring | The truth marker is stored only in protected server-side data and is never sent to the detective’s device before the guess is locked. |
| Pairing and invitation data | Connecting two accounts | Invitation codes expire in 24 hours and are single-use. Your email is not exposed to code-guessers. |
| Purchase and entitlement records | Premium and pack access, restore, refunds | Purchases are processed by Apple / Google; validation and entitlements are handled through RevenueCat. We do not receive or store your full payment card details. |
| AI assist requests (only if you tap the assist button) | Drafting two fake answers | See the AI disclosure below for exactly what is sent. |
| Reports, blocks, and moderation records | Safety and enforcement | Moderators are restricted to reported material and legitimate support needs. |
| Privacy-minimized product analytics and crash data | Reliability and improving the game | Events such as tutorial started/completed, match started/completed, assist success/failure, and purchase/restore. Answer text is never included in analytics, telemetry, or exception logs. |
| Push token and notification preferences | “Your turn” notifications | Notifications use generic wording (e.g., “Your turn in Love Bluff”), with quiet hours and opt-out controls. |
We do not collect location, scrape contacts, accept private photo uploads in version 1, or sell personal data. We do not claim end-to-end encryption: server scoring, optional AI assist, and moderation require server access to gameplay content, protected by transport encryption, provider encryption at rest, least-privilege access controls, and audited administrative access.
Processors (planned)
- Supabase — authenticated Postgres backend, authentication, and realtime delivery.
- RevenueCat — purchase validation and entitlement management for Apple App Store and Google Play purchases.
- Apple / Google — app distribution, in-app purchase processing, and platform sign-in where used.
- Push delivery — Apple Push Notification service and Firebase Cloud Messaging, via the app framework.
- AI provider — [AI PROVIDER TBD — owner to confirm]; see below.
- Crash reporting and product analytics providers: [TBD — confirm exact vendors before launch and list them here].
AI disclosure
Love Bluff works fully without AI. AI help is only used when you tap “Help me write two bluffs”:
- What is sent: the current prompt and your true answer for that round, so the provider can draft two plausible fake alternatives.
- What is never sent: your partner’s identifiers, your email, your match history, or unrelated answers.
- Provider: [AI PROVIDER TBD — owner to confirm]. Before your first assist, the app will name the provider that will receive the prompt and answer and obtain any consent required by store policy and privacy law. This section will name the provider, and accurately document that provider’s retention and deletion terms, before launch — those terms differ by provider and are not stated here until the choice is made.
- Your control: you preview, approve, or edit both drafted answers before anything is submitted. Nothing is sent to your partner automatically.
- No training on your answers: we will not train a custom model on private answers.
- Limits: 2 successful assists per account per UTC day (free) and 20 per day (Premium), counted server-side only after a valid result. If AI is unavailable, manual writing always remains available.
- The AI does not judge your relationship, detect lies, or diagnose emotions, and no output is presented as doing so.
Retention schedule (planned implementation defaults)
| Data | Retention |
|---|---|
| Raw answers, questions, and replies | Deleted 30 days after the match completes. Minimal numerical results (scores, wins) are kept while the pair remains active. |
| After unpairing | Mutual access is revoked immediately; shared narrative history is purged within 7 days, except narrowly documented abuse/legal retention. |
| After account deletion | Sessions and invitations are revoked immediately; active personal data is removed within 7 days; processor deletion is requested where applicable. |
| Backups | Expire under a maximum 35-day policy; restore procedures reapply deletion tombstones so deleted data is not resurrected. |
| Reports / abuse records | Kept only as long as legitimately required for safety or legal purposes; the exact period is [TBD — owner/legal to confirm]. |
If any retention target above cannot be met by the selected infrastructure, the infrastructure or this disclosure must be changed before launch — not after.
Sharing
Your nickname and gameplay within a match are visible to the one partner you paired with. Result cards omit personal answers by default; sharing a card containing personal text requires approval from both participants for that exact card. We share data with the processors above only to operate the service, and disclose data where legally required.
Your rights and controls
- Export: in-app authenticated export of your own content and permitted aggregate results, with identity verification and rate limits. An export never includes your partner’s unrevealed answers.
- Deletion: in the app, or through the independently functional web request path at Delete Account — including if you have uninstalled the app.
- Notifications: opt out and set quiet hours in Settings.
- Category exclusions: either partner can independently disable sensitive prompt categories.
Region-specific rights language (for example for EEA/UK/California residents) is [TBD — legal review to confirm applicability and wording].
Children
Love Bluff is for adults 18+. It is not directed to children, and accounts require adult eligibility confirmation.
Changes
This notice is versioned. Material changes will be announced in the app and on this page with a new effective date: [TBD at launch].
Contact
Privacy questions: [SUPPORT EMAIL TBD — owner to confirm]. Mailing address: [TBD — owner to confirm].