Privacy Policy

Hakilabz ("we", "our", or "us") operates the Party GameHub mobile application ("App"). This Privacy Policy describes how we collect, use, and protect your information.

On iOS, the canonical privacy disclosure is the App Store Connect Privacy Nutrition Label and the bundled PrivacyInfo.xcprivacy manifest. On Android, it is the Google Play Data Safety form. This policy summarises both.

1. Information We Collect

Information You Provide:

• Player names (stored locally on device; shared ephemerally during multiplayer sessions, then discarded when the session ends)
• Age-gate selection (18+ / under-18 / Corporate — stored locally only)
• Game preferences and settings (stored locally; iOS: UserDefaults; Android: DataStore)

Automatically Collected:

• Anonymized app-usage events (via Firebase Analytics) — game_selected, game_started, game_completed, round_completed, paywall_shown, purchase_completed, ad_shown, setting_changed
• Crash reports and non-fatal errors (via Firebase Crashlytics)
• Device class, OS version, and app version
• Advertising identifier — IDFA on iOS only when ATT is authorised; Android Advertising ID; free-tier users only
• Purchase tokens — handled by Apple StoreKit / Google Play Billing; we do not store payment details

Required Reason API usage (iOS, declared in PrivacyInfo.xcprivacy):

• UserDefaults (CA92.1) — settings persistence
• File timestamp APIs (C617.1) — declared defensively
• System boot time (35F9.1) — declared defensively

What We Do NOT Collect:

• Email addresses, phone numbers, or passwords
• Precise location data, contacts, calendar, health, or biometric data
• Photos, camera, contacts, location — the app accesses NONE of these. No game reads your photo library or opens your camera; there is no photo picker anywhere in the app

2. How We Use Information

• Deliver game content appropriate to your selected spice level and age group
• Remember your settings (theme, sound, haptics, strikes) locally on your device
• Deliver relevant advertisements to free-tier users (Google AdMob)
• Analyze anonymized usage patterns to improve the App
• Monitor and fix crashes via Firebase Crashlytics
• Facilitate real-time game sessions between devices (multiplayer relay)

3. Data Storage & Multiplayer

All game data, player names, scores, and settings are stored locally on your device. We do not maintain server-side databases of personal information.

LAN Multiplayer: Game state is shared peer-to-peer over the local network via Bonjour (iOS) / NSD (Android). No data leaves the local Wi-Fi network in this mode.

Online Multiplayer: Game state (player names, scores, game actions) is relayed through our Cloudflare Workers WebSocket server. Messages are not stored after relay. Room codes expire when the session ends.

Content Secrecy: For games using the content secrecy system (e.g., Mime the Word, Buzz Word), prompts are routed to the active player's device only and are not broadcast to other players until revealed. This is a gameplay mechanic.

4. Third-Party Services

• Google AdMob (Google Mobile Ads SDK 12.x): Serves interstitial and app-open ads to free-tier users. Uses the IDFA on iOS (only when ATT is authorised) and the Android Advertising ID. See Google's published privacy disclosure for the full list of collected data types.
• Firebase Analytics: Collects anonymized usage events. The in-app TelemetryService forwards local-buffer events to Firebase rather than to a separate self-hosted endpoint.
• Firebase Crashlytics: Collects crash reports and non-fatal records (no personal data).
• Apple StoreKit / Google Play Billing: Process all purchases. We do not see your payment details and do not perform server-side receipt validation; entitlements rely on the platform's native signed-transaction and acknowledgement contracts.
• Cloudflare Workers WebSocket relay (wss://relay.hakilabz.ai): Powers Online multiplayer rooms. Session data is ephemeral and discarded when the session ends.
• Bonjour (iOS) / NSD (Android): Local discovery for Wi-Fi LAN multiplayer. No data leaves the local network in this mode.

iOS-specific declarations:

• SKAdNetworkItems array in Info.plist for ad attribution
• NSPrivacyTrackingDomains list in PrivacyInfo.xcprivacy
• App Tracking Transparency (ATT) prompt at first launch when ads are about to be shown

All third-party services operate under their own privacy policies.

5. Children's Privacy

The App is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.

Users who indicate they are under 18 are restricted to content up to Spice Level 2 (Spicy) and cannot access Wild (Level 3) or Max (Level 4) content. Users who pick Corporate mode at the Age Gate are hard-locked at Spice Level 0 regardless of any subsequent Settings change.

If you believe a child under 13 has provided personal information through the App, please contact us at support@hakilabz.ai.

6. Data Sharing

We do not sell, trade, or rent your personal information. We may share anonymized, aggregated data with:

• Analytics providers (Firebase)
• Advertising networks (Google AdMob, free tier only)
• App store platforms (for purchase processing only)

7. Your Rights & Choices

You may:

• Delete all local app data by uninstalling the App
• iOS: Settings > Privacy & Security > Tracking → revoke ATT permission to stop AdMob from using your IDFA
• Android: Settings > Privacy > Ads → reset the Advertising ID
• In-app: Settings > Privacy options — review or withdraw your advertising-consent choices (shown in regions where consent is required)
• Manage or cancel any PRO purchase through App Store or Google Play at any time
• Adjust spice level, sound, haptics, and strikes settings within the App
• Replay the welcome tour from the Settings screen

8. Data Security

We implement reasonable security measures to protect information processed by the App. Online multiplayer sessions use encrypted WebSocket connections. However, no method of electronic transmission is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes are effective when posted, indicated by an updated "Last Updated" date. Continued use of the App after changes constitutes acceptance.

10. Contact & Feedback

If you have questions, feedback, or concerns about this Privacy Policy, contact us at:

• Hakilabz
• Email: support@hakilabz.ai

These privacy practices apply to the Party GameHub mobile application available on iOS (App Store) and Android (Google Play).