Privacy Policy

Daily Mahj is operated by Sam Ships, an independent app studio based in Colorado, United States (“Daily Mahj,” “Sam Ships,” “we,” “us,” or “our”). This policy explains how information is handled when you use the Daily Mahj mobile app, optional account, Friends and leaderboard features, subscriptions, support, and related services (collectively, the “Service”).

You can play without creating an account. Core game progress is stored locally. Limited technical information is still processed by services used for app distribution, updates, and subscription entitlement checks, as described below.

• Core gameplay does not require a name, email, or account.
• Game progress, puzzle history, settings, cosmetics, and virtual currency are primarily stored locally on your device.
• We do not use advertising SDKs or Apple's advertising identifier, sell personal information, or track you across other companies' apps or websites for advertising.
• Apple and RevenueCat process limited purchase and subscription data. RevenueCat uses a random anonymous App User ID that we do not link to the optional Daily Mahj account.
• If you choose Sign in with Apple, Supabase stores the account, profile, friendship, leaderboard, and streak data needed for those features.
• Production builds contact Expo to check for app updates.
• PostHog receives limited product-analytics events from the app and Daily Mahj landing page. Session replay, advertising identifiers, and automatic interaction capture are disabled.

Daily Mahj stores information locally, including:

• Puzzle progress, completed boards, results, scores, turn counts, and gameplay history.
• Streaks, streak savers, claimed rewards, referral rewards, and related dates.
• Virtual coins or chips, owned and selected tile themes, avatars, cosmetics, and collection progress.
• Tutorial completion, difficulty, display choices, and settings.
• A local display name, avatar, and an Apple-provided email or private relay address after optional account sign-in.
• Cached subscription status, a random RevenueCat identifier, and Supabase session credentials when applicable.

Information remains local unless a feature described here transmits part of it. Qualifying gameplay history can be uploaded when you first sign in, and streak information can synchronize while signed in. Deleting the app generally removes ordinary local app data, subject to Apple backups, purchase history, Keychain behavior, and system policy.

Daily Mahj Pro uses Apple in-app purchase. Apple handles your payment method and Apple Account; we do not receive your complete card number. RevenueCat processes the purchased product, transaction and receipt data, purchase and renewal dates, expiration or cancellation status, storefront, currency, entitlement, a random anonymous App User ID, and limited technical information needed for validation, fraud prevention, restoration, subscription analytics, and troubleshooting.

Daily Mahj does not call RevenueCat's login or identify APIs. We do not intentionally link its anonymous identifier to your optional Daily Mahj account, display name, or email. RevenueCat's policy is at revenuecat.com/privacy.

An account is optional. When you choose Sign in with Apple, Apple and Supabase may process an opaque account ID, the name Apple provides on first authorization, an email or private relay address, authentication tokens, session information, and account-creation metadata.

Our Supabase database stores:

• Your account ID, display name, avatar, and generated invite code.
• Accepted friendships and their creation dates.
• Qualifying results such as course date, score relative to par, completed boards, and streak information.
• Current and longest streaks, last completion date, streak savers, claimed milestones, and record timestamps.

Your display name, avatar, invite code, and relevant leaderboard results are visible to accepted Friends. A signed-in player who enters your exact invite code may receive the profile information needed to connect. Treat invite codes as shareable information, not passwords. Supabase's policy is at supabase.com/privacy.

Production versions use Expo Application Services to check for and download compatible updates. Requests can include project, channel, runtime, app and update versions, platform information, request headers, and the IP address visible to the service. Expo uses this information to select and deliver updates, secure the service, and maintain operational records. Expo's policy is at expo.dev/privacy.

We use PostHog for first-party product analytics. The app sends events such as app opens, screen views, Daily and Practice activity, sharing, paywall views, and purchase outcomes. The Daily Mahj landing page sends page views, campaign parameters included in its URL, the referring domain, and App Store button clicks. These events can include a random analytics identifier, event time, app or page context, platform, and limited technical information. Signed-in app users are associated with their Daily Mahj account ID; we do not send their email address, display name, invite code, or Apple advertising identifier to PostHog. PostHog session replay and automatic interaction capture are disabled. PostHog's policy is at posthog.com/privacy.

Apple, RevenueCat, Supabase, Expo, PostHog, and ordinary internet infrastructure may automatically process connection data such as IP address, request time, response status, app or SDK version, platform, locale, and security events. RevenueCat provides purchase and subscription analytics as described above.

• System sharing: Scorecard text or images are created locally and sent only to the recipient or app you choose in the system share sheet. The destination handles the material under its own privacy practices.
• Support: If you email us, we receive your address, message, attachments, and details you choose to include. Gmail support mail is processed by Google. Do not send passwords, authentication tokens, or unnecessary private data.

Daily Mahj does not request your contacts, location, camera, photo library, microphone, health data, or advertising identifier. It has no open chat and does not collect an address book or full payment-card details.

• Provide gameplay, preserve local progress, and remember settings.
• Authenticate optional accounts and maintain sessions.
• Provide profiles, invite codes, friendships, leaderboards, streaks, and rewards.
• Validate, restore, and analyze Daily Mahj Pro subscriptions.
• Deliver compatible updates and maintain reliability.
• Measure landing-page campaigns, App Store interest, app usage, and feature performance so we can understand and improve Daily Mahj.
• Prevent fraud, abuse, cheating, unauthorized access, and disruption; provide support; enforce our Terms; and comply with law.

We disclose information only as reasonably needed to:

• Apple for distribution, Sign in with Apple, purchases, refunds, subscription management, and platform services.
• RevenueCat for validation, entitlements, restoration, fraud prevention, and subscription analytics.
• Supabase for optional authentication, profiles, Friends, leaderboards, streaks, and database services.
• Expo for over-the-air updates and operational security.
• PostHog for first-party website and product analytics.
• Google for support email hosting.
• Advisers, authorities, or transaction participants when necessary to comply with law, protect safety and rights, investigate misuse, or complete a financing, reorganization, sale, or transfer.

We require providers processing personal information for us to protect it consistently with their agreements, this policy, and applicable law. We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or disclose it to data brokers.

• Local information remains until removed through available controls, app storage is cleared, or the app is deleted, subject to Apple backup and system behavior.
• Optional account information remains while the account exists. The in-app deletion flow deletes the Supabase auth user and cascades to its profile, friendships, shared results, server streaks, and milestone claims.
• Apple and RevenueCat retain purchase data as needed for entitlement, fraud prevention, disputes, tax, accounting, and law. Account deletion does not cancel a subscription or erase their independent purchase records.
• Providers retain update and operational records under their configuration, agreements, and legal obligations. Support messages remain until resolved and for a reasonable recordkeeping period.
• Product-analytics events remain in PostHog according to the project's configured retention period and may be deleted or aggregated when no longer needed.

Backups and records already scheduled for deletion may persist for a limited period before being overwritten or isolated from ordinary use.

You can:

• Play without an account and use Apple's Hide My Email option.
• Edit your display name and avatar or remove Friends.
• Sign out or permanently delete an account in Settings.
• Manage or cancel Daily Mahj Pro through Apple.
• Delete local data by deleting the app, subject to backups.
• Request access, correction, deletion, or a portable copy of information we control by emailing support@dailymahj.app.

Depending on your location, you may also have rights to restrict or object to processing, withdraw consent prospectively, appeal a privacy decision, use an authorized agent, or complain to an authority. We may reasonably verify requests. We will not discriminate for exercising a privacy right. We do not sell data or use it for targeted advertising, so no sale or targeted-advertising opt-out is required.

Use Settings → Account → Delete Account. This permanently deletes the Supabase account and associated cloud profile, Friends, leaderboard, streak, and milestone records. Local history remains unless you separately delete the app or clear storage.

Account deletion does not cancel Daily Mahj Pro. Cancel through Apple if you do not want renewal. If you cannot access the in-app control, email support@dailymahj.app. We may need to verify the account.

Where a legal basis is required, we process information to perform our contract and provide requested features; with consent where required; for legitimate interests in operating, securing, supporting, and improving the Service; and to comply with law. Consent can be withdrawn prospectively. Daily Mahj and its providers operate in the United States and other countries. Where required, we use contractual or other recognized transfer safeguards.

Daily Mahj is a general-audience puzzle game and is not directed to children under 13. We do not knowingly collect personal information directly from a child under 13. Optional account and Friends features are not intended for a child under 13 to use independently. Contact us if you believe a child submitted information without authorization.

We use safeguards appropriate to the information, including HTTPS, Apple authentication, authenticated sessions, row-level database rules, restricted backend functions, and deletion cascades. No system is completely secure. Protect your device, Apple Account, and invite code, and contact us if you suspect unauthorized access.

We may update this policy as Daily Mahj, providers, or law changes. We will post the revision here and update the date. If required, we will provide additional notice or request consent before a material change applies.

Questions, privacy requests, or complaints may be sent to support@dailymahj.app.

Sam Ships
Colorado, United States

Account deletion details are also available on the Daily Mahj support page.