Effective September 30, 2026
What we collect
We collect the information needed to provide your account and games: your email address, display name, unique username, optional profile photo, friend and blocked-user relationships, table membership, gameplay activity, invitations, notification preferences, device push token, and table-chat messages. If you use a subscription, we receive and store Apple-provided product, transaction, renewal, expiration, grace-period, refund, and revocation records. We do not receive or store your payment-card number.
How we use it
We use this information to authenticate you, synchronize games across players and devices, display your profile at shared tables, deliver invitations and game alerts, operate chat, verify subscription access, prevent abuse, respond to support requests, and troubleshoot service problems. We do not sell personal information or use it for advertising or cross-app tracking.
Safety reports and photo review
If you report a player or message, we store your report, the reported content, and a limited amount of relevant chat context for review by the app owner. We do not share your identity with the reported player. New profile photos are held privately until approved. Automated text checks help filter objectionable messages and names. Report evidence may remain after an account is deleted while a case is open, and for up to 90 days after resolution. We then remove the report details and evidence; a record of moderation decisions may remain. Safety evidence is not sent to general analytics.
Who can see it
Your display name, username, profile image, gameplay activity, exposures, and table-chat messages are visible to friends or players who share the relevant table. Exact username lookup can be disabled in Profile. Your email address is used only for account access and is not displayed or searchable in the app. Your blocked-user list is visible only to you.
Diagnostics and product analytics
When diagnostics are enabled, Sentry receives an internal user identifier, app and operating-system version, device characteristics, crashes, performance measurements, and limited product-interaction data. Sentry may derive an approximate country or region from the connection before discarding the source IP address. We remove email addresses, chat, tables, racks, tiles, invitation tokens, and gameplay state from diagnostic events. We also record limited account-linked milestones about opening or completing onboarding, learning videos, and the app tour, together with app/build version and platform. These raw product-analytics events are deleted after 90 days. We use diagnostics and product analytics only to maintain and improve the service.
Service providers
Mahj Mates uses Supabase for authentication, database storage, file storage, and realtime synchronization; Apple for sign-in, subscriptions, payments, and distribution; Google for optional sign-in and Cloud Run subscription verification; Expo for application builds, distribution, and push delivery; Sentry for diagnostics; and Resend for account email and owner moderation alerts. These providers process information only to provide their services and under their own privacy and security commitments. Moderation alert emails contain a reference and sign-in instructions rather than private chat or photo evidence.
Retention and deletion
We retain account information while your account is active. You can permanently delete your account from Profile → Delete account. Deletion removes your profile, hosted tables, messages, invitations, device tokens, photos, uploaded table artwork, saved or shared designs, eligibility record, queued product-analytics events on the device, and authentication identity. At tables hosted by someone else, your seat is converted to a non-identifying bot so an active game can continue. Resolved safety-report evidence is removed within 90 days; unresolved reports remain until reviewed. Limited decision records, de-identified Apple transaction ownership records, and records required for security, fraud prevention, accounting, or legal obligations may remain. Diagnostic records age out under the configured service retention period. Contact us to request help with access or deletion.
Your choices
You can edit your display name and profile photo, control notification preferences, change your email or password, disable exact-username lookup, block users, report content, leave tables, and delete your account from within the app. Deleting your Mahj Mates account does not cancel an Apple subscription. Manage or cancel it separately in Apple subscription settings.
Age eligibility
Mahj Mates is for people age 13 and older. Before account access, we ask for a birth date to check eligibility. We process the date for this check without saving it in our account database. We store an eligibility result, the check time, and the policy version. A temporary pass links a successful pre-signup check to your account; it expires after 24 hours and is removed when used. Your birth date and eligibility record are not displayed to other players. A device may retain a blocked result to prevent immediate repeat attempts.
Existing accounts also need to complete the check. If an account reports an age below 13, app access is blocked; deletion and support remain available. Contact monkeysquishlabs@gmail.com about an underage account or a mistaken entry. We do not offer an under-13 parental-consent signup flow.
Contact
For privacy questions, safety concerns, or deletion assistance, email monkeysquishlabs@gmail.com.