Privacy policy

01 Who we are

Spyzy is a free party game for iOS and Android made by an independent developer based in Poland, who is the data controller. This policy covers the Spyzy mobile app (“the app”) and the website spyzy.app (“the website”). For any question about privacy, write to hello@spyzy.app.

02 What the app collects

Nothing. The app has no accounts or sign-in, no servers of ours, no ads, no analytics, and no third-party tracking or crash-reporting SDKs. It does not need an internet connection to play.

We do not collect any data from the app, do not share it with third parties, do not sell it and do not use it to track you across other apps or websites. The app contains no in-app purchases and no links to ads.

03 Data stored on your device

To run the game, the app saves the following only in its own storage on your phone: player names, avatars and photos, card languages, settings, saved games, scores and history, and the word and mission sets you create or import.

This data is never sent to us or anyone else. We have no access to it. You can delete saved games in the app’s history, and deleting the app removes all of its data. Device backups (iCloud or Google) may include it under your own account settings.

04 Permissions

Camera — only if you choose to take a photo for a player’s avatar.

Photos — only to pick an avatar from your library when you choose to, and to save the evening dossier image when you tap “Save photo”.

Files — only when you choose a .spyzy set file to import.

Every permission is requested only at the moment you use the feature. You can refuse or revoke them in your phone settings; the game works without them.

05 Sharing

When you share a dossier image or a .spyzy set, the app opens your phone’s standard share sheet. What you send and to whom is your choice; the app you share to processes it under its own privacy policy.

06 AI-generated sets

Spyzy does not connect to any AI service. It only copies a prompt to your clipboard; you paste it into the chat service you choose and copy the reply back. That service processes your text under its own policy, so please don’t include personal data in a theme. The app reads the clipboard only when you tap “Import reply”.

07 App Store and Google Play

You download and update Spyzy through Apple’s App Store or Google Play. Your store account, downloads, ratings and reviews are handled by Apple or Google under their own privacy policies. We don’t receive your name, email address or other account details.

The stores give developers aggregated, anonymous statistics — for example the number of downloads, countries, devices and app versions. If you have allowed your phone to share diagnostics with app developers, Apple or Google may also pass on anonymous crash reports. We use these only to understand how the app is doing and to fix bugs; they don’t let us identify you.

Accordingly, Spyzy’s App Store privacy details state “Data Not Collected”, and its Google Play Data safety section states that the app collects and shares no user data. Because no data leaves your device, there is nothing to encrypt in transit and nothing to delete on our side — deleting the app deletes everything. If you still want to make a request, write to hello@spyzy.app.

08 The website: hosting

The website is hosted on Cloudflare, which processes technical data such as IP address and browser type to deliver the pages and protect them from attacks, under Cloudflare’s privacy policy.

If you pick a language on the site, the choice is remembered in your browser’s local storage only and is never sent anywhere.

09 The website: Google Analytics

Only the website — never the app — uses Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It runs only after you accept analytics in the cookie banner. Until then, no analytics cookies are set and no data is sent to Google.

With your consent we learn how many people visit, which pages and languages they view, where they came from (referring site or campaign link, e.g. the QR code in the app’s dossier) and whether they tap the App Store or Google Play buttons. For this, Google Analytics sets cookies (_ga, _ga_*) and processes pages viewed, approximate location (country and city) derived from your IP address, device type, operating system, browser, screen size and language. Google Analytics 4 does not log or store IP addresses.

We use this data only in aggregate, to improve the website. Google Signals and advertising features are turned off, and the data is not combined with anything from the app. Data is kept for 14 months and then deleted automatically.

Legal basis: your consent (Art. 6(1)(a) GDPR). Google may process data in the United States; such transfers rely on the EU–US Data Privacy Framework and standard contractual clauses. You can withdraw your consent at any time via “Cookie settings” at the bottom of every page, or by deleting cookies in your browser; withdrawal doesn’t affect processing before it. Your choice (allow or decline) is saved in your browser’s local storage for 6 months; after that, or if what we ask for changes, we ask again.

10 Children

Spyzy is suitable for all ages. Because the app collects no personal data, it collects none from children either. The website’s analytics run only with consent and are not intended for children under 16.

11 Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. Since we hold no personal data about app users, the data on your device is fully under your control. For website analytics or anything else, write to hello@spyzy.app — we reply within one month.

You can also lodge a complaint with a data protection authority — in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

12 Changes

If Spyzy ever starts processing personal data in the app — for example for online play — we will update this policy and the store privacy details before that release and change the date above.