Who is responsible
GUFFAW is provided by Anastasiia Martynovets, the app’s developer and data controller. Privacy questions and requests can be sent to help@guffaw.app.
Information handled on your device
Gameplay and local preferences
Built-in decks, completed-round identifiers, the one-time post-three-rounds prompt state, language and replay preferences, signed content caches, and score or setup state are kept on your device. GUFFAW does not require an account, contact book, surname, or precise location.
Group Deck
Group Deck runs entirely on the device. It normalises and hashes two to eight first names and optional short hints with the locale, signed deck revisions, and a local shuffle value to select a balanced mix of signed 4+ cards. Names, hints, and the assembled deck are not persisted or transmitted.
Kid-Safe
The Kid-Safe PIN representation, age ceiling, failed-attempt count, and lockout deadline stay in the device Keychain. A fresh-install check clears surviving Kid-Safe data when GUFFAW is opened after reinstall.
Camera Replay and Photos
If you enable Camera Replay, GUFFAW records video from the front camera without microphone audio while a round is active. The replay stays on the device and is not uploaded by GUFFAW. Temporary video is deleted after Save or Share succeeds, when Results closes, or during cleanup after an abandoned session. Save requests add-only Photos permission; a saved or shared copy is then controlled by the destination you chose.
Card reports
A card report contains a random report ID, stable card and deck IDs, one closed reason code, and a timestamp. It contains no card text, player name, team name, or free-form report text. Pending reports use protected local storage. The current release does not transmit them; they remain pending until delivery is available or the app data is removed.
Premium fallback
A premium-active flag and the time it was last verified may be stored in the Keychain for up to 14 days so previously verified access can work briefly offline. It is replaced after a successful StoreKit entitlement check.
Analytics, diagnostics, and configuration
GUFFAW uses Firebase Analytics Core to understand app lifecycle, screen, and closed product-interaction events. Firebase may process pseudonymous Firebase Installation and App Instance identifiers, app and operating-system versions, device model, language, and approximate region derived from an IP address. Analytics event data is retained for up to 14 months; aggregated reporting may be kept longer.
Firebase Crashlytics processes crash reports, stack traces, relevant app/device state, app and operating-system versions, a Crashlytics installation UUID, and a Firebase Installation ID. Crash reports are retained for up to 90 days before deletion begins. Explicit GUFFAW diagnostics contain only a closed subsystem and integer code.
Firebase Remote Config may process country, language, time zone, operating-system version, Firebase app ID, bundle ID, and SDK metadata to fetch approved content ordering and presentation values. Firebase Installations and Sessions support those services.
GUFFAW does not send player or team names, card or deck text, Kid-Safe PINs, raw motion samples, replay video, or report text to Firebase. It uses Firebase Analytics Core without IDFA support, disables personalised advertising signals, does not request App Tracking Transparency permission, and does not set a GUFFAW user ID.
Purchases and subscriptions
Payments are processed by Apple. Apple and Adapty may process an anonymous Adapty profile and installation identifiers, StoreKit transaction and original-transaction identifiers, product and subscription status, purchase, renewal, cancellation and refund dates, storefront region, trial eligibility, paywall interactions, locale, and ordinary app/device/SDK metadata. GUFFAW disables Adapty IDFA collection, IP-address collection, attribution, and external integrations, and does not receive your full payment-card details or Apple Account password.
This website and support
Cloudflare delivers this static website and may process an IP address, request headers, requested path, response status, timing, and security events for delivery and abuse prevention. Cloudflare Worker logs are retained for no more than 7 days. The site sets no cookies and contains no client-side analytics, advertising, support form, or third-party script.
Choosing an email link opens your own email service. If you contact support, we receive your email address and anything you include, which may include the app version, iOS version, device model, or screenshots. Support messages are kept for up to 24 months, or longer when reasonably needed for a dispute, security issue, or legal obligation.
How information is used
We use information only as reasonably necessary to provide purchase access and restoration, understand feature use, diagnose reliability problems, deliver safe configuration, prevent abuse, operate the app and website, answer support and privacy requests, comply with law, and enforce the Terms of Use.
Service providers
- Apple for App Store distribution, payments, subscriptions, Photos, and device services;
- Google Firebase for analytics, remote configuration, installations, sessions, and crash diagnostics;
- Adapty for paywall delivery, subscription management, purchase analytics, and entitlement state; and
- Cloudflare for website delivery and security.
We share information with these providers only as needed to operate GUFFAW. We may also disclose information when required by law, to protect users or the service, investigate abuse, or as part of a business reorganisation. We do not sell or rent personal information and do not share it for cross-app behavioural advertising.
Retention and deletion
- Group Deck names, hints, and the assembled deck last only for the current in-memory session.
- Temporary replay video is removed after successful Save or Share, when Results closes, or during abandoned-session cleanup.
- Firebase Analytics event data is retained for up to 14 months and Crashlytics reports for up to 90 days.
- Cloudflare Worker logs are retained for no more than 7 days and support messages for up to 24 months.
- Purchase, legal, and provider records are kept only as long as reasonably necessary or required by Apple, applicable law, accounting, security, dispute-resolution, or fraud-prevention rules.
GUFFAW has no account to delete. Deleting the app removes its local files and preferences; opening a fresh installation also clears Kid-Safe credentials that may have survived in the Keychain. Copies you saved to Photos or sent to another app must be deleted from those destinations separately. Deleting the app does not cancel an App Store subscription; manage billing in Apple Account subscription settings.
To request access, correction, deletion, or de-identification of information controlled by Anastasiia Martynovets, email help@guffaw.app. Never send a password, full payment-card number, or raw purchase receipt. We respond within 30 days or the period required by applicable law and will instruct relevant providers where reasonably possible. Apple-controlled purchase information and billing choices must be handled through Apple.
Permissions and choices
- Camera: requested only after you choose Camera Replay; manage access in iOS Settings.
- Photos: add-only access is requested only when you choose Save to Photos.
- Tracking: GUFFAW does not request App Tracking Transparency permission or use advertising identifiers.
- Other access: GUFFAW does not request microphone, contacts, precise location, read access to the photo library, or notification permission.
Legal bases and privacy rights
Where applicable, information is processed to perform our contract by providing the app and purchased access, for legitimate interests in operating, securing, and improving the service and preventing abuse, with consent for optional device permissions, and to comply with legal obligations.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, withdraw consent, or complain to a data-protection authority. Because GUFFAW has no account, we may need details about a support request or purchase to locate a relevant record.
International transfers and security
Providers may process information in countries other than your own. Where required, appropriate safeguards are used for cross-border transfers. We use data minimisation, local processing, protected device storage, privacy-safe diagnostics, and transport security, but no storage or transmission method is completely secure.
Children’s privacy
GUFFAW is rated 18+ and is not directed to children. Kid-Safe is an adult-controlled tool for filtering decks by their internal 4+, 9+, 12+, or 17+ labels when an adult supervises a mixed-age group; it does not change the app’s 18+ rating. GUFFAW has no account and does not knowingly collect names or contact details from children. If you believe a child has provided personal information through support, contact us so we can take appropriate action.
Changes and contact
We may update this policy when the app, providers, or legal requirements change. The updated version will be posted here with a revised effective date. The developer and data controller is Anastasiia Martynovets; contact help@guffaw.app.