Privacy Policy for Baynan App

1Scope and controller

This policy explains how data is processed when you use Baynan: Questions for Couples and Love on Android or iOS. The provider and data controller is Omar Alkhatib (i3oma); see the Impressum for provider details or contact kh249918@gmail.com. This policy does not govern third-party sites or apps you choose to open from a sharing link.

2Data stored locally on your device

Depending on how you use the app, Baynan stores the following locally:

• Player names or nicknames used for local gameplay.
• Language, light or dark theme, section preferences, and onboarding completion.
• Favorite cards, game progress, and unlocked sections.
• Cached Premium status, in-app offer frequency limits, review-prompt status, and the local reminder identifier.
• Random measurement tokens kept locally to avoid duplicate analytics events.

This data is used to operate the app and remember your choices. You can remove it by clearing the app's data in your device settings or uninstalling the app. Uninstalling does not automatically delete information already transmitted to external services.

3Online gameplay and communications

The app creates a technical anonymous account through Firebase Authentication to secure access to online services. You are not asked for an email address or password. Google may process a random user identifier and security or connection information such as IP address and device information for this purpose.

• Game rooms: When you create or join a room, Cloud Firestore stores the room code, the name you entered, game type, room status, creation/join/expiry timestamps, question identifiers and round progress, player answers, choices, or guesses, and each player's technical Firebase identity, which identifies the room's members. Custom questions created for a room may also be stored.
• Sharing: If you share or copy a room code, your operating system passes that content to the app or service you choose. That third party controls its own processing.
• Support: If you send a support message, we store the message, app language, operating system, timestamp, status, and your email address if you voluntarily provide it.
• Question suggestions: If you submit a suggestion, we store the proposed question, category, app language, operating system, timestamp, and review status.
• In-app feedback: If you submit feedback from the review prompt, we store its text, operating system, app version, and submission time in app_feedback.
• Gift codes: When you buy or redeem a gift code, a service we run on Cloudflare (Workers and D1) processes the code and its status, the purchase transaction ID, the store, the technical RevenueCat ID of the buyer and of the person redeeming it, and the purchase and redemption times. Your IP address is used to limit guessing attempts. Gift codes are not stored in Firestore.

Your partner can see the room name and gameplay answers associated with the room. Do not use your real name or enter sensitive information unless you intend to share it with your partner. Share the room code only with the intended person.

4Analytics and technical data

We use Google Analytics for Firebase only if you opt in inside the app; you may decline or withdraw consent later in app settings. Events before consent are dropped rather than replayed. When enabled, the service may process a pseudonymous app-instance ID, device, operating-system and app-version information, sessions, purchases, interactions, and approximate location inferred from the connection. This is not necessarily anonymous data. The app's Analytics consent keeps ad storage, ad user data, and ad personalization denied. Other identifiers depend on platform and SDK settings.

Our custom analytics events include onboarding completion, counts of revealed questions, gameplay mode, room creation or successful joining, in-app offer impressions, notification permission requests, and purchase or restoration activity and errors. These events are designed not to include your name, email address, room code, question text, answer text, or support-message content.

The app also uses Firebase Remote Config to retrieve update settings. Apple and Google may provide aggregated diagnostics or crash information under your device and account settings.

5Purchases and subscriptions

Payments are processed by the Apple App Store or Google Play. The developer does not receive your card number or bank-account details. We use RevenueCat to display products, validate receipts, manage entitlements, and restore purchases. RevenueCat may therefore process a random anonymous app-user identifier, product, store and currency information, purchase history, subscription or entitlement status and dates, and technical data required to provide the service and prevent fraud. Purchase information available to us through RevenueCat or the stores is linked to a technical identifier, not to a name or email address requested by Baynan.

6Advertising and external services

From version 2.0.21, the app shows no ads from third-party networks and does not request the advertising ID. Offers shown inside the app promote Baynan Premium itself, and they do not send your data to advertisers.

Android versions older than 2.0.21 contain Google Mobile Ads components, Unity Ads and Liftoff Monetize adapters, and an advertising-ID permission, but we do not use them to show ads. Updating the app removes these components.

Providers supporting the app include:

• Google Firebase and Google Analytics for anonymous authentication, database services, analytics, and remote configuration.
• RevenueCat for purchases and subscription management.
• Expo for over-the-air app updates.
• Google and Apple for app distribution, billing, and platform services.
• Cloudflare for the gift-code service and automated data cleanup.

7Device permissions and optional features

• Local reminder: With permission, the app schedules a daily reminder on your device in the evening, at a time that varies from day to day. This local scheduling does not require sending reminder content to our server.
• Android and Firebase Messaging: The Android build includes FCM components, and your device may receive a registration token for remote notifications. We do not currently send promotional remote notifications. You can turn notifications off in your device settings.
• Internet: Required for online gameplay, support and suggestions, gift codes, analytics, purchases, and update checks.
• Billing: Android uses Google Play Billing permission to complete purchases.
• Haptics: Used locally for tactile feedback and does not transmit data.

The current version does not request access to contacts, precise location, camera, photos, or microphone. Network services may infer approximate location from the IP address without accessing GPS.

8Purposes and legal bases

We process data to operate local and online gameplay, fulfill your choices and purchases, respond to messages and review suggestions, secure the service and prevent abuse, measure and improve the app, provide updates, and comply with legal obligations.

Where the GDPR applies, the basis depends on the purpose: providing requested online gameplay and purchases; your optional consent for Firebase usage analytics, withdrawable in app settings; our legitimate interests in service security and preventing abuse; and legal obligations for transactions or lawful requests. Device-notification permission is managed in system settings. Withdrawal does not affect earlier lawful processing.

9Retention and deletion

• Local data: Retained until you clear the app's data, uninstall it, or the app replaces it during use.
• Game rooms: A room expires 24 hours after it is created. An automated job usually deletes expired rooms within hours, and a host may delete a room earlier by leaving.
• Messages, suggestions, and feedback: Records in contact_messages, suggestions, and app_feedback are deleted automatically 12 months after they are sent. You can request access, correction, or deletion earlier using the contact method below.
• Gift codes: Records stay while the code remains valid, because codes do not expire with time.
• Technical Firebase identity: Uninstalling does not by itself delete the anonymous Firebase Authentication user.
• Analytics, purchases, and service logs: Retained by providers according to our settings, their policies, and tax, accounting, or fraud-prevention requirements.

10Your rights and choices

Depending on applicable law, you may request access, correction, deletion, restriction, objection, or a copy of your personal data; withdraw consent; and complain to the competent data-protection authority. You can also manage notification permission through device settings, and subscriptions from "Manage subscription" in the app's Settings or through your Apple or Google account.

Send access, correction, deletion, or privacy requests to the email below with the record type and approximate time of use. Because Baynan does not require a personal account, we may need technical details to locate a record and may be unable to connect a pseudonymous record to you without them. For room requests, provide the room code and approximate time without emailing your answers.

11International transfers and security

Cloud Firestore data, such as rooms, messages, and suggestions, is stored inside the European Union (Belgium and the Netherlands). Other service providers may process data outside the European Union. Service providers may process data in countries outside your country of residence. Where required, we rely on their terms and available lawful transfer safeguards. We use encrypted HTTPS connections and appropriate access controls and security rules, but no electronic transmission or storage method is completely secure. Keep room codes private and avoid entering highly sensitive information in names, answers, or support messages.

12Adults and policy changes

The app is intended for adults aged 18 or older and is not designed for children. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us to request deletion. We may update this policy when app features, providers, or legal requirements change and will publish the revised version here with a new last-updated date.