Privacy Policy

1. Introduction

This Privacy Policy explains how Tilery (“the app”, “we”, “us”), an application published by Shayne, handles information when you use Tilery on supported mobile and desktop platforms and this website. Tilery is an independent implementation of a rummy-style tile game. We've tried to collect as little as possible and to be plain about what we do collect.

By using Tilery, you agree to this policy. If you don't agree, please don't use the app.

2. Information we collect

Account & identity

You can start with a guest identity without signing in to Apple or Google. Account options include:

• Sign in with Apple — Apple provides us a unique identifier and, depending on your choice, your name and a real or private-relay email address. We store Apple authorization tokens encrypted so we can revoke that authorization when you delete your account. Failed revocation is retried before the stored token is removed. Older accounts without a saved token can remove Tilery through their Apple Account settings. We never receive your Apple password.
• Sign in with Google — Google provides an identifier and basic profile information such as your name, email address and profile picture. We never receive your Google password.
• Guest / anonymous sign-in — we create an anonymous account tied to a random identifier on your device, with no email or personal details.

You may also set a display name and profile picture that other players can see in games and standings. Uploaded profile pictures are stored at public URLs, so anyone with the image URL can view them. Authentication, accounts and uploaded pictures are handled by our backend provider, Supabase.

Gameplay data

When you play — especially online — we process game state so the match works: the rooms you create or join, room codes, the tiles and moves in a game, turn order, and results. Room codes are short and shared by you with the people you invite.

Subscriptions & purchases

If you join Tilery Club, the purchase is processed by the Apple App Store or Google Play — not by us. The store sends us a receipt or purchase token that we verify to unlock membership. We store your plan, subscription status and renewal/expiry date, plus voice-credit usage when your plan includes AI minutes. We never receive or store your credit-card or payment details.

AI voice opponent audio

With your microphone permission, you can record voice snippets for other players or speak to the optional Voice AI opponent. Room snippets are stored for replay; live AI audio is sent to OpenAI. These separate features are described in Section 3. Other game modes do not require microphone access.

Leaderboards & achievements

Tilery stores game results, daily puzzle results, statistics and achievement progress against your account to provide standings and progress across devices. Standings may show your display name, picture and results to other players. Where supported, you can also use Apple Game Center or Google Play Games under your platform gaming profile. Those services are also governed by Apple's and Google's privacy policies.

Notifications

If you enable push notifications, we associate your device's delivery token or channel and an installation identifier with your account to send invitations, turn reminders and other game activity. We also store notification and player communication preferences. Daily puzzle reminders can be scheduled locally on your device.

Device & technical data

Like most apps, basic technical data (such as device/OS type and app version) may be processed to deliver and maintain the service. Mobile app delivery can include over-the-air updates via Expo; native desktop updates are delivered through their app store. We do not use third-party advertising SDKs, and we do not sell your data.

3. Voice snippets and the AI voice opponent

Room voice snippets

When you choose to send a voice snippet, Tilery uploads your recording to private Supabase storage and saves its sender, room, time, duration and any reply reference in the room's activity history. Room members can replay it. Snippets stay with the game history until their room or sender's account is removed, when they are queued for file deletion. Muting another player changes playback and notification preferences; it does not delete their recordings.

Live AI conversations

The voice opponent is powered by OpenAI's realtime speech service. Because it involves your microphone, we want to be especially clear. There are two ways it can run:

• Managed voice credits: our server issues a short-lived access token for available free or Tilery Club credits, and your audio is sent from your device directly to OpenAI to run the live session. We store the number of seconds used against your account to meter those credits, but our server does not receive or store the live AI audio itself.
• Bring your own key (BYOK): if you add your own OpenAI API key, it is stored only on your device using the operating system's secure storage. Your audio and your key are sent directly to OpenAI and never pass through our servers.

4. How we use information

• To create and authenticate your account and keep you signed in.
• To run games — matchmaking rooms, syncing moves, and determining winners.
• To provide the AI voice opponent and meter Club voice credits.
• To verify purchases and manage your subscription.
• To provide room reactions and voice snippets, notifications, leaderboards and achievements.
• To maintain, secure, debug, and improve the app.
• To comply with legal obligations and enforce our Terms of Service.

5. How information is shared

We do not sell your personal information. We share it only with service providers that make the app work, and only as needed:

• Supabase — authentication, database, realtime multiplayer, uploaded pictures and voice snippets, and server functions.
• OpenAI — the realtime AI voice opponent (see Section 3).
• Apple — Sign in with Apple, App Store purchases, Game Center and Apple push delivery.
• Google — Google sign-in, Google Play purchases and Play Games services.
• Expo — mobile app delivery, over-the-air updates and mobile push notifications.

We may also disclose information if required by law, to protect our rights or users' safety, or as part of a business transfer. Each provider processes data under its own privacy policy.

6. Data retention

We keep account and subscription data for as long as your account is active and as needed to provide the service or meet legal, tax, and accounting requirements. Transient game state may be cleared after a match ends. Account or room deletion queues associated uploaded pictures and recordings for removal; file removal happens separately and is retried if storage is unavailable. You can delete your account in Settings or contact us about your data (see Section 7).

7. Your choices & rights

• Microphone: voice snippets and Voice AI are optional. You can decline or revoke microphone permission in your device settings at any time; other modes keep working.
• Notifications: you can disable notifications in your device settings and change available reminder and player communication preferences in Tilery.
• Access & deletion: use Settings → Account → Delete account to initiate account deletion. Deleting an account does not cancel a store subscription; cancel Tilery Club through your store's subscription settings to stop renewals. You may also request a copy of your data, correction, or help with deletion by emailing us at support@playtilery.app.
• Your OpenAI key: if you use BYOK, you can remove your key from the app's Settings at any time; it lives only on your device.
• Regional rights: depending on where you live (for example the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights to access, correct, delete, or restrict processing of your data, and to lodge a complaint with a regulator. Contact us to exercise them.

8. Children's privacy

Tilery is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

9. Security

We use reputable providers and industry-standard measures — including encrypted transport (HTTPS/TLS) and the device's secure storage for sensitive values like your OpenAI key. No method of transmission or storage is perfectly secure, but we work to protect your information.

10. International users

Our providers may process and store data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers. By using the app you understand your information may be processed in these locations.

11. Changes to this policy

We may update this policy from time to time. When we do, we'll revise the “Last updated” date above and, for material changes, provide notice in the app or on this site. Continued use after changes take effect means you accept the updated policy.

12. Contact us

Questions, requests, or concerns about privacy? Email support@playtilery.app and we'll get back to you.