Yanufi privacy policy

Overview

Yanufi is a card game score tracker. This policy explains what data the app handles, how it is used, and your rights as a user.

1. Who is responsible

Yanufi is made by Nils Anton Viktor Larsson, Malmö, Sweden, under the name NAVL (“we”, “us”). He is the data controller for the personal data described in this policy. You can reach us atinfo@navl.dev.

2. Data stored locally on your device

The following information is stored only on your device using your phone’s local storage:

• Your display name (chosen on first launch)
• Game history (player names, scores, rounds, date played)
• App settings (theme, dark mode, default score, game rules)
• Saved player names from previous games

This data never leaves your device unless you choose to enable the sync feature. We have no access to it, so we do not process it as a controller.

3. Sync feature: data stored in the cloud

The sync feature is entirely optional. If you choose to enable it, the following data is uploaded to Google Firebase Firestore (a cloud database operated by Google LLC):

• Your display name
• A randomly generated sync code that identifies your account
• Your game history, including player names, scores, and round data
• Link relationships between you and friends you have synced with

This data is used solely to sync game results between you and players you have explicitly chosen to connect with. It is not used for advertising, analytics, or any other purpose.

Game history can include the names of other people you played with. Use first names or nicknames, and only sync games with people who are happy to be included.

4. Data shared with friends

When you sync with a friend, your game results that include their name as a player are shared with them, and vice versa. Only players you have manually linked with using a sync code can access your data.

5. Legal basis

• Sync: we process sync data to provide the feature you turned on, which is necessary to perform our agreement with you (GDPR Art. 6(1)(b)).
• Names of other players in synced games: our legitimate interest, and yours, in keeping a shared score history for the people at the table (GDPR Art. 6(1)(f)).
• Emails you send us: our legitimate interest in answering your questions (GDPR Art. 6(1)(f)).

6. Service providers and transfers outside the EU

The sync feature uses Google Firebase Firestore. Google LLC processes sync data on our behalf as a data processor, under Google’s data processing terms, and may not use it for its own purposes.

Google LLC is based in the United States, and sync data may be processed there. Such transfers are covered by the EU–US Data Privacy Framework, which Google LLC is certified under, and by the European Commission’s Standard Contractual Clauses. More about Google’s practices:firebase.google.com/support/privacy.

No other third-party services, analytics tools, or advertising SDKs are used in this app.

7. Data retention

Local data remains on your device until you delete the app or use “Remove All Data” in Settings.

Cloud data is deleted automatically after 90 days, or immediately when you use “Remove All Data” in Settings.

8. Your rights

Under the GDPR you have the right to:

• get a copy of the personal data we hold about you;
• have incorrect data corrected;
• have your data deleted;
• restrict how we use your data;
• object to processing based on our legitimate interest;
• receive your data in a portable format, where that applies.

You can delete all your cloud data yourself with “Remove All Data” in Settings. For anything else, emailinfo@navl.dev. We answer within one month.

If you think we handle your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY) or the data protection authority where you live.

9. Children’s privacy

Yanufi does not knowingly collect data from children under the age of 13.

10. Changes to this policy

This policy may be updated from time to time. Any changes will be reflected by the “Last updated” date at the top of this document.