Legal
Privacy Policy
Effective October 18, 2026
Who we are
Playtime is made and run by Yusuf Emirhan Şahin, an individual developer (“we”, “us”). We are the data controller for the personal data described here. You can reach us at me@yemirhan.com.
This policy covers the Playtime iPhone app and this website (playtime.yemirhan.com). It does not cover Apple, Google or other services you use alongside Playtime; their own policies apply.
What we collect
Your account
- Guest accounts. When you “jump in as a guest” we create an anonymous account with a random display name (like “Rapid Koala”), a random emoji avatar and color, and an internal identifier. We don’t ask for your name, email or phone number.
- Email and password. If you sign up with email, we store your email address and a securely hashed version of your password (never the password itself).
- Sign in with Apple or Google. We receive an account identifier and, depending on what you share, your email address (which may be an Apple private relay address), name and profile photo link. We use these only to sign you in; your Playtime display name is separate and set by you.
- Sign-in sessions. To keep you signed in, our sign-in system stores session records, which can include the IP address and app/device information (user agent) used to sign in.
Your profile
Display name, emoji avatar and color, board theme, a short friend code, whether notifications are on, when you were last active (so friends can see if you’re online), and whether you have Playtime Plus and until when. If you pair up with a partner for the daily question, we store the time zone of the device that created the pairing so the day changes at the right time.
What you do in the app
- Games. Online matches: the game, who played, every move, the result, timestamps, turn timers and invite codes. We also keep stats (wins, losses, streaks), results against bots, head-to-head records with opponents, and achievements.
- Couple games. The answers you type, the picks you make and the drawings you make in Draw & Guess are stored as part of that match, and shown to the other player. In “say it out loud” mode nothing is recorded — Playtime never uses your microphone.
- Daily question. Your partner link, your shared streak and your daily answers. Your answer is visible only to your partner, and only after you’ve both answered that day’s question.
- Social. Friends and friend requests, partner invites, players you’ve blocked, and reports you send (the reason, the match and any details you add).
- Custom decks (Plus): the prompts you write. When you use a deck in a game, a copy of its prompts is saved with that match.
- Reactions and quick chat. Emoji reactions and preset phrases (like “Good game”). There’s no free-text chat. These are deleted automatically after about an hour.
Pass-and-play games (two players on one phone) are saved only on your device and never sent to us. The Home Screen widget also keeps a copy of today’s question and your streak on your device.
Notifications
If you allow notifications, we store a push token for your device so we can tell you when it’s your turn, when someone joins or challenges you, or when your partner is waiting on today’s question. You can turn them off in Profile → Settings or in iOS Settings.
Purchases
Playtime Plus is sold through Apple. Apple handles payment; we never see your card or billing details. We use RevenueCat to manage subscriptions. RevenueCat receives your Playtime account ID (a random internal ID), purchase and receipt information, and basic device information, and tells our servers whether your Plus subscription is active.
Diagnostics and analytics
- Crash reports (Sentry). When the app crashes or hits an error we may send a report with technical details: device model, OS and app version, the screen you were on and what went wrong, plus a small sample of performance data. Reports are tagged with your account ID only — we turn off collection of IP addresses, emails and other personal details.
- Product analytics (PostHog). We record a small set of events — for example finishing onboarding, starting, joining or finishing a match, opening the Plus screen, buying Plus or deleting an account — along with which screens are viewed (by screen type, never the content), app opens, device and app version, whether you’re a guest and whether you have Plus. Events are linked to your account ID, never your name or email. PostHog may use your IP address to estimate your country; we don’t use it to identify you.
Tracking and your advertising identifier
Playtime may ask for permission to track (Apple’s App Tracking Transparency). If — and only if — you allow it, we pass your device’s advertising identifier to RevenueCat so we can tell which ads or links led to installs and purchases. If you decline, nothing changes in the app. You can change your choice any time in iOS Settings → Privacy & Security → Tracking. Playtime doesn’t show ads and doesn’t use your advertising identifier for anything else.
When you contact us
If you email us, we keep the email and our reply so we can help you.
How we use it
- To run the games: matchmaking, invite codes, turns, timers, results, stats and achievements.
- To run the social and couple features you choose to use: friends, partners, answers and reveals.
- To send the notifications you’ve allowed.
- To provide Playtime Plus and restore purchases.
- To keep Playtime safe: blocking, handling reports, and acting on abuse or cheating.
- To fix crashes and understand which features are used, so we can make the app better.
- To answer your questions and requests, and to meet legal obligations.
We don’t sell your personal information, we don’t share it for targeted advertising, and we don’t use it to make automated decisions that have legal or similarly significant effects on you.
Legal bases (EEA, UK and similar laws)
- Contract — to provide the app and the features you ask for, including Plus.
- Legitimate interests — keeping Playtime secure and fair, moderating abuse, crash reporting and basic product analytics. We keep these minimal and pseudonymous.
- Consent — push notifications and the advertising identifier. You can withdraw consent at any time in iOS Settings.
- Legal obligation — where the law requires us to keep or disclose information.
What other players can see
- Your display name, avatar, and whether you’re online — to people you play with or who see your open games. Your friend code is shown to you so you can share it.
- Your moves, results and head-to-head record — to your opponents in those games.
- Your couple-game answers and drawings — to the other player in that game.
- Your daily answers — to your partner, only after you’ve both answered.
- If you have a partner, unpairing or deleting your account removes your shared daily answers for both of you.
Your email address and sign-in details are never shown to other players. Blocked players can’t see your open games, join your games or send you requests.
Who we share it with
We use a small number of service providers who process data on our behalf, under contracts that limit what they can do with it:
| Provider | What for | Location |
|---|---|---|
| Convex | Backend hosting and database (accounts, games, answers) | United States |
| Expo (650 Industries) | Delivering push notifications and app updates | United States |
| Apple | Push notifications, Sign in with Apple, App Store purchases | Global |
| Sign in with Google (only if you use it) | Global | |
| RevenueCat | Subscription management and, with your permission, install attribution | United States |
| Sentry (Functional Software) | Crash and error reports | United States |
| PostHog | Product analytics | United States |
We may also disclose information if the law requires it, to protect players or the service from harm or fraud, or as part of a transfer of Playtime to a new owner (who would have to honor this policy).
International transfers
Our servers and most of our providers are in the United States, so your data will be processed there and in other countries where they operate. Where data protection law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the EU–US Data Privacy Framework.
How long we keep it
- Your account and profile: until you delete your account.
- Reactions and quick chat: about an hour.
- Partner invites: they expire after 7 days. Unused game lobbies expire automatically.
- Finished matches: kept so both players’ game history and answers journals keep working. If you delete your account, your side is anonymized (see below).
- Reports and moderation records: kept as long as needed to keep Playtime safe, including after an account is deleted, so repeat abuse can be handled.
- Guest accounts you sign out of: signing out of a guest account means you can’t get back in, but the data stays on our servers like any inactive account. Delete the account from Settings before signing out, or email us, if you want it gone.
- Crash reports, analytics and subscription records are kept by Sentry, PostHog and RevenueCat according to their retention settings, and deleted on request.
- Backups made by our hosting provider are overwritten on a rolling basis.
Deleting your account
In the app, go to Profile → Settings → Delete account. It works for guests and signed-in accounts and takes effect immediately. You can also email me@yemirhan.com — see how to delete your account for details.
What is deleted:
- Your sign-in account: email, password, linked Apple/Google sign-in and all sessions.
- Your push token, friends and friend requests, and blocks (both ways).
- Your partner link, your shared daily-question answers and any partner invites.
- Your custom decks, achievements, stats and results against bots.
What is anonymized:
- Your profile becomes “Deleted player” with a neutral avatar, so other players’ game history still makes sense. Your name, avatar, friend code and Plus status are removed from it.
- Finished matches, their moves and the answers given in them stay with the other player’s history, shown as “Deleted player”. Open lobbies are cancelled, and games in progress are resigned (your opponent wins).
What isn’t affected: your Apple subscription. Cancel Playtime Plus in your Apple ID settings to stop renewals. Reports you made or that were made about you are kept for moderation. To have your crash, analytics and RevenueCat records deleted too, email us after deleting your account.
Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy in a portable format;
- correct it (you can change your display name and avatar in the app any time);
- delete it;
- object to or restrict how we use it, including processing based on legitimate interests;
- withdraw consent (notifications and tracking can be turned off in iOS Settings);
- complain to your local data protection authority.
These include rights under the EU and UK GDPR, Türkiye’s Personal Data Protection Law (KVKK, No. 6698) and US state privacy laws such as the California Consumer Privacy Act. To use them, email me@yemirhan.com. We may need to confirm the account is yours — for example by asking you to send the request from the email on the account, or to tell us your display name and details only you would know. We’ll reply within 30 days, and we won’t treat you differently for using your rights.
California residents: in the last 12 months we collected the categories described above (identifiers, account information, app activity, purchase history, diagnostics and approximate location from IP) for the purposes in “How we use it”. We do not sell or share personal information as those terms are defined in the CCPA, and we don’t knowingly collect data from anyone under 16.
Children
Playtime is not meant for children. You must be at least 13 to use it, or 16 if you’re in the European Economic Area or the UK (or the minimum age of digital consent where you live, if higher). Some couple-game decks include mildly flirty content. If you believe a child has given us personal data, email us and we’ll delete the account.
Security
Data is encrypted in transit, passwords are hashed, and access to production systems is limited to us. No service is perfectly secure, but we take reasonable measures to protect your data and will tell you and the relevant authorities about a breach where the law requires it.
Changes to this policy
If we change this policy we’ll update the date at the top. If a change is significant, we’ll let you know in the app before it takes effect.
Contact
Questions or requests: me@yemirhan.com
Yusuf Emirhan Şahin, individual developer