Privacy policy

In short

Pypo is a party games app published by Happy App Studio. We collect as little data as possible: no account, no location, no contacts, no photos, and never your first names in our usage statistics. Players and settings stay on your phone; what goes through our servers, such as a multi-phone game, is deleted automatically.

Who is responsible for your data?

Happy App Studio, the publisher of Pypo, is the data controller. For any question or request: hello@happyapp.studio.

What stays on your phone

Players (first name, gender, avatar), your settings and the cards already drawn are stored on your device only. They are not sent to us, except as described below for a multi-phone game. Uninstalling the app deletes them.

Anonymous identifier

For multi-phone games and for Pypo+, the app creates an anonymous identifier (Firebase Authentication, Google). It contains no name and no email address. It is deleted automatically after 180 days without use, or earlier on request (see "Your rights"). Uninstalling the app does not delete it. Legal basis: performance of the service you request.

Multi-phone games (rooms)

When you create or join a room, the data the game needs is stored on our servers (Cloud Firestore, Google) for the life of the room: players' first names, avatars and pronouns, answers written during games, and private preferences (see below). The other players in the room see the first names, the avatars and the answers the game shows them.

• A room is deleted automatically 24 hours after it is created by default, and 96 hours after at the latest.
• A player's preferences are deleted when they leave the room; preferences are deleted as soon as the room is closed.

Legal basis: providing the service you ask for.

Private preferences

Each player may, if they wish, set preferences, for example the players they accept certain dares with, or topics to leave out. They are only used to choose cards. In a room, they are sent only to the phone running the game, which never displays them. They never appear in our usage statistics, crash reports or reports. Because they may touch on intimate life, they are only stored with your explicit consent, which you can withdraw at any time by deleting them. They are optional.

Age

Pypo is for adults (18+ store rating). We do not verify players' age and we collect no age information: sexual content is off by default and is only turned on through a setting the group chooses. Legal basis: protecting minors and our legal obligations.

Playing in a browser

Pypo can be played in a browser, on pypo.app, without installing the app, with the same games and the same rooms. Players and settings stay in your browser's local storage; what goes through our servers (rooms) follows the rules above. The site is hosted by Vercel, which, like any host, receives visitors' IP addresses and technical connection data and keeps them in its logs for a limited time. On the web there are no usage statistics, no crash reports and no ads from an ad network: only an in-house ad, presenting our own apps, may appear. Legal basis: our legitimate interest in running the site.

Usage statistics

With your consent, asked at first launch in the European Economic Area and the United Kingdom, we use Firebase Analytics (Google) to learn which games and settings are used, and to improve the app. These statistics contain no first name, no written answer and no preference. They are kept for 14 months. You can change your mind at any time in the app settings. Legal basis: your consent.

Crash reports

To fix errors, the app sends crash reports to Firebase Crashlytics (Google): device model and operating system, app version, technical trace of the error and an installation identifier. They contain no first name and no advertising data, and are kept for 90 days. Legal basis: our legitimate interest in providing an app that works.

Advertising

Unless you have Pypo+, the app shows Google AdMob ads. In the European Economic Area and the United Kingdom, a Google consent form lets you choose; on iPhone and iPad, the advertising identifier is only used if you allow it (App Tracking Transparency). Without your consent, ads are not personalised. Google and its partners then process technical data (IP address, device, advertising identifier if you allowed it) under their own rules. When no Google ad is available, for example offline, an in-house ad presents our other apps: it goes through no ad network and shares nothing with third parties. You can change your choices in the app settings. Legal basis: your consent, where the law requires it.

Purchases and Pypo+

Pypo+ is an annual or monthly subscription, paid to Apple or Google: we never see your payment data. To activate Pypo+ on your devices, we use RevenueCat, which receives the proof of purchase, the product, the dates and your anonymous identifier. This data is kept for the duration of the subscription, then for the time required by our legal and accounting obligations. Legal basis: performance of the contract.

Reports and support

When you report a card, an answer or an ad, or write to us from the app, we receive your message, the game and card concerned, the language, the app version, the device's operating system and, if you give it, your email address. Never a first name or a room code. The message reaches us through a private messaging service (Telegram), read only by the studio team, and is kept for 12 months at most. Your IP address is not stored: an irreversible fingerprint is only used to limit abusive sending, then deleted within 48 hours. Legal basis: our legitimate interest in moderating content and replying to you.

Security and fraud prevention

To check that requests really come from the app, we use Firebase App Check, which relies on App Attest (Apple), Play Integrity (Google) and, for the web version, reCAPTCHA Enterprise (Google). These services check the integrity of the device or browser under their own rules. Exchanges with our servers are encrypted, and our database rules limit each player's access to what the game shows them. Legal basis: our legitimate interest in protecting the service.

Service providers and transfers

We do not sell your data. It is processed on our behalf by Google (Firebase: authentication, database, functions, usage statistics, crash reports, App Check; AdMob for ads), Apple (App Store, App Attest), RevenueCat (purchases), Vercel (hosting of the pypo.app site) and Telegram (receiving reports). Some of these providers may process data outside the European Union, notably in the United States; these transfers are covered by the safeguards provided by the GDPR (adequacy decision or standard contractual clauses).

Your rights

You can access your data, have it corrected or erased, object to processing, request its restriction or portability, and withdraw your consent at any time. To have the data linked to your anonymous identifier erased, write to us at hello@happyapp.studio; without a request, it is erased after 180 days without use. You can also lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.

The steps are detailed on the Delete my data page; to reach us, see the Contact page.

Minors

Pypo is not intended for people under 18. We do not knowingly collect data about minors; if you think a minor has sent us some, write to us so that we delete it.

Changes

We update this policy when the app changes. The date of the last update is shown at the bottom of this page; in case of a significant change, we let you know in the app.