Clepsydris Privacy Policy

Last updated: October 30, 2026

This Privacy Policy describes how Appify ("we", "us", or "our") handles information in connection with the Clepsydris mobile application (the "App"). Clepsydris is designed with privacy in mind: your data is stored locally on your device by default, and we only collect personal information when you explicitly opt into features that require it.

Appify, based in Warsaw, Poland, is the data controller for personal data processed in connection with the App. You can contact us at any time using the details in the Contact Us section.

1. Information We Collect

Local Data

All core app data is stored locally on your device and is not transmitted to our servers unless you explicitly use a cloud or sync feature. This includes:

  • Board game play sessions, player names, scores, and time tracking data
  • Game statistics, locations, badges, and app preferences
  • Photos intended for board game session imagery

Player names you enter may relate to other people, such as friends you play with. Please only add information about others that you are comfortable storing and, if you use cloud sync, backing up to the cloud.

Account & Authentication Data

If you choose to sign in, we collect only the minimum data necessary for authentication:

  • Google or Apple Sign-In: Your email address is stored solely to authenticate your account and enable cloud features.
  • Anonymous Sign-In: A randomly generated code is created to identify your cloud data. No email address is collected; your cloud data is linked only to a random account identifier.
  • BoardGameGeek Authentication: If you connect your BGG account, your username and password are used once to establish a secure session over HTTPS. Your password is never stored; only a session cookie is retained on your device for subsequent requests.

Friends & Notifications (Optional)

If you use social features while signed in, we store your friends list, friend invitations, and notifications exchanged with other users, along with the profile information needed to show you to your friends (such as the display name you choose). Users you connect with can see this profile information and the content you choose to share with them.

To deliver push notifications, we store a push notification token for each of your devices via Firebase Cloud Messaging. Tokens are removed when you delete your account.

Cloud Backup & Sync (Optional)

If you subscribe to the "Into the Clouds" plan, your app data and optionally your photos may be stored in Firebase cloud storage associated with your account. This data is used solely to provide backup, restore, and multi-device synchronization services. Appify offers up to 5 GB of cloud storage for photos and database backups.

If your subscription ends, we reserve the right to remove cloud-stored data (photos and backups) after a reasonable grace period. You should always maintain local backups of your data. The cloud service is provided "as is" and we are not liable for any loss, corruption, or unavailability of cloud-stored content, whether caused by technical failures, service changes, or any other reason. The cloud service may be modified, suspended, or discontinued at any time.

User-Uploaded Photos

The photo feature in Clepsydris is designed for storing images related to board game sessions. We do not monitor, review, or moderate user-uploaded photos. You are solely responsible for the content of any photos you store in the App or upload to cloud services. We assume no liability for user-uploaded content.

Location Data (Optional)

Clepsydris includes an optional geofencing feature that allows the App to automatically select a game location based on your physical proximity. This feature is disabled by default and requires your explicit opt-in.

  • What we collect: When the geofencing feature is enabled, the App collects precise GPS coordinates (latitude and longitude) from your device's location services.
  • When we collect it: Location data is collected only while the App is in the foreground (i.e., when you are actively using it). The App requests "when in use" location permission only and does not access your location in the background. Location is read when you start a new play session and when you save a play with a location assigned.
  • Why we collect it: Your coordinates are used solely to determine whether you are within approximately 200 meters of a saved game location, enabling auto-selection of that location for new play sessions.
  • How it is stored: GPS coordinates are stored locally on your device in a private file. This location data is never uploaded to any cloud service, never included in cloud backups, and never transmitted over the network. Location names (e.g., "John's House") that you create are stored in the local database and may be synced to the cloud if you use the Into the Clouds subscription, but GPS coordinates are never synced.
  • Retention: Geofence coordinate data is retained on your device indefinitely until you take action to delete it. There is no automatic time-based expiration.
  • Sharing: Your GPS coordinates are never shared with any third party. They are not sent to analytics services, advertising networks, or any external server. Only the location name (not coordinates) is sent to BoardGameGeek when syncing play data.
  • Deletion: You can delete all geofence coordinate data at any time by disabling the geofencing feature in the App's Settings. This immediately and permanently removes all stored GPS coordinates from your device. Individual location records can be deleted from the Location Detail screen. Uninstalling the App removes all location data entirely.

Analytics & Crash Reporting

The App uses Firebase Analytics and Firebase Crashlytics to collect usage data and crash reports. This helps us understand how the App is used, decide what to improve, and identify issues. The data collected includes:

  • Device type, operating system version, and app version
  • Usage events, such as using a feature, saving a play (its game mode, whether several devices took part, and a rounded player count and duration), sharing a card, and seeing or closing a paywall
  • General details about your use: your plan, whether cloud backup and cloud photos are on, whether a BoardGameGeek account is linked, and rounded numbers of friends and plays
  • Crash logs and error diagnostics
  • A random app-instance identifier generated by Firebase

This data is pseudonymous: it is linked to a random identifier, not to your name or email address, and we do not use it to identify you. Analytics never includes game names, player names, usernames, or anything you type in the App. Analytics and crash reporting are disabled in debug/development builds and are only active in production releases.

Account Deletion Requests via Our Website

If you request account deletion using the web form, we receive the sign-in method, email address or anonymous account code, and any contact email or additional details you provide. We use this information only to verify and process your request and to confirm its completion, and we delete it once the request has been handled, except where we need to keep a record that the request was fulfilled.

2. How We Use Your Information

We use the information described above to:

  • Provide, maintain, and improve the App's functionality
  • Enable cloud backup, sync, and multi-device features you opt into
  • Authenticate your identity when you sign in
  • Auto-select game locations based on your proximity (if enabled)
  • Diagnose crashes and technical issues
  • Understand pseudonymous usage patterns to guide development
  • Process in-app purchases and verify subscription entitlements
  • Deliver friend features and push notifications you opt into
  • Handle account deletion and other privacy requests

3. Legal Bases for Processing

If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on the following legal bases under the GDPR:

  • Performance of a contract (Art. 6(1)(b)): to provide your account, cloud backup and sync, friend features, BoardGameGeek integration, and the subscriptions you purchased.
  • Consent (Art. 6(1)(a)): for location-based geofencing and push notifications. You can withdraw consent at any time by turning these features off in the App or in your device settings.
  • Legitimate interests (Art. 6(1)(f)): to keep the App secure and stable, diagnose crashes, and understand how the App is used so that we can improve it.
  • Legal obligation (Art. 6(1)(c)): to respond to privacy requests and keep records required by law.

4. Third-Party Services

Clepsydris integrates with the following third-party services, each governed by their own privacy policies:

  • Firebase: Authentication, cloud storage, analytics, crash reporting, remote configuration, and cloud functions. See Firebase Privacy Policy.
  • RevenueCat: In-app purchase and subscription management. See RevenueCat Privacy Policy.
  • BoardGameGeek: If you connect your BGG account, play data and game collection information is exchanged with BoardGameGeek. All communication is done securely over HTTPS. See BGG Privacy Policy.
  • Apple App Store / Google Play Store: In-app purchases and subscriptions are processed through the respective platform's payment systems. We do not have access to your payment details.
  • Google Sign-In / Sign in with Apple: Used for account authentication. See Google Privacy Policy and Apple Privacy Policy.

Firebase and RevenueCat process data on our behalf as processors under their data processing terms, and only for the purposes described in this policy. We do not sell your personal data or share it for advertising.

5. International Data Transfers

Firebase is operated by Google, and your data may be stored on or accessed from servers located outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, it is protected by appropriate safeguards, such as the EU–U.S. Data Privacy Framework, to which Google is certified, and the European Commission's Standard Contractual Clauses included in Google's data processing terms.

6. Device Permissions

The App may request the following device permissions, only when needed:

  • Camera: To take photos of game sessions and to scan QR codes.
  • Photo Library: To save or select photos.
  • Location: To enable the optional geofencing feature for automatic location selection. Only "when in use" permission is requested.
  • Notifications: To send timer alerts and, if you use friend features, notifications from other users. You can disable notifications at any time in your device settings.

7. Data Retention & Deletion

Local data remains on your device until you delete it or uninstall the App. Cloud-stored data (if applicable) is retained while your subscription is active and for a reasonable period after it ends. Geofence coordinate data is retained until you disable the feature or uninstall the App.

You can delete your data at any time by:

  • Removing data within the App (plays, locations, photos, etc.)
  • Disabling geofencing in Settings to delete all stored GPS coordinates
  • Uninstalling the App (all local data)
  • Deleting your account (see Account Deletion below)

8. Account Deletion

If you signed in to Clepsydris (with Google, Apple, or anonymously), you can delete your account and its cloud data at any time:

  • In the App: go to Settings → Into the Clouds and tap Delete account. Deletion happens immediately after you confirm (you may be asked to sign in once more).
  • Without the App: submit a request using our account deletion form or email us at [click to reveal email] . We process web and email requests within 7 business days.

When your account is deleted, we permanently remove:

  • Your Firebase Authentication profile and linked sign-in providers
  • Cloud backups, sync data, and cloud-stored photos
  • Your friends list, friend invitations you sent, and notifications you sent to other users
  • Push notification tokens registered for your devices

If you signed in with Apple, we also revoke the App's access to your Apple ID. The following is not deleted:

  • Data on your device: local plays, photos, and settings stay on your device until you remove them or uninstall the App.
  • Purchase records: kept by Apple, Google, and RevenueCat as required by tax and financial regulations. Deleting your account does not cancel an active subscription; cancel it in your App Store or Google Play settings.
  • Analytics and crash reports: these are pseudonymous and not linked to your account. Analytics event data is kept for up to 14 months, and crash reports for up to 90 days.
  • BoardGameGeek data: plays already logged to BoardGameGeek remain on their platform and are governed by their policy.

9. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted
  • Restrict or object to certain processing
  • Receive your cloud data in a portable format (data portability)
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [click to reveal email] . We will respond within one month. You also have the right to lodge a complaint with a data protection authority. In Poland, this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl), or the authority in your country of residence.

10. Data Security

We take reasonable measures to protect your data. Local data is stored using standard device storage mechanisms. All network communication, including authentication and cloud sync, is conducted over encrypted HTTPS connections. Cloud data is stored using Firebase's security infrastructure. Location coordinates are stored in a private local file that is not included in cloud backups.

However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Clepsydris is not directed at children under the age of 16. We do not knowingly collect personally identifiable information from children under 16. If we discover that a child under 16 has provided us with personal information, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Links to Other Sites

The App may contain links to external websites or services not operated by us. We strongly advise you to review the privacy policies of any third-party sites you visit. We have no control over and assume no responsibility for the content or privacy practices of external sites.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically. Continued use of the App after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Appify
Email: [click to reveal email]
Warsaw, Poland