Privacy Policy

The short version

Your photos and videos never leave your device. They are read on the phone to build game rounds and are never uploaded, shared or stored anywhere else.

A small amount of account data — your display name, avatar, whether Exposed Plus is active, and your win/played totals — is stored in Google Firebase so it survives a reinstall. Chat messages you choose to send are stored there too. We have no analytics, advertising or tracking SDKs, and we do not sell or share your data with anyone.

Photos

If you grant photo access, Exposed! reads photos from your library to use as game rounds, along with the date and location metadata already saved on those photos, which is what the Guess When and Guess Where modes ask about.

All of this happens on your device. Photos and their metadata are never uploaded, never leave the phone, and are not retained after a game ends. You can decline photo access entirely and still play using the built-in demo images, and you can revoke access at any time in iOS Settings → Privacy & Security → Photos.

What we store in the cloud

Exposed! uses Google Firebase (Authentication and Cloud Firestore) to keep your account and entitlement across devices and reinstalls. Specifically:

• An anonymous account identifier generated by Firebase. It is not linked to your name, email or phone number unless you choose to sign in.
• Your display name and emoji, so a reinstall doesn't lose your profile.
• Whether Exposed Plus is active and whether it came from a purchase or a promo code.
• Your totals and game history — mode, date, round count, your score, and who won. No photo, video, filename or thumbnail is included.
• Chat messages you send in a room, along with the display name and emoji you send them under. Anyone with the four-character room code can read that room's messages, so treat a room as public and don't post anything private.

We never upload photos, videos, thumbnails, file names, albums or photo metadata. The game reads that on the device only.

Firebase processes this data on our behalf under Google's privacy terms. To have your cloud record deleted, email us and we'll remove it.

Your account

You can play without an account. If you choose to sign in:

• Sign in with Apple — we receive the anonymous user identifier Apple provides, and your name and email only if you choose to share them. These are stored on your device, in the iOS Keychain and app storage. They are not sent anywhere.
• Email — the email address and a salted hash of your password are stored in the iOS Keychain on your device. There is no account server, so this credential exists only on that phone.

Deleting the app deletes everything it stored, including your profile, roster and game history.

Purchases

Exposed Plus is sold through Apple's In-App Purchase system. Apple processes the transaction and we never see or store your payment details. The app reads your subscription status from StoreKit on the device to decide which features to unlock. Apple's handling of that transaction is covered by Apple's Privacy Policy.

Location

Exposed! does not request your live location. The Guess Where mode reads the location tag already embedded in a photo you took, and converts it into a place name using Apple's geocoding service. That lookup sends only the photo's coordinates to Apple, and is handled under Apple's privacy terms.

Children

Exposed! is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has used the app and want their record removed, email us and we'll delete it.

Screenshots and screen recording

Exposed! tells the room when a screenshot is taken or while screen recording is running, using the signals iOS gives an app about its own screen. It cannot see the contents of any screenshot or recording, cannot see other apps, and nothing about it is transmitted — the notice is shown on the device and then discarded.

Changes and contact

If this policy changes, the updated version will be posted on this page with a new date. Questions about privacy can go to brianpcoleman@gmail.com.