Privacy Policy for Love Hunt

Nigelware ("we," "our," or "us") operates the Love Hunt mobile application (the "App"). This Privacy Policy explains how we collect, use, and protect your information when you use our App.

Information We Collect

User-Created Content

Love Hunt allows you to create scavenger hunts that include:

• Hunt Details: Titles, clue text, and final reveal messages you write
• Photos: Images you select from your photo library or capture with your camera for cover images, step clues, hints, and the final reveal
• Audio Recordings: Voice recordings you create as audio hints for hunt steps
• Passcodes: Text-based passcodes you set for step unlocking (stored as a one-way SHA-256 hash when published — the original text is never uploaded)

Anonymous Account Identifier

To control who can edit or delete a published hunt, the App generates an anonymous user ID via Firebase Anonymous Authentication on first launch. This identifier is stored in your device's Keychain and is not tied to any personal information — no email, no name, no Apple ID. It is used solely to enforce ownership rules in our backend (only the original creator's device can modify or delete a published hunt).

Recipient Information (When You Play a Hunt)

When you open a hunt that someone has shared with you, the App may collect:

• Optional First Name: Before starting a hunt, you are asked to enter a name so the hunt's creator can see who played. This step is optional — you can skip it, in which case you are recorded as "Anonymous."
• Play Progress: The time you started the hunt, which clues you have completed, the total number of steps completed, and the time you finished (if you complete the hunt). This is shown to the hunt's creator so they know whether you reached the final reveal.

Automatically Collected Data

• Subscription Status: Whether you have an active subscription or have made the lifetime purchase, managed through Apple's App Store and our paywall provider
• App Integrity Tokens: Firebase App Check generates short-lived attestation tokens to verify that requests to our backend originate from a legitimate copy of Love Hunt. These tokens contain no personal information

Data You Choose to Share

• Published Hunts: When you publish a hunt, its content (title, clues, photos, audio, and final reveal) is uploaded to Google Cloud servers via Firebase so that recipients can access it via a share link. The hunt is identified by a randomly generated share token, not by you personally.
• Feedback: Any feedback or support requests you choose to submit

How We Use Your Information

We use the collected information to:

• Provide the core App functionality: creating, publishing, sharing, and playing scavenger hunts
• Store and deliver published hunts to recipients via Firebase Firestore and Firebase Storage
• Show hunt creators a record of who played their hunt and how far they progressed
• Manage subscription status and enforce publish limits for free users
• Verify that requests to our backend come from legitimate copies of the App (App Check)
• Improve app performance and user experience
• Provide customer support when requested

Data Storage and Security

Local Storage

• Draft Hunts: Hunts you create are stored locally on your device using SwiftData until you choose to publish them
• Recipient Progress: When you play a hunt, your local progress (which clues you've unlocked) is stored on your device only
• Preferences: Your app settings and publish count are stored locally on your device
• Anonymous User ID: Your Firebase anonymous user ID is stored in the device Keychain

Cloud Storage

• Published Hunt Text Content: When you publish a hunt, its text content (title, clue text, final reveal text) is stored in Firebase Firestore on Google Cloud servers
• Published Hunt Media: Cover images, hint photos, voice recordings, and the final reveal image are stored in Firebase Storage on Google Cloud servers
• Play Session Records: When a recipient plays a published hunt, a session record (player name, timestamps, completion progress) is stored alongside the hunt in Firestore so the creator can see who played
• Automatic Expiration: Published hunts and their associated session records automatically expire and are removed from cloud storage after 30 days
• Passcode Security: Any passcodes set on hunt steps are cryptographically hashed (SHA-256, case-folded) before being stored in the cloud. The original passcode text is never uploaded
• Ownership Enforcement: Cloud security rules ensure that only the original creator's anonymous user ID can edit or delete a published hunt. Anyone with the share link can read a published hunt and submit a play session, but cannot modify the hunt itself

Device Permissions

The App may request the following device permissions:

• Camera: To capture photos for use as clues, hints, or the final reveal in your hunts, and to scan QR codes when playing a hunt that uses QR-code unlocks
• Photo Library: To select existing photos for use in your hunts
• Microphone: To record audio hints for hunt steps

These permissions are optional and only requested when you use the corresponding feature. You can manage these permissions at any time through your device's Settings app.

Third-Party Services

Firebase by Google

We use Firebase, a Google service, for several backend functions:

• Firestore: stores published hunt text content and play session records
• Storage: stores published hunt images and audio
• Anonymous Authentication: issues a random anonymous user ID per device for hunt ownership control
• App Check: verifies app integrity to prevent abusive backend access
• Hosting: serves the love.nigelware.com landing page and the apple-app-site-association file used for Universal Links

Data stored on Firebase is hosted on Google Cloud servers and is subject to Google's privacy practices.

Superwall

We use Superwall to present and manage our paywall and to track subscription status. Superwall receives a random anonymous identifier and information about which paywall events occurred (paywall shown, purchased, declined). Superwall does not receive your name, email, hunt content, or any other personally identifiable information. Superwall's privacy practices are described at superwall.com/privacy.

Apple App Store / StoreKit

In-app subscriptions and the lifetime in-app purchase are processed through the Apple App Store. Payment information is handled entirely by Apple and is never collected or stored by Nigelware. We receive only a transaction receipt confirming the purchase, which is used to determine feature access within the App.

Data Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties. Hunt content is only shared with recipients you choose to share with via the hunt link. We do not use your content for advertising or marketing purposes. We do not use any third-party analytics or tracking SDKs.

Data Retention

• Local Data: Remains on your device until you delete hunts or remove the App
• Published Hunts: Automatically expire and are removed from cloud storage 30 days after the publish date. Associated play session records and media files are removed at the same time
• Anonymous User ID: Persists in the Keychain across app launches but is removed if you uninstall the App. Anonymous IDs that have not been used in over 30 days may be removed from Firebase Authentication automatically
• Account Data: No user accounts are created. There is no email, password, or profile to delete

Children's Privacy

Love Hunt is intended for users age 12 and older, primarily adults creating gifts or surprises for partners, friends, or family. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

Your Rights

You have the right to:

• Access your personal data stored within the App
• Delete your local data and any of your published hunts via Settings → Delete All Data
• Control device permissions (camera, microphone, photo library) through your device's Settings
• Choose not to publish hunts, keeping all data local to your device
• Skip the optional name entry when playing a hunt sent to you, in which case you are recorded as "Anonymous"
• Contact us with any privacy-related questions

App Store Integration

This App is distributed through the Apple App Store and is subject to Apple's privacy policies and terms of service in addition to our own.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App or through app updates. Changes are effective immediately upon posting.

Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us: