Nine Men's Morris — Privacy Policy
How the Nine Men's Morris app collects, uses, and protects your information
1. Introduction
This Privacy Policy explains how Tomatillo LLC (“we”, “us”, or “our”) collects, uses, shares, and protects your personal information when you use the Nine Men's Morris mobile application and related services (collectively, the “App”). By downloading, accessing, or using the App, you acknowledge that you have read and understood this Policy.
If you do not agree with this Policy, please do not use the App.
2. Information We Collect
We collect the following categories of information:
2.1 Account Information
Account creation and sign-in are handled by our authentication provider, Clerk. Depending on how you sign in (email, Apple, or Google), we and Clerk may collect:
- Email address
- Name and/or username you choose
- Profile image (avatar), if you provide one
- The authentication method used (e.g., Sign in with Apple, Google, or email)
- A unique account identifier
2.2 Profile and Gameplay Data
To provide the game and its features, we store:
- Username, avatar, selected country, and preferred language
- Skill rating (Elo), rating history, wins, losses, draws, and games played
- Game records, including moves, results, duration, and match metadata
- Progress data: puzzle attempts, lesson progress, achievements, daily quests, streaks, and unlocked cosmetic items
- In-game virtual currency balance (“Golden Pips”) and transaction ledger
2.3 Social Features
If you use social features, we process:
- Friend requests and friend lists
- Game invitations you send or receive
- Online presence/status information
Your username, avatar, rating, and public profile statistics are visible to other users of the App.
2.4 Purchase Information
In-app purchases (such as virtual currency packs and premium membership) are processed through the Apple App Store or Google Play and managed via our purchase infrastructure provider, RevenueCat. We receive and store transaction identifiers, product identifiers, purchase and refund status, and platform (Apple/Google). We do NOT collect or store your full payment card number or financial account credentials — those are handled directly by Apple, Google, and their payment processors.
2.5 Device and Technical Information
- Device type, operating system, and app version
- IP address and general (coarse) location inferred from it
- Diagnostic and crash data: collected via Sentry to detect, diagnose, and fix errors and stability issues
- Log and usage data (e.g., feature interactions, timestamps)
2.6 Push Notification Tokens
If you enable push notifications, we store a device push token (via Expo’s push service) so we can deliver match, social, progression, and re-engagement notifications. You can disable notifications at any time in your device settings or within the App.
2.7 Support and Reports
If you submit an in-app report (for example, a “something went wrong” report or a report about another player) or contact us for support, we collect the information you provide, along with technical context such as app version, platform, and a snapshot of relevant game state to help us investigate.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate you
- Provide, operate, and maintain the game and its features
- Run matchmaking, calculate ratings, and record match results
- Enable social features such as friends, invitations, and presence
- Process and validate purchases and manage virtual items and memberships
- Send push notifications you have opted into
- Detect, prevent, and address fraud, cheating, abuse, and technical issues
- Provide customer support and respond to your requests
- Analyze usage to improve the App and develop new features
- Comply with legal obligations and enforce our Terms
4. Legal Bases for Processing (EEA/UK Users)
If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:
- Contract: to provide the App and the features you request
- Legitimate interests: to secure, improve, and analyze the App and prevent abuse
- Consent: for push notifications and any optional processing (you may withdraw consent at any time)
- Legal obligation: where we are required to process data to comply with the law
5. How We Share Your Information
We do not sell your personal information. We share information only as follows:
- Service providers: third parties that process data on our behalf under contract (see Section 6)
- Other users: your public profile (username, avatar, rating, stats) and social interactions are visible to other players
- Legal and safety: when required by law, legal process, or to protect the rights, safety, and property of us, our users, or the public
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy
6. Third-Party Services
The App relies on the following third-party providers, each with its own privacy policy:
- Clerk: authentication and account management — https://clerk.com/legal/privacy
- RevenueCat: in-app purchase management — https://www.revenuecat.com/privacy
- Apple App Store / Google Play: app distribution and payment processing
- Sentry: crash and error reporting — https://sentry.io/privacy/
- Expo: app framework and push notification delivery — https://expo.dev/privacy
- Cloud hosting / database provider: hosting of application data — [ADD HOSTING PROVIDER + PRIVACY LINK, e.g. Neon]
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the App. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must retain certain records to comply with legal, tax, accounting, fraud-prevention, or dispute-resolution obligations.
8. Data Security
We use administrative, technical, and organizational safeguards designed to protect your information, including encrypted transport (HTTPS/TLS) and secure credential storage. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Children’s Privacy
The App is not directed to children under the age of 13 (or the minimum age required in your country, such as 16 in parts of the EEA). We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, please contact us at tomatillo.llc@gmail.com and we will take steps to delete it.
10. Your Privacy Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information
- Object to or restrict certain processing
- Request a portable copy of your information
- Withdraw consent where processing is based on consent
To exercise these rights, contact us at tomatillo.llc@gmail.com. We will respond as required by applicable law. You may also have the right to lodge a complaint with your local data protection authority.
10.1 California Residents (CCPA/CPRA)
California residents have the right to know what personal information we collect, to request deletion, to correct information, and to opt out of the “sale” or “sharing” of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.
11. Account Deletion
You can request deletion of your account and associated personal data at any time from within the App (in Profile/Settings) or by emailing us at tomatillo.llc@gmail.com. Deleting your account removes your profile and personal data as described in Section 7.
12. International Data Transfers
Your information may be processed and stored in countries other than your own, including the United States. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last Updated” date and, where appropriate, notify you in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.
14. Contact Us
If you have questions or requests regarding this Privacy Policy, contact us at: