Privacy Policy — Cluedio

A NOTE FROM US

Cluedio is a scavenger-hunt app for the people you want to play with — family, friends, a team at work. We don't sell your data, we don't run ads, and we don't track you across the internet. This page explains what we actually collect — in plain words, no legalese wallpaper.

01 WHAT WE COLLECT

The minimum we need to make the hunt work on your device and across your family's phones. Nothing more.

Anonymous user ID: A random identifier created when you first open the app, so your hunts can be tied to you without an email or password.
Display name & avatar: The name and photo you pick on the Welcome screen. Shown only to people in your hunts.
Audio recordings: When you record a clue in your game-master's voice. Stored on our backend (Convex) so other players in the hunt can hear it.
Photos: Clue media you add, and mascot-verification photos taken during a hunt. Stored with the hunt, visible only to players in it.
Hunt content: The clues you write, hints, answers, GPS targets, and unlock codes you set up. Needed to run the hunt for your players.

02 WHAT WE DON'T

× Your location never leaves your device. GPS clues compute distance on your phone. We never receive, store, or see your coordinates.
× No analytics, no ads, no trackers. No Facebook pixel, no Google Analytics, no third-party SDKs watching what you do in the app.
× We don't sell your data. Not to advertisers, not to data brokers, not to anyone.
× No email or phone number required. You can play the whole app anonymously with just a name.

03 HOW IT'S STORED

Your data is stored on Convex, which handles our database and file storage.

All traffic between the app and Convex is encrypted in transit (HTTPS). Photos and audio are stored in Convex's file storage and retrieved via signed URLs that expire. Convex employees do not access your content except where strictly required to operate the service.

We retain your account and hunts for as long as you keep using Cluedio. When you delete your account (see section 04), everything tied to you is removed from our primary database within 24 hours and purged from encrypted backups within 30 days. Audio and photos attached to a specific hunt are removed within 24 hours of you deleting that hunt.

WHAT
HOW LONG
Active account data: As long as you keep the app installed and active.
On account deletion: Primary database: within 24 hours. Encrypted backups: within 30 days.
Hunt media (audio, photos): Lives with its hunt. When you delete the hunt, media is purged within 24 hours.
Server logs: Operational logs (no content) are retained for 30 days for debugging, then rotated.

04 YOUR CHOICES

You can inspect, export, or delete everything we hold about you. It's all in the app.

Export your data: Tap your avatar in the top-right of the home screen → Settings → Export my data. We'll prepare a copy of your account data and media.
Delete your account: Tap your avatar in the top-right of the home screen → Settings → Delete my account. You'll see a warning and have to confirm. Once you do, your account, hunts, media, and anonymous ID are gone within 24 hours. There is no undo.
Turn off permissions: Camera, microphone, and location permissions can be revoked at any time from iOS Settings. The affected clue types stop working but the rest of the app keeps running.

05 CHANGES TO THIS POLICY

If we materially change how we collect or use your data, we'll update this page and bump the version number at the top. For significant changes we'll also show an in-app notice the next time you open Cluedio.

07 CONTACT

Questions, worries,
or a simple hello?

EMAIL: [email protected]
PRIVACY: [email protected]
RESPONSE: Within 30 days for data requests, usually faster.

Questions, worries,or a simple hello?

Questions, worries,
or a simple hello?