Privacy Policy — Pollona
Version 1.2
Last updated: 2026-10-11
APPFLOW LLC ("APPFLOW LLC", "we", "us") respects your privacy. This policy explains what data Pollona: Domino Scorekeeper (the "App") collects, what we use it for, and what you can do about it.
1. In two lines
Pollona stores your games in the cloud so they don't get lost, so everyone at the table sees them as they happen, and so you still have them if you change phones. We don't sell your data, we don't show ads, and there are no third-party trackers inside the App.
2. Your account
The App creates an anonymous account the first time you open it: a random identifier, with no email, no phone number, nothing of yours. That's enough to start playing.
If you want your history to survive a change of phone, you can link that account with Google or Apple. At that point Google or Apple tell us who you are so we can recognize you later: your identifier with that service and, if you allow it, your email and name. We use it only to recognize that the account is yours when you sign in from another phone. We don't email you there.
Your player name is written and chosen by you. It can be your full name or a nickname; the App doesn't care, and everyone at your tables will see it.
3. What is stored in the cloud
- Your player: the name you wrote, your six-character personal code (the one in the QR), and which account it is linked to.
- Your birthday, only if you add it to your profile: day and month, no year. It lets the birthday theme show up at the tables you play at around that day. You can remove it whenever you want.
- Your games: who played with whom, the points of every hand, who won, whether there was a pollona, when it started and ended, and the rules used.
- The game log: every entry, correction and voided hand, with the time and who did it. It is what makes undo possible and what shows who scored what, and it is never deleted: a game is not rewritten.
- Your private marks: who you know, who you marked as "same as…", and who you hid from your lists. Only you see these.
- Whether you are Premium or not, and the date it last changed.
- The themes you bought one by one, so they stay yours.
- How many of your free camera scans you have used.
- A summary of your album: which images you have and which ones you have duplicates of. It is stored with your player so the people at your table can offer you a trade, and it is only shown to them.
- The image trades you make with other players: who gave what to whom, at which table and when. Both players in the trade can see it, and a completed trade is not deleted, just like a game.
4. Games belong to the whole table
This matters and we want it to be clear: a game is not only yours. All four players who played it can see it, with the name each of them played under that day. If you leave the App, the games stay with the others, because it's their history too.
What does disappear is what's yours: your account, your code and your name (see section 9).
5. Other people's names
When you score with someone who doesn't have the App, you type their name so you can keep the score. We store that name exactly as you wrote it, and only you and the others at that table can see it.
Please write only the name you call them at the table. There is no need — and you shouldn't — to add last names, phone numbers, addresses or anything else. And if that person later installs the App, they get their own player: the one you typed was a note of yours.
6. What we do NOT collect
- We don't ask for or use your location.
- We don't read your contacts, your messages or your calendar.
- There are no ads and no ad networks.
- There is no third-party analytics (no Google Analytics, no Facebook, nothing like it): we don't measure which screens you open or how long you stay in the App.
- We never see your card. Payment is charged by the store (Apple or Google) and we never see the number or any banking details.
- We don't sell or rent data to anyone, and we don't share it for advertising.
7. Camera, photos and sound
The App uses the camera only when you open it: to read a QR code (to join a table or read another player's code) or to count the tiles of a hand. What the camera sees is processed inside the phone: the model that counts the tiles runs on the phone itself and no photo is uploaded anywhere. The photo of the tiles only stays for a while in the App's temporary folder, which the system clears.
The share cards (the game card and the pollona card) are drawn inside your phone and sent through whichever app you pick in the system share sheet. They never pass through any server of ours, and they are only sent when you ask.
The pollona of the day reminder is a local notification: your own phone schedules it and it never leaves the device.
8. Who we share data with so the App can work
- Google (Firebase): stores the games and accounts, and is what delivers them live to the phones at the table. It receives everything in section 3.
- RevenueCat: keeps track of the subscription. It receives your account identifier and the state of the purchase; not your name and not your games.
- Apple and Google Play: charge the subscription. They handle the payment; we only know whether it is active or not.
- Cloudflare: serves invitation links when they are opened on a phone that doesn't have the App yet. It receives the address that was opened.
Data is stored on servers in the United States. If you are in another country, by using the App you agree to it being processed there.
Beyond these, we would only hand over data if a lawful authority required it, or if it were necessary to defend our rights or someone's safety.
9. Deleting your account
In the App, under Profile → Delete my account, the following is deleted:
- your sign-in account (the anonymous one, or the one linked with Google/Apple),
- your private marks (who you know, the merges, what you hid),
- your personal code and the link between your account and your player,
- your birthday, if you had added it,
- the summary of your album.
Image trades you already made stay, because the other player keeps what they received.
Your player is left with no name and no owner ("Player"), because other people's games still mention it (section 4). It is immediate and cannot be undone: there is no way to recover that history afterwards.
You can also take your data with you: Profile → Export history produces a CSV file with all of your games.
10. How long we keep things
Games are kept for as long as the App exists, because they are the table's history. Your account, until you delete it. Table invitations expire after 3 hours, and the attempt counters after 10 minutes.
11. Children
The App is not made for children. It should not be used if you are under 13 (or under 16 if you live in the European Union or the United Kingdom). We don't ask for your age (your birthday, if you add it, has no year), so we don't know who uses it: if you are a parent and believe your child created an account, write to us and we will delete it.
12. Security
Games can only be read and written by someone who is at that table, and that is enforced by the server, not by the App: it isn't something you can get around by changing phones. Nobody can score in a game they're not in, grant themselves Premium, or erase what has already been written. Even so, no system is perfect: we can't promise nothing will ever happen.
13. Your rights
Depending on where you live (European Union, United Kingdom, California and others), you have the right to know what data we hold, to request a copy, to correct it, to have it deleted, and to object to certain uses. Deletion and the copy you can do yourself from the App (section 9). For anything else, write to us.
14. Changes
If this policy changes, the date above is updated and the new version appears inside the App. If the change is significant, we will say so in the App.
15. Contact
APPFLOW LLC