Introduction
MahjPassport ("we," "us," "the app") helps players track scores, standings, and milestones for American Mahjong. This policy explains what information the app collects, why, and how you can control it.
Information We Collect
- Account information — the email address you sign up with. Your password is handled entirely by our authentication provider (Supabase Auth) and is never visible to us in plain text. If you sign in with Apple or Google, we receive only the identifier and email that provider shares with us.
- Photos — a profile photo and, if you choose to add them, photos of your winning hands. These are stored in our secure cloud storage and are only visible to you and, where you've joined a league or group, to other members of that league.
- Gameplay data — the hands, scores, league/event participation, and milestones you log in the app, used to power your Passport, Journey stats, and league standings.
- Purchase information — if you buy a subscription or Hosting Credits, our payment partner (RevenueCat) and the app store you purchased through (Apple or Google) tell us your subscription/purchase status. We never see or store your payment card details — that's handled entirely by Apple or Google.
- Crash and diagnostic data — if the app crashes or hits an unexpected error, we receive a crash report (device model, OS version, and the error itself) through our error-monitoring provider (Sentry), so we can fix the problem. This does not include your photos or gameplay content.
- Referral activity — if you use or share a referral code, we record that a referral occurred so we can grant the associated reward.
What We Don't Collect
We do not use any advertising or analytics tracking service. We don't sell your information to anyone, and we don't show you ads.
How We Use This Information
- To operate the app's core features — score tracking, standings, Passport and Journey stats.
- To process purchases and keep your subscription or Hosting Credit balance accurate.
- To respond to support requests and content reports you or other players submit.
- To find and fix crashes and bugs.
Who We Share It With
We share information only with the service providers that help us run the app, and only as needed for them to do that job:
- Supabase — our database, authentication, and file storage provider.
- RevenueCat, Apple, and Google — for processing purchases and subscriptions.
- Sentry — for crash and error reporting.
We do not sell your data, and we do not share it with advertisers.
Account Deletion
You can delete your account at any time from Profile → Delete Account. When you do, we immediately revoke your login access and anonymize the personal identifiers tied to your account (your email, and your linked Apple/Google identity). Historical gameplay records tied to leagues or events you played in may be retained in de-identified form — for example, so other players' standings and history stay accurate — but they're no longer linked back to you once your account is deleted.
Children's Privacy
MahjPassport is not directed at children under 13, and we do not knowingly collect information from children under 13.
Security
Every table in our database enforces row-level security, meaning the app's own client can only ever see the data you're actually entitled to see — it never has broader database access, even in the event the app itself were compromised. Your session is stored on your device using the operating system's secure storage, not in plain text.
Your Rights
You can access, correct, or delete most of your information directly in the app. For anything else — including a full data access or deletion request — contact us at the address below.
Changes to This Policy
If we make material changes to this policy, we'll update the effective date above. Continued use of the app after a change means you accept the updated policy.
Contact Us
Questions about this policy or your data?