Privacy Policy

Tile Out — Last updated: October 26, 2026

This Privacy Policy describes how Tile Out (“we,” “our,” or “us”) collects, uses, and shares information when you use our app. We are committed to protecting your privacy and handling your data transparently.

1. Information We Collect

We collect the following information when you use Tile Out:

• Account information — Sign-in is required to use the app, and what we receive depends on how you sign in. With Google: your name, email address, profile picture URL, and Google Account ID. With Apple: your name (if you choose to share it), your email address or an Apple private relay address, and an Apple user identifier. With email: your email address and the name you enter. Passwords are handled by Firebase Authentication; we never see or store them. You can change your name in Settings.
• Profile photo — If you choose to upload a profile photo (from your photo library or camera), we store it and show it in place of your sign-in picture. We only access your photos or camera when you pick a photo, and only the photo you choose.
• Game performance data — Your puzzle completion records, including the number of moves, time taken, difficulty level, and daily completion history.
• Streak and statistics — Your current and longest consecutive completion streaks and related dates.
• Challenge and social data — Friend connections you initiate, challenges and series you create or participate in (including move sequences for replays), groups you create or join, and notifications about this activity.
• Push notification token — If you allow notifications in the iOS app, a device token used to deliver them. It is removed when you sign out.
• Preferences — Your selected difficulty level.
• Usage and diagnostic data — How you use the app (for example, starting or finishing a puzzle, or creating a challenge), which we associate with your account ID; performance measurements, such as how long screens and network requests take to load; and, in the iOS app, crash and error reports. These include technical details such as your device model, operating system, app version, and an app installation identifier.

We do not collect location data, contacts, health data, financial information, or any other sensitive categories of personal data.

2. How We Collect Information

Information is collected in the following ways:

• Directly from you when you sign in, upload a profile photo, play puzzles, or use challenge, friend, and group features.
• Automatically as you play: move sequences, completion times, and results are recorded when a puzzle is finished.
• Via Firebase (Google) services that power our backend database and authentication.
• Automatically, through Google Analytics for Firebase, Firebase Performance Monitoring, and (in the iOS app) Firebase Crashlytics, as described in Section 1.

We do not use advertising identifiers, tracking pixels, or fingerprinting techniques. On the web, Google Analytics uses first-party cookies to recognize repeat visits; we do not use cookies for advertising.

3. How We Use Your Information

We use the information we collect to:

• Authenticate you and maintain your account.
• Display your name and profile picture to friends, challenge opponents, and members of groups you join.
• Track and display your puzzle statistics, streaks, and leaderboard rankings.
• Enable you to send, receive, and replay challenges with friends.
• Send in-app and push notifications about challenges, friends, and groups.
• Store your difficulty preference across sessions.
• Understand how the app is used, measure its speed, and find and fix crashes and errors.

We do not use your data for advertising, sell it to third parties, or use it for any purpose beyond operating the app.

4. Information Shared With Third Parties

We share data with the following third parties, solely to operate the app:

• Apple — If you sign in with Apple, Apple authenticates you and shares the information described in Section 1. Push notifications on iOS are delivered through Apple’s Push Notification service.
• Google (Firebase & Google Identity Services) — We use Firebase Authentication, Firestore, Cloud Storage, and Cloud Messaging (all Google services) to authenticate users, store app data and profile photos, and deliver push notifications, and Google Analytics for Firebase, Firebase Performance Monitoring, and Firebase Crashlytics to understand usage, measure performance, and diagnose crashes. Google processes this data on our behalf. Your data is subject to Google’s Privacy Policy. Google provides equivalent or stronger data protection than described in this policy.

Other than Google and Apple as described above, we do not share your data with analytics providers, advertising networks, data brokers, or any other third parties.

5. Data Retention

Your data is stored in Firebase Firestore for as long as your account is active. You can permanently delete your account at any time from within the app: open the avatar menu in the top-right corner and choose “Delete account.” This removes your account and all associated game history — daily results, challenges, friend connections, group memberships (and groups you own), your profile photo, statistics, and your entries on shared leaderboards. Deletion is permanent and cannot be undone. Usage, performance, and crash data processed by Google (see Section 4) is kept for Google’s standard retention periods and is not removed when you delete your account.

6. Your Rights and Choices

• Access: You may request a copy of the data we hold about you.
• Deletion: You may permanently delete your account and all associated data yourself at any time using the “Delete account” option in the avatar menu.
• Withdraw consent: You may stop using the app at any time. Because sign-in is required, signing out and uninstalling the app ends all future data collection.
• Leaderboard visibility: Your name and puzzle results appear on daily leaderboards visible to other signed-in users. Deleting your account removes these entries.
• Public groups: If you create or join a public group, its name and member list (names and profile pictures) are visible to other signed-in users who browse groups. Leave the group to remove yourself.

To exercise any of these rights, please contact us at tileoutadmin@gmail.com.

7. Children’s Privacy

Tile Out is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Security

We rely on Firebase’s security infrastructure, including Firestore security rules that restrict data access to the authenticated user who owns it (and, for challenge data, to the specific participants). We do not store raw credentials.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us at:
tileoutadmin@gmail.com