1. Scope
This policy describes how Guandan by IMOK (“Guandan”, “we”, or “us”) handles information when you play, use Campus and Friend Room features, use voice features, or make an in-app purchase. Guandan does not sell personal information and does not use app data for cross-app advertising or tracking.
2. Account and profile data
Guandan creates a generated anonymous Firebase account identifier when the app first needs online services. You are not required to provide an email address, phone number, legal name, or social sign-in. The identifier is used to authenticate requests and link your online game, profile, and purchase access.
You may optionally provide a nickname, choose a built-in avatar, and select schools and a city for your profile. These details can be visible to other players in social and game surfaces. The current app does not upload a photo for a custom avatar. The “Add University” form is currently saved only on your device and is not submitted to our servers.
3. Game, room, and social data
To operate online play, we process room and table membership, six-digit room numbers, scheduled-room details and RSVPs, presence and reconnect state, authoritative match state, card actions, outcomes, and game results. Private hands are processed by the authoritative game service and delivered only to the applicable player. Quick-chat messages, reactions, and other conversation messages are stored with the conversation and sender account identifier.
Recent Matches is maintained as an on-device index of authoritative completed matches. The authority also retains match and result records needed for game integrity, reconnect, dispute handling, and commerce eligibility.
4. Purchases
Purchases are processed by Apple through StoreKit. We receive and retain the product identifier, StoreKit transaction identifier and verification payload, purchase environment and status, purchaser account binding, entitlement or room binding, purchase time, and refund or revocation status. An app-account token derived from the anonymous account may be used to bind a transaction to the correct Guandan account. We do not receive your full payment-card or bank-account details from Apple.
5. Friend Room Voice
If you choose Friend Voice and grant microphone permission, microphone audio is transmitted in real time through LiveKit/WebRTC infrastructure to participants in that Friend Room. Guandan’s current implementation does not configure recording or egress and does not store conversational audio. LiveKit receives a short-lived room token and a participant identity derived from your anonymous account so it can connect the correct room participant.
6. Hands-Free speech commands
Hands-Free is optional and starts only when enabled by you. Your device’s operating-system speech-recognition service receives microphone audio and returns recognized words to Guandan. For an online match, Guandan sends the recognized command text—not raw microphone audio—to the authoritative service to validate and execute the command. The current authority processes that text immediately and does not persist the transcript in match storage. Platform speech services may process audio under their own terms and privacy policies.
7. Campus media and local storage
The app may download approved Campus images and entry videos on demand. Local media caches are integrity checked, size limited, and automatically evicted. App preferences, profile copies, purchase-recovery context, Add University drafts, and the Recent Matches index may remain on your device until cleared by the app’s normal cache behavior, app data is reset, or the app is removed.
8. Device, service, and diagnostic information
Firebase Authentication, Firestore, Installations, and Messaging components may process an app installation identifier and limited device/app metadata such as device model, operating-system and app versions, language, time zone, and SDK/network diagnostics. Guandan does not use these identifiers for advertising. The current app does not include Firebase Analytics, Firebase Crashlytics, or Firebase Performance Monitoring.
Our hosting and authority infrastructure creates operational request logs containing items such as request time, route, response status, network address, and service diagnostics. Guandan application code does not intentionally log request bodies or Hands-Free transcripts. Current default Google Cloud operational logs are retained for 30 days.
9. Support communications
If you contact us by email, we receive your email address, message, and any device, account, or troubleshooting details you choose to provide. We use this information to answer the request, troubleshoot the service, and process privacy requests. Support email is retained as reasonably needed to resolve and document the request; no fixed automatic deletion schedule is currently configured.
10. Why we use data
- Provide authentication, profiles, Campus presence, rooms, matching, gameplay, reconnect, chat, and match history.
- Verify purchases, restore access, prevent duplicate redemption, and handle refunds or revocations.
- Provide real-time Friend Voice and optional Hands-Free commands.
- Protect game integrity, secure the service, diagnose failures, and meet legal obligations.
11. Service providers
We use Apple for App Store purchases and device speech recognition; Google Firebase and Google Cloud for anonymous authentication, data storage, app installation/messaging infrastructure, and authoritative hosting; and LiveKit/WebRTC infrastructure for real-time Friend Voice. These providers process data on our behalf or as platform providers under their own terms.
12. Retention
Profile, room, conversation, match, and entitlement records currently have no automatic user-level expiry and are retained while needed to operate and protect the service. Verified transaction and revocation ledgers may be retained for fraud prevention, accounting, dispute resolution, and legal compliance. Short-lived room codes, presence leases, and voice access tokens expire according to their feature lifecycle. Operational logs currently use the 30-day default described above.
13. Account and data deletion
You can permanently delete your account inside Guandan by opening Me → Delete Account and completing the two confirmation steps. After the authoritative deletion succeeds, Guandan removes the account profile and other deletable account data, clears account-linked local app data, and deletes the anonymous Firebase Authentication identity.
Shared game and room records may be retained or anonymized where needed to preserve other participants’ history, authoritative game integrity, reconnect and dispute records. Verified purchase transactions, security and fraud-prevention records, accounting records, and records required by law may also be retained where reasonably necessary.
Deleting a Guandan account does not erase Apple’s purchase history. A later anonymous Guandan account is a new account. On that new account, you may explicitly use Restore Purchases to restore only a still-valid Apple non-consumable entitlement for Full Access, Advanced AI Practice, or Expert AI Practice after server verification. Restore Purchases does not restore the deleted Firebase identity, profile, schools, city, match history, social data, schedules, training state, or free-use history. Friend Voice is a room-level two-hour consumable and is not restored as a lifetime entitlement. Contact [email protected] with deletion questions or if the in-app process cannot be completed.
14. Security
We use authenticated requests, encrypted network transport, access controls, server-side purchase verification, and authoritative game-state boundaries designed to protect information. No online service can guarantee absolute security.
15. Children
Guandan is not directed to children. The app does not currently perform age verification. If a parent or guardian believes a child has provided information, contact us so we can review the request.
16. International processing
Our service providers and infrastructure may process information in countries or regions other than where you live, subject to applicable safeguards and law.
17. Contact and updates
For privacy questions, contact [email protected]. We may update this policy when the app or its data practices change and will post the effective date here.
简体中文摘要：校友掼蛋使用匿名账号提供在线牌局、校友房、好友房和购买恢复。好友语音为实时传输，当前不录音；免手操作的原始音频由系统语音识别处理，服务器只即时处理识别后的指令文字且不保存文字。应用不出售个人信息、不做跨应用跟踪。可在“我的 → 删除账户”中永久删除账户；个人资料及可删除数据会被移除，共享牌局记录可能为其他参与者及牌局完整性而保留或匿名化，购买、安全、防欺诈、会计、争议处理或法律要求的记录可能在必要时保留。删除校友掼蛋账户不会删除 Apple 购买历史；以后创建的新匿名账户可主动恢复经验证且仍有效的完整使用权、进阶陪练或高手陪练非消耗型权益，但不会恢复已删除的账户、资料或社交数据。好友语音为房间级两小时消耗型产品，不会作为永久权益恢复。如有问题，请联系 [email protected]。
繁體中文摘要：校友摜蛋使用匿名帳號提供線上牌局、校友房、好友房和購買回復。好友語音為即時傳輸，目前不錄音；免手操作的原始音訊由系統語音辨識處理，伺服器只即時處理辨識後的指令文字且不保存文字。應用程式不出售個人資訊、不做跨應用追蹤。可在「我的 → 刪除帳戶」中永久刪除帳戶；個人資料及可刪除資料會被移除，共用牌局記錄可能為其他參與者及牌局完整性而保留或匿名化，購買、安全、防詐騙、會計、爭議處理或法律要求的記錄可能在必要時保留。刪除校友摜蛋帳戶不會刪除 Apple 購買記錄；以後建立的新匿名帳戶可主動回復經驗證且仍有效的完整使用權、進階陪練或高手陪練非消耗型權益，但不會回復已刪除的帳戶、資料或社交資料。好友語音為房間級兩小時消耗型產品，不會作為永久權益回復。如有問題，請聯絡 [email protected]。