1. Overview
Exposed is a social party game published by Recep Sevim ("we", "us"). We design the app to avoid collecting information that is not needed for gameplay, subscriptions, analytics, crash reporting, or online rooms.
Exposed has no user accounts. You never give us a name, an email address, a phone number or a password. When you play online, the app signs you in anonymously so a room can tell players apart; that anonymous identifier is not linked to your identity.
We do not sell your personal information, we do not use it for advertising, and we do not access your payment card details, your contacts, your precise location or your social media accounts.
2. Data We Process
Depending on how you use Exposed, the app may process these categories of information:
- Local gameplay data: player names entered on your device, avatar choices, settings, unlocked categories, sound preferences, language preferences, your list of hidden players, and recently used prompts. This stays on your device.
- Online room data: an anonymous Firebase user ID, the room PIN, the display name you chose for that game, avatar choice, room settings, game phase, votes, reactions, the selected category, and the temporary room state needed to run a multiplayer game.
- Photos: if you choose to, a single square profile photo you take or pick yourself. This is optional and is covered in detail in section 3.
- Purchase and subscription data: product identifiers, purchase status, subscription status, trial eligibility, and paywall events. Payment card information is processed by the Apple App Store or Google Play, not by Exposed.
- Analytics data: basic app events such as screen views, onboarding completion, category selection, game start and completion, paywall views, purchase flow events, and online room success or error events.
- Crash and diagnostic data: crash reports, stack traces, device and OS information, app version, error logs, and technical identifiers used to diagnose app stability issues.
- Abuse reports: if you report another player's photo, we record the room PIN, the reported player's anonymous ID and your anonymous ID, so we can act on the report.
3. Photos
Using a photo is entirely optional. If you never add one, no image ever leaves your device and the app shows a cartoon avatar instead.
What we do with it
- Before the image is uploaded, your device shrinks it to a small square thumbnail (about 256 pixels) and removes its EXIF and IPTC metadata, so no GPS location, capture time or camera identification is transmitted.
- The photo is placed inside the specific online room you joined. It can only be read by the other players seated in that same room. This is enforced by a server-side security rule, not only by the app.
- There is no public URL, feed, gallery, profile page, search or discovery surface anywhere in Exposed. Nobody outside your room can reach your photo.
- If you ask the app to remember your photo for future games, a second copy is stored privately for you. That copy is readable only by you — not by other players — and exists so you do not have to pick a photo again next time.
What we never do
- We do not run face recognition, biometric analysis or any other biometric processing on photos.
- We do not use photos for advertising, profiling, training models, or any purpose other than showing you to the other players in your room.
- We do not share photos with third parties, other than the hosting provider that stores them for us (Google Firebase).
The app reads only the single image you select. On iOS the photo picker runs outside the app, so Exposed never gains access to your photo library. On Android the system photo picker is used for the same reason.
4. Local and Online Play
Local play
In pass-and-play mode, gameplay data is stored locally on your device. This includes local players, preferences, unlocked categories and recent prompt history. It is not sent to us.
Online rooms
Online play uses Google Firebase to create and synchronise game rooms. The app signs you in anonymously so the room can identify each participant without requiring an account. Room data is used only to operate the live game.
Rooms are private and invite-only. A room is reached with a 6-digit PIN that the host shares, and holds at most 12 players. Anyone with the PIN may join while the room is active, so share PINs only with people you trust.
5. Analytics and Crash Reporting
Exposed uses Firebase Analytics to understand broad usage patterns and improve the app. Analytics events are intentionally limited and do not include player names, room PINs, photos, question text, vote targets, payment card details, or any free-form personal content.
Exposed uses Firebase Crashlytics to detect crashes and technical errors. Crash reports help us fix bugs, improve performance and keep the app stable.
6. Subscriptions and Purchases
Exposed Plus subscriptions and purchase transactions are processed by the Apple App Store or Google Play. Exposed does not receive or store your credit card number, debit card number, bank details, or full payment credentials.
Exposed uses Adapty to manage paywalls, subscription status, trial eligibility, entitlement checks, restoring purchases, and purchase analytics. Adapty may process app identifiers, device and app information, and the purchase metadata needed to provide those services.
You can manage or cancel subscriptions through your Apple App Store or Google Play account settings.
8. Retention
- Local settings and gameplay preferences stay on your device until you delete them, reset app data, or uninstall the app.
- Room data, including the photo copy inside a room, is deleted when the room ends, and in any case is automatically deleted within 24 hours.
- A saved photo you chose to reuse is automatically deleted after 30 days without playing. Playing again extends it by another 30 days. You can delete it yourself at any time.
- Abuse reports are kept for up to 12 months so that repeat abuse can be acted on.
- Crash reports, analytics events, subscription records and store transaction records may be retained by Firebase, Adapty, Apple or Google according to their own retention policies and legal requirements.
9. Your Choices and Deletion
Everything below is available inside the app, without contacting us:
- Remove your photo: tap your avatar on the name screen and choose "Remove photo", or pick a cartoon avatar instead.
- Delete my data: Settings → "Delete my data" deletes the saved photo and every room copy of it that we still hold for you.
- Hidden players: Settings → "Hidden players" lists everyone whose photo you have hidden on this device, and lets you unhide them.
- Report a photo: long-press a player to report their photo. It is removed from the room for everyone immediately, and the report is filed with us.
- Play pass-and-play if you do not want to create or join an online room at all.
- Delete the app to remove all locally stored data from your device.
- Manage or cancel Exposed Plus through your Apple App Store or Google Play settings.
You can also email recepsevimsupport@gmail.com with a deletion request. Because sign-in is anonymous, please send the request from the device in question or include the room PIN you played in, so we can locate the data.
10. Security
Data in transit is encrypted with TLS, and data at rest is encrypted by Google Firebase. Access to room data and photos is restricted by server-side security rules: only players currently seated in a room can read that room's photos, and a saved photo can be read only by the person it belongs to. Firebase App Check is used to verify that traffic comes from a genuine build of the app.
No system is perfectly secure. Treat anything you put into a party game as something the other players in your room will see.
11. Children
Exposed is intended for a general audience appropriate for social party games and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age. If you believe a child has provided personal information through the app, contact us at [EMAIL_ADDRESS] so we can review and delete it.
12. Your Rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. In the EEA and the UK, our legal bases are performance of a contract (running the game you asked to play), legitimate interests (keeping the app stable and free of abuse) and consent (using a photo, which is entirely optional and which you can withdraw at any time by removing the photo).
The in-app controls in section 9 satisfy most of these requests immediately. For anything else, write to [EMAIL_ADDRESS]. You also have the right to lodge a complaint with your local data protection authority.
13. Changes to This Policy
We may update this Privacy Policy when Exposed changes, when service providers change, or when legal requirements require an update. The "Last updated" date at the top of this page shows when the policy was last revised. Material changes will be announced in the app.
14. Contact
Recep Sevim
Email: recepsevimsupport@gmail.com
We answer privacy and content reports at that address, and it is also reachable from Settings → "Contact support" inside the app.