How Hunt of Secrets handles data

Hunt of Secrets lets a host create private clue-hunt games for real spaces. This policy explains what data is used to run the app, generate games, recognize objects, improve reliability, and support account deletion.

Last updated: May 13, 2026

Data Used For App Functionality

Account data: user id, email address, sign-in provider, and display name from Apple or Google sign-in.
Game data: game title, theme, difficulty, selected language, object names or descriptions, clues, hints, sessions, team names, score, timer, and progress data.
Photos or videos: reference photos of game objects selected or captured by the host. These are used to create and recognize private game objects.
Location signal: the app may use nearby location during a hunt to improve object recognition. Testing telemetry should use derived proximity and quality signals, not exact private addresses.
Diagnostics: app version, build number, screen or flow, generation status, scan confidence, hint usage, timing, quality scores, and error state.
Purchases: subscription or purchase status may be used when StoreKit-based paid features are enabled.

AI Processing

OpenAI API keys are never stored in the iOS app. AI generation is routed through the backend. Game inputs such as theme, difficulty, language, object names, and reference images may be processed by backend services to generate private game text and improve object recognition support.

Photos And Private Spaces

Photos are intended for private game creation and play. Users should avoid capturing faces, documents, payment cards, addresses, or other sensitive personal information unless it is truly needed for their private game.

Tracking

The app is not designed to track users across third-party apps or websites. No advertising tracking domains are declared in the app privacy manifest.

Retention And Deletion

Users can delete their account inside the app from Settings > Account > Delete Account. Deletion removes the Supabase auth user and linked app data such as profile records, game templates, stages, assets, sessions, progress, and subscription status records. Server-side storage object records are removed through the account deletion backend function.

Diagnostic and product logs should not contain photos, secrets, prompts, or exact GPS coordinates. These logs may keep aggregate reliability value and user references should be anonymized when the account is deleted.

Subscriptions

If Apple subscriptions are enabled, subscription cancellation is managed through the user's Apple account. Deleting a Hunt of Secrets account does not cancel an Apple subscription by itself.

Support

For beta testing support, use TestFlight feedback for the installed build. See the Support page for what information is useful and what should not be sent.