- Your games, photos and votes are stored in your own iCloud through Apple's CloudKit and shared only with the players you invite. We can't see them.
- Faces are blurred on your phone before you review a photo and before anyone else sees it. This can't be turned off.
- No ads, no analytics, no tracking, no data brokers, and no location access.
- We only receive personal information if you write to us through the contact form.
Who we are
“Theme Park Bingo”, “we” and “us” mean the developer of the Theme Park Bingo iPhone app and this website, themeparkbingo.app. Questions about this policy go through our contact form.
What the app stores, and where
Game data in your iCloud
When you host a game, it's saved in the private iCloud database of your Apple Account using Apple's CloudKit and shared with the players you invite. When you join a game, it's stored in the host's iCloud and shared with you. A game contains:
- The game's name, the park name you type, the city you pick, the card size, win rule and vote window.
- Each player's first name, color, and an anonymous Apple identifier that CloudKit uses to tell players apart. We never see your Apple Account email or phone number.
- Everyone's bingo cards, the photos submitted for squares (already face-blurred, resized to at most 1600 pixels) and a small thumbnail of each, and everyone's votes and short challenge reasons.
We, the developer, have no access to this data. It's governed by your iCloud settings and Apple's Privacy Policy.
Join codes
So friends can join by typing a six-character code, the app saves that code and the game's private share link in CloudKit's public database. The code reveals nothing about the game by itself and stops working after three days.
On your device
Your first name, preferences and a local copy of the game you're in (for speed and offline play) are kept on your iPhone and removed when you delete the app.
Photos and the camera
- Face blur is always on. Apple's on-device Vision framework finds faces and the app pixelates them before the review screen. The unblurred original is never uploaded.
- Camera access is used only while you're snapping a square.
- Photo library: when you pick a photo, iOS gives the app only the photo you choose. If you save a recap collage, the app asks for add-only access, so it can add the image but can't see your library.
- Photos are visible only to players in your game. There's no public feed, discovery or profile.
Weather and location
The app never accesses your device's location. To suggest weather squares, it sends the approximate coordinates of the park city you pick to Apple's WeatherKit service. Apple Weather data is provided under Apple's terms.
Notifications
If you allow notifications, the app tells you when a friend needs your vote, when someone is one square away and when someone wins. Apple delivers silent CloudKit updates to your device; the alert text is created on your phone.
Purchases
Park Pass, Day Pass and square packs are sold through Apple's App Store. Apple processes the payment; we never receive your card or billing details. The app checks your purchases with Apple's StoreKit, and the unlocked options are saved with the game you host.
What we don't do
- No advertising and no ad or analytics SDKs.
- No tracking across apps or websites, and no sale or sharing of personal information.
- No face recognition: the app only detects where faces are so it can blur them.
This website
themeparkbingo.app is hosted on Amazon Web Services (Amazon S3 and Amazon CloudFront). Like any website, AWS processes your IP address and browser details to deliver pages. We don't use cookies, analytics or trackers on this site.
Contact form
If you write to us, we receive your name, email address, the topic, your message, and the IP address the request came from (to help stop spam). The form is processed by an AWS Lambda function and delivered to us by email through Amazon Simple Email Service. We use it only to reply to you, and we delete it on request.
Keeping and deleting data
- Game data stays in the host's iCloud until it's deleted. You can remove the app's iCloud data at any time in iPhone Settings → [your name] → iCloud → Manage Storage (or Storage) → Theme Park Bingo.
- Deleting the app removes its local copy from your iPhone.
- Contact form emails are kept until the conversation is over or you ask us to delete them.
Children
Theme Park Bingo is a family-friendly game, but players need an Apple Account with iCloud, so children play under their family's accounts and parental controls. We don't knowingly collect personal information from children under 13. If you believe a child has written to us through the contact form, tell us and we'll delete it.
Your choices and rights
Depending on where you live (for example under the GDPR or California law), you may have the right to access, correct or delete personal information we hold about you, and to object to its use. Since game data lives in iCloud, you control it directly; for anything you sent us, use the contact form and we'll respond within 30 days.
Changes
If we change this policy, we'll update the effective date above, and for significant changes we'll say so in the app.