Privacy Policy
Last updated:
Privacy should be simple to understand. This page explains what data Audered collects, why, and what control you have over it. We do not sell your personal data, and we never will.
1. Who we are
Audered is developed and operated by Daniel Farré. For anything related to privacy, write to Show email .
2. What we collect
Only what the game needs to work:
| Data | Where it comes from | What for |
|---|---|---|
| Email address | Given at sign-up, or from your Google or Apple account | Identifying you and giving you access to your account |
| Name | Typed by you, or from your Google or Apple account | Showing it to your partner inside the app |
| Profile photo | Uploaded by you, and optional | Showing it to your partner inside the app |
| Invite code | Generated by the app | Letting your partner link with you |
| Game data | Created as you use the app | Showing the cards played and the history you share |
| Device token | Provided by Firebase | Sending you notifications about incoming cards |
| App usage | Generated by the app while you use it, unless you switch it off | Seeing which parts of the app get used and where it fails, to improve it |
| Purchases | Reported to us by the store and RevenueCat | Knowing whether you have Audered Plus or purchased games, and until when |
| App language | Taken from your phone | Showing you the app in your language |
| Technical logs | Created by the API: IP address, time and what was requested | Spotting failures and abuse |
We do not collect your precise location, your contacts, financial information, or anything not in that table. If you buy a game or subscribe to Audered Plus, the payment is handled by Apple or Google: we never see or store your card details.
The app also collects usage data to learn which screens are used and where people get stuck: the actions you take (signing in, linking, starting a game, playing a card, seeing the paywall), when, with which version of the app and in which language, plus your approximate country and city, worked out from your IP address. It is tied to your account's internal identifier, never to your email or your name, and it never includes a card's text or your partner's name. You can turn it off in Settings, under "Share usage data".
3. What we use it for
- Identifying you and keeping your account secure.
- Letting you and your partner play in real time.
- Storing your history so that both of you can look it up.
- Showing your name and photo to the person you have linked with.
- Making the service more reliable and faster.
- Understanding which parts of the app get used, to improve it, unless you switch it off.
We do not use it for advertising, commercial profiling, or anything not on that list.
4. Who it is shared with
We do not sell, rent or hand over your data to third parties for their own commercial purposes. It is only shared:
- With your partner: your name and photo are visible to the person you have linked with, inside the app.
- With our service providers: the ones in the next section. They process data on our behalf and are contractually bound to protect it.
- If the law requires it: we may have to hand data over under a court order, or to protect the rights and safety of users or the public.
5. Third-party services
- Google Firebase: authentication, including signing in with Google or with Apple, and push notifications. If you sign in with Apple and choose to hide your email, what we store is the relay address Apple gives you, not your own. Firebase privacy
- RevenueCat: handles in-app purchases. It receives an identifier for your account and what you have bought (single games, or the Audered Plus subscription and its status), not your payment details. RevenueCat privacy
- PostHog, in its European Union cloud (Frankfurt): usage analytics for the app. It receives which features you use (opening the app, starting a game, playing a card, buying), with your account's internal identifier, your language, operating system and app version, and your IP address, from which it works out your approximate country and city. It never receives your email, your name, your partner's name or the text of any card, and it does not record your screen. Switch it off in Settings, under "Share usage data". PostHog privacy
- Cloudflare: hosts the app's API, the database holding your games and the profile photos. Only we have access to them. Cloudflare privacy It also serves this website. This page carries no analytics, no cookies and no trackers; the typeface is served from this same domain, so visiting it does not hand your IP address to any third party.
6. How long we keep it
For as long as your account exists. When you delete it, we remove your personal data and your game history within a reasonable period, except for anything the law requires us to keep. If you are linked, the couple is deleted too, with your games and the history you shared: your partner keeps their account, but that history is gone for both of you.
Cloudflare keeps a history of the database so it can be restored if something goes wrong, so your data may remain in that history for up to 30 days after deletion. Data from before 12 October 2026 also remains in a copy on the server we used before (Oracle Cloud), which we will delete when we shut it down.
7. Your rights
Depending on where you live, you may have the right to:
- Access a copy of the data we hold about you.
- Correct it if it is wrong. Your name and photo you can change yourself in Settings.
- Delete it, together with your account. You can do that from Settings, or request it from this page.
- Take it with you in a reusable format.
- Object to certain kinds of processing.
To exercise any of these, write to Show email . We reply within 30 days at the latest. If you live in the European Union and you believe we have not done our job properly, you can complain to your data protection authority; in Spain that is the AEPD.
8. Security
- Everything travelling between the app and the API is encrypted with HTTPS/TLS.
- Authentication is handled by Google Firebase.
- Your profile photo is stored in our Cloudflare storage and served from a long, random address. It cannot be guessed, but it is not secret either: anyone holding the link can open the photo without signing in.
- The API's technical logs, which include IP addresses, are kept for a short time and only looked at to fix failures or stop abuse.
- The database is not exposed to the internet: only the API reads it, and no one but us can sign in to the Cloudflare account.
No system is completely secure. If you think someone has got into your account, write to Show email as soon as you can.
9. Children
Audered is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we find out that someone under 18 has given us their data, we will delete it.
10. Changes to this policy
We may update it. When we do, we will change the date at the top. Continuing to use the app after a change means you accept the new version.
11. Contact
Any question, complaint or request about this policy: Show email .