PhomTime is a multiplayer card game for phones and tablets, where people play Phỏm together at online tables. This policy explains what the app collects about you, what we do with it, and what you can ask us to do. “We” means PhomTime, the publisher of the app.
In short
We collect what the game needs to work: your account, your profile, your games and your messages.
The app has no advertising, no tracking tools and nothing to buy. We do not sell your information.
You can ask for a copy of your information, or ask us to delete your account, by writing to contact@phomtime.win.
PhomTime is for players aged 16 and over.
What we collect
Your account
You can play in four ways, and each one gives us something different.
As a guest. We ask for nothing. The app creates an account with a random ID and a name such as “Guest_1a2b3c4d”, and remembers it on your device.
With an email address and a password. We keep your email address. Your password is stored in a scrambled form that we cannot read. We send a six-digit code to the address to check that it is yours.
With Google. Google gives us your name, email address and picture. See Sign in with Google.
With Facebook. Facebook gives us your name, email address and picture. See Sign in with Facebook.
Your profile
Your player name, which you can change in the app.
Your picture. This is your Google picture if you sign in with Google. Otherwise it is a pattern the app draws from your account’s ID.
Your country. By default this is the country your phone is set to. The app reads the phone’s region setting. It does not use GPS or your precise location. You can choose another country, or none, in the app.
Your gender, only if you choose to give it. It is not shown to other players in the app.
Your coins, rank points and the number of games you have played and won.
Your games
We keep the tables you create or sit at, with their names and settings. For every game you are dealt into we keep the cards, each move, the result, and the coins won or lost. The game history, the replays and the rankings are made from these records.
Messages and other players
The messages you send in a table’s chat and in direct messages.
Your friends and friend requests, the players you like, and the players you block.
Reports. If you report a player, we keep the report and the reason you gave. If someone reports you, the report is kept with your account.
Removals and bans. If a table’s host removes or bans you, the table keeps a record of it, with the reason the host gave.
Each table’s log of who sat down, who left, and what the host changed.
Voice
A table can have voice chat. If you join it and allow the app to use your microphone, your voice is sent live to the other people in that table’s voice chat. Voice is not recorded or stored. You can mute your microphone or leave voice chat at any time.
Settings
The choices you make in the app’s settings, such as your time zone and your voice options, are kept with your account.
Technical information
When the app talks to our servers, our hosting provider records your IP address, the type of device and app, and the time. This is used to run the service, to keep accounts secure and to find faults. The app also keeps your sign-in and your settings in its own storage on your device.
What we do not collect
Your precise location, your contacts, your photos or your camera.
An advertising ID. The app contains no advertising and no analytics or tracking tools.
Payment details. There is nothing to buy: coins are play money, which cannot be bought and cannot be exchanged for money.
Sign in with Google
When you choose “Sign in with Google”, Google asks you to confirm, and then tells us four things:
your name;
your email address, and that Google has verified it;
your profile picture;
the ID number of your Google account.
We never see your Google password. We do not ask for access to anything else in your Google account, such as Gmail, your contacts, your calendar or your files.
How we use it
To create your PhomTime account and sign you in to it.
Your name becomes your first player name. If the name is very short, the part of your email address before the @ is used instead. You can change your player name in the app.
Your picture is shown to other players as your avatar. Their apps load it directly from Google’s servers.
Your email address identifies your account, and lets us check that a request about the account comes from you.
How we store and share it
It is kept with the rest of your account, on our hosting provider’s servers in the United States. We do not sell it and we do not use it for advertising. We share it only with the service providers listed under Who helps us run PhomTime, who handle it only to run PhomTime for us. Other players see your player name and your picture. They never see your email address.
How to remove it
Write to contact@phomtime.win and we will delete your account and this information, as Delete your account and data describes. You can also remove PhomTime’s access in your Google Account, at myaccount.google.com/connections. That stops future sign-ins with Google, but it does not delete what we already hold, so write to us as well.
Sign in with Facebook
When you choose “Sign in with Facebook”, Facebook asks you to confirm, and then tells us four things:
your name;
your email address, if your Facebook account has one;
your profile picture;
the ID number Facebook gives your account for PhomTime.
We never see your Facebook password. We do not ask for access to anything else in your Facebook account, such as your friends, your posts or your messages.
How we use it
To create your PhomTime account and sign you in to it.
Your name becomes your first player name. If the name is very short, the part of your email address before the @ is used instead. You can change your player name in the app.
Your email address identifies your account, and lets us check that a request about the account comes from you.
Your Facebook picture is not used. Our sign-in service receives its address and keeps it with your account, but the app never shows it.
How we store and share it
It is kept with the rest of your account, on our hosting provider’s servers in the United States. We do not sell it and we do not use it for advertising. We share it only with the service providers listed under Who helps us run PhomTime, who handle it only to run PhomTime for us. Other players see your player name. They never see your email address or your Facebook picture.
How to remove it
Write to contact@phomtime.win and we will delete your account and this information, as Delete your account and data describes. You can also remove PhomTime in Facebook: open Settings & privacy, then Settings, then Apps and websites. That stops future sign-ins with Facebook, but it does not delete what we already hold, so write to us as well.
How we use your information
To run the game: accounts, tables, dealing and scoring, history, replays and rankings.
To let players talk to each other, by chat and by voice.
To keep play fair and safe: checking every move on our servers, allowing an account on one device at a time, and handling reports and bans.
To send the email that confirms your address.
To find and fix faults.
We do not use your information for advertising, and we do not sell it. Where the law asks for a reason, ours are these: we need your information to provide the game you asked for, and we have a legitimate interest in keeping the game fair, safe and working.
What other players can see
PhomTime is a game played with other people, so some of your information is visible to them.
Your player name, picture and country, your coins and rank points, and your record of games. These are shown on your profile card, at the tables you sit at and in the Hall of fame, and anyone using the app can see them.
Your play at a table you share. When a game is over, the people who were in it can replay it.
Your messages. A table’s chat is read by the people at that table. A direct message is read by the player you sent it to.
Your voice, by the people in the same voice chat.
Other players cannot see your email address, your password or your IP address. The cards in your hand are shown only to you until the game reveals them.
Who helps us run PhomTime
These companies handle information for us, only so that the app works.
Supabase
Hosts our database, our sign-in service and our servers. Your account, profile, games and messages are stored there, in the United States.
Google
Signs you in, if you choose “Sign in with Google”. Google also serves the profile pictures of players who signed in that way.
Meta
Signs you in, if you choose “Sign in with Facebook”.
Resend
Delivers the email that confirms your address. It receives your email address and the message we send.
LiveKit
Carries live voice between the players in a table’s voice chat.
We may also have to disclose information when the law requires it.
Where it is stored
Our servers are in the United States. If you play from another country, your information is sent to the United States and kept there.
How long we keep it
Your account, your profile and your game records are kept for as long as you have the account.
Messages in a table’s chat are deleted 30 days after they are sent. Direct messages are kept for as long as you have the account.
A guest account that has not been used for a long time may be deleted.
When you ask us to delete your account, we delete it together with your profile, your results and your social information. The moves of games you played and the messages you sent to other players are kept, without your name. Delete your account and data lists what goes and what stays. Copies may remain in our hosting provider’s backups for a short time, until those are overwritten.
Your choices
In the app
Change your player name, your country and your gender, or remove your country and gender.
Block a player, which stops direct messages between you.
Mute your microphone or leave voice chat.
Sign out.
By writing to us
Write to contact@phomtime.win to ask for a copy of your information, to have something corrected, or to have your account and its information deleted. The app has no delete button yet, so deletion is done by request: the steps are on Delete your account and data.
Please write from the email address of your account. If you play as a guest, tell us your player ID, the eight characters shown on your profile card. We answer within 30 days.
Depending on where you live, the law may give you further rights, such as the right to object to how we use your information or to complain to your data protection authority.
Age
PhomTime is for people aged 16 and over. We do not knowingly collect information from anyone younger. If you believe someone under 16 has an account, write to us and we will delete it.
Security
The app talks to our servers over encrypted connections. Passwords are stored in a scrambled form that we cannot read. Access to the database is restricted, and every move is checked on our servers. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
Changes to this policy
When we change this policy, we publish the new version on this page and change the date at the top.