Privacy Policy

This Privacy Policy explains how İrem, the developer of Jollyjack (“we”, “us”, “our”), collects, uses and shares personal information when you use the Jollyjack app for iPhone (the “App”) and this website (jollyjack.net). We are the data controller for this information. If you have any questions, contact us at [email protected].

1. Information we collect

1.1 Account information

You sign in with Apple or Google. We receive your name (Apple shares it only the first time you sign in), your email address (or an Apple private relay address if you choose Hide My Email), the sign-in method you used and an account identifier. We also store the language you use the App in. Sign-in is handled by Firebase Authentication, a Google service. From Google we request only your basic profile and email address.

1.2 Training data

To build your training plan and keep your progress, the App stores:

• your onboarding answers: your experience level, age range, how often and where you play, which moves you already know, your goals and obstacles, and your daily practice time;
• your training plan and settings, such as table rules, counting system, sounds, haptics and reminder times;
• your progress: drills, lessons and hands played, your decisions and accuracy, Skill Test results, rating, streaks and your virtual chip balance.

This data is stored on your device. While you are signed in, it is also saved in Cloud Firestore, a Google database located in the European Union, linked to your account, so your progress is kept and can be restored when you sign in again, including on another iPhone. To combine progress from several iPhones, each installation of the App also saves a random identifier with it.

1.3 Subscription and purchase information

Jollyjack Pro subscriptions are sold through Apple’s App Store. Apple processes your payment; we never receive your payment card details.

We use Superwall (Superwall, Inc.) to show subscription screens, to handle purchases and restores through the App Store and to check whether your subscription is active. Superwall receives:

• information about your purchases and subscription, such as the product, price, dates, free trial status, renewals, cancellations and refunds (Apple also reports these to Superwall);
• how you use subscription screens, such as which screen was shown, where in the App, and whether you closed it, started a purchase or restored one;
• basic device and app information, such as device model, iOS version, language, region, time zone and app version, your device’s identifier for vendor (IDFV, an ID iOS gives our apps on your iPhone), and an approximate location (such as your country) derived from your IP address;
• to tailor subscription screens and their text: your level, daily practice time, experience level, counting system and number of hands played, and a number based on your onboarding answers.

While you are signed in, this information is linked to a pseudonymous identifier derived from your account identifier. The App does not send Superwall your name, email address or account identifier. Apple also receives this pseudonymous identifier with your purchase. Before you sign in, Superwall uses a random identifier it creates on your device, and when you sign out or delete your account, the App resets Superwall’s identifier on your device. The identifier for vendor does not change when this happens. We do not use this information for tracking or advertising.

1.4 Usage and device information

We use Google Analytics for Firebase to understand how the App is used and to improve it. It collects events such as screens and onboarding steps viewed, your onboarding answers, the practice hand and count in onboarding, your training plan, sign-ins (with the method used), whether you allowed notifications, drills, lessons and Skill Tests started and completed (with accuracy and scores), learning-path steps and virtual chip rewards, your daily streak, a sample of the hands and decisions you play, settings you change, subscription screen and purchase events (such as the screen shown and the product bought), feedback sent (its length, topic, rating and where in the App you sent it, not its text) and account deletion. It keeps a few profile details for grouping players, such as your level, experience, where you play, counting system, daily practice time, streak range, reminder settings and subscription status. It also collects your device model, iOS version, language, app version, an app instance identifier, your device’s identifier for vendor (IDFV) and your approximate location (such as country or city) derived from your IP address. While you are signed in, this information is linked to your account identifier. We use Google Analytics for Firebase without your device’s advertising identifier (IDFA), and we do not collect your precise location.

1.5 Crash reports and diagnostics

Firebase Crashlytics collects crash reports and diagnostic information, such as the state of the App and your device when a problem happened, your iOS version and the app version. This information is linked to your account identifier so we can find and fix problems.

1.6 App configuration

Firebase Remote Config lets us adjust some settings, such as drill pass marks or the length of a coach session, without an app update. To do this, the App sends Google an app instance identifier and basic device and app information.

1.7 Notifications

Reminders, such as the daily reminder, streak alerts and the Skill Test reminder, are scheduled on your device. If you allow notifications, the App also registers with Firebase Cloud Messaging, which assigns a device token so we can send you messages about your training, such as streak reminders. While you are signed in, this token is saved with your account, and it is removed when you sign out. To choose who receives these messages, we use your current streak range, whether streak alerts are on and your daily reminder hour. You can turn the daily reminder and streak alerts off in Settings › Notifications in the App, and all notifications off in iOS Settings.

1.8 Feedback and reports

If you send feedback or suggest a feature, or report a card, hand or question in the App, we receive what you write, any rating or topic you choose, where in the App you sent it (such as the screen and the cards shown) and your app and iOS versions, linked to your account identifier. If you are not signed in, it waits on your device until you sign in. If you email us, we receive your email address, your message and any details you include.

1.9 This website

This website has no accounts, cookies, analytics or trackers, and it loads nothing from other websites. It is hosted by Cloudflare, which processes technical information such as your IP address and browser type to deliver and protect the site.

1.10 What we do not collect

The App does not access your contacts, photos, camera, microphone, health data or precise location, and it does not use your device’s advertising identifier.

2. How we use information

• To create and secure your account and let you sign in.
• To provide the App, build your training plan, and save and restore your progress.
• To provide your subscription and restore your purchases.
• To display and improve subscription screens.
• To send the reminders and messages you have allowed.
• To understand how the App is used, fix problems and improve lessons, drills and features.
• To respond to feedback and support requests, and to comply with legal obligations.

We do not use your information for advertising, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. Legal bases

Where data protection laws such as the EU or UK GDPR or Turkey’s Personal Data Protection Law No. 6698 (KVKK) apply, we rely on these legal bases:

• Contract: to provide your account, save and restore your training data, provide your subscription and provide the App.
• Consent: for notifications, which you allow in iOS. You can withdraw consent at any time in iOS Settings (the daily reminder and streak alerts can also be turned off in the App).
• Legitimate interests: for analytics, crash reports, app configuration, tailoring subscription screens, security, handling feedback and improving the App. You can object at any time (see section 7).
• Legal obligation: where we must keep or disclose information by law.

We collect this information electronically: from you and your sign-in provider when you use the App, automatically through the App and the services listed below, and from Apple about your purchases.

4. How we share information

We share information with service providers that process it on our behalf and under our instructions:

• Google (Google LLC and its affiliates) – Firebase Authentication, Cloud Firestore, Google Analytics for Firebase, Firebase Crashlytics, Firebase Remote Config and Firebase Cloud Messaging (sign-in, storage of your progress, analytics, crash reports, app configuration and notifications).
• Superwall (Superwall, Inc.) – subscription screens, purchases, restores and subscription status.
• Cloudflare (Cloudflare, Inc.) – hosting of this website.

Apple and Google also process information as independent companies, under their own privacy policies, when you use Sign in with Apple or Google Sign-In, buy a subscription through the App Store, or receive notifications through Apple’s push notification service.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it to track you across other companies’ apps or websites.

5. International transfers

Your training data in Cloud Firestore is stored in the European Union. Google (for Firebase’s other services), Superwall and Cloudflare are based in the United States and may process information in the United States and in other countries where they or their subcontractors operate. Where the GDPR or UK GDPR requires it, these transfers rely on appropriate safeguards, such as the EU–U.S. Data Privacy Framework for certified providers or the European Commission’s Standard Contractual Clauses. For users in Turkey, we transfer personal data abroad in line with Article 9 of KVKK.

6. How long we keep information

• Account and training data: until you delete your account. Deleting your account removes it from Cloud Firestore.
• Notification token: until you sign out or delete your account, or until the token changes.
• Subscription records: as long as needed to provide the service and to meet legal and accounting obligations.
• Analytics data: up to 14 months after your last use of the App, under Google Analytics’ retention setting. After that, only totals that don’t identify you remain.
• Crash reports: 90 days, under Firebase Crashlytics’ retention period.
• Feedback and reports: as long as needed to handle them and improve the App. They are not removed when you delete your account, but they no longer lead to your name or email address. You can ask us to delete them.
• Support emails: as long as needed to handle your request. You can ask us to delete them.
• Information on your device: until you delete your account or delete the App. When you sign out, your progress and settings stay on the device for your next sign-in with the same account; if a different account signs in, they are removed first. When you delete your account, your progress and settings are removed from the device, but your onboarding answers and your training plan stay on it until you delete the App, so you don’t have to answer the questions again. After a sign-out or an account deletion, if you sign in with an account that has no onboarding answers of its own, they are saved with that account. Your sign-in session is an exception: iOS keeps it in your iPhone’s keychain even after you delete the App, so if you install the App again you may still be signed in. To remove it, sign out or delete your account before you delete the App.
• Website: Cloudflare keeps technical request logs only for a short period, for security.

7. Your choices and rights

• Delete your account: in the App, open Settings › Account › Delete account (if your subscription has ended and you see the “Unlock Jollyjack Pro” screen, tap Account at the bottom of it) and confirm with Apple or Google (you need an internet connection). This permanently deletes your sign-in account and the training data stored with it in Cloud Firestore and removes your progress from your device. It also ends Jollyjack’s access to your Apple or Google sign-in: the App revokes its Sign in with Apple authorization, or its access to your Google account. You then return to the sign-in screen. Your onboarding answers and training plan stay on your device until you delete the App (see section 6). If you have never subscribed, you can’t open the App’s settings: email us at [email protected], from the email address linked to your account if you can, and we will delete your account and its data. Deleting your account does not cancel an active subscription; you can cancel it in your Apple Account subscription settings. To have feedback or support emails you sent us deleted too, email us.
• Notifications: turn the daily reminder and streak alerts on or off in Settings › Notifications in the App, or turn all notifications off in iOS Settings.
• Your rights: depending on where you live, you may have the right to access your information, correct it, delete it, receive a copy in a portable format, restrict or object to its processing (including analytics), and withdraw consent. To make a request, email [email protected]. Please write from the email address linked to your account if you can, or tell us how you sign in, so we can confirm the request is yours. We reply within one month (within 30 days for requests under KVKK). You may also lodge a complaint with your local data protection authority.
• Users in Turkey (KVKK): under Article 11 of KVKK, you have the right to learn whether your personal data is processed and to request information about it; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Turkey or abroad it is transferred to; to ask for it to be corrected or deleted, and for those third parties to be told; to object to a result against you that comes solely from automated analysis; and to claim compensation for damage caused by unlawful processing. If we reject your request or don’t reply in time, you can complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

8. Age requirement

The App is intended only for adults aged 18 or older, because it contains simulated gambling, and it is rated 18+ on the App Store. It is not directed to children, including children under 13, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us with personal information, contact us and we will delete it.

9. Security

We and our service providers use reasonable technical and organizational measures to protect information, and the App sends it over encrypted connections. No method of transmission or storage is completely secure.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date above, and if the changes are significant we will let you know in the App.

11. Contact

Data controller: İrem, developer of Jollyjack
Georgia
[email protected]