Privacy Policy

What we collect

ScoreKeeper is designed with your privacy in mind. The app stores all game data locally on your device. Some optional features send data to our cloud or to nearby devices, as described below. We do not run analytics, advertising, or tracking. We never sell or share your data.

Local data storage

• All game scores, player names, avatars, and statistics are stored locally on your device using Apple's Core Data framework.
• If you have iCloud Device Backup enabled at the iOS level, your device's local data — including ScoreKeeper's local data — is included in those backups under Apple's policies. ScoreKeeper itself does not actively sync your game data across devices via iCloud today.
• We do not have access to your local data or to your iCloud backups.

Collaboration (optional)

When you enable collaboration on a game and share the 6-character game code, the app connects to our backend so that other devices can sync scores in real time.

Data sent to our servers

• Game name and type
• Player names (no email addresses, no phone numbers)
• Scores and timestamps
• The 6-character share code
• Anonymous device identifiers (used for "who added what" attribution)

Data not sent to our servers

• Email addresses, phone numbers, contact information
• Location data of any kind
• Payment information
• Personal photos or player avatars (those stay on your device)

Security

• All connections use HTTPS / WSS (encrypted in transit).
• Share codes are anonymous; no account is required to use the app.
• Anyone who has a game's share code can join that game and add or edit scores, so only share the code with people you trust.

Deletion

Shared game data persists on our server; there is currently no automatic server-side deletion. Deleting a game in the app removes it from your device, not from our server. To have a shared game's data deleted from our server, email support@emsero.com and we will remove it.

Where the backend runs

Hosted on Fly.io (cloud platform), with a Postgres database for game state. We chose Fly because it gives us encrypted-in-transit connections, a single regional deployment, and no third-party analytics on top of our own data.

Nearby player discovery (optional)

When you enable "Visible to Nearby Players," your device uses Apple's Multipeer Connectivity (the same framework AirDrop uses) to discover other devices running ScoreKeeper nearby.

Broadcast locally over Bluetooth / Wi-Fi (never sent to our servers)

• Your device name (e.g. "Alice's iPhone")
• An anonymous per-install identifier
• Whether you have an active game open

Whenever discovery is not set to Off, this broadcast is visible to any nearby device running ScoreKeeper — not just your contacts.

Never broadcast

• Your game data or scores
• Player names
• Personal information
• Location coordinates

Privacy controls — Settings → Privacy & Sharing → Nearby Players Discovery

• Off — not discoverable; nothing is broadcast
• Contacts Only (default) — your device is still discoverable by anyone nearby, but only people in your contacts can connect and invite you to games. To perform this check, ScoreKeeper reads your contact list.
• Everyone (10 minutes) — anyone nearby can connect and invite you; automatically reverts after 10 minutes

Permissions required

• Local Network (to find devices on the same Wi-Fi)
• Bluetooth (for device discovery)
• Contacts (read access, used by "Contacts Only" mode to check whether a nearby player is in your contacts)
• No Location permission — we never access your location

Data retention

Discovery data is never written to disk or sent to servers. It exists only while the app is open and broadcasting.

Voice score entry (optional)

The game screen includes optional voice input for adding scores hands-free (for example, "Add 50 to Alice").

• Voice input uses your device's microphone and Apple's speech recognition service. When you use it, your audio is processed by Apple's speech recognition service, which may send audio to Apple's servers for transcription under Apple's privacy policy.
• Your audio goes to Apple's speech service, not to our servers.
• If you never use voice input, the microphone is not requested and the app works fully without it.

Permissions required: Microphone and Speech Recognition (only if you use voice input).

What we do not do

• No analytics SDKs, no advertising SDKs, no third-party trackers.
• No account creation. No email collected. No password.
• No location tracking.
• No selling, renting, or sharing of any data with third parties.

Your data, your choices

• Access: all your data is visible inside the app.
• Export: export your full game library to JSON or CSV from Settings. (The CSV is a per-game summary — name, date, and game type — without round-by-round scores.)
• Delete: delete individual games, or reset all app data, from inside the app. This removes data from your device; to have shared-game data removed from our server, email support@emsero.com.
• Opt out of collaboration: never enable collaboration on a game to keep it fully local.
• Opt out of nearby discovery: set Nearby Players Discovery to "Off."
• Opt out of voice input: simply don't use it; all scores can be entered by touch.

Data retention

• Local data: stored on your device indefinitely until you delete it or uninstall the app.
• Collaboration server data: data from shared games (game name and type, player names, scores, timestamps, device identifiers) persists on our server. There is currently no automatic deletion; we delete shared-game data on request — email support@emsero.com.
• Nearby discovery data: not stored anywhere.
• Voice audio: not stored by us; audio is processed by Apple's speech recognition service.

Contact

Questions? support@emsero.com

Changes

We may update this Privacy Policy. Material changes will be reflected here, with the "Last updated" date at the top.