privacy policy

the short version

Aihana is a multiplayer card-game app. To let you play with friends, remember your games, and let the dealer respond to you, we collect a small amount of information — your phone number (to sign in), the name you play under, and a record of the games you play.

We do not sell your data. We do not track you across other apps or show you ads. You can delete your history — a single session or everything — at any time. The card-game memory that powers the “Living Deck” can be turned off entirely.

what we collect

Account information. When you sign in, we collect your phone number and send a one-time code to it to verify it’s you. You choose a display name that other players at your table can see.

Gameplay. As you play, we record game events — the moves made, cards played, rounds and outcomes — so games can resume, so the dealer can recall what happened, and so your card history (the “Living Deck”) can tell the story of your play. We also keep basic device and session information (a device identifier, app version, and timing) to run the multiplayer connection and understand engagement.

Notifications. If you turn them on, we register a device push token so we can send alerts — for example, when it’s your turn or a friend invites you to a table. You can turn notifications off at any time in your device settings.

What you say to the dealer. When you ask the dealer a question, teach the table a rule, or chat during a game, we process that text to generate a response (see “the dealer, and your words” below).

Diagnostics. If the app crashes or hits an error, we collect a crash report with technical details so we can fix it.

how we use what we collect

To run the games — sign you in, connect you to other players, keep games in sync, and let you reconnect if your connection drops.

To remember — so the dealer can recall past hands and your card history can form a continuous story across sessions. This is the heart of what Aihana is; it’s also the part you can switch off.

To respond — to interpret what you ask or teach and reply in the dealer’s voice.

To keep the table fair and safe — to enforce the rules of play and review chat for harmful content.

To keep the app working — to diagnose crashes and understand, in aggregate, how the app is used.

the dealer, and your words

When you talk to the dealer or teach the table a new rule, the text you send is processed by third-party AI providers (OpenAI and/or Anthropic) so we can understand it and respond. We send them the message and the context needed to answer it; we do not send them your phone number.

These providers process the text on our behalf to return a response. We don’t use your conversations to advertise to you, and the rules you teach apply only within your session unless you choose to save them.

who we work with

We share data only with the service providers that make the app run, and only as needed:

• Supabase — our database, authentication, and storage (where your account and game data live).
• Our messaging provider — to deliver the one-time sign-in code by SMS to your phone.
• OpenAI and/or Anthropic — to process what you say to the dealer and the rules you teach.
• Sentry — to collect crash and error reports.
• Apple Push Notification service and Expo’s push service — to deliver notifications to your device, when you’ve turned them on.
• Our hosting provider — to run the backend that serves the games.

Each of these processes data for us under their own terms; none of them are permitted to use your data to advertise to you. We may also disclose information if the law requires it, or to protect the safety of our players.

what we don’t do

We don’t sell your personal information. We don’t use third-party advertising or ad-tracking SDKs, and we don’t track you across other companies’ apps or websites — so the app does not ask for tracking permission. We collect only what the game needs to work and to remember.

how long we keep things

Game and card-history events are kept for up to 90 days, then automatically deleted. Your account information (phone number, display name) is kept while your account exists, until you ask us to delete it. Crash reports are retained only as long as needed to investigate issues.

your choices

Forget a session. You can have a single game session forgotten from within the app.

Delete everything. You can request deletion of all of your data — your history and your account — and we will erase it.

Turn off memory. You can disable card-history storage entirely, so the Living Deck stops recording your play.

To exercise any of these, use the in-app controls or write to us at team@aihana.io. We honor verified requests from the account that owns the data.

children

Aihana is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

security

Connections to our servers are encrypted in transit. Access to your data is authenticated, and the game server — not your device — is the authority on game state. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

where your data is processed

Our providers operate primarily in the United States, so your information may be processed there. By using Aihana you understand your data may be handled in the U.S. and other countries where our providers operate.

if you’re in the EEA or UK

If you use Aihana from the European Economic Area or the United Kingdom, you have additional rights under the GDPR, and the following applies.

Legal bases. We process your data to perform our contract with you (running the games and your account), for our legitimate interests (keeping the table fair and safe, diagnosing crashes, and understanding engagement in aggregate), and on the basis of your consent where we ask for it (such as notifications and the optional Living Deck memory). Where we rely on consent, you can withdraw it at any time.

Your rights. You can request access to your data, correct it, erase it, restrict or object to how we process it, and ask for a copy you can take elsewhere. To exercise any of these, use the in-app controls or write to us at team@aihana.io.

Complaints. If you have concerns about how we handle your data, you can lodge a complaint with your local data-protection authority — in the UK, the Information Commissioner’s Office (ICO).

International transfers. Because our providers operate primarily in the United States, your information is transferred there under appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

changes to this policy

If we make a material change, we’ll update this page and the date above. Continued use after a change means you accept the updated policy.

contact

Questions, requests, or concerns about your privacy — write to us at team@aihana.io.