Privacy Policy

Who we are

Unveal (the iOS app and the service at random.emaat.dk) is operated by emaat (CVR 44934302), Lungstedløkken 1, 5250 Odense SV, Denmark, which is the data controller for the personal data described below. You can contact us about privacy at [email protected].

What we collect

• Account details — your name, email address, a securely hashed password (if you set one), your language and app preferences, whether your email is verified, your plan, and when you were last active.
• User ID — a random account identifier. It is also passed to Apple as the account token on in-app purchases so subscription renewals and refunds can be matched to your account.
• Device information — a per-install device identifier, device name and model, OS and app version, when the device was last seen, and the Apple push notification token, so we can sign you in and send you notifications.
• Content you create — teams, team memberships and invites, sessions, categories, chits and spreads. When you invite someone to a team or a session, we store the name and email address you enter for them and send them one invitation email.
• Purchase history — if you subscribe to PRO, the signed App Store transaction information Apple provides: product, transaction identifiers, subscription status, renewal and expiry dates. Payment is handled entirely by Apple; we never receive your card or payment details.
• Technical data — our servers process your IP address and request details to deliver the service and protect it against abuse (for example rate limiting), and keep operational logs and diagnostics.

How we use it

We use this data only to provide the app's functionality: creating and signing in to your account, syncing your teams and sessions across devices, running live draws, sending account emails (verification, password reset, invitations) and push notifications, providing your PRO subscription, and keeping the service secure and working. Legal bases (GDPR): performance of our agreement with you (Art. 6(1)(b)) and our legitimate interest in operating a secure, reliable service (Art. 6(1)(f)).

We do not track you across other companies' apps or websites, show ads, use third-party analytics, or sell your personal data.

Who we share it with

We share data only with service providers that process it on our behalf:

• Hetzner Online GmbH — hosting of our servers and PostgreSQL database in the EU.
• Brevo (Sendinblue SAS) — delivery of account and invitation emails (recipient address and email content).
• Apple — the Apple Push Notification service delivers notifications (push token and notification content), and the App Store processes subscriptions and sends us transaction information.

Web pages on random.emaat.dk load fonts and styles from Google Fonts and jsDelivr, which receive your IP address when your browser fetches them. We may also disclose data where required by law.

How long we keep it

We keep your account data for as long as your account exists. Operational logs are kept only for a limited period.

Deleting your account

You can delete your account from within the app. You must first leave, or hand over, any teams you belong to other than your personal team. When you delete your account:

• your name, email address and password are removed and your preferences reset;
• you are signed out everywhere, your devices are deactivated, their push tokens deleted, and their device name, model, OS version and app version erased;
• your personal team is deleted, together with its sessions and any session invitations in it;
• team invitations you sent that have not been accepted are withdrawn, and the email addresses you entered for them are deleted.

An anonymised account record remains so that shared content others still rely on (for example chits in a session you took part in) stays consistent; it is no longer linked to your name or email. A per-install device identifier stays on the deactivated device records. We keep records of App Store subscription transactions (product, transaction identifiers, subscription status and dates) linked to that anonymised record so that refunds and renewal notifications from Apple can still be reconciled; these records contain no name or email address. Invitations others have already accepted, and information you added to teams or sessions owned by other people, remain with those teams. If you cannot use the app, contact us and we will delete your account for you.

Your rights

You have the right to access, correct, delete and receive a copy of your personal data, and to object to or restrict its processing. You can edit your name and preferences in the app; for other requests, contact us at the address above. You can also complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

Children

Unveal is not directed at children under 13, and we do not knowingly collect their personal data.

Changes

If we change this policy, we will update the "Last updated" date above.