Privacy Policy
Last updated: 18 October 2026
Yaaryug is a set of quick multiplayer word and party games you play with friends. This policy explains what we collect when you use the Yaaryug app and yaaryug.com, why, who helps us run it, and the choices you have. It covers every game in the app, including games added later.
Yaaryug is operated by Aashish Regmi ("we", "us"). Questions: support@yaaryug.com.
The short version
- You sign in with Apple or Google, or play as a guest. We never see a password.
- Your public identity is your @handle, display name, doodle avatar and friend code. Pick a handle that is not your real name if you prefer.
- We keep what is needed to run matches, friends and notifications. We do not sell your data.
- Ads help keep the app free. On iOS we ask before tracking; in the EEA, UK and Switzerland we ask for consent before personalized ads.
- You can delete your account in the app at any time. See Delete your account.
What we collect
Account and profile
| Data | Why |
|---|---|
| Sign-in identifier from Apple or Google, and the email address they share with us (Apple may give us a private relay address) | To create your account and let you sign back in |
| Guest account identifier (if you play without signing in) | To keep your progress on this device until you link an account |
| @handle, display name, friend code, doodle avatar, pronoun choice | To show you to friends and opponents and word the game text ("their turn") |
| Language, content language for word games, time zone | To show the app in your language, match word games in one language, and reset daily limits at your midnight |
| Privacy and notification settings (discoverable, show online, who can invite you, quiet hours) | To respect your choices |
Friends and play
| Data | Why |
|---|---|
| Friends, friend requests, blocks | To run your friend list and keep people you blocked away |
| Rooms, invites, matches, moves, scores, results, head-to-head records | To run each game fairly on our servers and show your history and rivalries |
| Words you enter in word games (for example a secret word or an answer) | They are part of the match and are shown to your opponent |
| Preset emoji reactions | Sent live to the other players in your room; there is no free-text chat |
| Online status and last activity | To show friends you are around and to end matches when a player has left |
| Reports you send about another player, including an optional note | To review abuse and enforce our Terms |
Pass & play games on one phone stay on that device. Names typed for a pass & play opponent are stored only on the device.
Device and technical
| Data | Why |
|---|---|
| Device type, OS, app version, push notification token | To deliver notifications and keep the app compatible |
| Crash reports and error logs (Firebase Crashlytics) | To find and fix crashes |
| Usage events such as screens viewed, games started and finished, purchases started (PostHog) | To understand which features work and improve them |
| IP address | Processed in transit by our providers for security and to derive an approximate country; we do not store it in our game database |
Purchases and ads
| Data | Why |
|---|---|
| Purchase and subscription status, product, store transaction IDs (via RevenueCat and the App Store or Google Play) | To unlock premium for you and handle refunds. We never receive your card details |
| Rewarded-ad confirmations (Google AdMob server-side verification) | To give you the extra plays you earned by watching an ad |
| Advertising identifier (IDFA on iOS, Android advertising ID) | Used by AdMob to show and measure ads; on iOS only if you allow tracking |
How we use it
We use your data to provide the games and social features you ask for, keep matches fair and the community safe, send the notifications you have turned on, process purchases, show ads to free players, fix bugs and improve the app, and meet legal obligations.
If you are in the EEA, UK or Switzerland, our legal bases are: contract (running your account, matches, friends and purchases), legitimate interests (security, abuse prevention, crash reports, product analytics), consent (personalized ads, tracking on iOS and push notifications, which you can withdraw at any time) and legal obligation (tax and accounting records).
Who can see what
- Other players see your @handle, display name, avatar, pronoun choice and, if you allow it, your online status. Your opponents see your moves, words and reactions in matches you play together, and your head-to-head record with them.
- Anyone with your friend code or share link can look up your public profile and send you a friend request. Blocked players cannot.
- Service providers process data for us under contract:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Accounts, database, realtime game updates | India (Mumbai region) |
| Google Firebase | Push notifications, crash reports | Global |
| PostHog | Product analytics | United States |
| RevenueCat | Purchases and subscriptions | United States |
| Google AdMob | Ads for free players | Global |
| Apple and Google | Sign-in, app stores, payments | Global |
| Vercel and Cloudflare | Hosting and delivering yaaryug.com | Global |
We may disclose data if the law requires it, to protect players' safety, or as part of a sale or merger of Yaaryug, in which case this policy will continue to apply to your data or you will be told before it changes.
We do not sell your personal data.
Ads and your choices
Free players see ads from Google AdMob. Premium removes ads for you.
- iOS: we ask through App Tracking Transparency before your advertising identifier is used for tracking. If you say no, you still get ads, just not personalized ones.
- EEA, UK and Switzerland: we show Google's consent form before personalized ads. To change your choice later, email us or clear the app's data and the form will appear again.
- Android: you can reset or delete your advertising ID in your device settings.
How long we keep data
| Data | Kept |
|---|---|
| Account, profile, friends and settings | Until you delete your account |
| Match results and history | Until you delete your account |
| Friend requests | Up to 90 days after they are answered or expire |
| Notification delivery records | 7 days |
| Daily play counters | 3 days |
| Raw store purchase data | 30 days; the purchase record itself is kept as long as the law requires for tax and refunds |
| Security and audit logs | Up to 1 year |
| Reports about players | As long as needed to handle the report and protect players |
| Crash reports and analytics | Under the providers' retention settings |
Deleting your account
Delete your account in the app: Profile → Delete Account. We erase your profile, friends, requests, blocks, matches, game history and stats, devices, notifications and ad rewards straight away and remove your sign-in. Your @handle is held for 30 days so nobody can impersonate you, then it becomes free again.
Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play subscriptions first.
If you cannot open the app, follow the steps on yaaryug.com/delete-account.
Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, object to or restrict some processing, and withdraw consent. Email support@yaaryug.com from the address linked to your account, or include your @handle and friend code. We answer within 30 days.
If you are in the EEA or UK you may also complain to your data protection authority. If you are a California resident you have the right to know, delete and correct your data, and to not be discriminated against for using these rights. We do not sell or "share" personal information for cross-context behavioural advertising except through AdMob ads as described above, which you can limit with the choices in "Ads and your choices".
Children
Yaaryug is for people aged 13 and over. We do not knowingly collect data from children under 13. If you think a child under 13 is using Yaaryug, email support@yaaryug.com and we will delete the account.
International transfers
Our main database is in India and some providers process data in the United States and elsewhere. Where the law requires, we rely on safeguards such as the European Commission's Standard Contractual Clauses.
Security
Data travels over encrypted connections. Our database only accepts requests through checked server functions, every table has row-level security, and sign-in tokens are stored in your device's secure storage. No system is perfectly secure, so please tell us at support@yaaryug.com if you find a problem.
The website
yaaryug.com does not use advertising cookies. We use privacy-friendly, cookie-free page analytics to count visits.
Changes
We will update this page when our practices change and change the date at the top. If a change is significant we will tell you in the app.