Privacy Policy
This policy explains how the Truth or Dare app, operated under the MirroDance name, handles information. We do not sell personal data or use it for cross-company advertising tracking.
Information we handle
- Account information: name, email address, Apple Sign in subject, and internal user ID.
- Purchases and identifiers: App Store purchase status, a random subscription customer ID, entitlement and expiry status.
- User content: custom deck names and questions, cloud sync revisions, AI themes and generated results.
- Technical data: request time, endpoint, response/error information, IP and security signals available to our hosting provider. We do not request IDFA.
How we use information
We use data only to authenticate accounts, synchronize decks, provide and restore Premium features, generate requested AI content, prevent abuse, troubleshoot failures, answer support requests, and comply with law. We do not show third-party advertising.
Sources and processors
Data comes from you, your device, Apple, and subscription transactions. Apple provides sign-in and payments; RevenueCat processes random customer identifiers and purchase history; DeepSeek processes AI prompts needed to generate requested cards; Alibaba Cloud hosts our API and database. These providers process data under their own terms and our service arrangements, potentially in locations where they operate.
Retention
Account and synchronized content is retained while the account exists and erased or irreversibly de-linked when account deletion completes. Original AI themes and generated results are retained for 30 days for duplicate-request caching, usage-limit enforcement, and troubleshooting, and are also deleted when the account is deleted. Failed AI requests are not written to the AI generation log. Deletion retry receipts contain only a SHA-256 token fingerprint and expire after 24 hours. Server logs use a bounded rotation of up to six 10 MB files, so elapsed retention varies with traffic. Purchase records may remain with Apple where Apple must retain transaction records.
Your choices
You may keep My Deck only on your device, decline to link a purchase to an account, sign out, or permanently delete your account in Settings → Account → Delete Account. Deleting an account does not cancel an Apple subscription; manage it at Apple Subscriptions. See Privacy Choices or contact us to request access or correction.
Security
We use encrypted HTTPS transport, access controls, password hashing, signed tokens, secret separation, and data minimization. No system is completely secure; report suspected security issues to our support address.
Children
The app is not directed to children under 13 and is not offered in Apple’s Kids Category. Do not submit a child’s personal information. If you believe a child provided personal data, contact us so we can delete it.
Changes and contact
Material changes will be reflected here with a new effective date. Questions or privacy requests: jamyluo.hust@gmail.com.