Privacy Policy
Effective date: August 31, 2026
TumbleVibe ("we", "our", "the app") respects your privacy. This policy explains what data we collect, why, and how it is handled.
1. Data we collect
Account data (Firebase Authentication): when you create an account, we collect your email address and the password you choose (stored securely by Firebase, we never see your raw password). When you sign in with Google or Apple, we receive your name and email from that provider to create your account.
Marketing emails (optional): when you create an account with email, you can check a box to receive updates and news about TumbleVibe (new features, promotions, new card packs). This is off by default and only used if you opt in. You can unsubscribe at any time using the link in any marketing email we send, or by deleting your account.
Gameplay and profile data (Cloud Firestore): we store your user ID, email, display name, and purchase status (subscription or pass) so the app can remember your progress and how many cards you have access to.
Purchase data (RevenueCat): if you buy a subscription or a pass, RevenueCat processes the transaction with Apple/Google and tells our app your entitlement status (what you have access to). We do not receive or store your payment card details — those stay with Apple/Google/RevenueCat.
Diagnostics data (Firebase Crashlytics): if the app crashes or hits an error, we send a crash/error report to Firebase Crashlytics to help us fix it. These reports include technical details (device model, OS version, and where in the app the problem happened) and are not used to identify you personally or for advertising.
AI penalty data (Google Gemini): the AI penalty feature is optional. It runs only when the tower falls and you choose "Generate with AI". If you use it, the name you enter (or the name already set up for the game), the team names, and up to three interests you pick are sent to Google's Gemini API so it can write that round's penalty cards. This text is used for nothing else. We do not store it: it is never written to our database and is not kept once the cards come back. After the text reaches Google, Google's own processing and retention practices apply — see Google's privacy policy. If you choose "Normal penalties" instead, nothing is sent to Google's AI.
AI usage counters (Cloud Firestore): to protect against abuse and runaway cost, we store a count of how many AI penalties you have generated in the current month. This record holds your user ID, the month, and a number — never the name, interests, or generated card text. These counters are deleted when you delete your account.
Usage data (Firebase Analytics): to understand how the game is actually played and which cards work, we record anonymous gameplay events — when a game starts (category, language, number of teams and players, and whether it is played solo or in teams), which penalty cards appear, whether you tap the thumbs-up/thumbs-down on a card, and how a game ends (how many penalties and how long it lasted). We use this only to improve the card content and pacing. These events never include player names, team names, or anything you type.
Support messages (Cloud Firestore): if you send us feedback from Settings, we store your user ID, the category you picked (bug, idea, cards, or other), the message you typed, an optional email address if you choose to give one so we can reply, and a device/OS label. We use this only to read and respond to what you sent. You cannot view, edit, or delete an individual message yourself once sent, but the whole record is deleted when you delete your account.
Device-local data: language selection and sound on/off preference are stored only on your device and are not sent to us.
2. Data we do NOT collect
We do not use advertising SDKs, we do not track you across other apps or websites, and we do not sell your data to third parties. The name and interests you enter for AI penalties are not used to train AI models: TumbleVibe uses Google's paid Gemini API tier, under which Google does not use submitted content to improve its models.
3. Third-party services we use
Firebase Authentication and Cloud Firestore (Google) — account and gameplay data storage.
Firebase Crashlytics (Google) — crash and error diagnostics.
Firebase Analytics (Google) — anonymous gameplay statistics used to improve the card content.
Google Sign-In and Sign in with Apple — optional ways to create or access your account (we receive your name and email from the provider you choose).
Google Gemini API (Google) — writes the optional AI penalty cards from the name and interests you provide.
RevenueCat — subscription and purchase management.
4. Your rights
You can request deletion of your account and associated data at any time from within the app (Account settings). You may also contact us to request a copy of your data or ask questions about this policy.
5. Children
TumbleVibe is not directed at children under 13. The "Kids" category is designed for family use with adult supervision; we do not knowingly collect personal data from children.
6. Changes to this policy
If we change this policy, we will update the effective date above and, for material changes, notify you in the app.
Contact: support@tumblevibe.app