Privacy Policy
Last updated: 2026-05-07
ParkBingo ("we", "the app") is operated by ParkBingo LLC. This policy explains what we collect, why, and how you can control it. It applies to the ParkBingo mobile app (iOS and Android) and the parkbingo.app website.
What we collect
- Account data: email address, display name, and a third-party authentication identifier if you sign in with Apple or Google.
- Gameplay data: cards you played, phrases you marked, win patterns, XP, streak days, achievements, and timestamps.
- User-generated content: phrases you submit to the community for voting, the votes you cast, and any reports you file.
- Device and diagnostic data: OS version, device model, app version, crash reports, and performance traces — collected via Sentry. Auth tokens and IAP receipts are scrubbed from breadcrumbs before transmission.
- Product analytics: screen views, session start, and event counts — collected via PostHog. You can opt out at any time in Settings.
- Push notification token: if you grant the OS notification permission, we store an Expo push token tied to your account so we can send you the daily-challenge reminder and game invites.
- Advertising identifiers: if you grant the iOS App Tracking Transparency permission, the AdMob SDK may use your device's IDFA to personalize ads. You can decline and the app still works — ads just become non-personalized.
- In-app purchases: if you buy the ad-free upgrade, RevenueCat validates your receipt with Apple/Google and tells our server you're entitled. We never see your payment card.
- Waitlist: if you sign up at parkbingo.app, we store the email address and a timestamp.
What we don't collect
- Precise location, microphone audio, photos, contacts, browsing history, financial info, or health data.
- We don't sell your personal data to third parties.
- We don't knowingly collect data from children under 13.
- We don't target ads to users under 17 based on personal data.
Why we collect it
- Run the game (save progress, sync multiplayer, award achievements, leaderboards).
- Moderate the community (review submissions, respond to reports, prevent abuse).
- Diagnose crashes and improve the app.
- Show ads (AdMob) unless you've purchased the ad-free upgrade. EU/UK/EEA and California users see a consent prompt; you can change your choice anytime in Settings → "Ad privacy options".
Third-party services
We use the following processors, each under their own privacy policy:
- Supabase — database, auth, file storage, realtime sync.
- Google AdMob — banner and interstitial ads.
- RevenueCat — in-app purchase receipt validation.
- Sentry — crash and performance reporting.
- PostHog — product analytics (consent-gated).
- Expo Push Notifications — delivery of push messages.
- Vercel — hosts the parkbingo.app marketing site and API endpoints. Vercel Analytics provides cookie-free pageview counts.
Your rights
- Access & export: email privacy@parkbingo.app and we'll send you everything tied to your account within 30 days.
- Delete your account: in-app via Settings → "Delete account". This permanently deletes your profile, gameplay data, submitted phrases, votes, achievements, and push tokens. You can also email privacy@parkbingo.app.
- Opt out of analytics: Settings → toggle Analytics off.
- Opt out of personalized ads: decline the App Tracking Transparency prompt on iOS, or revisit Settings → "Ad privacy options".
- EU/UK (GDPR), California (CCPA), and other state-law rights: you may request access, correction, deletion, or portability of your data. Email privacy@parkbingo.app.
Data retention
We keep your account data while your account is active. After deletion, copies may persist in encrypted backups for up to 30 days, after which they are purged on the regular backup rotation. Submitted phrases that have already been approved into the community library remain visible (with your name removed) because other players' cards reference them.
Security
All traffic is encrypted in transit with TLS. Sensitive auth tokens and IAP receipt payloads are scrubbed before they reach Sentry. Database access is governed by row-level security policies; we never expose service-role credentials to the client.
Changes to this policy
If we materially change what we collect or how we use it, we'll update the date at the top of this page and notify in-app where appropriate.
Contact
Privacy questions: privacy@parkbingo.app. Legal / DMCA / takedown: legal@parkbingo.app.