Hunchy Privacy Policy
Last updated: 23 October 2026.
Hunchy is a set of daily mini games at hunchy.club and in the Hunchy apps for iPhone and Android. This policy explains what Hunchy keeps about you, why, who can see it, and what you can do about it.
Who runs Hunchy
Hunchy is run by Roy Leibovitz, an individual developer in Israel ("we"). For anything about your data, write to support@hunchy.club. We answer within 30 days.
What we keep and why
| What | When | Why |
|---|---|---|
| A random account id | Always, from your first game. If you play without signing in you get a guest account. | To save your games, streaks and settings. |
| Your name, profile photo and email address | Only if you sign in with Google, Apple or an email link. Apple may give us a private relay address instead of your email. | To keep your account, and to show your name and photo to people in your groups. |
| Your game results: the day, outcome, guesses, hints, time and points | Every game you finish. | Your stats and streaks, and your groups' tables. |
| Your picks in pick games (Dunki Spread): the day, the side you picked in each match, and your groups | When you save picks. | To score them, and to show them to your groups once the day's picks close. |
| Your stats, streaks, badges, settings, favourite games and today's unfinished board | As you play. | So your progress follows you to any device. |
| Your groups: the groups you created or joined, their names, and when you last played in them | When you use groups. | To run groups and competitions. |
| Reminder times | Only if you turn reminders on in the phone app. | On your phone, to remind you to play. If you allow notifications they are also copied to your device record (next row), so we don't send you a push close to a reminder. |
| Your device record for notifications: a push token, the platform (iPhone or Android), the app language, the app build, your time zone offset, whether notifications are allowed, your notification switches and reminder times, and your latest finished day and streak | Only in the phone app, and only once you allow notifications. It is refreshed each time you open the app. | To send you notifications at the right local time: a friend finished, a competition started or ended, your streak is at risk, or we miss you. The push token is how Apple and Google deliver them to your phone. Each phone you use has its own record. |
| A send log: your account id, a group id or puzzle number, and the kind of notification | When we send you a notification. | So we never send the same one twice. It is deleted within 30 days. |
| Answers you report ("Not a real word?", "Wrong photo?") | Only when you report one. | To fix the word lists. |
| Players and groups you report, with the reason you picked, and players you block | Only when you report or block someone. | To keep groups safe, and to hide a blocked player from you. |
| How many groups you created and reports you sent today | When you create a group or send a report. | To limit abuse. |
| Usage events: screens opened, games started and finished, hints, settings changed, steps that failed, and your region (Israel or the rest of the world) | As you use Hunchy. The region is guessed once from your device's language and time zone, never from your location. On the web, cookies are used only after you accept them. | To see what works, where players get stuck, and what breaks. |
| Crash reports and error details | When the app crashes or hits an error. | To find and fix bugs. |
We never collect your advertising id, your contacts, your device's location, or anything you type as a guess into analytics. We don't sell your data and we don't use it to track you across other apps or websites. Hunchy has no ads. Google Analytics works out a rough country from the internet address it sees, and doesn't keep the address.
Who can see it
- People in your groups see your name, photo, results and picks in those groups. Anyone who opens a group's invite link sees the group's name and its members' names and photos before joining.
- Hunchy's testers see the answers, players and groups you report, with account ids only, not names or emails.
- Google stores and processes everything above for us as our service provider: Firebase Authentication, Cloud Firestore (stored in the European Union), Firebase Hosting, Google Analytics and Firebase Crashlytics. Google may process data in the United States under the EU-US Data Privacy Framework and the European Commission's standard contractual clauses.
- Apple and Google, to deliver notifications: Apple Push Notification service and Firebase Cloud Messaging get your push token and the notification text. A notification can name a group or a friend, so it can show on your lock screen. Turn notifications off in Settings or in your phone's settings.
- Apple, only to confirm your sign-in, if you sign in with Apple.
- Nobody else, unless the law requires it.
How long we keep it
- Your account, results, groups and settings: until you delete your account. A guest account's data stays until the guest account is deleted; we don't delete idle guest accounts yet.
- Usage events: up to 14 months. Crash reports: 90 days.
- Daily backups of the database: 14 days, so deleted data leaves the backups within 14 days.
- Device records for notifications: until you sign out or delete your account. A record not opened for 60 days, or whose token your phone no longer accepts, is deleted. The send log: 30 days.
- Finished competitions keep their final table, with each player's name and points, for the group's history.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to stop or limit using it, or to move it elsewhere. Write to support@hunchy.club from the email you sign in with. A guest account has no email, so we can't tell which one is yours; deleting the app removes its link to that guest account.
- Delete your account any time in Settings → Delete account. It removes your results, picks, synced data, boards, your notification device records and push tokens, the answers, players and groups you reported, the players you blocked, group memberships and your account. If you created a group, it passes to another member so the group continues; if you were its only member, the group keeps your name as its creator. Your name stays in the final tables of competitions that finished while you were in a group. You can also ask at hunchy.club/delete-account.
- Web analytics cookies: you choose on the cookie banner and can change your answer in Settings.
- Complaints: you can complain to Israel's Privacy Protection Authority, or to the data protection authority where you live in the EU or the UK.
Legal bases (EU and UK)
- Running the games, your account and your groups: to provide the service you asked for.
- Notifications: your consent, given in your phone's permission prompt. You can withdraw it any time in Settings or in your phone's settings.
- Crash reports, error details and security: our legitimate interest in a working, safe app.
- Usage events: on the web, your consent for the analytics cookie and id; without it, visits are still counted with no cookie and no stored id, on our legitimate interest. On phones, our legitimate interest in improving Hunchy.
Children
Hunchy is meant for people aged 13 and over. We don't knowingly keep data about children under 13. If you think a child under 13 has an account, write to us and we'll delete it.
Security
Data travels encrypted (HTTPS). Access rules on our database let each player read and change only their own data, and group data only inside their groups.
Changes
If we change this policy we'll update the date above, and tell you in the app when the change matters.