Privacy Policy

1. Who We Are

UTTT App (“we,” “our,” or “us”) is a mobile ultimate tic-tac-toe game operated by Grocerlist LLC. This Privacy Policy explains how we collect, use, share, and protect your information when you use the UTTT App application and related services (the “App”). For privacy questions or concerns, contact us at support@ultimatetictactoeapp.com.

2. Information We Collect

We collect only the data necessary to operate and improve the App:

• Account Information: Your email address, encrypted password, and verified status.
• Username & Public Profile: The username you choose, which is visible to other users within the App — including in friend searches, friend requests, private sessions, and rankings or leaderboards. This identifier is associated with your activity.
• Social Interactions: Data related to your use of social features, such as friend requests you send or receive, your friends list, and the private sessions you create or join.
• Gameplay & Ranking Metrics: Information about your play, including games played, results, Prestige Points, ranking position, titles, and related timestamps, used to operate ranked play and the Peerage.
• Game Move Logs: We record and store a move-by-move log of the games you play — including Player vs Master AI, Player vs Grandmaster AI, and Player vs Player matches (both Friendly and Ranked). These move logs are stored in our database and are publicly visible to other users, alongside the usernames of the players involved. We use them to run analytics on game strategies, detect and prevent cheating, operate and verify ranked play, and improve the App, among other purposes.
• Push Notification Tokens: If you enable notifications, we store a device push token provided by your device’s operating system (Apple or Google) and delivered through our notification provider (Expo), so we can send notifications such as friend requests, accepted requests, and match invitations. This token is used only to deliver notifications and is removed when it becomes invalid. You can disable notifications at any time in your device settings or the App’s settings.
• Advertising Data: Limited information such as device data, advertising identifiers, and in-app activity, used to display and measure advertisements.
• Technical & Analytics Data: Minimal device metadata (such as OS type and crash logs) and usage information collected through Supabase logs, Google Analytics, and Firebase to monitor performance and improve the App.
• Location Data (planned): The App does not currently collect location. In the future, and only with your permission, we may collect your approximate location to support features such as regional matches or tournaments. If and when we introduce this, we will request the appropriate device permission, and you may decline or disable it at any time.

3. How We Use Your Information

• To operate, maintain, and improve the App.
• To create and secure your account and verify your identity.
• To enable social and multiplayer features, including friend searches, friend requests, and private sessions, and to display your username alongside your activity.
• To operate ranked play and generate Prestige Points, rankings, titles, and leaderboards. Public rankings do not display personally identifiable information such as your email address.
• To record game move logs and use them for gameplay and strategy analytics, detecting and preventing cheating, verifying ranked results, and improving the App. Move logs are stored in our database and may be publicly visible to other users alongside the usernames of the players involved.
• To send push notifications you have opted into — such as friend requests, accepted requests, and match invitations — and important account or policy updates. You can turn these off at any time.
• To display and measure advertisements, including improving relevance and performance using aggregated and non-identifiable data.
• To generate aggregated insights about how the App is used, never tied to individual users.
• To detect, prevent, and respond to fraud, abuse, cheating, and violations of our Terms of Use.
• To comply with legal obligations and respond to lawful requests.

4. Data Sharing & Service Providers

We do not sell your personal information. We rely on trusted third-party providers to operate the App, including:

• Supabase: Authentication, database storage, and hosting.
• Expo & Firebase: App delivery, push notification delivery, diagnostics, and performance monitoring.
• Google Analytics: Analysis of general app usage trends.
• Google AdMob: Delivery and measurement of the advertisements shown in the App.

Advertising partners may use device-level information, advertising identifiers, and general usage data to deliver and measure ads. This data is handled in accordance with their respective privacy policies and does not include personally identifiable information such as your email address.

We require all providers to use secure practices and to access data only as needed to support the App. We may also disclose information where required by law or to protect the rights, safety, and integrity of the App and its users.

Aggregated & Anonymized Data

We may create, use, or share aggregated and anonymized data — information that cannot identify any individual user — for analytics, research, and improving the App. Community rankings and leaderboards are displayed using anonymized or non-identifying information and never reveal user emails or personal identifiers.

5. Advertising & Your Choices

The App displays advertisements, including interstitial ads shown between or after matches. On iOS devices, you may be asked to grant permission for tracking through Apple’s App Tracking Transparency framework; if permission is denied, ads will still be displayed but may be less personalized. You can also manage ad personalization through your device’s advertising settings.

You control several aspects of your data: you may disable push notifications in your device or App settings, decline or revoke any future location permission, and delete your account at any time.

6. International Users & Data Transfers

The App is available globally. We are based in the United States, and by using the App you understand and consent that your information may be processed and stored in the United States and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your jurisdiction. Where required by applicable law, we take steps to ensure your information receives an adequate level of protection when transferred.

7. Account Deletion & Data Retention

You may delete your account at any time from within the App. Account deletion is immediate and permanent. When you delete your account, all information associated with it — including your profile, username, Prestige Points, rankings, titles, match logs, match history, friends, and related activity — is deleted immediately and cannot be recovered.

Because deletion is immediate and irreversible, you are solely responsible for confirming that you wish to delete your account. We are not responsible for accidental or unintended deletions, and we cannot restore, recover, or reconstruct an account or any of its data once it has been deleted.

We may retain anonymized or aggregated data that does not identify you, and we may retain limited records where necessary to comply with legal obligations.

8. Data Security

We use industry-standard protections, including encrypted data transmission and password hashing, and rely on Supabase’s security protocols. Access to user data is restricted to authorized personnel only. While we work to protect your information, no system can guarantee absolute security, and you use the App at your own discretion.

9. Your Rights

You have the right to access, correct, or request deletion of your personal information. Depending on your jurisdiction, you may have additional rights, such as objecting to or restricting certain processing. To exercise any of these rights, contact us at support@ultimatetictactoeapp.com. We will respond within a reasonable timeframe, consistent with applicable laws.

10. Children’s Privacy

The App is not directed to, and we do not knowingly collect information from, children under 13. If you believe a child has created an account without consent, please contact us for prompt deletion. Users aged 13–17 must have permission from a parent or legal guardian.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect operational or legal changes. When we do, we will notify users by email and/or in-app notice. Continued use of the App after updates means you accept the revised Policy.

12. Contact Us

For questions or concerns about this Privacy Policy or your data, contact us at support@ultimatetictactoeapp.com. You can also review our Terms of Use.