SparrowPrivacy policy
Sparrow has no sign up. We never ask for your name, email or phone number. There are no ads and no tracking. We keep the small amount of data the app needs to work, and we delete it when you ask.
This policy covers the Sparrow iPhone app and this website, sparrowmahjong.app. Both are run by Geddes Ventures LLC ("we", "us"). Questions go to brian@geddes.ventures.
What the app stores
| Data | Why | Where it lives |
|---|---|---|
| A random anonymous ID created when you first open the app | So your purchases and uploaded card follow your phone | Our database (Supabase) |
| Whether you have Sparrow Plus, which plan, and purchase dates | To turn on Plus features | RevenueCat and our database |
| The list of hands read from a card you upload | So you can practice with your own card | Our database |
| Lesson progress and settings | So you pick up where you left off | Only on your phone |
| Basic server logs (IP address, time, request type) | Security and fixing bugs | Our hosting providers, kept for a short period |
Card photos
Uploading a card is optional and only available with Sparrow Plus. When you do it, the photos go to our AI provider, Anthropic, which reads the hands and sends back a list. We do not keep the photos. Anthropic does not use this data to train its models, and it deletes it on its own short retention schedule for abuse monitoring. Please photograph only the card itself.
What we never collect
Your name, email, phone number, contacts, location, photos you did not choose to upload, or your advertising identifier. We do not sell or share personal information, and we do not track you across other companies' apps or websites.
Purchases
Apple handles every payment. We never see your card number or Apple ID. RevenueCat receives purchase receipts from Apple and tells us whether Plus is active.
Who processes data for us
| Company | What they do |
|---|---|
| Supabase | Database, anonymous sign in and server functions |
| RevenueCat | Checks subscription status |
| Anthropic | Reads uploaded card photos |
| Apple | App distribution and payments |
| Cloudflare | Hosts this website |
Each of these companies only gets what it needs to do its job, under its own contract and privacy terms. Data is processed in the United States.
This website
sparrowmahjong.app sets no cookies and runs no analytics or advertising scripts. Cloudflare keeps standard request logs to keep the site up and block attacks.
How long we keep it
We keep your anonymous ID, Plus status and uploaded card hands while you use Sparrow. Ask us to delete them and we will within 30 days. Deleting the app removes everything stored on your phone right away.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it. See delete my data for the quickest way. We will not treat you differently for asking.
California. We do not sell or share personal information as the CCPA defines those terms, and we do not use sensitive personal information.
EU and UK. We process data to provide the app you asked for (contract) and to keep it secure (legitimate interests). You can complain to your local data protection authority.
Children
Sparrow is made for adults learning a social game. It is not directed at children under 13, and we do not knowingly collect data from them. If you think a child has used Sparrow and you want their data removed, email brian@geddes.ventures.
Security
Data travels over encrypted connections. Our database uses row level security so each anonymous ID can only reach its own records. No system is perfect, so we collect as little as we can.
Changes
If we change this policy we will update the date at the top. If a change affects what we collect, we will post it here before it takes effect.
Contact
Geddes Ventures LLC, brian@geddes.ventures