Privacy Policy

Teri is operated by Jyamun Corp OÜ (“the developer”), a private limited company registered in Estonia at Sepapaja tn 6, Lasnamäe linnaosa, Harju maakond, Tallinn, 15551, Estonia. Jyamun Corp OÜ is the data controller for the personal data described in this policy. For any privacy questions, requests, or complaints, contact us at jyamunadmin@gmail.com.

Teri uses Google Firebase as its backend infrastructure. Firebase is provided by Google LLC, whose privacy practices are described at firebase.google.com/support/privacy and policies.google.com/privacy.

• No ads. Teri does not run advertising and does not embed any ad SDK.
• No trackers. We do not use third-party analytics, attribution, or marketing SDKs. We use three outside services: Google Firebase, which runs the Game's backend; Resend, which delivers report and contact emails to us; and Gmail, which hosts our support mailbox. All three are listed in how your information is shared.
• No sale of data. We never sell or rent your personal information.
• You can delete your data. Delete your account in the Game under the gear icon on the home screen, or see our account deletion page.

Data you provide directly. What we receive depends on how you sign in:

• Email / password: email address, and a securely hashed password (managed by Firebase — we never see or store your plain-text password).
• Google: account identifier, display name, email.
• Apple (iOS): account identifier, email (which may be an Apple private-relay address if you choose to hide yours), and your name — Apple shares it only the first time you sign in.
• Google Play Games (Android): account identifier.

Every account is assigned a unique user ID (uid) generated by Firebase. You also directly choose an in-game alias, and select an avatar, title, and background from the items you own.

Your email address is held only in your Firebase Authentication sign-in record. Your profile holds your uid, the display name your sign-in provider gave us (if any), the date it was created, and a friend code derived from your uid, which you can share so other players can send you a friend request. If we take a moderation action on your account, your profile also holds a short notice of what we did and why, until you dismiss it in the Game. Only you can read your profile; other players never see your display name. Other players see your alias, avatar, title and background through copies our server places in your games, party and friend records.

Data generated as you play.

• Coin balance and items you own (avatars, titles, backgrounds).
• Game statistics: games played, wins, and losses.
• Daily and weekly task progress.
• Session state: your current party and active game session (so you can reconnect after closing the app), and, while you are in a game, a regular “last seen” time from your app, so a bot can take your seat if you disconnect.
• Friends, blocks, friend requests and party invites: your friend list, the players you block, and the friend requests and party invites you send or receive. Each record stores both players' uids, when it was created, and a copy of the other player's alias, avatar and title — so your own alias, avatar and title are also copied into the matching records held for those players. When you block someone we also keep a hidden “blocked by” record on their side, with only both uids and the time, so they can no longer invite you or send you a friend request. A request or invite exists only while it is pending and is deleted when answered. Your friend list can be read only by you.
• Game records: for every game you play, the cards dealt to each seat and every bid, trump choice and card played, stored with the uid of each human player at the table. We keep these so we can investigate a complaint about a game (for example, a disputed trick or a move a bot made while it held your seat) and fix bugs. They are never shown to other players.
• Reports you choose to send: if you report another player, the reason you select and any note you write; if you send a bug report, your message and the platform you were playing on. Both are stored with your uid and in-game alias, and a player report also stores the uid and alias of the player you reported. Reports are optional — nothing is collected here unless you send one. We also note on your profile when you last sent each kind of report, to limit how often reports can be sent.

Data collected automatically.

• Crash and error reports collected via Firebase Crashlytics (on mobile), which may include device model, operating system version, diagnostic logs, and a Firebase installation ID — an identifier Firebase generates for this app's install on your device, used to group crash reports. It is not an advertising identifier, and Teri does not use one. Crash reporting is disabled on the web build. Whether it is on depends on where you are. In the EEA and UK, crash reports are off until you turn them on, by ticking the box during profile setup or with the switch in Settings. Everywhere else, they are on by default, and you can turn them off in Settings. The app works out which applies from your device's time zone, checked on your device each time the app starts. If the time zone can't be read, you are treated as being in the EEA or UK. Once you use the switch, your choice is saved on your device and the time zone no longer decides. Nothing is collected before this check runs.
• Basic technical data normally processed by Firebase Hosting and Cloud Functions to deliver the service — for example IP address in server logs and request timestamps.

What we do not collect. Contacts, precise location, microphone, or camera access; photos or videos (Teri has no upload, gallery, or camera feature — every avatar and background is an image bundled inside the app itself, chosen by id, and we do not store your Google account profile picture); payment or financial information (Teri has no real-money purchases); and any data via advertising or third-party tracking SDKs — we don't use any.

Data from our website's contact form. If you use our contact form — whether or not you play Teri — we receive your name, email address, company (if you give one), the topic you choose, and your message. We email it to our support mailbox through Resend and do not store it anywhere else. Your IP address is used only to stop the form being flooded, held briefly in memory, and never saved.

Browser storage. On the web, Teri keeps your sign-in session in your browser's IndexedDB storage, using Firebase Authentication's default setting, so you stay signed in after closing the tab. Firebase's own libraries may keep small technical records there too, which they need to work. Teri itself sets no cookies, uses no localStorage or offline caching, and stores nothing in your browser for analytics or advertising. Clearing your browser's data for the site signs you out. Our website, jyamuncorp.com, sets no cookies and stores nothing in your browser.

We use the information above only to:

• Create and secure your account and let you sign back in;
• Provide core gameplay — matchmaking, multiplayer sessions, parties, the shop, coins, and statistics;
• Let other players in your game see your alias, avatar, title, and background;
• Enable account recovery via email/password reset;
• Investigate complaints about a game and fix bugs, using game records;
• Diagnose crashes and improve stability and performance;
• Prevent cheating, abuse, and violations of our Terms and Conditions, and tell you, in the Game and by email where we have your address, about any action we take on your account.

Legal basis (EEA and UK). The GDPR requires a legal basis for each use of your personal data. Ours are:

• Consent (Art. 6(1)(a) GDPR) — to collect crash reports. They stay off until you turn them on, and you can turn them off at any time in Settings.
• Contract (Art. 6(1)(b) GDPR) — to create and run your account; provide gameplay, coins, items, friends, parties, and statistics; show your public profile to players you play with; and recover your account. We need this to provide the Game you signed up for.
• Legitimate interests (Art. 6(1)(f)) — to keep game records, so we can investigate complaints about a game and fix bugs; to store player and bug reports, and keep them after either account is deleted, so we can keep players safe and moderate the Game, and so a report cannot be erased by deleting an account; to screen aliases and prevent cheating and abuse; to keep server logs, so the Game stays stable and secure; and to reply to messages sent through our website's contact form.
• Legal obligation (Art. 6(1)(c)) — to disclose information when the law requires it.

Crash reports are the only use that relies on your consent. You can withdraw it at any time with the switch in Settings; this does not affect reports already sent. Where we rely on legitimate interests, you have the right to object — see your rights.

• With other players: your public profile (alias, avatar, title, and background) is visible to other players you play with. Your game statistics, email, and account identifiers are never shown to other players.
• With Google Firebase: Firebase processes and stores data on our behalf to run the Game (authentication, database, hosting, crash reporting).
• With Resend: when you report another player or send a bug report from inside the Game, or use the contact form on our website, we send it to us by email using Resend (Plus Five Five, Inc., United States), an email delivery provider acting as our processor. A player report transmitted this way contains your uid and alias, the reported player's uid and alias, the reason you selected, your free-text note, and the session identifier. A bug report contains your uid and alias, your message, and the session identifier and platform. Resend's privacy practices are described at resend.com/legal/privacy-policy. Because a player report describes another person, it necessarily contains information about them as well as about you.
• With Gmail: our support mailbox is a Gmail inbox (Google LLC, United States). Every report and contact-form message delivered through Resend, and any email you send to jyamunadmin@gmail.com, is stored there. Google's privacy practices are described at policies.google.com/privacy.
• With the sign-in provider you choose: Google, Apple, or Google Play Games confirms your identity when you sign in. When you delete an account that uses Sign in with Apple, the Game asks Apple to revoke its access to your Apple account.
• For legal reasons: we may disclose information if required by law, or to protect the rights, safety, or property of players or the developer.

Apart from the sign-in provider you choose, Google Firebase, Resend, and Gmail are the only outside services that receive your data. We do not sell or rent your personal information to third parties.

Your data is stored in Google Firebase (Cloud Firestore and Firebase Authentication). Passwords are hashed and managed by Firebase; the developer cannot read them. Access to game data is restricted by Firestore security rules so that players can only read and write data they are authorized to.

No system is perfectly secure. While we take reasonable measures to protect your information, we cannot guarantee absolute security.

We keep your account and profile data for as long as your account exists. Crash reports are kept by Firebase Crashlytics for 90 days. Server logs are kept only for a limited period, under Firebase's defaults. Other records are kept as follows:

• Game records are kept for 12 months after the game, then deleted. If you delete your account sooner, your uid in them is replaced with “deleted”.
• Player and bug reports are kept for 12 months after they are filed, then deleted. They are kept for that period even if either account involved is deleted, as safety and moderation records.
• Emails in our support mailbox — reports and contact-form messages delivered through Resend, deletion requests, and anything else you email us — are kept for 12 months after they arrive, then deleted.

Two ways to delete. In the Game, tap the gear icon in the top-left corner of the home screen, choose Delete Account, and type DELETE to confirm; this is immediate and self-service. If you cannot sign in, email us at jyamunadmin@gmail.com with your in-game alias and the email address on your account. We reply within 7 days and complete the deletion within 30 days of verifying the request.

What deletion removes. Your profile document (uid, display name, friend code, alias, avatar, title, background, items owned, coin balance, task progress, game statistics, and the times you last sent a report); both sides of every friendship and every block; all pending friend requests and party invites, incoming and outgoing; your party, which is disbanded; your Firebase Authentication sign-in record, including your email address and the hashed password or the linked Google, Apple, or Play Games identity; and your uid from every game record you appear in. If you use Sign in with Apple, the Game also asks Apple to revoke its access to your Apple account. This can fail without stopping the deletion; you can always remove Teri yourself in your Apple ID settings, under Sign in with Apple.

No partial deletion. Apart from the reports described below, we do not hold player data that exists independently of your account — game records are anonymised when you delete it — so there is no way to delete some of it and keep the rest; deletion is all-or-nothing. To change your alias, avatar, title, or background, edit your profile in the Game instead.

What deletion does not remove. A game already in progress is not deleted, because the other three players are still in it — your seat is renamed “Deleted Player” and your avatar and title are cleared straight away. The game's live data, which still holds your uid, is removed by our cleanup job once the session ends; its permanent record keeps your seat as “deleted”. Game records are kept but anonymised: the cards and moves of games you played are also the other players' games, so your uid in them is replaced with “deleted”. A kept report about that game still carries its session identifier, so a record a report points to can still be connected to the players named in that report. Player reports and bug reports are kept as safety records, and they still contain the uid and alias they were filed with — whether you filed the report or were the player reported — both in our database and in the copies delivered to our support mailbox through Resend. Crash logs (Crashlytics, mobile only) expire after 90 days, and server logs containing IP addresses expire on Firebase's default schedule. We also keep anything we are legally required to retain.

Timing. Deleted data is removed from our systems immediately. We do not keep backups of our database, so no copy of it survives elsewhere. Deletion is permanent: coins, items, and progress do not survive it and cannot be restored.

Full instructions are on our account deletion page.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data — you can edit your profile in-game;
• Delete your account and associated data — see our account deletion page;
• Withdraw consent to crash reports at any time, with the switch in Settings;
• Stop using the Game and delete your account at any time;
• Port your data — receive the personal data you gave us in a structured, commonly used, machine-readable format, and ask us to transmit it to another controller where technically feasible;
• Object to or restrict our processing of your personal data in the circumstances set out in Articles 18 and 21 of the GDPR.

To exercise any of these rights, contact us at jyamunadmin@gmail.com. We will respond within the timeframe required by applicable law.

Right to lodge a complaint. If you are in the European Economic Area and believe we have handled your personal data unlawfully, you have the right to complain to your local data protection supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia — aki.ee/en. You may complain to them without contacting us first, though we would rather have the chance to put things right.

Teri is intended for players aged 18 and over, and is not directed to children. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has provided us with personal data, contact us at jyamunadmin@gmail.com and we will delete the account and its data.

Your data may be processed and stored on servers operated by Google Firebase in locations outside your country of residence. Reports you send are transmitted through Resend (Plus Five Five, Inc.) in the United States. Reports, contact-form messages and emails you send us are stored in our support mailbox, hosted by Gmail (Google LLC) in the United States.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date above. Material changes will be communicated within the Game or by other reasonable means. Continued use of Teri after changes take effect constitutes acceptance of the revised policy.

Questions, concerns, complaints, or requests regarding this Privacy Policy: Jyamun Corp OÜ, Sepapaja tn 6, Lasnamäe linnaosa, Harju maakond, Tallinn, 15551, Estonia, jyamunadmin@gmail.com.