Privacy policy

Bluffmio - Imposter Party ("Bluffmio", "the app") is published by vinubuno. This policy explains what the app and the services behind it collect, why, who receives it, how long it is kept and how to have it erased. For any question or request, write to us through the support page.

In short

• Bluffmio has no ads, no accounts and no tracking, and we do not sell your data.
• Your games stay on your phone. Player names, clues, votes and scores leave it only when you use an AI tool that needs

them.

• The app uses an anonymous identity with no name, e-mail address or password. It is still an identifier: our servers

keep it to verify your subscription and to apply usage limits.

• The AI tools are optional and ask for your consent before their first use.
• You can erase what our servers hold about your installation at any time.

What stays on your device

Player names, saved groups, rounds in progress, clues, votes, scores, the word pairs you have played, custom decks and your settings are stored on your device only. We do not upload them or synchronize them between devices. Your own device backup settings decide whether they are included in a device backup.

The app also keeps a private signing key in the iOS Keychain or the Android Keystore, hardware-backed where the device offers it. It never leaves the device. Android removes it when you uninstall the app; the iOS Keychain can keep it after an uninstall, and Delete my data removes it. A short-lived proof that your access was verified is stored too, so the app keeps working for up to 72 hours without a connection.

The app checks once, on the first launch, whether WhatsApp is installed to decide whether to show a rating invitation. It reads nothing from WhatsApp, and the result stays on the device.

Subscription and access

Every part of Bluffmio needs an active subscription: a weekly plan or a yearly plan, and the yearly plan starts with a 3-day free trial for eligible new subscribers. On Google Play a one-time full-access product also exists; the app does not advertise it. Apple or Google takes the payment and keeps your payment details; we never receive your card or your store account details.

To decide whether to unlock the app, it sends the store's purchase proof and the product id to our server. Our server checks the proof with the Apple App Store Server API or the Google Play Developer API and keeps the result: product, expiry, status, environment and a one-way fingerprint of the purchase (never the store's purchase token), linked to your install ID. Restoring purchases does the same.

A subscription renews automatically until you cancel it in your App Store or Google Play account settings, at least 24 hours before the end of the current period. A free trial that you do not cancel at least 24 hours before it ends turns into a paid yearly subscription. Erasing your data does not cancel it.

Anonymous identity and app integrity

When the app first talks to our servers it creates an anonymous Firebase Authentication account and registers your installation: a random install ID, the public half of the device key, the platform and the app version. Firebase App Check confirms that requests come from a genuine copy of the app, and every request is signed with the device key.

Our servers keep the anonymous account id, install ID, public key, platform, app version, the Firebase app id that App Check confirmed and the times the installation was registered and last updated. Without them the app cannot verify your access or apply its limits.

AI tools

Deck Forge, Pair Doctor, Clue Coach, Suspect Questions and Round Recap use an AI model. They stay off until you agree in the one-time consent sheet. When you use one, the app sends only what that tool needs to our server, and our server passes it to an AI provider through an AI gateway to produce the answer:

• Deck Forge: the theme you type, the difficulty, the number of pairs and the audience.
• Pair Doctor: the two words of the pair and an optional theme.
• Clue Coach: your secret word, the deck category, the clues typed so far and the clue style you pick.
• Suspect Questions: the player nicknames and the clues on the table, never the secret words.
• Round Recap: after the reveal, the tone you pick, the nicknames, each player's role and score change, both secret

words, the clues and the outcome.

Nicknames are whatever you typed as player names. Use nicknames, and do not type personal or sensitive information into an AI tool. The provider processes this text to write the answer and handles it under its own terms.

Our server does not store or log the text of AI requests or answers. It keeps counters that enforce the daily limits for each tool and for all tools together. Requests are refused when the input asks for hateful, sexual, violent, harassing or otherwise harmful content. The AI aims for family-safe answers but can still be wrong or unsuitable: check each result before you use it, and report it from the result screen in the app.

Reports

When you report an AI answer or a custom deck, we store the excerpt and your optional note encrypted, together with the reason you chose, the tool, your install and the time. Only authorized reviewers can read reports. Reporting does not use up your AI allowance.

Optional diagnostics

Analytics and crash reports through Firebase Analytics and Firebase Crashlytics are optional and stay off until you turn them on. You can change that choice at any time in Settings. When on, they record usage events, app and device details and crash traces, and never secret words, clues or player names. Firebase keeps this data under its own retention settings.

Who receives data

• Apple and Google, which process your purchases.
• Firebase (Google), for anonymous sign-in, App Check and, if you allow them, Analytics and Crashlytics.
• Cloudflare and our server hosting provider, which carry and protect the connection and see technical details such as

network addresses.

• The AI provider, only for the AI tools described above.

The app also shows its onboarding and subscription screens from our website, bluffmio.site, inside the app. Loading a screen sends the usual connection details together with the app id, language and platform in the address. Our servers use your network address to apply rate limits and keep only a one-way hash of it for a few minutes. We do not sell personal data and do not share it for advertising. Our providers may process data in countries other than yours.

How long we keep it

• Game data on your device: until you erase it in the app or uninstall the app. The signing key: until you erase your

data or, on Android, uninstall the app.

• Install record, anonymous account link, subscription records and reports: until you erase your data. They do not

expire on their own.

• Daily AI usage counters: 40 days.
• Request replay guards and rate-limit counters, which use a one-way hash of your network address: a few minutes.
• Deletion marker: after an erase we keep a hashed marker for 30 days so that a retried request finishes safely.
• AI request and answer text: not kept by our server.
• Diagnostics: kept by Firebase under its own settings.

Erasing your data

• In the app: Settings, then Delete my data. It erases the server records for your installation (the install record,

subscription records, usage counters and reports), deletes the anonymous account, removes the signing key and clears the game data on the device. It stays available when your subscription has ended.

• Without the app: Bluffmio has no accounts, so we cannot find your data by name or e-mail address. To erase it we

need the install ID shown in the app under Settings, then About. Enter it on the data deletion page, or send it to us through the support page. This erases the server records listed above. The anonymous Firebase sign-in, a random id with no name or e-mail address, is deleted only by Delete my data in the app.

• Your subscription: cancel it in your App Store or Google Play account settings. Apple and Google keep their own

purchase records under their policies.

Your choices

You can decline the AI consent and keep playing with the rest of the app, switch diagnostics off in Settings, and erase your data whenever you like.

Children

Bluffmio is a family-safe party game, but it is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided data to us, tell us through the support page and we will erase it.

Changes

When this policy changes, the new version replaces this page. The app always links to this address.