Privacy Policy
BAZE is a party game you play with friends, each on your own phone. This policy explains what BAZE collects, why, who it's shared with and for how long. BAZE is operated by Andrii Korsun, an individual developer based in Denmark (“we”), who is the controller of your personal data. Questions: support@getbaze.app.
The short version
- No email, phone number or password: the app creates an anonymous account for you.
- Your name and profile photo are shown to the people you play with.
- Face Battle reads your expressions on your phone. The only face data that leaves it are the funny face shots the game takes, shown to the players of your games that evening and deleted by 6 a.m. on your phone (within a day at the latest).
- We don't sell your data and don't show ads in the app.
What we collect
Your account. When you first open BAZE we create an account with a random ID. It's kept on your phone in the iOS Keychain, so the app stays signed in.
Your profile. The name you enter and the profile photo you take or pick. Before the photo is uploaded, your phone checks that there's a face in it; that check happens on the phone.
Games. While a party is running we keep what it needs: who's in it, the questions, everyone's votes and answers, the entries written in Pandora, the scores and the end-of-game awards. Classic modes show who voted for whom unless the host turns on anonymous voting; Pandora entries are shown without the author's name.
Face Battle. The game uses your iPhone's TrueDepth camera (ARKit) to read your facial expressions and score them. This is processed on your phone and isn't sent to us, with one exception: during the game your phone uploads up to 16 cut-out shots of your face (with the expression they show, as numbers), so the other players can copy them in round 2 and see them at the end. The shots go into your evening face pack: the evening's next games (another Face Battle, MFW, whose warm-up adds to it the same way) use them, visible only to the players of the games you're in, until 6 a.m. on your phone.
Purchases. If you subscribe, Apple handles the payment; we never see your card. Our subscription provider, RevenueCat, tells us whether your subscription is active, its product, price, currency, renewal and expiry dates.
Usage data. We record how the app is used, e.g. that you opened the app, created or joined a party, finished a game, saw the paywall or shared a card, with your account ID, app version, language and subscription status. Names, photos, PINs and the text you write are removed before these events are sent. We don't record your screen or what you type.
Technical data. Our servers keep short-lived logs (such as request times and errors) to keep the service running.
What we don't collect
No contacts, location, microphone recordings, advertising identifier (IDFA) or cross-app tracking. We don't use your face data to identify you, for advertising, or to train models.
Why we use it
- To run the game and show you and your friends to each other (performing our contract with you).
- To provide Premium and check your subscription (contract).
- To understand which features work and fix problems (our legitimate interest in improving BAZE).
- To measure whether our ads bring people to BAZE (legitimate interest; see TikTok below).
Who we share it with
We use these service providers, who process data for us under their own privacy terms:
- Cloudflare hosts our servers, database and file storage.
- RevenueCat manages subscriptions. Apple processes payments.
- PostHog (US) receives the usage events described above.
- TikTok: when an account is created or a subscription starts or renews, we may tell TikTok so we can measure our ad campaigns. We send a one-way hash of your account ID and, for new accounts, your IP address and device's user agent. TikTok doesn't receive your name, photo or game content.
These providers process data only to provide their service to us and are bound by their terms with us to protect it at least as well as this policy does. Apple and RevenueCat's handling of payments and your Apple ID is also governed by their own privacy policies, which we don't control.
We may also disclose data if the law requires it, to protect someone's safety, or to a buyer of BAZE (who'll be bound by this policy). We don't sell personal data.
What other players can do
Whatever you show in a party (your name, photo, face shots, answers and Pandora entries) is seen by the other players in it. We delete it on our side as described below, but we can't control what other players do with what they see, for example taking a screenshot or sharing a card. Only play with people you trust, and to the extent the law allows we're not responsible for what other players do.
Security
We use reasonable measures to protect your data: encrypted connections, private storage, short-lived access tokens and unguessable links. No service is perfectly secure, though, and we can't guarantee that your data will never be accessed, lost or disclosed without authorization. If a breach affects you, we'll tell you and the authorities as the law requires.
How long we keep it
- Parties are deleted 5 minutes after they end, 15 minutes after everyone leaves, or after 2 hours without activity.
- Face shots (your evening face pack) are deleted at 6 a.m. on your phone, with your account if you delete it first; anything left over is deleted automatically after one day.
- Your account, name and photo are kept until you delete your account. A photo you replace is deleted straight away.
- Usage events are kept for as long as they're useful for analysis, at most 2 years.
Your choices and rights
You can change your name and photo in the app at any time. To delete your account, open Profile → Delete account: your account, name and photos are deleted at once, along with your subscription record at RevenueCat (this doesn't cancel an Apple subscription; do that in your iPhone's Settings). To get a copy of your data, email support@getbaze.app from Profile → Give Feedback (it includes your account ID, so we can find you) and we'll reply within 30 days. Depending on where you live (for example in the EU, UK or California) you also have the right to correct your data, object to or restrict its use, and complain to a data protection authority: in Denmark that's Datatilsynet, or the authority where you live.
Data is processed in the United States and other countries where our providers operate, with the safeguards those providers offer (such as the EU Standard Contractual Clauses).
Your US state privacy rights
If you live in California or another US state with a consumer privacy law, this section applies to you too.
- What we collect (in those laws' categories): identifiers (your account ID; your IP address when your account is created); commercial information (your subscription and purchases); internet or other electronic activity (how you use the app); audio-visual information (your profile photo and Face Battle shots); and the name you choose. The sources, purposes, recipients and how long we keep each are described above.
- We don't sell your personal information, and we don't use or disclose sensitive personal information to infer things about you. If we ever share data with TikTok for measuring ads, that may count as “sharing” for cross-context behavioral advertising under California law; you can opt out by emailing us, and we honour Global Privacy Control signals.
- Your rights. You can ask to know what we've collected about you and get a copy, to correct it, to delete it (or do it yourself: Profile → Delete account), and to opt out of sale or sharing. Email support@getbaze.app from Profile → Give Feedback; we'll verify the request comes from your account and answer within 45 days. You can use an authorized agent, and we won't discriminate against you for using these rights. If we refuse, you can appeal by replying to our answer.
Children
BAZE is not meant for children under 13, and we don't knowingly collect data from them (as the US Children's Online Privacy Protection Act requires). If you think a child has given us data, write to us and we'll delete it.
Changes
If we change this policy we'll update the date above, and tell you in the app if the change matters.