🔒
TUMO Privacy Policy
Effective date: July 17, 2026
Operator: VAULT LLC (合同会社VAULT) ("we", "us")
This policy describes how the mobile application "TUMO" (the "App") handles your information.
1. Information We Collect and Why
1.1 Camera images (piece capture)
- Captured images are used solely to generate game pieces; cut-out and judging run on your device.
- In solo play, images never leave your device and are never stored on any server (they exist only in session memory).
- Only during online matches, the cut-out piece image is relayed to your opponents' devices via a communication service (Supabase Realtime). This is a relay only — images are not stored on our servers.
- Content checks (sensitive-content, duplicate, and theme judging) run entirely on-device. Images are not sent to external analysis APIs.
1.2 Report data
When you report an opponent's piece, the following is sent to and stored on our server (Supabase):
- The report reason and a room identifier (a hash of the passphrase; the passphrase itself cannot be recovered)
- Device identifiers of the reporter and the reported player (random IDs generated by the App, not linked to your name or phone number)
- The reported piece image (as evidence for moderation)
This data is used only for moderation and abuse prevention and is deleted within a reasonable period after the case is handled.
1.3 Settings
Language, sound, best score, and your block list are stored only on your device.
1.4 Analytics (future)
If we introduce crash reporting or usage analytics (e.g., Firebase), we will update this policy and announce it in the App. None is currently in use.
2. Third-Party Disclosure
We do not provide your information to third parties except as required by law.
3. External Services
Online matches use Supabase (Supabase Inc.) for real-time communication. Piece images pass through this service but are not stored (except report data).
4. Retention
| Data | Retention |
|---|---|
| Solo-play captures | Not stored (device memory only) |
| Online match piece images | Not stored on servers (Realtime relay only) |
| Report data (incl. images) | Only as long as needed for moderation |
| Settings / scores / block list | Device only (removed when the App is deleted) |
5. Your Rights
You may request access to, correction of, or deletion of information we hold about you (such as report data). Contact us below.
6. Children's Privacy
The App does not knowingly collect personal information from children under 13. The App encourages users to keep faces out of captures.
7. Changes
Changes to this policy will be published on this page; material changes will be announced in the App.