Privacy Policy

Effective date: July 17, 2026

Last updated: August 12, 2026

Operator: VAULT LLC (合同会社VAULT) ("we", "us")

This policy describes how the mobile application "TUMO" (the "App") handles your information.

1. Information We Collect and Why

1.1 Camera images (piece capture)

Captured images are used solely to generate game pieces; cut-out and judging run on your device. The original photos you take never leave your device.
Only during online matches, the cut-out piece image is relayed to your opponents' devices via a communication service (Supabase Realtime). This is a relay only — the piece images themselves are not stored on our servers.
When a game ends, a small thumbnail image of the finished tower (the board made of cut-out pieces) is sent to and stored on our server (Supabase) for abuse/content review and to improve the service (in both solo and online play).
For the in-app game history, board thumbnails are also stored on your device (up to 100 entries; removed when the App is deleted).
Sensitive-content, duplicate, and theme checks also run on-device. In random online battles, the cut-out piece is sent to Google Cloud Vision for an additional safety check. Approved images are not retained; rejected images are retained as moderation evidence for no more than 24 hours.

1.2 Gameplay data

When a game ends, the play result (mode, tower height, piece count, and the board thumbnail above) together with a device identifier (a random ID generated by the App, not linked to your name or phone number) is sent to and stored on our server for operations, abuse prevention, and service improvement.

1.2.1 Account and online progress

The App automatically issues an anonymous user ID. If you optionally link Apple or Google from online play, Supabase processes the provider user identifier, email address, and related authentication information. We store your online name, rating, season score, coin balance, and Box inventory.

1.2.2 Purchase information

We use RevenueCat and the App Store / Google Play for Remove Ads and TUMO BOX purchases. User ID, product ID, transaction ID, and purchase/refund status are processed and stored. We do not receive your payment-card number.

1.3 Report data

When you report an opponent's piece, the following is sent to and stored on our server (Supabase):

The report reason and a room identifier (a hash of the passphrase; the passphrase itself cannot be recovered)
Device identifiers of the reporter and the reported player
The reported piece image and a snapshot of the board at the time of the report (as evidence for moderation)

This data is used only for moderation and abuse prevention and is deleted within a reasonable period after the case is handled.

1.4 Settings

Language, sound, best score, and your block list are stored only on your device.

1.5 Analytics

To improve quality, we collect crash reports and usage events (such as the mode played and the height reached) via the following services. Captured images are never included.

Firebase Analytics / Firebase Crashlytics (Google LLC)
Sentry (Functional Software, Inc.)

1.6 Advertising

The App may show interstitial ads served by Google AdMob (Google LLC). Advertising identifiers may be used for ad delivery in accordance with Google's policies.

Personalized ads are served only with your consent. On iOS we use the advertising identifier (IDFA) only if you allow tracking via the App Tracking Transparency prompt; otherwise you receive non-personalized ads. In the EU, the UK and other applicable regions we present a consent form through Google's User Messaging Platform (UMP). You can change your choices at any time from Settings > "Ad privacy settings" (shown in applicable regions), and iOS tracking permission can also be changed in iOS Settings > Privacy & Security > Tracking.

2. Third-Party Disclosure

We do not provide or sell your information to third parties except as required by law. Processing by the external services listed in Section 3 is not considered such disclosure.

3. External Services

The App uses the following external services:

Supabase (Supabase Inc.): authentication, online match communication, and storage of progress, game results, and report data
Google Cloud Vision (Google LLC): safety checks for pieces in random online battles
RevenueCat (RevenueCat, Inc.), Apple App Store, and Google Play: in-app purchase processing and purchase-state management
Firebase (Google LLC): usage analytics and crash reporting
Sentry (Functional Software, Inc.): error monitoring
Google AdMob (Google LLC): ad delivery

4. Retention

Data	Retention
Original captured photos	Not stored (device memory only)
Online match piece images	Approved images are not retained; rejected images are retained for moderation for up to 24 hours
Account and online progress	Until account deletion, or as required for legal and abuse-prevention purposes. Anonymous accounts not linked to Apple or Google are automatically deleted 180 days after last use, unless they have a purchase history
Purchase transaction records	As required for legal, accounting, refund, and fraud-prevention purposes
Board thumbnails / game results (server)	Only as long as needed for operations and improvement
Game history (on device)	Up to 100 entries; removed when the App is deleted
Report data (incl. images)	Only as long as needed for moderation
Settings / scores / block list	Device only (removed when the App is deleted)

5. Your Rights

You may request access to, correction of, or deletion of information we hold about you. You can initiate deletion through Settings > "Delete account and all data." We delete associated data except information we must retain by law. Contact us below for individual requests.

6. Children's Privacy

The App does not knowingly collect personal information from children under 13. The App encourages users to keep faces out of captures.

7. Changes

Changes to this policy will be published on this page; material changes will be announced in the App.

8. Contact

tumo@vault-tec.jp