Privacy Policy

1. Introduction

Lome Labs, LLC ("Lome Labs," "we," "us," or "our") is a software company based in Atlanta, Georgia. This Privacy Policy explains what data we collect, how we use it, and what rights you have regarding your information.

This policy applies to our website at lomelabs.dev and all applications published by Lome Labs, LLC. Individual apps may have additional or more specific privacy practices, which are detailed in their app-specific sections below.

2. Website Data Practices

Our website at lomelabs.dev is designed to be lightweight and privacy-friendly:

• We do not use cookies beyond those essential for the website to function properly.
• We do not use third-party analytics or tracking platforms on the website.
• We do not collect personal information through the website unless you voluntarily provide it (for example, by emailing us).
• Standard server logs may temporarily record your IP address and browser information for security and operational purposes. These logs are not used for tracking and are regularly purged.

3. App-Specific Data Practices

Data practices vary between our apps. Each app is designed with privacy in mind, and specific details are provided below.

3.1 Cut (iMessage Spades)

Cut is a multiplayer Spades card game available as an iMessage extension. Because it supports real-time multiplayer and user accounts, it communicates with cloud services during normal use.

Authentication

When you sign in with Apple, we receive your Apple-provided user identifier (a unique ID generated by Apple specifically for our app). If you choose to share your name or email address during sign-in, we receive and store that information as well. This data is used to create and manage your player profile and is stored in our database (hosted by Supabase).

Game Data

Game data — including game sessions, player seats, bids, books, rounds, and scores — is stored in a cloud database hosted by Supabase, a third-party database platform. Each player can only access data for games they participate in, enforced by row-level security policies. All data is transmitted over HTTPS.

Analytics

We use PostHog, a third-party analytics platform, to understand how the app is used and to improve the experience. PostHog collects:

• Your user ID (a Supabase-generated UUID, not your Apple ID) and username
• Gameplay events such as games created, games joined, bids submitted, cards played, rounds completed, and purchases made
• Device information including device type, OS version, and app version
• Your IP address, which PostHog uses for approximate geolocation (city/region level)

PostHog does not record your screen, capture screenshots, or use autocapture. Only the specific events listed above are tracked. PostHog's privacy policy is available at posthog.com/privacy.

Advertising

Non-premium users may see advertisements served by Google AdSense, loaded within the app via a web view. Google may use cookies and web identifiers within this web view to serve ads. We configure AdSense to serve non-personalized ads only, meaning Google does not use your data to personalize the ads you see. Premium users (Cut+) do not see any ads.

Google's privacy policy is available at policies.google.com/privacy.

In-App Purchases

Purchase and subscription data for Cut+ is managed entirely by Apple through StoreKit 2. Transaction records, receipts, and entitlement status are handled on-device by Apple's frameworks and are not transmitted to Lome Labs servers. The only purchase-related data we collect is the product identifier (e.g., "com.lomelabs.cut.premium"), which is sent to PostHog as an analytics event when a purchase is completed.

Network Requests

During normal use, Cut communicates with the following services:

• Supabase — authentication, game data storage, and real-time multiplayer synchronization
• Lome Labs server (hosted on Railway) — ad configuration and ad content delivery
• PostHog — analytics event delivery
• Google AdSense — ad loading for non-premium users

All network communication uses HTTPS encryption.

What We Do Not Do

• We do not access, read, or store the content of your iMessage conversations.
• We do not access your contacts, photos, location, camera, or microphone.
• We do not use Apple's App Tracking Transparency identifier (IDFA).
• We do not sell your personal data to third parties.
• We do not share personal data with third parties for their own marketing purposes.

4. Third-Party Service Providers

We use the following third-party services to operate our apps. These providers process data on our behalf and are subject to their own privacy policies:

5. Children's Privacy

Our apps and website are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at hello@lomelabs.dev and we will take steps to delete that information promptly.

6. Data Retention

• Account data (user profile, authentication info) is retained for as long as your account is active.
• Game data (game sessions, scores, rounds) is retained indefinitely to support game history and statistics.
• Analytics data is retained according to PostHog's data retention policies.
• Server logs from our website are retained for no longer than 90 days.

When you delete your account, all associated data is permanently removed from our database through cascading deletion. This includes your user profile, game participation records, and related data.

If you contact us by email, we may retain your correspondence for a reasonable period to respond to your inquiry.

7. Your Rights

You have the right to:

• Request access: Ask us what personal data we hold about you.
• Request deletion: Ask us to delete your account and all associated data. You can do this from within the app or by emailing us.
• Withdraw consent: If you have provided consent for data processing, you may withdraw it at any time.
• Data portability: Request a copy of your data in a portable format where applicable.

To exercise any of these rights, contact us at hello@lomelabs.dev. We will respond to your request within 30 days.

8. California Residents — Your CCPA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to know: You may request that we disclose what categories of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to opt out of sale: Lome Labs does not sell personal information, so there is no sale from which to opt out.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Categories of personal information we may collect: identifiers (user ID, username, IP address, email if provided during sign-in), internet or network activity (gameplay events, app usage data), and geolocation data (approximate location derived from IP address).

To submit a CCPA request, contact us at hello@lomelabs.dev. We will verify your identity before processing your request and respond within 45 days as required by law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: