Privacy policy
Last updated: September 28, 2026
In short
- No account, no ads, no analytics, no tracking.
- Games, players and history stay on your device and in your iCloud.
- Three optional features go through a server, for a limited time: games shared online, the score on the Lock Screen, and the history shared with your friends.
- No data is sold or used for advertising.
Who is responsible
Qui Mène ? is published by Erwan Decoster. For any question about your data: contact@erwan-decoster.com.
What stays on your device
Games, rounds, players, their avatars and your history are stored on the device. If iCloud is turned on, they also sync to your private iCloud database, managed by Apple, across your own devices. The publisher has no access to it.
The camera is only used to scan a QR code (to join a game or add a friend). No image is saved or sent.
What leaves your device, and why
The three features below use Supabase (database and real-time messaging hosting, region: European Union (Ireland)). They only run if you use them.
Games shared online
When you share a game, a session is created on the server, so that every device can follow and enter the game even if the one that started it is switched off. The server keeps: the six-digit code, a random session identifier, a random device identifier created by the app (for the creator and the author of each action), and the session log: every round and action, and the seat each person picked (“Who are you?”: nickname, simple avatar and profile identifier).
This log is encrypted with a key derived from the six-digit code: it cannot be read without the code. Since the server keeps that code so people can join, this encryption does not protect against the publisher, who has access to the database. The publisher does not look at this data. During the game, connected devices see each other’s profile nicknames.
Score on the Lock Screen (Live Activity)
To update the Lock Screen and the Dynamic Island while the app is in the background, the server keeps the notification token provided by Apple, a random device identifier created by the app, and the latest standings shown (nicknames and scores of the top four). The update is delivered by Apple’s notification service. You can turn this off in Settings › Qui Mène ? › Live Activities.
History shared with your friends
When a linked friend (through their QR code, or by picking their seat in a shared game) played a game with you without being connected, the full game (nicknames, simple avatars, rounds, scores) is left for them on the server, and they pick it up the next time they open the app. It is encrypted with a key that only devices knowing their profile identifier can compute; the server only sees a fingerprint of that identifier.
Retention
| Data | Deleted |
|---|---|
| Game shared online | 24 hours after the session ends; it ends on its own after 6 hours without activity |
| Lock Screen | At most 30 minutes after the last round |
| Game left for a friend | As soon as it is picked up, and at most after 14 days |
| Data on the device and in iCloud | When you delete it, or by deleting the app and its iCloud data |
Legal basis
Data sent to the server is processed only to provide the feature you chose to use (GDPR Article 6(1)(b)). It is never tied to an identity: the app has no accounts.
Recipients
- Supabase, to host the temporary data described above.
- Apple, for iCloud and to deliver Lock Screen updates.
No other third party receives any data.
Your rights
You have the right to access, correct, erase and object. Since the app has no accounts, server data is not tied to your identity and deletes itself within the periods above. For any request: contact@erwan-decoster.com. You may also lodge a complaint with your data protection authority (in France, the CNIL).
Children
The app asks for no personal information and is suitable for all ages. No data is specifically collected from children.
Changes
Any change to this policy is published on this page, with its update date.