We collect the minimum information necessary to provide the BeatThat! experience. Here is exactly what that means:
| Data | Why we collect it | When |
|---|---|---|
| Display name | Shown to opponents in multiplayer games and on the leaderboard | When you create an account |
| Email address | Account authentication and account recovery only | When you sign in with email |
| Google account ID | Authentication via Google Sign-In — we never see your Google password | When you sign in with Google |
| Game statistics | Games played, wins, favourite theme — displayed on your profile | During gameplay |
| User-created decks | Stored so you can play your own decks and share them publicly | When you create a deck |
| Purchase receipts | Verifying premium subscription entitlement via RevenueCat | When you subscribe |
| Crash reports | Diagnosing and fixing app crashes via Firebase Crashlytics | When the app crashes |
| Anonymous usage events | Understanding which themes are popular and improving the game | During gameplay (no personal identifiers attached) |
We use the information we collect solely to operate and improve BeatThat!. Specifically:
We do not use your data to serve targeted advertising, build profiles for third-party marketing, or make automated decisions that affect you in any meaningful way.
Payment processing for premium subscriptions is handled entirely by the Google Play billing system and RevenueCat. We never see or store your card details.
BeatThat! uses the following third-party services. Each has its own privacy policy which governs how they handle data:
| Service | Purpose | Data shared |
|---|---|---|
| Firebase (Google) | Authentication, database, cloud functions, crash reporting, analytics | Account info, game data, crash logs, anonymous events |
| RevenueCat | Subscription management and entitlement verification | User ID, purchase receipts |
| Wikipedia REST API | Fetching card images for game decks | No personal data — public API requests only |
| Anthropic Claude API | Generating custom card decks for premium users | Theme name only — no personal data |
| Google Play Billing | Processing in-app purchases | Governed entirely by Google's privacy policy |
We do not sell, rent, or trade your personal information to any third party for their own commercial purposes.
Your data is stored on Google Firebase infrastructure, which is protected by Google's enterprise-grade security measures including encryption at rest and in transit.
We retain your account data for as long as your account is active. Game statistics and created decks are deleted within 30 days of account deletion. Crash logs are automatically purged after 90 days. Anonymous analytics data is aggregated and contains no personal identifiers.
In the event of a data breach that affects your personal information, we will notify you via your registered email address within 72 hours of becoming aware of the breach.
BeatThat! is suitable for all ages and does not contain content restricted to adults. However, we do not knowingly collect personal information from children under the age of 13 without verifiable parental consent, in compliance with the Children's Online Privacy Protection Act (COPPA) and equivalent regulations.
If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us immediately at the address below and we will delete that information promptly.
Children under 13 can play BeatThat! in VS AI mode without creating an account and without providing any personal information.
You have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Access | Request a copy of all personal data we hold about you |
| Correction | Update or correct inaccurate information on your profile at any time |
| Deletion | Delete your account and all associated data from within the app settings |
| Portability | Request your data in a machine-readable format |
| Objection | Object to any processing of your data that is not strictly necessary to operate the service |
| Withdraw consent | Withdraw consent for optional analytics at any time via app settings |
To exercise any of these rights, contact us at the address in Section 9. We will respond within 30 days.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, by sending a notification through the app.
Continued use of BeatThat! after any changes constitutes your acceptance of the updated policy. If you do not agree with any changes, you may delete your account at any time from within the app settings.
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please contact us:
We aim to respond to all privacy enquiries within 30 days.