Aura Flip — Privacy Policy
Aura Flip is a bottle-flip game published by its owner (“we”). This page explains what the game stores, why, and what you can do about it. We keep it short because there is not much to tell: the game has no ads, no ad networks, no tracking SDKs and no third-party analytics.
What we store
- Username and password — to sign you in. The password is stored only as a hash; we never see it. Pick a username that is not your real name.
- Email address (optional) — only if you or a parent add one, and only to send a code when a password is forgotten. It is never shown to other players and never used for marketing.
- Username, avatar and country — shown on the global leaderboard and to your friends. The country is suggested from your phone's time zone and you can change it.
- Game data — your runs, scores, aura, level, streaks, achievements, daily challenges, duel results and which bottles and arenas you own or have equipped.
- Social data — your friends list, friend requests, duel invites, players you block, and reports you send or receive.
- Challenges and invites — challenges you send or answer (the scores, who played whom, when), the setting for who may challenge you, and who invited you to the game (if you came through a friend's link or typed their name). A friend who invited you can see your username and how many games and days you have played toward their Squad bottle.
- A random install code — made by the game on your phone (it is not a hardware or advertising identifier) and kept in the phone's keychain. We store only a one-way hash of it, and use it for one thing: checking that friends invited for the Squad bottle play on their own phones.
- Notifications — only if you allow them: a push token for your device, so we can tell you when someone challenges you, a friend request arrives or your streak is about to break. You can switch each kind off in Profile, or turn notifications off in your phone's settings.
- How the game is used (in the game only) — a few events linked to your account, so we can see where the game can be better: the app was opened, the shop was opened, an item was tapped, a purchase was started, finished or cancelled, the starter pack was shown, the notification or rating question was shown and how it was answered, and Aura Fever was reached. These stay in our own database: they are never sold, never shared and never used for ads, and they are erased with your account.
- Speed reports — if a game stutters, a short report of the slow moments (frame times), the game mode and the phone model and system version, linked to your account, so we can find and fix lag. Nothing else about your phone is read.
- Language and sound preferences, and which questions this phone was already asked — kept on your device only.
A guest is a player profile without a password or email: the username, avatar, country and game data above are stored on our servers like any account (so a guest can appear on the leaderboard and play duels), but only the device that created it can sign in to it. Signing out or removing the app loses a guest profile.
What we do not do
- We do not sell, rent or share your data with advertisers or data brokers.
- We do not show ads and do not use advertising identifiers.
- We do not track you across other apps or websites.
- We do not read your contacts, photos, location or microphone.
Purchases
Bottles, arenas and packs may be bought through Apple's App Store. Apple handles the payment; we never receive your card details. We store only which items your account owns so they follow you to any phone. Everything for sale only changes how the game looks — it never makes anyone score more.
If you are asked to rate the game, the question comes from Apple. We do not see who rated it or what they wrote unless it is posted publicly on the App Store.
Who can see what
Your username, avatar, country, level, aura and best scores are public on the leaderboard. Your email address is never shown to other players. Friends can additionally see when you were last online. Usernames are filtered for offensive words, and any player can report or block another player; the game owner reviews reports and may rename or suspend an account.
Where the data lives
Account and game data are stored with Supabase (a hosted Postgres database) over encrypted connections. Only the game owner has administrative access.
How long we keep it
As long as your account exists. You can delete your account at any time from Profile → Delete my account; this erases your profile, scores, friends, purchases record and runs from our servers immediately and cannot be undone. Signing out does not delete anything.
Children
Aura Flip is made for players of all ages. We do not ask children for any personal information: an account needs only a made-up username and a password, and usernames are filtered so they cannot contain real names. The optional email address for password recovery should be a parent's or guardian's. A guest profile needs no password or email at all. If you believe a child has given us personal information, email us and we will delete it promptly.
Your rights
You can see your data in the app, change your username, country and avatar, and delete everything from the Profile screen. For a copy of your data or any other request, email us — we answer within a few days.
Changes
If this policy changes, the date at the top changes with it and the new version is published at this address.