1. Who We Are
Somewhereish is operated by Maivor AB, Swedish organization number 559539-4726, with registered address Sparrgrensgatan 10, 416 54 Göteborg, Sweden.
Contact: daniel@maivor.ai
2. Data We Process
Depending on how you use Somewhereish, we may process:
- Account data, such as user ID, email address, and display name.
- Optional player-profile data, including a profile name, a photo you select, moderation status, leaderboard opt-in, and the approved version shown to eligible signed-in players.
- Authentication data used to sign you in and keep your account secure.
- Game data, including rounds, guesses, scores, statistics, challenge participation, referrals, and quota usage.
- Purchase and entitlement data needed to unlock Somewhereish Pro and restore purchases.
- Product interaction data used to understand how features are used and improve the app.
- Safety records, including fixed report categories, blocks, moderation outcomes, and leaderboard invalidations. The first report version does not accept free report text.
- Website analytics data, such as pages viewed, referral source, browser or device category, and approximate region, only when you accept analytics on this website.
- Support messages and the contact details you choose to include when contacting us.
Optional in-app feedback
If you choose to send feedback, we store your rating, category, optional comment, the screen you submitted it from, app version and build, submission time, and account ID in Supabase. We use this information to investigate problems and improve Somewhereish. Your comment is not copied into product analytics events.
3. How We Use Data
We use this data to:
- Provide and secure your account.
- Run games, challenges, referrals, and statistics.
- Moderate optional player profiles, show approved identity to a challenge opponent, and operate opt-in leaderboards.
- Process reports, blocks, and fair-play enforcement.
- Apply daily limits and Pro entitlements.
- Process and restore purchases.
- Prevent abuse, diagnose problems, and support users.
- Evaluate and improve Somewhereish.
4. Services We Use
Somewhereish relies on:
- Supabase for authentication, database, and backend services.
- Apple for Sign in with Apple, App Store purchases, StoreKit, and MapKit.
- Vercel for hosting the Somewhereish website, including this policy.
- Google Analytics 4 for consent-based website usage analytics.
- OpenAI for server-side moderation of submitted profile names and resized profile photos. Somewhereish uses the moderation result to approve content automatically or route it to private review.
These providers may process data under their own terms and privacy policies when delivering their services.
When OpenAI moderates a submitted profile name or resized profile photo, the content may be processed outside the EEA. Where required, international transfers are protected by the European Commission’s Standard Contractual Clauses or another valid transfer mechanism. OpenAI API data is not used to train or improve OpenAI models unless Maivor AB explicitly opts in; Maivor AB has not opted in to API data sharing for Somewhereish. OpenAI documents that the Moderations API does not retain application state or abuse-monitoring content.
5. Player Profile and Leaderboard Visibility
Profile names are not required to be unique. A selected photo is center-cropped, resized, re-rendered as a JPEG, and stripped of embedded photo metadata before upload. The original photo is not uploaded by Somewhereish.
New names and photos remain private until approved. A challenge opponent may see your approved profile. If you separately opt in to leaderboards, signed-in Somewhereish players may see the approved name and photo with your ranked score. Opt-in is off by default and can be turned off without deleting private game history or stats.
Profile photos are stored in a private Supabase Storage bucket. Access is limited to the owner, an eligible challenge opponent, or signed-in leaderboard viewers while opt-in is active. Blocks and safety suspension further restrict access.
6. Maps, Location, and Tracking
Somewhereish uses Apple MapKit to display maps. The app does not request access to your device's precise location for gameplay.
Somewhereish does not use your data for cross-app tracking and does not sell personal data.
7. Website Analytics and Your Choice
The Somewhereish website uses Google Analytics 4 only after you choose “Accept analytics.” It helps us understand which pages and links are useful. We do not enable Google advertising signals, use the data for ads, or use it for cross-site tracking.
Analytics requests are sent through a same-site path on somewhereish.io and then processed by Google. Google Analytics may process page URLs, referral information, browser and device information, interaction events, cookie identifiers, and an approximate region. We do not send your Somewhereish account name or email address to website analytics.
If you choose “Only necessary,” Google Analytics is not loaded. Your choice is stored in your browser so the site can remember it. You can change it at any time with the “Cookie settings” control in the website footer.
8. Retention and Account Deletion
We keep data for as long as needed to provide Somewhereish, meet legal obligations, resolve disputes, and prevent abuse.
Account deletion and feedback
You can delete your account from Account > Delete Account in Somewhereish. Somewhereish first deletes pending and approved profile-photo objects, then removes your profile and authentication account and deletes or unlinks associated app data. A past challenge may show “Deleted Player” so the other participant can retain the result.
Feedback may remain after its account link is removed. Any personal information you typed in your comment may therefore remain too. Contact daniel@maivor.ai to request deletion of that feedback.
Deleting your Somewhereish account does not automatically cancel an Apple subscription. Manage subscriptions in your Apple Account settings.
9. Your Rights
Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability.
Contact daniel@maivor.ai to make a privacy request. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se.
10. Changes to This Policy
We may update this policy as Somewhereish changes. The current version and its update date will remain available on this page.