Board Game Sidekick – Privacy Policy

Last updated: 12 August 2025

This Privacy Policy explains how Board Game Sidekick (“we”, “us”, or “our”) collects, uses, and shares information when you use the Board Game Sidekick mobile app (the “App”). It also describes your choices and rights. If you disagree with this policy, please do not use the App.

Quick summary

We don’t sell your data or show ads.
Most data (your library, scores, and settings) is stored locally on your device.
We use analytics to understand app usage (e.g., which screens are used) and error events so we can fix bugs.
When you ask rules questions or scan a photo, content is sent to our Cloudflare Worker proxy and forwarded to OpenAI for processing. We don’t keep that content after the request completes.
You can delete your local data at any time (in‑app if provided, or by uninstalling the App). You can also opt out of analytics.

Contact: boardgamesidekickapp@gmail.com

What we collect

1) Information you provide

Images you choose to analyze (e.g., a photo of game boxes). These images are sent to our AI processor (OpenAI) to recognize game titles.
Questions you ask about rulebooks (text you type). If you provide a URL to a rulebook PDF, we may temporarily download it to forward to OpenAI.
Game library & score data that you add or edit in the App.

2) Information collected automatically

Analytics events (e.g., feature usage, simple performance metrics, error events). Typical fields: anonymized device type, OS version, app version, timestamps.
Network logs (minimal) via our Cloudflare Worker (request counts, error codes). We do not log the contents of your prompts or images.

3) Information from third parties

BoardGameGeek (BGG): If you choose to import your collection, we retrieve public data from your BGG profile.

We do not create user accounts, collect contact lists, SMS, precise GPS, or payment card data.

How we use information

Provide App features (game recognition from photos, rulebook Q&A, scoring tools, library management).
Improve reliability and performance (diagnose crashes, measure what features are used).
Prevent abuse and maintain security (rate limiting via our proxy).

Legal bases (if you are in the EEA/UK): performance of a contract (providing the App), legitimate interests (quality, safety, and improvement), and consent where required (e.g., analytics on certain platforms/jurisdictions).

Sharing & processors

We share data only with service providers who process it on our behalf:

OpenAI – processes your prompts, images, and (optionally) rulebook PDFs to generate responses.
Cloudflare Workers – relays requests to OpenAI and provides network protection; we configure it not to store request bodies.
Amplitude (analytics) – collects usage and event metrics (no contact info).
Apple & Google – app distribution, crash diagnostics, and platform services.
BoardGameGeek – optional collection import via their public API.

We do not sell your personal information. We do not allow third‑party advertising in the App.

Data storage & retention

On device (default): Your library, scores, and settings are stored locally on your device (e.g., using an on‑device database). Remove the App (and its data) by uninstalling it.
Transient processing: Images, prompts, and PDFs sent for AI processing are kept only as long as needed to fulfill the request; we don’t store them on our own servers.
Analytics data: Retained by our analytics provider for the period necessary to provide the service and to help us analyze trends; we use aggregate reporting where possible.

Your choices & rights

Delete local data: Use in‑app options (if provided) or uninstall the App to remove local data.
Opt out of analytics: If the App offers a toggle, you can disable analytics; otherwise, contact us and we’ll provide platform‑specific instructions (e.g., iOS privacy settings and in‑app toggles where applicable).
Access/Correction/Deletion (GDPR/CCPA/APPs): You may have rights to request access or deletion of personal data we hold about you. Because we store most data locally on your device, we may ask you to take in‑app steps. For analytics data, contact us and we will work with our providers to honor requests.

To exercise rights, email boardgamesidekickapp@gmail.com with your country/region so we can route correctly.

International transfers

We use global service providers (e.g., Cloudflare and OpenAI) that may process data in multiple countries. We rely on appropriate safeguards (such as Standard Contractual Clauses, where applicable) to protect your information.

Security

We use administrative, technical, and organizational measures appropriate to the nature of the data we process (TLS in transit, least‑privilege access to analytics dashboards, rate limiting on our proxy). No method of transmission or storage is 100% secure.

Children’s privacy

The App is intended for a general audience and is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we’ll delete it.

Changes to this policy

We may update this policy from time to time. We’ll post the new version on this page and update the “Last updated” date. Material changes will be highlighted for a reasonable period.

Contact us

Board Game Sidekick
Sydney, Australia
Email: boardgamesidekickapp@gmail.com

Jurisdiction‑specific notices (optional)

Australia: We endeavor to comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may contact the OAIC if you are not satisfied with our response to a complaint.

EEA/UK: You may lodge a complaint with your local supervisory authority. Our legal bases are listed above; we rely on legitimate interests for analytics and service improvement.

California: We do not “sell” or “share” personal information as defined by the CCPA/CPRA. You may exercise access/deletion rights as described above.