Privacy Policy

Effective date: October 19, 2026.

This policy covers the iOS app Game Night: Group Party Games, published in Russian as «Посиделки» (until version 1.4: Not Me! / «Не Я!»). Bundle id com.alba.SpyBest, iPhone and iPad, iOS 26.0 or later. It describes version 1.2 and later; versions 1.0 and 1.1 contain no network code at all, so everything below about AI themes and AI questions does not apply to them, and versions before 1.8 send no usage statistics. The app is published by Akhmadiev Albert IE, an individual entrepreneur registered in the Republic of Armenia; "we" on this page means that developer. A Russian version of this page is at privacy-ru.html.

Summary

All 31 games are free and work fully offline, including in Airplane Mode. No game ever waits for the internet: the anonymous usage statistics described below wait on your device until a connection is available.
The quiz games — Guesstimate, Rarest Answer and Top Answers — work offline too, including with questions made by AI: whatever you type in them is checked on your device and never leaves it, and your records are stored only on your device.
15 built-in packs — one for every kind of game — are always free; the other built-in packs come with the Game Night Plus subscription. Whether a pack is unlocked is decided on your device from App Store data, without contacting our server.
There is no account, no sign-up, no login and no profile.
There are no ads, no ad SDK, no crash reporting and no tracking. Nothing is sold, and nothing is used for advertising.
Since version 1.8 the app sends anonymous usage statistics to PostHog, a product-analytics service (PostHog Inc.; PostHog Cloud EU, servers in Frankfurt, Germany): which games are played, with how many players, whether they are finished or where they were left, how the subscription screen and purchases go, and how creating with AI goes — together with device details such as the model and iOS version and a random install id. They never contain player or team names, anything you type, the titles or cards of your own packs and of what you made with AI, or any Apple identifier. They are on by default; you can switch them off in Settings with the "Anonymous statistics" switch. PostHog's library is the only third-party SDK in the app.
Creating with AI is optional, and it is the only feature that needs the internet: card themes and, since version 1.7, questions for the quiz games Guesstimate, Top Answers and Rarest Answer. It comes with premium packs in the Посиделки Плюс / Game Night Plus subscription; one theme and one set of questions per Apple Account are free. If you never open the screens for creating with AI, the app never contacts our server.
When you create an AI theme or AI questions, your description is sent to our server and from there to an AI provider — Google (Gemini API, USA); for themes, OpenAI (USA) as a fallback if Gemini is unavailable, while questions are made by Google only — only to create what you asked for. Apple-signed proof of your download or subscription and your IP address reach our server with the request.
Our server does not keep your description, your name, your e-mail address or your Apple Account ID. It keeps keyed hashes of Apple transaction identifiers (with separate records for the free theme and the free set of questions), a record of each recent generation for the fair-use limits, the finished theme or question set for 72 hours (its title and content can repeat words from your description), and short technical logs that never contain your description.
The themes and questions you made with AI, the packs you write yourself and your settings are stored on your device.
Subscriptions are sold and billed by Apple. We never see your payment details.

What the app stores on your device, and why

Everything below is stored only on your device, inside the app's own storage container.

Settings. These are kept in the standard iOS preferences store (UserDefaults) so that the app opens the way you left it:

reveal mode — hold to reveal, or tap to reveal;
haptic feedback (vibration) on or off;
night-table dark mode on or off;
show 18+ packs on or off;
the ids of the last 6 game modes you played, so the app remembers what you played last;
the player names you typed for the last game, to fill in the next one;
the table you last picked on the Play screen — how many players, and Compete or Together — with the time you picked it, so it is still set if you reopen the app within 12 hours;
your best scores in Mind Meld, Scale It! and the three quiz games, and the last questions and objects dealt on this device (for each quiz, the last 150), so the next game starts with ones nobody has seen yet. Only scores and card ids are kept, never the answers anyone typed;
how many games have been started on this device — just a number — so that the AI offer never appears after the very first game;
the subscription end date the App Store last reported, so premium packs stay open for up to 3 days without the internet;
whether anonymous usage statistics are on — the "Anonymous statistics" switch;
how many visits you have made to the app — an opening after at least 30 minutes away counts as a new visit — with the time the app was last open, and whether the Game Night Plus welcome screen has already been shown, so that it opens by itself once at most, at the start of your second visit;
whether you agreed to send descriptions of themes and questions to the AI provider (see below);
whether your free AI theme and your free set of AI questions are still available, as last reported by our server, and whether an App Store purchase is waiting for approval (for example, Ask to Buy);
while an AI theme or AI questions are being created: the description, the language, what is being made and a random request id, so that an interrupted generation can be finished. This record is removed once the result is saved, and it is not used after 72 hours.

Apart from the player names you type yourself, none of these contain a name, e-mail address, phone number, device identifier or advertising identifier. Player names never leave the device.

Anonymous statistics. PostHog's library keeps, in the app's own storage, the random install id it created and a queue of events that have not been sent yet (see "Anonymous usage statistics" below).

Packs you create yourself. If you make your own pack, the pack title and the card texts you type are saved locally in the app's on-device database (SwiftData). There is no share, export, upload or sync path for this content. It never leaves your device and is never visible to any other user.

AI themes. A theme you create is saved in the same on-device database: its title, its icon, the description you typed, and the generated words, locations and word pairs. Themes stay on your device after a subscription ends. They are not uploaded, synced or shared.

AI questions. A set of questions you create is saved in the same on-device database: its title, its icon, its language, the description you typed, and the generated questions with their numbers and facts, or the answer lists with their popularity. Like themes, questions stay on your device after a subscription ends and are not uploaded, synced or shared. They appear in the pack lists only in the language they were made in.

The app's privacy manifest matches this page: NSPrivacyTracking is false and there are no tracking domains. It declares five collected data types, none used for tracking. Other User Content (the description of a theme or questions) and User ID (Apple's transaction identifiers) are used for app functionality. Purchase History (Apple's purchase proofs, and since 1.8 the plan, price and outcome of a purchase in the usage statistics) and Product Interaction (our server's record of when you created a theme or questions and whether it worked, and since 1.8 the usage statistics) are used for app functionality and analytics. Device ID (the random install id of the usage statistics) is used for analytics only. The first four are declared as linked to you because our server ties them to a pseudonymous purchase identifier, even though it never learns who you are. The install id is declared as not linked to you: it is never combined with Apple identifiers, our server's records or anything else that could tell who you are. PostHog's library brings its own privacy manifest, which declares Product Interaction and Other Usage Data, used for analytics, not linked to you and not for tracking. The app's own declared API category is UserDefaults with reason CA92.1 — accessing information from the app itself only.

AI themes and AI questions: what is sent, to whom, and why

What AI questions are. Since version 1.7 you can create, the same way as a theme, questions for Guesstimate or answer lists for Top Answers and Rarest Answer: you write what they should be about, and the AI writes questions with numbers or answer lists with their popularity. What is sent, and why, is the same as for a theme; the one difference is that questions are made by Google only, with no OpenAI fallback.

When the app contacts our server. Only after you open the screens for creating with AI (the AI studio, or the Game Night Plus screen opened from the studio or from Settings): to check whether your free theme and free set of questions are still available or your subscription is active, and to create a theme or questions when you tap "Create theme", "Create questions", "Create lists" or "Create free — once". The studio opens only when you tap an AI sticker or tile — on the Play screen, in Packs, when you choose a pack for a game ("Want more questions?" in the quiz games) or after a game; the stickers and tiles themselves never contact our server. If a generation was interrupted — for example, you closed the app — the app may send the same request again later, including right after the next launch, to finish it or to fetch the finished theme or questions. Before it starts a new generation while an older one is unfinished, it first asks our server whether the older one is already done. The games themselves never contact our server, and neither does the Game Night Plus screen when it opens from a locked pack or by itself on your second visit: it asks only Apple for prices. The anonymous usage statistics go to PostHog, never to our server; they are described in their own section below. The "Data sources" screen in Settings lists where the numbers in the built-in quiz packs come from; a source's website opens in your browser only if you tap its link. The "Report" link on a theme or question set you made also only opens the support page in your browser; it sends nothing itself.

Your agreement first. Before the first description is sent, the app shows a screen that names the AI provider and asks for your agreement. One agreement covers themes and questions: the data, the recipients and the purpose are the same (questions go to Google only), so an agreement you gave before for themes also covers questions. You can withdraw it at any time in Settings with the "Send descriptions to AI" switch; after that the app sends no descriptions.

What our server receives with a request:

Your description (up to 300 characters) — of the theme, or of what the questions should be about — and the app language, Russian or English; for questions, also what to make: Guesstimate questions or answer lists. Describe a topic; do not include personal information about yourself or anyone else.
Apple-signed proofs. The app transaction, which Apple issues when an Apple Account gets the app: it contains an identifier that is unique to that Apple Account and this app (not your Apple Account ID itself), the app version and dates. If you subscribe, also your subscription transaction: the plan, purchase and expiry dates, transaction identifiers and the store country. These proofs contain no name, e-mail address, Apple Account ID or payment details. We check Apple's signature on them to decide whether you still have the free theme, the free set of questions or an active subscription.
Your IP address, as with any internet connection. We use it only to limit how many requests one address can make.
A random request id made by the app, so that a repeated request is not processed or counted twice.

What the AI provider receives. Our server sends your description and the language (for questions, also what to make), wrapped in our instructions, to Google's Gemini API (Google, USA). If Gemini is unavailable, a theme description may be sent to OpenAI (USA) instead; a description for questions is never sent to OpenAI — questions are made by Google only. The provider receives no identifiers, no purchase information and not your IP address — the request comes from our server. The provider processes the text under the terms of its API service in order to return the theme or questions. We do not use your descriptions, themes or questions to train AI models.

Where our server is. A virtual server in London, United Kingdom, rented and operated by the developer.

What our server keeps, and for how long

An automatic clean-up runs every 10 minutes and deletes each record below once its period is over.

Keyed hashes of Apple identifiers. The server turns Apple's app-transaction and subscription transaction identifiers into keyed hashes (HMAC-SHA-256 with a secret key) and stores only the hashes, never the identifiers. With them it keeps:
- the free-theme record and the free-questions record — two separate records, each under its own keyed hash of the app-transaction identifier: whether the one free theme and the one free set of questions for that Apple Account have been used, and how many of the 3 attempts at each were made. They are kept for as long as the service runs; without them the free theme and questions could be claimed again and again;
- refund and revocation records from Apple, kept for as long as the service runs, so that a refunded subscription stops working;
- a record of each recent generation — when it happened, whether it was free or with Plus, and whether it produced a theme or questions — for the fair-use limits (10 generations a day, 30 in any 30 days, themes and questions together). Each record is deleted 30 days after the generation.
The finished theme or question set, for 72 hours — or, if the request was refused, the short reason shown to you. It is kept with a keyed hash of the request — not the description itself — so that an interrupted generation can be recovered without being counted twice. Then the clean-up deletes it. The title and content — a theme's words, the questions and answers — or a refusal reason can repeat words from your description; if the AI gives no title, the title is made from the first words of your description.
Short technical logs: time, result, whether a theme or questions were made, which model was used, how long it took, what it cost and, for a generation, a short pseudonymous id — the first 12 characters of the keyed hash of your Apple identifier — so that the lines of one request can be connected. They never contain your description, the theme or questions, Apple's proofs or raw identifiers. Your IP address is not written to the database; it may appear in these logs, which are size-limited, overwritten automatically and not archived.
Service-wide totals — spending per month — with no link to any user.
Backups. Encrypted daily backups of the server database are kept for up to 16 days on the server and for up to 90 days on a separate backup server in the Netherlands, also operated by the developer. A backup holds what the database held when it was made — for example a theme or question set still within its 72 hours, or a recent generation record — and keeps it until the backup itself is deleted. Deleted records are overwritten in the database, so a backup never contains what was deleted before it was made. Backups are used only to restore the service.

Anonymous usage statistics

Since version 1.8 the app sends anonymous usage events to PostHog, a product-analytics service run by PostHog Inc., which processes them for us. Our project is hosted in PostHog Cloud EU, on servers in Frankfurt, Germany. We use the events to learn which games are played and with how many people, where games are left unfinished, how many are finished, and how the subscription screen and creating with AI work for people, so that we can improve the games and the subscription. The statistics are on by default; you can switch them off at any time in Settings with the "Anonymous statistics" switch.

What an event can contain:

Games: which game was opened, set up, started, finished or left, its family, and where you opened it from (the Play screen, recent games or search) with the table filter you picked; the number of players or teams; the packs chosen — the ids of built-in packs, and for packs you wrote yourself or made with AI only the words "custom" or "ai"; whether the game reached its end and, if not, at which step it was left; how long it lasted; and how many games had been started on the device before.
Game Night Plus: when the subscription screen is shown and closed, where it was opened from and whether the App Store prices loaded; when a locked pack is tapped and when the offer after a game is shown; when a purchase starts, completes, fails or is cancelled, with the plan, its App Store price and currency and, for a failure, a short error code; and the result of "Restore purchases".
Creating with AI: when the studio opens and from where, what is being made (a theme, Guesstimate questions or answer lists), whether it was a free try, and whether a generation succeeded or, if not, a short error code.
With every event: the app language, the country of your App Store, whether Plus is active, which visit this is, the app version and build, the iOS version, the device model and type (iPhone or iPad), the language and region settings, the time zone, the screen size, whether the connection is Wi-Fi or cellular, a session id and the random install id. PostHog's library also records when the app is installed, updated, opened and sent to the background.

What is never sent: player or team names; anything you type — descriptions for AI, the titles and cards of your own packs, quiz answers, search text; the titles and contents of your own packs and of themes and questions made with AI; anything an AI generated; Apple's purchase proofs and identifiers, and our server's keyed hashes of them; the advertising identifier, which the app never reads; your contacts or location.

The install id. A random id that PostHog's library creates the first time the app runs and keeps in the app's storage. It is not derived from your device or your Apple Account, and we never link it to a name, an e-mail address, an Apple identifier or our server's records. The app never identifies anyone in PostHog, so PostHog keeps no person profiles: events are only counted per install id. Reinstalling the app, or switching statistics off, starts a new id.

What PostHog does not get. Our PostHog project discards the IP address of each connection, and the app turns off PostHog's location lookup from it (GeoIP). There is no session replay, no screen recording, no automatic capture of taps or screens, no crash or error reporting and no surveys. We do not use the events for advertising and do not combine them with data from other companies' apps or websites; this is not tracking, and the app does not ask for permission to track.

Offline. Events wait on the device and are sent in batches when a connection is available; no game ever waits for them. While statistics are on, PostHog's library also downloads our project's settings from PostHog when the app starts; that request carries no events and no install id. While they are off, the app does not contact PostHog at all.

Switching it off. Switching "Anonymous statistics" off stops PostHog's library at once and deletes its data from the device — the install id and any events not sent yet. From then on the app records nothing and does not contact PostHog. Events sent before stay with PostHog for the period below. Switching it back on starts a new install id that is not connected to the old one.

How long PostHog keeps events. For our project's retention period — up to one year — after which PostHog deletes them. Because the events carry no name or contact details, we cannot look them up by who you are. If you want your events deleted, switch statistics off (that resets the install id) and write to us with roughly when you used the app and your device model; we will delete the matching events we can find.

Purchases and Apple

Game Night Plus is an auto-renewable subscription sold through the App Store. Apple processes the payment and manages your Apple Account under Apple's privacy policy. We never receive your name, e-mail address, Apple Account ID or payment details. Apple also sends our server notifications about subscription events such as renewals and refunds; we verify them and keep only the keyed hash of a refunded or revoked transaction, the date, and the notification's id, kept for 30 days so that it is not processed twice.

Device motion in "Who am I?"

One game mode, "Who am I?" («Кто я?»), is played with the phone held against your forehead. In that mode the app reads device motion (CoreMotion) to tell which way you tilted the phone, and that tilt is your answer.

Motion readings are used only in this mode, and only while it is running.
They are used live to detect the tilt.
They are never stored and never transmitted.

What the app does not access

The app does not use the camera, the microphone, your photos, your contacts, your location or any health data. It does not track you across apps or websites and has no advertising identifier.

Who receives data

Only the services needed to create with AI and to count usage: Google (Gemini API) receives the text of descriptions for themes and questions, and OpenAI, as a fallback, only descriptions for themes; PostHog (PostHog Inc.) receives the anonymous usage statistics and stores them in its EU cloud in Frankfurt, Germany; the companies we rent servers from host our server in the United Kingdom and our backups in the Netherlands. Apple handles purchases. Nothing is sold or rented, and nothing is disclosed to advertisers or data brokers. We would disclose data only if the law required it.

Data therefore leaves your country: our server is in the United Kingdom, the AI providers process text in the USA, backups are kept in the Netherlands, and the usage statistics are stored in Germany.

Legal bases (UK and EU users)

We process this data to provide the AI themes and questions you ask for, your free theme, your free set of questions and your subscription (performance of a contract), and to keep the service working fairly and securely — rate limits, fair-use limits, preventing repeated free themes and questions and honouring refunds (legitimate interests). The agreement the app asks for before the first description is sent comes on top of this. We send the anonymous usage statistics on the basis of our legitimate interest in understanding how the app is used, so that we can improve the games and the subscription; they carry nothing that tells us who you are, and you can object at any time by switching them off in Settings.

Retention, deletion and your choices

If you never create anything with AI, nothing about you reaches our server. The anonymous usage statistics go to PostHog, and you can switch them off.
You can switch the anonymous usage statistics off in Settings at any time ("Anonymous statistics"); that also resets the install id. PostHog keeps events for up to one year; how to have yours deleted earlier is described in "Anonymous usage statistics" above.
You can withdraw your agreement to send descriptions in Settings at any time.
In Settings you can delete your own packs and, separately, everything you made with AI — themes and questions; each theme or set of questions can also be deleted on its own, in the "Made with AI" section in Packs. Each of these asks for confirmation and is permanent. Deleting the app, or clearing its data, removes everything stored on the device. We keep no copy of your packs, themes or questions and cannot restore them.
Deleting the app does not cancel a subscription. Manage or cancel it in your Apple Account settings (Settings → your name → Subscriptions).
Server data is deleted on the schedule above. You can ask what we hold about you, or ask us to delete it, by writing to the address below. Because our server does not know your name or e-mail address, we may not be able to find your records from them; tell us what you need and we will explain what we can do. We may keep the free-theme, free-questions and refund records described above, because they are needed to keep the free theme and the free set of questions to one each per Apple Account and to honour refunds.
If you are in the UK or the EU, you may also complain to your data-protection authority (in the UK, the ICO).

Children

This is a general-audience party game, rated 16+ on the App Store. It is not directed at children, and creating with AI is not meant for children either. We do not knowingly collect data from children; if you believe a child has sent us a description, write to us and we will help. There are no ads, no tracking, and no way to contact other people through the app.

The 18+ content filter

Some packs are marked 18+ — flirting, hookups, nightlife, references to alcohol, and dark lateral-thinking riddles. These packs are hidden by default. A setting called "show 18+ packs" reveals them.

This is a convenience content filter, not a parental control. There is no passcode on the switch and no age verification. Anyone using the device can turn it on. If you are handing the phone to a younger group, leave the switch off and check the packs that are selected.

Changes to this policy

If a future version of the app changes what it stores or what it sends, this page is updated before that version ships, and the effective date at the top changes with it.

Revision of October 19, 2026 (version 1.8). The app now sends anonymous usage statistics to PostHog (PostHog Inc.; PostHog Cloud EU, servers in Frankfurt, Germany): which games are played and how they end, how the subscription screen and purchases go, and how creating with AI goes, with device details and a random install id — never names, anything you type, pack titles, AI content or Apple identifiers. They are on by default and can be switched off in Settings ("Anonymous statistics"); PostHog keeps them for up to one year. The Game Night Plus screen may now open by itself once, at the start of your second visit; it asks only Apple for prices and can be closed at once. On the device, the statistics switch, a visit count with the time the app was last open, whether that screen was shown, and PostHog's install id and queue of unsent events were added. The App Store privacy details now also list analytics as a purpose of Product Interaction and Purchase History, and add Device ID and Other Usage Data for analytics, neither linked to you. Nothing changed in creating with AI, and an agreement you gave before stays valid.

Revision of October 18, 2026 (version 1.7). Creating with AI now also makes questions for Guesstimate, Top Answers and Rarest Answer; descriptions for questions go to Google only, with no OpenAI fallback. Our server keeps a second free-try record — for the free set of questions — and keeps a finished question set for up to 72 hours, like a theme; the description itself is still not stored. On the device, a count of games started and the status of the free set of questions were added. No new type of data is collected, and an agreement you gave before stays valid.

Contact

Privacy questions and requests go to InnoAppDesign@yandex.com. You can also use the support form or open an issue on GitHub (GitHub issues are public — keep personal information out of them). See also support.html and terms.html.