Privacy Policy

What we collect

We use Sign in with Apple. The stable Apple subject identifier is stored as a hash to recognize your account. An email, including an Apple private relay address, is stored only if Apple sends it and only if it is needed for support.

We store your nickname, avatar choice, frame, game history, wallet ledger, streak, achievements, reports, blocks, and device push token if you allow notifications.

If you buy Zylo packs or join Zylo Club, we store Apple transaction identifiers needed to credit Zylo, keep Club active, and handle refunds. We do not store your full payment card details.

What is public

Your avatar, nickname, balance, and game statistics are visible on your public mini-profile. These include rounds played, wins, win rate, streaks, best multiplier, largest payout, total wagered, and net profit. Your Apple ID, email, and other private account details are not public.

This public-balance choice is part of version 1 and is shown again during onboarding. It may be reviewed before a public release.

Notifications and devices

Version 1 sends one kind of push notification: “Daily bonus is ready.” We ask for permission only after explaining that. We do not send marketing or news pushes in version 1.

Device signals used to keep the account safe may be stored. We do not sell personal data.

Avatars

You may choose a standard avatar. A custom upload, when that feature is enabled, is cropped, re-encoded, stripped of EXIF, and shown to others only after moderation.

Deletion and requests

When you delete your account, it is blocked at once, push tokens are revoked, and the public profile disappears. Personal data and avatars are removed within 30 days unless a longer legal hold is required. Rounds and ledger rows needed for system integrity are anonymized and are no longer tied to your public identity.

You may ask support for a copy of your personal data even though version 1 has no in-app export button.