Privacy Policy
The short version: Hiccup has no accounts, no ads and no tracking. Your player names and settings stay on your phone. If you use multi-phone rooms, your nickname and votes are relayed to the other phones in that room and not stored. Purchases are handled by Apple or Google, with RevenueCat keeping track of which packs you own.
This policy explains how Lyssa AS (“we”, “us”) handles information in the Hiccup mobile app (the “App”). Contact us at kontakt@lyssa.no.
1. Information stored only on your device
Player names, avatars, your chosen party name, vibe, settings, game progress and which cards you have already seen are saved locally on your device so the App works the way you left it. We never receive this information. Deleting the App deletes it.
2. Multi-phone rooms
If you host or join a room, the App sends the nickname, emoji and colour you choose, your secret votes and the current game card to the other phones in that room. This is relayed in real time through Supabase (our real-time service provider). It is not stored in a database and disappears when the room ends. Room codes are random and temporary. Don’t use your full name if you’d rather not share it with the room.
3. Purchases
In-app purchases are processed by Apple (App Store) or Google (Google Play). We never see your payment details. We use RevenueCat to verify purchases and remember which packs you own. RevenueCat receives an anonymous app user ID, your purchase history for this App, and basic device information (such as platform, app version and country/currency). See RevenueCat’s privacy policy.
4. Camera
The camera is only used, with your permission, to scan a room’s QR code. Scanning happens on your device; no images or video are saved or sent anywhere.
5. What we don’t do
- No user accounts or sign-in.
- No advertising, advertising IDs or ad tracking.
- No analytics or behavioural tracking.
- We don’t sell or share personal data for marketing.
- No microphone, contacts, location or photo-library access.
6. Service providers
| Provider | Purpose | Data |
|---|---|---|
| Apple / Google | App distribution, payments, review prompts | Governed by their own policies |
| RevenueCat, Inc. | Purchase verification & restore | Anonymous user ID, purchase history, device info |
| Supabase, Inc. | Real-time relay for multi-phone rooms | Nickname, emoji, votes, current card (not stored) |
Some providers are located outside the EU/EEA (for example in the United States). Where this happens, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
7. Legal basis (EU/EEA users)
We process the limited data above to provide the App and the features you choose to use (performance of a contract) and to verify purchases and prevent fraud (legitimate interests).
8. Age requirement
Hiccup is intended for adults aged 18 or older (or the legal drinking age where you live, if higher). It is not directed at children and we do not knowingly process children’s data.
9. Retention
On-device data stays until you delete it or the App. Room data is not retained. RevenueCat keeps purchase records as needed to restore your purchases and meet legal obligations.
10. Your rights
Depending on where you live (including under the GDPR), you may have the right to access, correct, delete or object to the processing of your personal data, and to complain to your data protection authority (in Norway: Datatilsynet). To request deletion of purchase-related data held by RevenueCat, email us from the store account you used, and we will handle it.
11. Changes
We may update this policy. The effective date above shows the latest version; significant changes will be highlighted in the App or on this page.
12. Contact
Lyssa AS · kontakt@lyssa.no