Last updated: 24 August 2026

ExploreIRL is a real-world adventure card game. This policy explains exactly what the app collects, what it sends, and what it never touches. It describes what the app actually does — every claim here was checked against the source code, not against an intention.

• You can play the entire game without an account, and without sending us anything.
• We collect no analytics. There is no analytics SDK, no crash-reporting SDK and no advertising SDK in the app. We do not know how many cards you complete unless you sign in and back up.
• We never track you across other apps or websites, and we do not use the advertising identifier (IDFA). There is no App Tracking Transparency prompt because there is nothing to ask about.
• We do not sell or share your personal information with anyone.
• Your data is only sent anywhere if you choose to create an account.

Until you sign in, everything lives on your phone and nowhere else:

• Your Explorer's name, chosen animal Explorer, and optional email address
• Every pack you own and every card you have completed, failed or 86'd
• Your Miles, your collection, and your 86 counts
• Moment photos you attach to completed cards

If you never create an account, none of this leaves your device. Deleting the app deletes all of it permanently, and we cannot recover it.

Accounts are entirely optional and exist for one reason: so a lost or replaced phone does not mean a lost adventure.

We use Sign in with Apple. Apple gives us:

• A user identifier — a random string that identifies your account to us
• Your email address, if you choose to share it. Apple lets you use Hide My Email, in which case we receive a private relay address and never see your real one. That works perfectly well; nothing in the app needs your real address.
• Your name, if you choose to share it, and only on the very first sign-in

We never receive your Apple ID password. Apple handles authentication entirely.

Once signed in, the app uploads:

WhatWhyExplorer name, chosen avatar, and the avatars you ownSo your Explorer returns on a new phoneAn email address you typed into the app yourself, if anyIt is part of your Explorer profile; it is optional and can be left blankYour Passport ID (e.g. EXP-000777)Permanent player identityWhich packs you own, and when you started and last played eachSo your collection returnsEach resolved card: which card, in which city, completed/failed/86'd, when, and Miles earnedYour progressWhether you acknowledged the responsible-play noticeSo you are not asked repeatedlyMoment photos, if you have themSo your Moments survive losing your phone

What is deliberately never uploaded: your Miles total, your Level, and your remaining 86s. These are recalculated from the underlying facts rather than stored, so there is no second copy of them anywhere.

If you attach a photo to a completed card, and you are signed in, the image is uploaded to private storage tied to your account.

• Photos are stored in a private bucket. There is no public URL. They can only be read by your own signed-in account, enforced by the database, not merely by the app.
• Photos are compressed before upload (roughly 300–400 KB) and, for some earlier photos, an untouched original copy is kept as well.
• We do not analyse, scan, or use your photos for any purpose. They are stored so you can get them back.
• The original photo on your phone is never modified, moved or deleted by the app.
• 
  

Packs, Explorers and extra 86s are bought through Apple's In-App Purchase system.

• We never see your payment details. Card numbers, billing address and Apple ID password go to Apple, never to us. The app has no code that can read them.
• We record only which items you own, so they can be restored on another device.
• Refunds are handled by Apple, not by us — see Report a Problem at reportaproblem.apple.com.
• 
  

Photo library — only when you tap to add a photo. The app asks for access at the moment you choose to attach a Moment photo, share a card, or attach an image to a support message. It never browses your library on its own.

That is the only permission the app requests. It does not use the camera, the microphone, or your location. Earlier builds declared camera and microphone permissions that the app never actually used; those declarations have been removed.

• Apple — sign-in and all payment processing
• Supabase — our database and file storage provider, which hosts your backup

Supabase stores data on our behalf. Access is restricted per-account at the database level, so one player's data cannot be read by another.

We do not use any advertising network, data broker, or analytics provider.

Your backup is kept while your account exists, so it is there when you need to restore.

To delete your account and everything in it, email the address below from the account you signed in with, and we will delete your backup and your stored photos. Deleting the app from your phone does not delete a cloud backup — that has to be requested, and asking is the only way it happens.

ExploreIRL is not directed at children under 13, and we do not knowingly collect personal information from them. Some challenge cards reference alcohol and are marked accordingly; the app shows a responsible-play notice during setup.

You can ask us to:

• tell you what we hold about you
• correct it
• delete it

Email the address below and we will action it. Depending on where you live (for example the EEA, the UK, or California), you may have additional statutory rights — we apply the above to everyone regardless.

If this policy changes materially, we will update the date at the top and note the change in the app's release notes.

Email: thewielandco@gmail.com

We aim to reply within a few business days.