Privacy Policy: The Mahj App

Last updated: February 22nd, 2026

This Privacy Policy applies exclusively to The Mahj App (the “App”), a mobile application for American mah jongg developed and operated by The Tabletop Ritual (“we,” “us,” or “our”). This policy does not cover our website, thetabletopritual.com, which has a separate Privacy Policy.

This policy explains what data we collect when you use the App, how we use it, who we share it with, and what rights you have over your data.

By downloading or using The Mahj App, you agree to the terms of this Privacy Policy.

1. Information We Collect

A. Account Information

When you create an account, we collect:

• Email address

• Username or display name

• Password (stored in hashed form — we never store plaintext passwords)

B. Gameplay Data

As you use the App, we collect data related to your activity, including:

• Daily challenge completion history and scores

• Difficulty level preferences (Beginner, Intermediate, Advanced)

• Win/loss history against bots

• Streak data and in-app milestones

• Session timestamps and duration

C. Subscription and Purchase Data

If you purchase a premium subscription, we collect:

• Subscription status (active, expired, trial)

• Purchase history and transaction identifiers

• Subscription tier

Payment processing is handled entirely by Apple (via the App Store) and RevenueCat. We do not collect or store your credit card, debit card, or banking information.

D. Device and Technical Data

We may automatically collect:

• Device type and model

• Operating system version

• App version

• Device identifiers (such as Advertising ID or Vendor ID, as applicable)

• Crash reports and error logs

• IP address

2. How We Use Your Information

We use the data we collect to:

• Create and manage your App account

• Deliver daily challenges and track your gameplay progress

• Power leaderboards and competitive features

• Process and manage your premium subscription

• Send you App-related notifications (with your permission)

• Diagnose bugs, improve performance, and develop new features

• Prevent fraud, abuse, and unauthorized access

• Comply with legal obligations

We do not sell your personal information.

We do not use your gameplay data or personal information for advertising targeting.

3. Third-Party Services

The Mahj App integrates with the following third-party services. Each governs its own data practices:

Apple App Store

App distribution, in-app purchase processing, and account authentication where applicable. Apple’s privacy policy applies to all transactions made through the App Store.

RevenueCat

RevenueCat manages our subscription infrastructure, including purchase validation, entitlement management, and subscription status tracking. RevenueCat receives your App Store transaction data and subscription status.

Analytics Providers

We may use analytics tools (such as Firebase or similar) to understand how users interact with the App and to diagnose technical issues. Analytics data is aggregated and used only for internal product improvement.

Crash Reporting

We may use a crash reporting service to automatically log errors and app crashes. These reports help us fix bugs. Crash data does not include personally identifiable information beyond device and app version details.

4. Data Sharing

We do not sell your personal information.

We may share data with:

• Service providers who help operate the App (RevenueCat, analytics, crash reporting) — only as necessary to provide those services

• Apple, as required for App Store distribution and purchase processing

• Law enforcement or government authorities, if required by law or to protect rights and safety

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before such a transfer occurs.

5. Data Storage and Security

Your data is stored on secure servers. We use industry-standard security measures including encrypted transmission (HTTPS/TLS), hashed password storage, and access controls to protect your information.

No method of transmission over the internet or electronic storage is completely secure. While we take reasonable precautions, we cannot guarantee absolute security.

If you believe your account has been compromised, contact us immediately at info@thetabletopritual.com.

6. Data Retention

We retain your account and gameplay data for as long as your account is active. If you request account deletion, we will:

• Delete your account and associated personal data within 30 days

• Retain anonymized, aggregated gameplay data that cannot identify you (e.g., for leaderboard historical records)

• Retain transaction records as required by law (typically 7 years for financial records)

To delete your account, contact us at info@thetabletopritual.com or use the account deletion option in the App settings (if available).

7. Children’s Privacy (COPPA)

The Mahj App is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child under 13 has created an account or provided personal information, please contact us at info@thetabletopritual.com. We will promptly delete the account and all associated data.

We do not knowingly allow children under 13 to purchase premium subscriptions.

8. Push Notifications

The App may request permission to send push notifications to remind you about daily challenges, streaks, or new features. You can enable or disable push notifications at any time through your device’s settings. Disabling notifications does not affect your access to App features.

9. Your Privacy Rights

Account Deletion

You may request deletion of your account and all associated personal data at any time by emailing info@thetabletopritual.com. We will process your request within 30 days.

California Residents (CCPA/CPRA)

California residents have the right to:

• Know what personal information we collect and how it is used

• Request deletion of personal information

• Opt out of the sale of personal information (we do not sell personal information)

• Non-discrimination for exercising these rights

European Users (GDPR)

If you are located in the European Economic Area, you have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Request erasure of your data

• Object to or restrict processing

• Data portability

• Lodge a complaint with your local supervisory data protection authority

How to Make a Request

To exercise any privacy right, email us at info@thetabletopritual.com with the subject line “Privacy Request.” We will respond within 30 days.

10. Changes to This Privacy Policy

We may update this Privacy Policy as we add features, integrate new third-party services, or as applicable law changes. We will post the updated policy at thetabletopritual.com/mahj-privacy with a revised effective date.

For material changes — such as new data collection practices or new third-party sharing — we will notify you via in-app notification or email at least 14 days before the change takes effect.

Continued use of the App after the effective date constitutes acceptance of the revised Privacy Policy.

11. Contact Information

If you have questions, requests, or concerns about this Privacy Policy or your data, please contact us:

The Tabletop Ritual

5900 Balcones Dr. #9001

Austin, TX 78731

Phone: 817-520-8152

Email: info@thetabletopritual.com

Website: thetabletopritual.com