LAST UPDATED 20 OCTOBER 2026

Privacy policy

Tinali is operated by Marar Inc. This policy explains the information used to provide the Tinali game and its support website.

Information we collect

• Account information: your player name, email address, sign-in provider identifier, and a password hash if you choose email/password sign-in. We do not store your password in readable form. Apple authorization tokens needed to revoke sign-in access are encrypted.
• Play information: assigned games, attempts, results, timing, wins, levels, streaks, category performance, and lifeline balances and usage. Creative responses are processed to check the game’s rules; the attempt record stores the result rather than the response text.
• Purchases: store transaction identifiers, product, purchase status, and grants when optional purchases are used. Apple and Google process payments; we do not receive your full payment-card details.
• Optional reminders: if you enable notifications, your push token, device/platform identifier, time zone, reminder preferences, and delivery/open events.
• Security and support: limited service diagnostics, hashed network identifiers for abuse prevention, and information you send when contacting support.

How we use information

We use this information to authenticate you, keep progress across devices, assign and score games, maintain the leaderboard, deliver purchased lifelines, send reminders you choose, prevent misuse, troubleshoot problems, and answer support requests.

What other players see

Your win count, level, rank, and an automatically generated player alias appear on the leaderboard. Only you see your chosen player name. Your email address and sign-in details are not shown to other players. Creative responses are not shared with other players.

Service providers

Cloudflare hosts our backend and database and routes support emails. Expo provides app delivery and push-notification infrastructure. Apple and Google provide their sign-in, store, and payment services when you use them. RevenueCat validates and manages in-app purchase events. Support email is delivered to our Google-hosted inbox. OpenAI may generate parameters for game templates; we do not send player account details or answers to OpenAI for this purpose.

Providers may process information outside your country. We require service providers handling personal information on our behalf to protect it to the same or an equivalent standard described here, limit its use to providing their services, and support appropriate deletion. Apple and Google also process sign-in and store information under their own privacy policies.

No advertising or cross-app tracking

Tinali does not display third-party ads, sell personal information, or use account information for tracking across other companies’ apps and websites.

Storage and deletion

We keep account and play records while your account or guest profile exists. You can permanently delete your account and associated play and notification data from Profile → Delete account and data. Deletion removes your leaderboard entry and unused lifelines. Apple authorization is revoked for Apple-linked accounts. A one-way purchase fingerprint may remain to prevent replaying a purchase, without retaining your player identity. A hashed deletion receipt is retained for up to 30 hours so interrupted requests can be safely retried.

We also request deletion of your RevenueCat customer record. If the provider is unavailable, a cleanup request retains only the player identifier needed to finish deletion; we retry it and complete assisted cleanup within 30 days. Cloudflare database recovery copies expire within 30 days. Apple and Google may independently retain transaction records to meet their obligations. Support correspondence may be kept to resolve your request and meet applicable legal requirements. We do not promise removal of records that we must legally retain.

Your choices

You can play as a guest without providing a name or email. Guest progress is associated with a random device credential and a server-side player identifier; it is not anonymous to our service. Create an account only if you want to keep that progress across devices. You can update your private player name, mute sounds, disable reminders, revoke notification permission in device settings, and delete your account or guest profile. Contact support@tinali.app to request access, correction, or help exercising applicable privacy rights.

Children

Tinali is intended for adults and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

Changes and contact

We will update this page when our practices change. For privacy questions, contact Marar Inc. at support@tinali.app.