Patrick Roy ("we", "us") publishes the Romi card game for Android. This policy explains what information the app handles, which of it leaves your device, who receives it, and the choices you have. It covers every edition of the app: Romi, Romi Lite, Romi Express and Romi Maxi on Google Play, and Romi and Romi Lite on the Amazon Appstore. The editions differ only in the third-party services they include, summarized in the table below.
| Edition | Store | Ads | Google Play Games | Online & nearby multiplayer | Other |
|---|---|---|---|---|---|
| Romi (paid) | Google Play | None | Optional | Yes | In-app update check |
| Romi Lite, Romi Express, Romi Maxi | Google Play | Google AdMob | Optional | Yes | In-app update check |
| Romi Lite | Amazon Appstore | Google AdMob + Amazon Publisher Services | No | Online only | Amazon license check |
| Romi (paid) | Amazon Appstore | None | No | Online only | Amazon license check |
Uninstalling the app deletes all of this. If Android's automatic backup is turned on for your device, Android may include these files (settings, including the multiplayer install identifier described below, the game database and the reduced photo) in the encrypted backup of your Google account or in a device-to-device transfer; that backup is run by Android and Google, not by us, and you can turn it off in Android's settings.
When you host or join an online game, the app connects to Google's Firebase Realtime Database using an anonymous Firebase sign-in: a random user ID with no name, e-mail or password. For the duration of the game the database holds the game state, your player name (the one you entered in the settings or, while you are signed in to Google Play Games, your Play Games display name), a SHA-256 hash of the game PIN (never the PIN itself), a random per-install device identifier used to give you your seat back after a disconnection, your win records by table size (games, wins and points for each table size you have played online, as computed on your own device — shown to the other players on the end-of-game screen, never used for leaderboards), timestamps and a connection flag so other players can see whether you are still there. Your player name, win records and install identifier can be read by the other players of the game, and by any player of the app who looks the game up while it is open; when you host, your player name also appears in the list of open games that any player can browse. A finished game, and any game created more than 24 hours earlier, is deleted the next time its host hosts an online game; on top of that we run a manual cleanup of the database from time to time, which deletes finished games after one hour without activity and every other record after 7 days without activity. Firebase is operated by Google and subject to the Firebase privacy documentation.
Nearby games use Bluetooth and Wi-Fi to talk directly to the other devices in the room; game data does not go through our servers. Android requires Bluetooth, Wi-Fi (nearby Wi-Fi devices and local network access) and, on older versions, location permissions for a device to find nearby devices. The app does not read, store or transmit your location; the permission only unlocks device discovery. When you host a nearby game, your player name is broadcast to the nearby devices looking for a game. When you join one, your device sends the host your player name, the random per-install identifier described above, the PIN you typed if the game has one and your win records by table size; the devices also exchange the results of the past nearby games you played together (player names, install identifiers and points) so that each keeps the same multiplayer history.
If you sign in to Google Play Games, the app receives your Play Games display name and player ID, submits your scores to leaderboards, and uses Play Games Saved Games to keep your settings, statistics and game history in sync between your devices through your Google account. While you are signed in, your Play Games display name is the name the other players see in online games. Sign-in is optional; the app only tries a silent sign-in when it opens or comes back to the foreground, if Play Games is already set up on the device, and you can disconnect at any time from the Google Play Games screen in the app. Google processes this data under the Google Privacy Policy.
Romi Lite, Romi Express and Romi Maxi on Google Play show banner, interstitial and app-open ads through Google AdMob and its mediation partners. To deliver and measure ads, these providers collect your device's advertising ID, IP address, approximate location derived from it, device and app information, and ad interaction data. In the European Economic Area, the United Kingdom, Switzerland and several US states the app shows a consent form before loading ads; you can change your choice later from the privacy options entry in the app. See how Google uses information from apps that use its services and the list of ad technology providers.
Romi Lite on the Amazon Appstore shows banner, interstitial and app-open ads through Google AdMob, with Amazon Publisher Services also bidding on the banner and interstitial slots; both providers and their partners collect the same categories of data. This edition shows no consent form. It has no nearby play; its location permission (on Android 12 and older) exists only for advertising: if you grant it, Amazon's ad SDK may use the device's location to select ads. The app never asks for this permission itself; it can only be granted from the device's system settings. See the Amazon Privacy Notice and Amazon interest-based ads settings.
On any edition you can reset or delete your advertising ID and opt out of ad personalization in Android's Settings › Google › Ads (or Privacy › Ads).
The Amazon editions include Amazon's Appstore DRM. At launch it verifies with Amazon that the app was obtained from the Amazon Appstore, using your Amazon account and device. We receive nothing from this check other than a yes-or-no result.
The Google Play editions ask Google Play whether a newer version is available so the app can offer the update. This request is handled entirely by Google Play.
If the computer player hits an internal error, the app offers to e-mail us a diagnostic archive. It is sent only if you tap the button and complete the send in your own e-mail app. The archive contains the app's local game database (game states, statistics and the player names you typed, plus, for network games, the names of the other players and the random install identifiers of each device) and, when present, up to three diagnostic log files (the recent moves on the board, a snapshot of the first failure and the recent turns); the e-mail body adds the app version, the device model, the Android version and a one-line summary of the move log. Both are used solely to fix the bug, then deleted.
Romi is a general-audience game. It is not directed at children under 13 and we do not knowingly collect personal information from them. The free editions do not request child-directed treatment for their ads.
Residents of Québec, the European Economic Area, the United Kingdom, California and other jurisdictions with privacy laws may have additional rights of access, correction and deletion. Since we keep no personal information about you on our side (apart from a diagnostic archive you may have sent), such requests are usually fulfilled by the steps above; write to us if you need help.
We will post any change to this policy on this page and update the date at the top.
Patrick Roy, Québec, Canada, is responsible for the protection of personal information handled by the app. E-mail: patrick.roy07+Romi@gmail.com.