Danny Simi

Privacy policy — Joinery

Joinery keeps your progress and coin balance on a server, under an anonymous account it creates for you — no name, no email, no password. It shows no advertising and does not track you. You can delete the account and everything in it from inside the app.

Effective 17 September 2026. Applies to the Joinery iOS app published by Danny Simi, and describes the app as released. A section at the end sets out what is planned — advertising, push notifications, and an option to sign in — which is not yet in the app and does not describe anything it currently does.

The short version

The first time Joinery can reach the internet it creates an anonymous account for you. It has no name, email address or password, and there is nothing to sign in to. Your progress, your coin balance, the levels you have finished and the coin packs you buy are kept on that account so they survive reinstalling the app or moving to a new phone. The app holds no location, no contacts and no advertising identifier, and it does not track you across other apps or websites. Apple's App Store privacy label reflects this: data is collected and linked to your account, and none of it is used for tracking.

What is stored on your device

Two files live in the app's private storage, which only Joinery can read. They are included in an iPhone or iCloud device backup, and they are deleted when you delete the app.

progress.json — your progress: The fewest moves you have finished each level in, and where you are in the opening tutorial. Nothing else.
events.jsonl — a log of play, for tuning difficulty: A line per event: a session or level starting and ending, which boosters were used, how many moves a level took and how it ended, and whether the shop could fetch its prices. It exists so the puzzles can be made fairer. This log is sent to our server, a batch at a time, and you can turn that off in Settings — see below. The file stays on your device either way, and is deleted with the app.

What is sent to our server

So that your coins and progress are the same on any device you sign in from, the app sends and stores:

an anonymous account identifier, created by the app — not your name or email, and not shared with anyone;
a device identifier the app generates, so that support can find your account if you ask for help;
the levels you finish, the moves you took and the coins you earn and spend, so your balance is correct and cannot be lost;
Apple's transaction records for coin purchases, to credit a purchase and to honour a refund. Apple processes the payment; we never see your card or payment details.
the play log described above — the events, their times, and how long a level took. It tells us which levels people get stuck on, which is the only way we can tell a hard level from an unfair one. It holds nothing you type and nothing about any other app.

You can stop the play log being sent. Settings → Sending the play log → Turn off. It stops immediately and nothing further leaves the phone; what was already sent is removed by "Delete my data", below. Your coins, purchases and progress keep syncing either way — those are what your account is for, and the game cannot keep your balance safe without them.

Play-log events are kept for 180 days and then deleted automatically.

This data is held for us by Supabase, our backend provider, on servers in the United Kingdom (London region). It is linked to your anonymous account. None of it is used for advertising or tracking, and none of it is sold.

Deleting your data

You can delete your account and everything associated with it from inside the app, in Settings. It removes your progress, your coin balance and your account from our records, and clears the account identity from your device; the next time you open the app you start fresh as a new anonymous account. It cannot be undone, and a purchased coin balance is deleted with everything else. Deleting the app removes the on-device files as well.

Your rights

Data-protection law gives you rights to access, correct, export and erase the personal data held about you. The in-app deletion above is the erase, and it is immediate. For access or a copy of what your account holds, email [email protected] — the account is anonymous, so we may need you to open the app and read us the identifier before we can find it.

Children

Joinery is a puzzle game suitable for a general audience and is not directed at children. It is not published in the App Store's Kids Category. The account it creates holds no name, email or other personal detail — only the anonymous identifier and your play and purchases described above.

Who processes your data

Supabase: Stores your account and its data on our behalf, in the United Kingdom, under its own privacy policy.
Apple: Operates the App Store, processes purchases and refunds, and may collect information about downloads and crashes under its own privacy policy, independently of this app. We receive only the aggregate sales and crash summaries App Store Connect shows every developer.
Cloudflare: Hosts this website and processes server logs for security and delivery under its own privacy policy. The app itself does not use Cloudflare.

This site

This website has no analytics, no cookies and no third-party requests. The typeface is served from this domain rather than from a font service, so reading this page does not tell anyone else that you did.

Changes to this policy

If the app's behaviour changes, this policy is rewritten and reissued with a new effective date before the change reaches the App Store, and Apple's privacy label is updated in the same submission. The section below says what those changes are expected to be, so that they are not a surprise.

Planned, and not yet in effect

Nothing in this section describes the app today. Each item takes effect only in a version that ships it, with a reissued policy and an updated App Store label.

Joinery is intended to become a free game supported by purchases and advertising. Three further changes are planned, and each changes what is collected:

Advertising: This is the largest change. Third-party advertising code, an advertising identifier, and — if you agree to Apple's tracking prompt when it appears — personalised advertising. If you decline, you will still see advertising and it will not be personalised, and declining will not reduce what the game gives you. The ad provider will be named here before any advertising ships.
Signing in: An option to attach your anonymous account to Sign in with Apple, so you can recover it on a device with no backup. It stays optional; the account works without it.

Push notifications may also be added, to tell you when lives have refilled. They will be asked for, and refusing them will not affect play.

Contact

Danny Simi
[email protected]

For data-protection questions, the same address reaches the person responsible.