Privacy Policy

Effective date: September 8, 2026

InfraSim ("InfraSim," "we," "us") is a mobile system-design game. This policy explains what data the app and its backend collect, why, and how you can control it. InfraSim is fully playable offline as a guest, you never need to create an account to play the tutorial, campaign, Sandbox, Survival, or use the Learn encyclopedia.

1. Data we collect

1.1 If you play as a guest (no account)

Your progress: campaign stars, saved architectures, settings, and run history: is stored only on your device in a local database. We do not receive it, and it is not backed up to our servers unless you create an account.

1.2 If you create an account

Creating an account is optional and is used only to sync progress across devices, keep a Daily Challenge leaderboard, and restore purchases. Accounts are created with an email address and password through Supabase Auth, there is no "Sign in with Apple" or Google sign-in option. We collect:

• Email address, used for sign-in and account recovery.
• A display name or handle you choose, shown next to your score on public Daily Challenge leaderboards. Do not use your real name if you would rather stay pseudonymous.
• Gameplay progress synced from your device: stars, scores, completed levels, saved architectures, and achievement state.

1.3 Purchases

Subscriptions and the lifetime unlock are purchased through Apple's App Store or Google Play and processed by RevenueCat, our subscription management provider. We receive a purchase record (product purchased, active/expired status, renewal date, platform) so the app can unlock Pro features: we never receive your card number, billing address, or other payment details. Apple and Google handle payment directly.

1.4 Diagnostics and analytics

Both of the following are controlled by separate toggles in Settings → Privacy. Turning either off stops that collection immediately: it does not retroactively erase what was already sent. Both are pseudonymous: no name, email, or free text is ever included. While you are signed in, events are linked to your account ID so a specific bug report can be investigated; playing as a guest, they carry only a random installation identifier with no link to any account.

Service	What it collects	Why
Sentry (crash/error reporting)	Stack traces, device model, OS version, app version, and either your account ID (signed in) or a device-generated installation identifier (guest). No architecture contents or free text you typed.	Find and fix crashes and bugs.
PostHog (product analytics)	Event names (e.g. "level completed", "paywall viewed"), coarse device/OS info, and either your account ID (signed in) or a random installation identifier (guest). Personally identifying fields are scrubbed before sending. We do not send architecture contents or free text as event data.	Understand which features are used and where players get stuck, so we can improve the game.
Local reminders (expo-notifications)	Nothing leaves your device. Daily Challenge and streak reminders are scheduled entirely on-device: there is no push token, no server, and no account required.	An optional nudge you turn on in Settings → Notifications. Turning it off, or your device's own notification settings, stops it at any time.

2. What we do not do

• We do not sell your personal data.
• We do not show ads or use advertising trackers.
• We do not access your contacts, photos, microphone, camera, or location: the app does not request those permissions.
• We do not share your data with third parties except the service providers named above (Supabase, RevenueCat, Sentry, PostHog, Apple, Google), each acting only to provide the function described.

3. How your data is stored and protected

Guest data lives only in your device's local storage. Account data is stored in a PostgreSQL database hosted by Supabase with row-level security, so your account can only read and write its own rows, nobody else's progress, saved architectures, or run history. Leaderboard entries expose only your chosen display name and score, never your email.

4. Your choices

• Play entirely offline as a guest and share nothing with us.
• Turn analytics or crash reporting off at any time in Settings → Privacy: collection stops immediately.
• Turn reminder notifications off at any time in Settings → Notifications, or in your device's own notification settings.
• Request deletion of your account and associated data, see our account deletion page for the exact steps.
• Contact support@petalformllc.com with any privacy question or request.

5. Children's privacy

InfraSim is rated for a general audience (Apple 4+ / Google Everyone) and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

6. International data transfers

Our service providers may process data in the United States and other countries where they operate infrastructure. By using an account, you consent to this transfer as necessary to provide the service.

7. Governing law

[OWNER: fill]: this policy is governed by the laws of [OWNER: fill jurisdiction], without regard to conflict-of-law principles. Confirm with counsel before submission if you operate in a region with specific requirements (e.g. GDPR/UK GDPR, CCPA/CPRA).

8. Changes to this policy

We may update this policy as the app changes. Material changes will be reflected by updating the effective date above. Continued use of the app after a change means you accept the revised policy.

9. Contact

Questions or requests about this policy or your data: support@petalformllc.com