Legal
01
Ghostwood Software LLC ("Ghostwood," "we," "us," or "our") operates the website at ghostwoodsoftware.com and publishes iOS applications including Muddled and Discretion Underground. This Privacy Policy describes how we collect, use, store, and share information when you use our website or apps.
By using any Ghostwood product, you agree to the collection and use of information as described in this policy. All Ghostwood apps and the website share a common backend powered by Supabase, meaning this policy applies to your data across all products as a unified platform.
02
We collect the following categories of information depending on how you interact with our products:
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, display name, password (hashed) | Provided by you on signup |
| Purchase history | In-app purchase records, subscription status | Apple App Store / StoreKit |
| Usage analytics | Feature interactions, session data, screen views | Firebase / Google Analytics |
| Crash reports | Device model, OS version, stack traces | Firebase Crashlytics |
| App Store analytics | Downloads, retention, territory (aggregated) | Apple App Store Connect |
| Contact form data | Name, email, message content | Submitted via ghostwoodsoftware.com |
We do not collect precise or approximate location data, payment card details, government identifiers, or biometric information.
03
We use the information we collect to:
We do not sell your personal information. We do not use your data for advertising targeting or share it with ad networks.
04
Our products rely on the following third-party services, each with their own privacy practices:
| Service | Purpose | Policy |
|---|---|---|
| Supabase | Backend database, authentication, and real-time sync for all Ghostwood products | supabase.com/privacy |
| Firebase / Google Analytics | Usage analytics and crash reporting | firebase.google.com/support/privacy |
| Apple App Store Connect | Aggregated download and retention analytics | apple.com/privacy |
| Apple StoreKit | In-app purchase processing | apple.com/privacy |
Data processed by Apple (purchases, App Store analytics) is subject to Apple's privacy policy. Ghostwood does not receive raw payment data — only purchase confirmation and entitlement status via StoreKit.
05
Your account data and app state are stored in a Supabase-managed database. Supabase infrastructure is hosted on AWS and adheres to industry-standard security practices including encryption at rest and in transit.
Passwords are never stored in plain text. Authentication is handled through Supabase Auth using hashed credentials.
While we take reasonable steps to protect your information, no method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
06
We retain your account data for as long as your account is active. If you request deletion, we will remove your personal information from our systems within 30 days, except where retention is required by law or necessary to resolve disputes.
Analytics data collected via Firebase is subject to Firebase's own retention settings and Google's data retention policies.
07
Depending on your location, you may have rights regarding your personal data, including:
Residents of California (CCPA) and the European Economic Area (GDPR) have specific statutory rights under those frameworks. To exercise any of these rights, contact us using the details below.
08
Ghostwood products are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
09
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. For significant changes, we will provide notice through the app or via email if you have an account. Continued use of our products after changes are posted constitutes acceptance of the updated policy.
10
If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern: