Whereupon — Privacy Policy

Last updated: 22 June 2026

Whereupon is a daily history-geography game. This policy explains what we collect, why, and what we never do. It is written to match exactly what the app and our server actually do — no more, no less.

The short version

You can play today's round with no account and no data collection at all.
We collect data only when you sign in for a leaderboard rank or to sync across devices.
We use no third-party analytics, no ad networks, and no data brokers. Ever.
We never store your email address or a password.

What we collect, and only when you sign in

Playing the free daily round requires no account and sends us no personal data. If you choose to sign in (with Apple or Google) to appear on the leaderboard or sync across devices, we store the following on our server:

Data	Why we need it
A provider-stable user identifier (Apple `sub` or Google `sub`)	To recognize your account across sign-ins and devices. This is an opaque identifier from Apple or Google — not your email.
A display name you choose	To label you on the leaderboard.
Your gameplay results — map-guess coordinates, time taken, and the scores we compute from them	To rank you on the leaderboard and show your stats and streaks.
Your Pro subscription status and renewal date	To unlock Pro features (the archive and randomized rounds).
A push-notification device token and your reminder preference — only if you opt in to daily-round reminders	To send the daily reminder you asked for. We never send push without your opt-in.

What we do NOT collect

Your email address — we never receive or store it. Sign in with Apple/Google gives us only an opaque identifier.
Any password — there are no passwords in Whereupon.
The advertising identifier (IDFA) or any device-tracking identifier.
Your real-world location. The only coordinates we ever see are the spots you tap on the game map as your answers — never your physical location.
Any data gathered by third-party analytics or advertising SDKs, because we ship none.

How your data is used

We use the data above solely to run the features you use: leaderboards, your personal stats and streaks, cross-device sync, Pro entitlement, and (if you opt in) daily reminders. We do not use it for advertising or profiling, and we do not sell or share it with data brokers.

Sharing

We do not sell, rent, or trade your data. We share data only with the infrastructure providers strictly needed to operate the service:

Apple and Google — to verify your identity when you sign in, and Apple to verify your subscription purchase.
Our hosting provider — which runs our server and database on our behalf and may not use your data for any other purpose.

Your display name and rank are visible to other players on the public leaderboard. Nothing else you provide is shown to other players.

Data retention and deletion

We keep your account data while your account exists. You can delete your account and all data associated with it at any time from within the app (Profile → Delete Account); this permanently removes your account record, your guesses and scores, and any push token. Deletion is immediate and irreversible.

Children

Whereupon is not directed at children under 13, and we do not knowingly collect personal data from them.

Changes to this policy

If we change what we collect, we will update this page and its "last updated" date before the change ships.

Contact

Questions about privacy or a deletion request you can't complete in the app: whereuponapp@gmail.com.