Ludexio Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how Ludexio Tally (the “app” or “Services”) handles your information. Ludexio Tally is a mobile app for tracking your board game collection and keeping score, operated by Ludexio LLC, doing business as Ludexio Games (the party responsible for your data). Ludexio Tally was built to keep your data yours: most of it stays on your device and in your private iCloud account, and it is never sold or used to advertise to you.

Questions can be sent to [email protected].

Table of contents

1. What information is collected
2. How your information is used
3. When and with whom information is shared
4. Analytics
5. How long information is kept
6. How your information is kept safe
7. Children’s privacy
8. Your privacy rights
9. US state privacy rights
10. Do-Not-Track
11. Updates to this policy
12. How to get in touch

1. What information is collected

Information you provide

• Profile: a display name, an optional username (@handle) so friends can find you, and an avatar (a color or a photo you choose). Other people using the app can find your profile by searching for your name or @handle, or with your friend code, and see your display name, @handle, and avatar color. Your profile photo is shown to friends you connect with. Nothing else about you is shown to people you have not connected with.
• Your content: the games you add, plays you log, scores, winners, the names of the people you played with (including people who do not use the app), teams, roles or factions, who went first, how long a session ran, games you lend and who borrowed them, your ratings, and any notes you keep. This is used for your own stats and future recap features. It stays on your device and in your private iCloud unless you share it, as described below.
• Your shelf and ratings (shared by default): friends you have connected with can see the games on your shelf and the star ratings you give games. Both are on unless you turn them off in Settings, and turning them off removes them. Your library and wishlist are shared only if you turn that on.
• Games you share with the people who played (on by default): when you finish a game, the app can send it to friends who sat at that table so they can add it to their own history. What they receive is the game, the date, every seat’s name, score, result, team and role, who went first, how long it took, any notes on that play, and its state and country if one was saved (see “Where you play”). It reaches only friends who were seated in that game. Sending and receiving are separate switches in Settings and both are on unless you turn them off. A game waiting to be accepted is deleted from our servers after 30 days.
• Reactions: if you react to a friend’s badge or challenge, they can see which reaction you chose.
• Game Plans, Leagues, and Tournaments: if you create or join one, the people in it can see its name, date and time, the games on its list, who is invited and who said they are coming, votes, notes the host adds, standings, and results. These are deleted from our servers automatically: a Game Plan 30 days after its date (7 days after it is cancelled), and a League or Tournament 60 days after it ends.
• Live scoring: when you host or join a live game, the players’ names and scores are shared with everyone in that game, and with people watching it. Live sessions are deleted from our servers within about a week after the game ends.
• Badges and challenge pins: badges you earn and challenges you finish are worked out on your device from the plays you log. If you turn on badge sharing, friends you have connected with can see which badges you have earned and which challenges you finished. From those, their app works out the next tier of each badge, so they can see what you are working toward, but they never see the counts behind them, how close you are, or your place badges (see “Where you play” below). You can hide an individual pin from that view at any time, and turning the setting off removes the whole thing.
• Best scores (optional): if you turn on Let Friends See My Best Scores, friends you have connected with can see your best score in each game you have played, with expansions counted under their base game. Only that one number per game is shared: never your other scores, when you played, or who you played with. It is off unless you turn it on, and turning it off removes it.
• Win rate (optional): if you turn on Let Friends See My Win Rate, friends you have connected with can see your overall win rate and your total wins, losses and ties. Only those three counts leave your device, never which games, when, or who with. Turn it off and they are removed.
• Recent plays (optional): if you turn on Share My Recent Plays, friends you have connected with can see which games you played in the last two weeks, how many times, the week and the day of your most recent play of each game and of your most recent win, and how many of those plays you won. Never your scores, the time of day, who you played with, or where you played. It is off unless you turn it on, and turning it off removes it; plays older than two weeks drop off on their own.
• Challenge codes: some challenges are private and are unlocked by typing or scanning a code from a shop or an event. Redeeming a code tells the backend that a code was redeemed; it does not tell us where you are. The app does not use location for this.
• Where you play (optional): Save Where I Play is on unless you turn it off, but nothing is recorded unless you also allow location access when the app asks. With both, the app records the state or province and the country where you score a game, so it can award place badges. It never records your exact location, coordinates, city, or address. Your device’s approximate location is sent to Apple’s location service once to look up those two names, and is then discarded; we never receive it. The state and country are saved with that play on your device and in your private iCloud account, where only you can see them. When a game is shared with friends who played in it, its state and country go with it, so they see where you played; that passes through our servers on the way to them. They are never included in your activity, your badge sharing, data exports, or analytics, and are never sent to any third party. You can turn this off at any time in Settings, under Privacy, which stops saving and sharing new places on all your devices (places already saved stay with those plays), or withdraw location access in your device settings. Deleting your account deletes these records with the rest of your play history.
• Sign in with Apple (optional): if you attach Sign in with Apple for account recovery, Apple provides your name, an email address (which may be Apple’s Hide My Email address if you chose to hide yours), and an identifier for your Apple account that is unique to Ludexio and cannot be used by any other company. These are stored so your account can be recovered if you lose access to your iCloud account, and so we can contact you about your account and occasional Ludexio Tally news. To make recovery work, that Apple identifier is kept in the part of iCloud that the app shares between its users; it is never shown to other people and reveals nothing about you on its own. You can ask us to stop sending news at any time by emailing [email protected], and you can remove all of it by deleting your account in Settings, which erases it from our systems. The app works fully without this.
• Feedback: if you send feedback from inside the app, the message, any contact details you choose to type in, the app version, your device model and iOS version, and a random tag for your install are received. No name is attached.
• Game suggestions: if you suggest a game for the catalog, its title, publisher, player count, playing time, year, any note you add, and the app version are received with your account, and a copy is emailed to us so it can be reviewed.
• Barcodes: when you scan a game’s barcode, the app checks it against a shared list of barcodes and the games they belong to. When you confirm a match, the app adds your vote for it to that list. To count each person once, the vote is kept with your account if you’re signed in, or otherwise with a one-way scrambled value made from your connection (never the address itself). Your name is never stored with it. That record is deleted 30 days after your latest vote for that barcode (a vote made while signed in also goes when you delete your account), and after that only the total count stays. If the barcode is not on the list, the app looks it up with UPCitemdb, a product database, which receives the barcode number and, like any website, your device’s IP address.
• Subscriptions: if you subscribe, the purchase is made through Apple. We receive whether you are subscribed, which plan, its renewal or expiry dates, and your purchase history, through RevenueCat, linked to the identifier of your iCloud account. We never see or store your payment details.
• Reports: if you report someone, the reason you chose, the name you saw for them, an identifier for them, a random tag for your install, and the app version are received. If you are signed in with Apple, the report is also linked to your account, so you can follow it under Your Reports in Settings, on any of your devices. Either way, the app keeps a random receipt for each report on your phone and sends only a scrambled (hashed) copy of it, so that your phone, and nobody else, can look the report up even when you are not signed in with Apple. The person you report is never told who reported them, and someone you block is not told either.
• If your account is suspended: a record is kept of the reason, the note the reviewer wrote to you, and when the suspension starts and ends. That statement is emailed to the address on your account (the one Sign in with Apple provided, which may be Apple’s Hide My Email address). It never includes who reported you.
• Communications: if you send an email, its contents are received.

Information collected automatically

• Usage analytics: pseudonymous events (for example, “a play was logged”) tied only to a random, per-install identifier and a random identifier for each time you open the app, never to your name. They can include the screen you were on, the catalog number of a game, and similar details about what you did. Analytics are on unless you turn them off in Settings, under Privacy.
• Community score statistics: for each scored play you log (including plays logged before this feature existed), the game, the week it was played, each seat’s score and whether it won, lost, or tied, which seat was yours, and a few facts the app already records about the game: whether it was cooperative (and whether the table won), the version or expansion played, how long it took when the app timed it, which seat went first, team groupings shown as numbers, and the faction or character for each seat when it comes from the app’s built-in list for that game. These are tied only to a random stats identifier that the app creates and keeps in your private iCloud account, so it is the same on all your devices. They never include names, team names, factions or characters you typed yourself, notes, photos, the day or time, where you played, or your account. We do not link the stats identifier to your account or use it to identify you. Because some of the same plays also pass through our servers when you share them with friends or score them live, someone with access to our database could in principle work out whose identifier is whose, so we treat this as personal data and protect it like the rest. We use them for statistics across many plays (for example, the average winning score for a game) and, in the future, for leaderboards that you would have to choose to join. Deleting a play removes it, deleting your account removes all of them, and the same switch as analytics turns this off.
• Device and diagnostic data: app version, device and operating-system type, and crash and freeze reports (including the technical record of what the app was doing), tied to the same random install identifier as analytics and used to keep the app working and to improve it. The analytics switch turns these off too.
• Push notification tokens: if you allow notifications, the address Apple gives your device for notifications is stored with your notification choices, so friend requests, shared games, and live-game updates can reach you. Notifications can show a friend’s name and the game’s title, and live-game updates on your lock screen show players’ names and scores. Tokens are deleted when you sign out, and after 60 days without use.
• IP address: processed transiently by the backend to deliver requests, and to limit spam and guessing on what anyone can send without an account (analytics, feedback, reports, crash reports, barcode votes, live game codes and challenge codes): for that, only a one-way scrambled value derived from it is kept, never the address itself, and it is deleted within about two hours. The one exception is a barcode vote, described above, whose record is kept for 30 days so each person counts once. It is not used to build a profile of you.

App permissions

The app may ask for these device permissions. You can change them at any time in your device settings.

• Camera: to scan a game’s barcode, or a QR code (to join a live game, add a friend, or unlock a challenge).
• Calendar (optional): if you turn on Game Night Reminders, the app looks for upcoming events so it can remind you before you play. Your events are read on your device and are never sent anywhere.
• Push notifications: for friend requests, shared plays, and live-game updates.
• Location (optional, approximate, while using the app): asked the first time you start scoring a game while Save Where I Play is on (it is unless you turn it off), to save the state or province and country of that play for place badges. Saying no, or turning Save Where I Play off, is all it takes for nothing to be saved. See “Where you play” above.
• Photos: if you choose a profile photo, Apple’s photo picker lets you pick one picture. The app sees only that picture, never the rest of your library. It is shrunk and stored with your profile, where your friends can see it.

Ludexio Tally does not request access to your contacts or microphone, and never asks for your precise location.

2. How your information is used

• To provide the app: store your collection and plays, sync them privately across your devices, and show your stats.
• To run the social features you choose to use: letting friends find you, sharing what you choose to share, live scoring, Game Plans, Leagues, Tournaments, and notifications about them.
• To recover your account, and to contact you about it, including when an account is suspended.
• To provide subscriptions you buy, and to restore them on your devices.
• To identify games from their barcodes and keep the game catalog complete.
• To limit spam and abuse, for example by capping how often something can be sent.
• To keep the app safe: moderating user content, letting you block and report other users, showing you what was decided about your reports, and telling anyone whose account is suspended why and how to appeal.
• To improve the app: understanding which features are used, through pseudonymous analytics.
• To show statistics across many players’ plays, such as average winning scores, through pseudonymous score statistics.
• To respond to your support requests.
• To comply with the law and enforce the app’s terms.

If you are in the EEA or UK, the legal bases are performing the agreement with you (providing the app), your consent (which you can withdraw), legitimate interests (improving and securing the app), and compliance with legal obligations.

3. When and with whom information is shared

Your personal information is not sold. It is shared only in these cases:

• With other users. Your display name, @handle, and avatar color can be found by other people using the app. Friends you connect with can also see your profile photo, and:
  • your shelf and your game ratings, unless you turn those off;
  • games you play together, which are sent to the friends who sat at that table, unless you turn that off;
  • your library, wishlist, badges, best scores, win rate, and recent plays, only if you turn each of those on;
  • your reactions, and what you add to Game Plans, Leagues, and Tournaments you are part of.
  During live scoring, players’ names and scores are shown to everyone in that game and to people watching it. If you have never made an account, your profile and what you share are kept in the part of Apple’s iCloud that the app shares between its users, instead of on our servers. Blocking someone stops all of it in both directions.
• With service providers that process data for us:
  • Apple: iCloud storage, push notifications, Sign in with Apple, and the location service that turns an approximate location into a state and country. Your collection, plays and stats sync through your own private iCloud database, which Ludexio cannot read.
  • Supabase: the backend behind accounts and profiles, friend connections, anything you share, live games, Game Plans, Leagues, Tournaments, the game catalog, feedback, reports, crash reports, score statistics, and analytics.
  • TelemetryDeck: privacy-focused, pseudonymous analytics.
  • RevenueCat: keeps track of subscriptions bought through Apple, so the app knows which features you have.
  • Resend: delivers the emails we send, such as a suspension notice to you, and alerts to us about reports and game suggestions.
  • Cloudflare: hosts our website, including the links that open the app for live games and friend invites.
  • UPCitemdb: looks up a barcode the app does not recognize (see “Barcodes” above).
• Game catalog source. Game details and artwork come from BoardGameGeek under their API license. Our servers fetch game details using only the game’s catalog number. Box art loads straight from BoardGameGeek’s image servers, which, like any website, see your device’s IP address. No other information about you is sent to them.
• Legal and safety. Information may be disclosed if required by law, or to protect users.
• Business transfers. If the app is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that deal.

4. Analytics

Ludexio Tally records pseudonymous usage events to understand what to improve. These contain no name, and are tied only to a random, per-install identifier that is not linked to your account. A first-party backend (Supabase) and TelemetryDeck are used for this. Analytics are on unless you turn them off, at any time, in Settings, under Privacy; when they are off, nothing is sent and TelemetryDeck is never started. The same switch covers crash reports. Ludexio Tally shows no ads, runs no advertising analytics and collects no advertising identifier.

The same switch covers community score statistics (see what is collected). Those are stored on the first-party backend (Supabase) under a random stats identifier kept in your private iCloud account, not under your account, your name, or the analytics identifier. When another player at the same table also uses the app, the play is stored once and each of you is linked only to your own seat.

5. How long information is kept

Your data stays in your iCloud account and on your device until you delete it or close your account. Your profile, friends, and what you share stay on our servers until you turn that sharing off or delete your account. Other things are removed on a schedule:

• Live games: deleted within about a week after the game ends, with the players’ names.
• Games waiting for a friend to accept: deleted after 30 days.
• Game Plans: deleted 30 days after the planned date, or 7 days after one is cancelled. Leagues and Tournaments: 60 days after they end.
• Notification tokens: deleted after 60 days without use.
• The scrambled value made from your IP address to limit spam: deleted within about two hours.
• The record kept with a barcode vote (your account, or a scrambled value from your connection): deleted 30 days after your latest vote for that barcode, and a vote made while signed in also goes when you delete your account. The vote count stays.
• Reports you file about another player: kept for a year after they’re reviewed, then deleted. If you delete your account before then, the link between the report and your account is removed at once; the report itself stays until that year is up, because it is a record of a safety event, and the receipt on your phone is deleted with the app’s data.
• The record of why an account was suspended: kept until one year after the suspension ends, or until that account is deleted.
• Score statistics: kept until you delete the play or your account; a play that another player at the same table still has stays for them, with nothing left linking it to you.
• Feedback, game suggestions, and your Sign in with Apple name and email: kept until you delete your account, or until we no longer need them.
• Analytics events and crash reports: deleted from our servers 13 months after they are sent. TelemetryDeck keeps its own copy of analytics under its privacy policy. They are tied only to a random install identifier, not to your account, so they cannot be found and removed when you delete your account. Before they are deleted, they are combined into monthly totals, such as how many installs logged a play that month or how many crashes a version had. Those totals contain no identifier of any kind and cannot be traced to any person or device, so they are kept.
• Purchase records: Apple and RevenueCat keep records of subscriptions you bought, as they are required to for tax and accounting, even after you delete your account.
• Emails we send or receive are kept by our email providers for a limited time, and copies of deleted data can remain in our providers’ backups until those are replaced in their normal cycle.

When there is no longer a legitimate need to process information, it is deleted or anonymized.

6. How your information is kept safe

Reasonable technical and organizational measures are used to protect your information, and most of your data is held in your own private iCloud account. However, no method of transmission or storage is 100% secure, so absolute security cannot be guaranteed.

7. Children’s privacy

Ludexio Tally is not directed to children under 13, and personal information is not knowingly collected from anyone under 13. By using the app you confirm you are at least 13. If you believe a child under 13 has provided information, contact [email protected] and it will be deleted.

8. Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to withdraw consent. You can exercise most of these directly in the app:

• Turn iCloud sync and each sharing option on or off in Settings.
• Turn analytics off in Settings, under Privacy.
• Export your games, plays, and collection as a file from Settings. For a copy of anything else we hold about you, email us.
• Delete any play, reset your stats, or block and report other users.
• Delete your entire account and data from Settings, under Delete Account. This removes your profile, friends, everything you shared, your Sign in with Apple details, feedback, and score statistics from our servers, and your data from your private iCloud and your device. Your other devices then remove their copies too: a note holding only the date of the deletion stays in your own private iCloud so they know the account was deleted. You can remove that note in iOS Settings (Settings > your name > iCloud > Manage Storage > Ludexio Tally > Delete Data). What stays is listed under How long information is kept: pseudonymous analytics and crash reports, reports you filed (no longer linked to you), purchase records at Apple and RevenueCat, and games you already sent to friends, which are now part of their history.

You can also email [email protected]. If you are in the EEA or UK, you have the right to lodge a complaint with your local data protection authority.

9. US state privacy rights

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of targeted advertising, the sale of personal information, and certain profiling. Ludexio Tally does not sell personal information, does not share it for targeted advertising, and does not use it for that kind of profiling.

Categories of personal information

The categories below come from US state privacy laws. The examples are illustrative and do not all apply here; the right column shows what Ludexio Tally actually collects.

To exercise your rights, email [email protected]. Requests are verified using information already associated with your account. If a request is declined, you may appeal by replying to the response. You have the right not to be treated differently for exercising these rights.

10. Controls for Do-Not-Track

Most browsers and some devices offer a “Do-Not-Track” (DNT) setting. Because there is no finalized standard for DNT signals, Ludexio Tally does not currently respond to them.

11. Updates to this policy

This policy may be updated from time to time. Material changes will be shown here with a new “last updated” date.

12. How to get in touch

For questions or to exercise your rights, email [email protected].

The party responsible for your data is:

Ludexio LLC, doing business as Ludexio Games
1717 N St, Ste 1
Washington, DC 20036
United States

Use of the app is also covered by the Terms of Use.