‹ Back

Privacy Policy

Last updated: 18 September 2026

Tambola Night: Housie & Bingo (“the app”) is built to respect your privacy. Playing is always free, and signing in is entirely optional — Google or Apple sign-in only backs up your purchases and premium games across devices; nothing in the app ever requires it. The app does collect anonymous usage analytics — which screens get opened and which features get used — so we can see what to fix and what to build next. These are not linked to you and are not linked to your online-room activity. We do not sell your information, and our own analytics never build a profile of you or follow you into other apps or websites. There is one exception, and it is opt-in: if a host chooses to watch a rewarded video, Google serves that ad and receives the data listed under Rewarded video ads. On iOS the app asks your permission to track before the first ad — declining still shows the ad, just an unpersonalised one. Hosts can also make a one-time purchase instead, to add extras like the TV board or extra voices — players never see an ad of any kind.

The app has two ways to play, and they differ in whether anything leaves your device:

  • Paper game (offline) — the app is just a number caller, and no game data leaves your device: not the numbers called, not the tickets, not who won. The app does still check in with our server when it launches, to restore any premium games you have bought and to read a couple of settings — see “Your purchases and premium games” below — and it sends the anonymous analytics described above. Played in aeroplane mode it sends nothing at all, and works exactly the same.
  • Online room — the host's phone and the players' phones need to agree on what has been called, so a small amount of game data passes through our server. That is described in full below.

Information we collect

We do not collect personal information. The app never asks for your real name, email address, phone number, contacts or photos, and it never requests location permission — though an approximate city is inferred from your IP address, as described under “Usage analytics”. The only information ever tied to an identity is what you choose to share by signing in — see “Optional sign-in” below. If you write to support from inside the app, that is composed in your own email app, so you decide what is sent — see “Contacting support” below.

Usage analytics

The app sends anonymous usage and error data to PostHog, on servers in the European Union. This is how we find out which parts of the app people actually use and where things break — without it we are guessing.

What is sent:

  • Which screens you open, and a short list of actions — starting a game, the ball format, joining a room, marking your first number, claiming a prize, connecting a TV, changing a setting, opening the store, starting or finishing a purchase, and watching a rewarded video through to the end.
  • When one of those fails — a purchase that errors, a room that will not join, a number that will not call. Recorded as the fact that the step failed and a short reason; there is no payment information in any of it, and card details never reach us at all — Apple and Google take the payment.
  • Basic device details — app version, operating-system version, device model, and language.
  • Approximate location — country, region and city, worked out from your IP address by our analytics provider. The app never asks for location permission and never reads GPS; a city is as precise as this ever gets.
  • Crash and error reports, so faults get fixed.

What is not sent:

  • No name, email, or contact details. The display name you type when joining a room is never included in analytics.
  • No advertising identifier, and no following you into other apps or websites. That is true of the analytics described here; the optional rewarded video is a separate thing, described under Rewarded video ads.
  • No precise or GPS location. The city above is inferred from an IP address; the app holds no location permission and could not read GPS if it tried.
  • No screen recording and no capture of what you type.
  • No account or profile. Events are recorded against a random analytics identifier that is deliberately different from the room identifier described below, so your analytics data cannot be matched to the games you played.
  • Nothing about which numbers are on your ticket or who won.

The website you are reading this on uses the same anonymous analytics to count page views and store-link clicks.

Optional sign-in (Google or Apple)

Signing in is entirely optional and is never required to play, host, or purchase anything. If you choose to sign in with Google or Sign in with Apple, that provider shares your name and email address (or, with Apple, the private relay address you choose to share) with our authentication provider, Supabase, so your purchases and premium games can be restored if you reinstall the app or switch phones. This is never used for advertising, and it is not linked to your in-game display name or online-room activity.

You can delete that account, and everything attached to it, from inside the app at any time — see Deleting your account below.

Your purchases and premium games

Premium games, TV modes and caller voices are one-time purchases. The payment itself is handled entirely by Apple or Google — we never see your card, your billing address, or your store account. On iPhone and iPad the purchase is confirmed through RevenueCat, which checks the receipt with Apple and tells the app what you own. It does this against its own randomly generated identifier — not your name, your email, or your Apple ID.

So that what you paid for survives a reinstall even if you never sign in, the app keeps a random purchase identifier and sends it to our server (Supabase) when it launches, to fetch the balance held against it — how many premium games and TV modes you have left, and which caller voices you own. That balance is all that is ever stored against it. The identifier is:

  • generated at random on your device — not derived from any hardware ID, advertising ID, or store account;
  • different from both the analytics identifier described above and the room identifier described below, so your purchases cannot be matched to your usage analytics or to the games you played;
  • never used for advertising, and never shared with anyone.

Because its entire job is to outlive a reinstall, this one is kept in your device's secure keychain. That means on iPhone and iPad — unlike everything under “Data stored on your device” below — deleting the app does not erase it; that is precisely what lets your purchases come back. On Android it is removed when you uninstall. If you want it cleared on iOS, or the balance held against it deleted, email us and we will do it.

Rewarded video ads

Hosts can optionally watch a short rewarded video, served by Google AdMob, to add an extra for that game — like the TV board or a bigger room — at no cost. This is always opt-in and never required: a host who never taps “watch a video” never sees an ad, and players never see one at all, at any time. Nothing below happens until a host taps that button — the ad code does not even start up before then.

When it does run, Google receives, as its own controller rather than on our behalf:

  • Your advertising identifier — the IDFA on iOS (only if you allow tracking) or the advertising ID on Android.
  • Your IP address, which Google uses to estimate the device's approximate location for ad serving.
  • Ad interaction and app activity — that the ad was requested, shown, watched or dismissed — and diagnostic information such as app launch time and energy usage.

On iOS the app asks for App Tracking Transparency permission before the first ad request. Allowing it means Google may use your advertising identifier to personalise ads, which does involve recognising your device across other apps — that is exactly what the prompt is asking about, and it is the one place this app does it. Declining still shows the ad, just an unpersonalised one, and you lose nothing in the game either way. Google's own description of what the ads SDK collects is in its privacy policy.

Online rooms — what is sent to our server

When you host or join an online room, the following is sent to our hosting provider (Supabase, on servers in India) so that everyone's phone can follow the same game:

  • The display name you type when joining. This is free text and it is shown to everyone else in the room. You may enter a nickname or a single letter — nothing checks or requires a real name, and the app does not verify it.
  • A random room identifier. Generated on your device the first time you join a room, so the room can tell players apart and let you rejoin after a disconnection. It is a random value, is not derived from any hardware ID or advertising ID, is not used for tracking or advertising, and is not linked to you personally.
  • Game data. The room code, which game and prizes are being played, the numbers called, the tickets in play, and prize claims and results.

That is the complete list. No contacts, no location, no device fingerprint, no advertising identifier, and no message content — the app carries numbers, not conversations.

How long online room data is kept

Rooms are short-lived. A room closes when the host ends the game, and in any case expires 48 hours after it is created — past that point it can no longer be joined, rejoined, or resumed by anyone.

Expired rooms are then deleted automatically. A scheduled job runs every hour and erases every room past that 48-hour mark, together with everything belonging to it — the room code, the numbers called, the tickets, the claims, and the display names people typed when they joined. In practice a room is gone within 49 hours of being created. Nothing is archived, and none of it is analysed or used for any purpose beyond running the game it belonged to.

If you want a room removed sooner, end the game as its host, or email the address at the bottom of this page with the room code and we will delete it straight away.

Data stored on your device

To make the app work, some information is saved locally on your device only:

  • Your settings — sound, haptics, theme, accessibility, announcer voice, auto-call speed.
  • The in-progress game and the numbers you have marked, so you can resume if you leave mid-game or lose connection.
  • The display name you last used, so you do not have to retype it.
  • The random room identifier described above.
  • Whether the app has already asked you to rate it, so that it asks once and never nags. The rating itself is handled by Apple or Google in their own prompt; we are not told what you chose, or whether you rated at all.

This stays on your device, is not readable by us, and is removed when you delete the app. The one exception is the purchase identifier described above, which is deliberately kept in the keychain so your purchases survive a reinstall.

Permissions

  • Camera — used only to scan a room's QR code when joining a game. The camera preview is processed on your device to read the code; no image, photo, or video is stored, uploaded, or sent anywhere. You can decline this and type the room code instead.
  • Local network — used only to find Chromecast and Google TV devices on your Wi-Fi so the board can be shown on a TV. No microphone access is requested or used.
  • Vibration / haptics — for tactile feedback when a number is called.
  • Audio playback & text-to-speech — to announce numbers aloud using your device's built-in voices.

Children's privacy

The app is suitable for all ages and collects no personal information from anyone, including children. The anonymous usage analytics described above contain no personal information and are not used for advertising or profiling. Please note that a display name typed when joining an online room is visible to everyone else in that room, so we suggest children use a first name or nickname only.

Third-party services

  • Supabase — hosts the online-room service described above, and (only if you choose to sign in) your authentication and restorable purchase/premium-game records. See the Supabase privacy policy.
  • PostHog — receives the anonymous usage and error data described above, on servers in the European Union. See the PostHog privacy policy.
  • RevenueCat — confirms in-app purchases on iPhone and iPad and tells the app what you own, against a random identifier. The payment is taken by Apple, not by RevenueCat and not by us. See the RevenueCat privacy policy.
  • Google AdMob — serves the optional rewarded video ads described above. See the Google Privacy Policy.
  • Google Sign-In and Sign in with Apple — used only if you choose to sign in, to back up purchases and premium games across devices.
  • Google Cast — used only if you choose “Send to TV”, to show the board on a Chromecast or Google TV.
  • Your operating system's built-in text-to-speech voices, and open-source fonts (Baloo 2 and Nunito, SIL Open Font License). These run on-device and receive no personal data.

Deleting your account

If you signed in, you can delete your account and everything attached to it from inside the app: Settings → Account → Delete account. Deletion is immediate and cannot be undone. There is no “deactivated” state and no waiting period.

That removes:

  • your sign-in record, including the email address the provider shared with us;
  • your server-side purchase backup — premium games, TV modes and owned caller voices;
  • if you signed in with Apple, the app's token grant on your Apple ID, revoked through Apple's own API rather than only deleted on our side.

It does not affect your purchases themselves: those belong to your App Store or Google Play account, so voices you own can be brought back with Restore Purchases and premium games already on your phone are untouched. If you no longer have the app installed, email us instead and we will delete the account within 7 days. Full details, including what is retained and why, are on the delete-your-account page.

Your rights

Signing in is optional; if you don't, we hold nothing that identifies you — only whatever display name you chose to type, alongside a random identifier and the state of a game, and only for as long as that room lives. You can end a room at any time as its host, delete the app to clear everything stored on your device, or email us with a room code to have it removed before the automatic deletion gets to it.

Contacting support

Settings → About → Contact support opens your own email app with a message already addressed and filled in. The app transmits nothing itself — it hands the draft to your mail client, and nothing reaches us unless you press send.

The draft carries the details a bug report needs: app version and build, operating-system version, device model, which game style you are playing, whether you are signed in, and the purchase identifier described above — that last one so a report about a missing purchase can be matched to the right balance. They sit below a line in the body of the email, where you can read them and delete any of them before sending. Your message and your email address reach us the same way any email you send does.

Changes to this policy

If this policy changes, the “Last updated” date above will change accordingly.

Contact

Questions about this policy, a room you want deleted, or an account deletion — email javvajikiran167@gmail.com. Bug reports sent with “Contact support” in the app arrive at kiran.javvaji.apps@gmail.com. Both are read by the same person; either one reaches us.

Home How to Play Delete your account