Above Board: privacy

Above Board privacy
Effective 2 November 2026.
Provided by Moola. Support: https://project-moola-401d0.web.app/support

Above Board is a block puzzle. Every deal is dealt on your phone from a seed: a sealed deal mixes a random dealer half with the cut you choose, and the daily deal uses the date. No piece is chosen by a server, and the dealer never reads your score, phone, region or purchases.

You can play the tutorial and three deals without an account. They stay on your phone. Signing in creates an Above Board account. Account data includes your Firebase account identifier and the sign-in details you choose: with Sign in with Apple, an email address (which can be an Apple private relay address); with Google, your Google account email, name and profile photo link, which Firebase Authentication stores with the sign-in; or your mobile number if you sign in with a text-message code.

After you unlock Above Board, your finished deals are kept in your account so they survive a reinstall and follow you to another phone. For each deal that is the replay record (the daily date, or the dealer half and your cut, and every move), the score, lines and trays, and when it ended. The server replays each deal before saving it and refuses any that don't check out.

Sharing is something you choose. When you share a deal, the share sheet sends a short text and a link that contains that deal's replay record. Anyone with the link can replay it. The check page at project-moola-401d0.web.app runs entirely in the browser: the replay is in the part of the link after #, which browsers don't send to our servers, and the page loads no tracking, advertising or analytics. Nothing is shared or posted without you starting it, and Above Board doesn't read your contacts.

Google Firebase supplies authentication, Firestore, Cloud Functions, app attestation and hosting. We use these services to keep your account, recover it, verify purchases, prevent unauthorized access and process deletion. Firestore and Cloud Functions run in the Netherlands (Google Cloud europe-west4); other Google services may process data outside your country under the providers' terms and safeguards. Device and app integrity checks and service infrastructure may process technical identifiers, IP addresses and diagnostic request information. Apple and Google provide their sign-in services under their own policies, and Firebase Authentication sends phone sign-in codes by text message to the number you enter. Above Board has no advertising, analytics or crash-reporting service and no external AI.

Apple or Google processes purchases and payment details under its own policies. Above Board receives product, environment, transaction or purchase-reference information and an opaque account association to verify the one-time unlock, restore access, prevent duplicate ownership and handle refunds. We do not receive your full card details. Store test transactions do not grant normal purchase rights.

Your phone stores your deals, the deal in progress, a sealed deal waiting for its cut, your haptics setting and, after you unlock, a copy of your account's deals. Android app backup follows your device settings.

Your deals remain until you delete your account. Deletion removes Above Board's live account records: your deals, purchase status, the billing-account mapping and your Above Board membership. Your shared Firebase sign-in is removed only if no other Moola app uses it. Completed deletion records and inactive membership markers are scheduled to expire after 30 days. Minimum detached store references may be retained for up to 90 days after deletion for refund and fraud reconciliation, then scheduled for removal. The original store keeps its own transaction records under its policies. A purchase linked to a deleted account needs support to recover; it is never silently transferred to a new account. Links you shared earlier keep working, because the replay is inside the link itself.

Our deletion completion confirms removal of the live application records. It does not claim instant erasure of provider infrastructure backups: Firebase describes authentication removal from live and backup systems within up to 180 days after its customer initiates deletion. We cannot remove exports, shared links, device backups or copies on phones that stay offline. Operational cloud logs are intended to keep only technical request and error information, not your deals or credentials, for the configured 30-day period.

You can export your deals and delete your account in the app, all without paying. If you cannot use the app, request deletion from Moola support (https://project-moola-401d0.web.app/support) using the email address or mobile number linked to your account. We confirm ownership without asking for a password or sign-in code and aim to resolve such requests within 30 days. Support correspondence is kept for 12 months after the issue closes, unless an unresolved dispute or legal obligation requires longer. Request access, correction or removal the same way. Your statutory rights and complaint routes remain available. Above Board is not directed at children under 13.

Provider information: https://firebase.google.com/support/privacy, https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy. Changes to collection or purpose will be reflected here before the changed service is released.