Privacy Policy
Last updated: 13 November 2026
Who we are
You Won't is run by its developer, the seller named on the app's App Store page, based in the United Arab Emirates. They are responsible for your data under this policy. Contact: support@youwont.app
What we collect
When you sign in. We use Sign in with Apple or Google. We receive a user
identifier, your email address, and the name you chose to share. If you use
Apple's Hide My Email, we only ever see the relay address — we never get your
real one. You start with a neutral username (like player3f9a0c12), which you
can change; it is never made from your email address.
What you create. The games you make, the dares you write and the ideas you save, the attempts you announce or join, who witnessed them, and how they were ruled. Your username and display name. Your friends, the people you block, and the reports you file. If you leave a game, your bingo card and what you did in it are kept, so the other players' scores stay right and you get the same card back if you rejoin; they are deleted when you delete your account.
Your agreement to the terms. Which version of the terms you agreed to in the app, and when.
Your device, if you turn on notifications. A push token, so we can tell you when someone needs a witness. Nothing else about your device. The token is removed when you sign out on that device or turn notifications off there (your other devices keep theirs), and if someone else signs in on the same phone it moves to their account.
Nothing else. No advertising identifiers, no location, no contacts, no analytics SDKs, no tracking across other apps or websites. We do not sell data and there is nobody to sell it to.
What we do with it
- Run the game: show your games to the people in them, and nothing to anyone else.
- Send the three notifications described in the app's settings. Our server sends them automatically when, in a game you're in, someone announces an attempt, volunteers to watch yours, or rules on yours.
- Act on reports and blocks, which means a human reading reported content.
- Keep the service working and secure.
That is the whole list. We do not profile you, target you, or train anything on your dares.
Who can see what
- The people in a game with you see your display name, your username, the dares you wrote in it, and your attempts and results.
- Your friends, and anyone with a friend request to or from you, see your display name and username.
- Anyone signed in can find you by your exact email address, or by typing at least 3 characters of your username. A search shows only your display name and username. Nobody can browse or list users, and nobody can see your email address.
- Someone you have blocked sees none of your content, and you see none of theirs. Neither of you is told.
- Nobody else. Your profile is visible only to you, your friends, people with a friend request to or from you, and people in a game with you. There is no public profile and no web directory.
Who we share it with
Our hosting provider, Supabase (database, authentication, functions), and Expo (push notification delivery). Both process data on our instructions. Apple and Google handle their own sign-in and see only that you signed in.
We will disclose data if we are legally required to, and we will tell you unless we are legally barred from doing so.
How long we keep it
Until you delete your account. Then it goes — see below.
Reports you filed are kept after you delete your account, with your account removed from them: we keep what was reported, the reason you picked and anything you wrote with it, and when, but not who filed it. Reports other people filed about you are also kept, as a record, although the dares they were about are deleted with your account. This is so a pattern of abuse isn't erased by someone closing their account.
Server logs are kept for 7 days.
Deleting your account
Settings → Account → Delete my account, inside the app. It is immediate and it is permanent. Your profile, games you created, dares you wrote, saved ideas, attempts, witnessing, verdicts, friendships, blocks and push tokens are deleted. Reports are the exception described above.
If you signed in with Apple, we also revoke our access at Apple, so the app disappears from your Apple ID settings.
Shared content behaves as you would expect: a game you created is removed, and dares you wrote inside someone else's game are removed with your account.
Your rights
Depending on where you live you may have the right to access, correct, export, or delete your data, to object to processing, and to complain to a regulator.
Two of these you can do yourself, in the app, at any time:
- Get a copy: Settings → Account → Export my data. It gives you your profile, the games you're in, the dares and ideas you wrote, your attempts, the attempts you witnessed and ruled on, your friends and blocks, and the reports you filed, as text you can save or send.
- Delete: Settings → Account → Delete my account. Immediate.
For anything else, write to support@youwont.app and we will respond within 30 days. Your username and display name you can correct yourself in Settings → Account.
If you are in the EEA or UK, our lawful basis is performance of a contract (to run the game you signed up for) and legitimate interests (safety, abuse prevention, security).
Children
You Won't is not for children. You must be 18 or older to use it. We do not knowingly collect data from anyone under 18. If you believe someone under 18 is using the app, write to support@youwont.app and we will remove the account.
Security
Data is encrypted in transit, and our database host encrypts stored data. Access to the production database is limited to people who need it. Every table is behind row-level security, so a query can only return rows the signed-in user is entitled to.
We are a small operation and cannot promise perfect security. If you find a vulnerability, write to support@youwont.app — we would rather hear from you than not.
Changes
If we change this in a way that matters, we will tell you in the app before it takes effect.
Contact
support@youwont.app