Privacy Policy
Last updated: July 21, 2026
Bolitas is an app by Pewén Labs SpA (Santiago, Chile). This policy explains what data we process and why. The short version: only what the game needs — no ads, no trackers, no selling data.
Data we process
- Anonymous game account. Opening the app creates an account with a random identifier. No email, real name or phone required.
- Apple backup (optional). If you choose "Continue with Apple" to keep your progress, we receive your Apple identifier and, if you share it, your name. We don't use your email.
- Display name. The nickname your rivals see.
- Game data. Matches, shots, results, marble balance and history, skins, rankings and leagues. Required for multiplayer and server-side validation of every move.
- Notifications. If enabled, we store your device token to tell you when it's your turn. You can turn them off anytime in iOS.
- Purchases. Payment is processed by Apple — we never see your card. We store the transaction identifier to credit your marbles and prevent duplicates.
- Language. To show the app and notifications in your language.
What we don't do
- No advertising or ad networks.
- No third-party trackers or commercial analytics.
- We never sell or rent your data.
Infrastructure providers
We rely on third-party services that process data on our behalf:
- Supabase (database and authentication; servers in the US, AWS us-east-1).
- Apple (in-app purchases and push notification delivery).
- Expo (push notification service).
- Sentry (error diagnostics: if the app crashes, we receive a technical report without email or IP address).
- Cloudflare Turnstile (invisible anti-bot verification at account creation; governed by Cloudflare's privacy policy and its Turnstile Privacy Addendum).
Retention and deletion
We keep your data while your account exists. You can delete your account and all its data directly in the app (Play with friends → delete account) — deletion is immediate and irreversible. You can also request it by writing to contacto@pewen.dev; we process it within 30 days.
Children
Bolitas is rated 13+. We do not knowingly collect data from children under 13.
International transfers
Data is stored on servers in the United States (providers listed above) with industry-standard security measures.
Changes
If this policy changes, we will publish the new version on this page with its update date.
Contact
Pewén Labs SpA · Santiago, Chile · contacto@pewen.dev