Nine Months — Privacy Policy
Last updated: [date of publication]
Nine Months is a daily puzzle game made by [legal name of the developer] (“we”). This policy explains what the game keeps, where, and why. The short version: the only personal detail we ask for is your due date, and it never leaves your phone.
What stays on your phone
Everything you do in the game is kept on your device:
- Your due date, and the date you tell us your baby arrived if you choose to. Both are kept in your phone’s secure storage (the iOS Keychain). They are not sent to us or to anyone else, and they are not included in a cloud copy, an analytics event, a crash report or a shared image.
- Your progress: which puzzles you have finished and when, your stickers, your scrapbook decorations, and your settings.
- Your journal entries.
Uninstalling the game removes this data from your phone. Your due date may also be included in an encrypted backup of your phone that you make with Apple’s own backup tools.
What we never collect
No name, no email address, no phone number, no contacts, no photos, no location, no health or symptom data, and no advertising identifier. The game has no ads and no ad or tracking SDKs, and we do not sell or share your data for advertising.
Things that leave your phone, and why
Purchases
Purchases are made through Apple’s App Store and handled by our payments provider, RevenueCat. RevenueCat assigns your installation a random, anonymous identifier and records your purchases against it, so that the Journey Pass can be restored. We never give RevenueCat your name, email or due date. Apple handles payment details; we never see them.
Gifts
When you buy the Journey Pass as a gift, our server creates a gift code, linked to the buyer’s anonymous RevenueCat identifier, so the buyer can see their codes. When someone redeems it, the code is linked to the redeemer’s anonymous identifier so the Pass can be given to them. Gift codes expire two years after purchase. To slow down guessing, our server counts redeem attempts per network address; it stores only a one-way scrambled form of the address, never the address itself, and deletes it within a few hours.
Keeping a copy safe (optional, off by default)
If you turn on “Keep a copy safe”, you sign in with Apple so your scrapbook can come back on a new phone.
- We ask Apple for no name and no email. Apple gives us only an anonymous identifier for your account.
- Before anything leaves your phone, your progress, stickers, decorations and journal are encrypted on your phone with a key kept in your iCloud Keychain. We store only the encrypted copy. We cannot read it, because we never have the key.
- The copy does not contain your due date or birth date.
- You can turn it off at any time in Settings, which deletes the copy and your account from our server and revokes the app’s Sign in with Apple access.
Reminders
If you turn on the daily reminder, it is scheduled on your phone. We do not use push notifications and do not collect a notification token.
App updates
To receive game updates without a new App Store version, the app checks our update service (Expo) when it opens. That check includes a random identifier for the installation and the app version. It contains nothing about you or your game.
Sharing
Nothing is shared unless you share it. A shared scrapbook page shows the week number, that week’s illustration and your stickers. It shows no dates and no journal text.
Analytics and crash reports
We use PostHog, hosted in the EU, to count how the game is used: for example, that a puzzle was started or finished, and on which week of the journey. These events carry a random identifier for your installation, your device model, operating system, language, time zone and the app version, and a pregnancy week number. They never carry a date, your journal, or anything you type. They are not linked to your name, email or Apple account, because we do not have those.
We use Sentry, hosted in the US, to receive reports when the game crashes, so we can fix it. Crash reports carry technical details about the device and the app, and are set up to leave out dates and personal details.
Deleting your data
Settings → Pause my journey → Delete everything removes all your game data from your phone, including your due date. When your phone is next online, it asks our server to delete everything linked to you: your cloud copy and account (revoking Sign in with Apple), your purchase record at RevenueCat, and your link to any gift codes. Our server retries until this is done and keeps only a scrambled record that a deletion happened, so it can prove it.
Turning off “Keep a copy safe” deletes just the cloud copy and account.
Purchases you made through Apple remain in your Apple account’s purchase history; Apple controls that record.
How long we keep things
| Data | Kept |
|---|---|
| Encrypted cloud copy and account | Until you turn cloud save off or delete everything |
| Gift codes | Until they expire (two years), and afterwards as a record of the sale; links to you are removed when you delete everything |
| Scrambled network address for redeem limits | A few hours |
| Record that a deletion was completed | Kept, without any identifier that leads back to you |
Where it is processed
Our server runs on Cloudflare (Cloudflare Workers, D1 and R2). Purchases are processed by Apple and RevenueCat, updates are delivered by Expo, usage analytics by PostHog (EU) and crash reports by Sentry (US). These providers may process data outside your country, under their own privacy terms.
Children
Nine Months is not directed at children and we do not knowingly collect data from them.
Your rights
Depending on where you live, you may have the right to access, correct or delete your data, or to object to how it is used. Because almost everything stays on your phone, you can see and delete it there yourself. For anything else, write to us at [privacy contact email]; we will answer within 30 days.
Changes
If we change how the game handles data, we will update this page and the date at the top before the change reaches the app.
Contact
[Legal name of the developer], [postal address], [privacy contact email]
Nine Months is a game, for fun and not medical advice.