Jigsaw: Photo Puzzle Maker Privacy Policy

Signing in is required only when you save a puzzle, invite a friend, or join a puzzle from an invite link.

• Sign in with Apple is the only sign-in method. We request no scopes, so we do not ask for and do not receive your name or email address.
• Our server verifies the identifier Apple provides for you (a pseudonymous ID issued by Apple), issues its own user identifier and stores the two linked together. It also stores a token issued by Apple so that the Sign in with Apple link can be revoked when you delete your account (declared on the App Store as User ID under Data Linked to You, purpose App Functionality).
• Your nickname can be set only once and cannot be changed later. It is kept unique across all MusicFlow apps.
• We record when the account was created, and the app used (Jigsaw), its version, the platform, and when you first and last used it.
• This account is shared with other MusicFlow apps that use Sign in with Apple (such as Cube). Signing in with the same Apple ID lands on the same account.
• The session token that keeps you signed in is stored in this device's Keychain and is not synced to iCloud. Our server stores only a hash of the token, and it expires 365 days after it was last used.
• Neither your user identifier nor your nickname is ever sent to the analytics tool (Firebase Analytics).

When you save a puzzle, or share one so you can invite someone, the following is sent to our server (api.musicflow.tokyo) and stored linked to your account.

• The photo the puzzle is made from: the area you chose, reduced to a JPEG of at most 720 pixels on the longest side and about 150 KB, plus a small thumbnail for the list (about 8 KB at most). The original photo file and metadata such as where it was taken are not sent (declared on the App Store as Photos or Videos under Data Linked to You, purpose App Functionality).
• The puzzle settings: its size (for example 3x3) and the random value that decides how the pieces are cut.
• Your progress: the state of each piece (whether it is seated, or where it lies on the table), the elapsed time, and whether and when the puzzle was completed.
• An account can keep up to 100 puzzles.
• Unless you save or share a puzzle, neither the photo nor the puzzle leaves your device.

• Creating an invite link generates a random, hard-to-guess invite code. The link expires 7 days after it is created (people who have already joined can still use it to come back after that).
• Anyone holding the link can, after signing in, see the puzzle's size and the owner's nickname; by joining, they can see the puzzle's photo and board and move pieces. There is no limit on how many people can join, so please send the link only to people you trust.
• Everyone in the same puzzle can see the nicknames of the owner and the other participants. To keep track of who moved which piece, participants' apps also receive our internal user identifiers, which are not shown on screen.
• The positions of pieces a participant moved (and that participant's internal user identifier) are stored as part of the owner's puzzle.
• When the owner deletes a puzzle, its photo, board, participants and invite link are all deleted, and participants can no longer open it.

• The app reads only the photos you choose in the iOS photo picker.
• The camera is used only when you take a picture for a puzzle on the spot (optional).
• “Edit with AI” uses Apple's Image Playground on Apple Intelligence devices. What you write is handled on the device inside Apple's feature, and the app receives only the finished image.
• A photo you chose, a picture you took or an image edited with AI is sent to us only when you save or share that puzzle (section 2).
• You can change photo and camera access at any time in iOS Settings.

Songs you choose from your music library are played on the device as background music while you solve. Song information and listening history are never sent to us. You can play without granting access.

• Purchases are processed by Apple's App Store (StoreKit), and we never receive your payment information (such as card numbers).
• If you own Jigsaw Pro and save or share a puzzle while signed in, Apple's signed transaction information for the purchase (transaction ID, product, purchase date and so on) is sent to our server and stored linked to your account, so that Pro applies to that account.
• Without Pro, each account can still share one puzzle for free in order to invite someone. We record whether this free share has been used, and when.

To improve the app, we collect the following through Firebase Analytics (Google), in a form not linked to your identity.

• Usage Data (Product Interaction): which screens are opened, puzzles started and completed (size, piece count, elapsed time), where the photo came from (library, camera and so on), and actions such as sharing, inviting, joining, Edit with AI, saving, seeing the purchase screen and completing a purchase. The purpose is Analytics.
• The device type (iPhone or iPad), the app's display language, and whether the build is a development build.
• Device ID: an identifier generated by Firebase Analytics to distinguish devices. The purpose is Analytics.
• Photos, nicknames and account user identifiers are not sent. We use the edition of Firebase Analytics that does not handle the advertising identifier (IDFA).
• None of this is used for tracking. The app does not request tracking permission through App Tracking Transparency.

Videos and pictures of a finished puzzle are created on the device and handed, through the iOS share sheet, to the destination you choose. They are not sent to our server. How the destination handles them is governed by that service's own policy.

• Our server runs on Amazon Web Services (AWS) in the Tokyo region.
• Saved puzzles are kept until you delete the puzzle or your account.
• For troubleshooting and abuse prevention, the server keeps access records (IP address, time, request type and path, and result), which are deleted automatically after 30 days.
• The database is backed up automatically against failures, so deleted data may remain in backups for up to 35 days.

• Name or email address (not even through Sign in with Apple).
• Contacts, location or audio.
• Photos you did not choose, or the contents of your music library and your listening history.
• Payment information, health information or advertising identifiers.

The third-party services the app uses are Firebase Analytics (Google LLC), Sign in with Apple (Apple) for signing in, and the App Store (Apple) for purchases. Our server runs on Amazon Web Services. The app shows no third-party advertising, performs no behavioral tracking, and does not sell personal information or share it with third parties for advertising or similar purposes.

• After signing in, you can delete your account with “Delete account” under “Settings / Legal” on the home screen.
• Deleting it ends the sessions on every device and revokes the Sign in with Apple link. Your Apple identifier and purchase transaction information are erased from our servers.
• Every puzzle you own (photo, thumbnail, board, participants and invite link) is deleted. Your participation record is removed from puzzles you joined as a friend (those puzzles remain, as they belong to their owners).
• Your nickname is retired permanently and can never be reused by anyone. To prevent reuse, the retired nickname and a record showing the account was deleted (internal ID, dates, the apps and versions used, and whether Pro or the free share had been used) remain, but they are no longer connected to your Apple ID.
• Because this account is shared with other MusicFlow apps, deleting it also deletes the same account in those apps. For how records already published on Cube's public rankings are handled, please see the Cube privacy policy.
• Signing in again with the same Apple ID creates a new account, which is not linked to your previous nickname or puzzles.
• You can also delete saved puzzles one at a time from the list.
• Deleting the app from your device does not delete your account or puzzles on our server. To have them deleted, use “Delete account” before removing the app, or contact us below.

This app is not designed for children. We do not knowingly collect personal information from children.

Please contact MusicFlow with any questions about this policy.

Contact:

https://www.musicflow.tokyo/contact