Jigsaw: Photo Puzzle Maker Privacy Policy

A nickname is needed only when you save a puzzle, invite a friend, or join a puzzle from an invite link.

• Your nickname can be chosen only once and cannot be changed later. It is kept unique across all MusicFlow apps.
• When you choose a nickname, our server issues a random secret token for it. The app stores the nickname, its identifier and the secret token in your iCloud Keychain, which Apple syncs across your own devices, so you can carry on with the same nickname on any device with the same iCloud account.
• This nickname is shared with MusicFlow's Cube. If you already chose one in Cube, this app uses it as it is, and a nickname chosen in this app is used in Cube as well.
• When registering a nickname or asking for its secret token, the app also sends a random identifier it creates on the device (an installation ID). It is not linked to you personally and is used only for nickname registration.
• Our server checks the secret token, issues its own user identifier to link your puzzles to, and stores it linked to the nickname (declared on the App Store as User ID under Data Linked to You, purpose App Functionality). We also record the app used (Jigsaw), its version, the platform, and when you first and last used it.
• The session token the app uses to talk to our server is stored in this device's Keychain (not synced to iCloud). Our server stores a hash of the token rather than the token itself, and it expires 365 days after it was last used.
• Your nickname and user identifier are never sent to the analytics tool (Firebase Analytics).
• Sign in with Apple, used by earlier versions (up to 1.3.0), is no longer used by the app.

When you save a puzzle, or share one so you can invite someone, the following is sent to our server (api.musicflow.tokyo) and stored linked to your account.

• The photo the puzzle is made from: the area you chose, reduced to a JPEG of at most 720 pixels on the longest side and about 150 KB, plus a small thumbnail for the list (about 8 KB at most). The original photo file and metadata such as where it was taken are not sent (declared on the App Store as Photos or Videos under Data Linked to You, purpose App Functionality).
• The puzzle settings: its size (for example 3x3) and the random value that decides how the pieces are cut.
• Your progress: the state of each piece (whether it is seated, or where it lies on the table), the elapsed time, and whether and when the puzzle was completed.
• An account can keep up to 100 puzzles.
• Unless you save or share a puzzle, neither the photo nor the puzzle leaves your device.

• Creating an invite link generates a random, hard-to-guess invite code. The link expires 7 days after it is created (people who have already joined can still use it to come back after that).
• Anyone holding the link can, after signing in, see the puzzle's size and the owner's nickname; by joining, they can see the puzzle's photo and board and move pieces. There is no limit on how many people can join, so please send the link only to people you trust.
• Everyone in the same puzzle can see the nicknames of the owner and the other participants. To keep track of who moved which piece, participants' apps also receive our internal user identifiers, which are not shown on screen.
• The positions of pieces a participant moved (and that participant's internal user identifier) are stored as part of the owner's puzzle.
• When the owner deletes a puzzle, its photo, board, participants and invite link are all deleted, and participants can no longer open it.

• The app reads only the photos you choose in the iOS photo picker.
• The camera is used only when you take a picture for a puzzle on the spot (optional).
• “Edit with AI” uses Apple's Image Playground on Apple Intelligence devices. What you write is handled on the device inside Apple's feature, and the app receives only the finished image.
• A photo you chose, a picture you took or an image edited with AI is sent to us only when you save or share that puzzle (section 2).
• You can change photo and camera access at any time in iOS Settings.

Songs you choose from your music library are played on the device as background music while you solve. Song information and listening history are never sent to us. You can play without granting access.

• Purchases are processed by Apple's App Store (StoreKit), and we never receive your payment information (such as card numbers).
• If you own Jigsaw Pro and save or share a puzzle, Apple's signed transaction information for the purchase (transaction ID, product, purchase date and so on) is sent to our server and stored linked to your user identifier, so that Pro applies.
• Without Pro, each user identifier can still share one puzzle for free in order to invite someone. We record whether this free share has been used, and when.

To improve the app, we collect the following through Firebase Analytics (Google), in a form not linked to your identity.

• Usage Data (Product Interaction): which screens are opened, puzzles started and completed (size, piece count, elapsed time), where the photo came from (library, camera and so on), and actions such as sharing, inviting, joining, Edit with AI, saving, seeing the purchase screen and completing a purchase. The purpose is Analytics.
• The device type (iPhone or iPad), the app's display language, and whether the build is a development build.
• Device ID: an identifier generated by Firebase Analytics to distinguish devices. The purpose is Analytics.
• Photos, nicknames and account user identifiers are not sent. We use the edition of Firebase Analytics that does not handle the advertising identifier (IDFA).
• None of this is used for tracking. The app does not request tracking permission through App Tracking Transparency.

Videos and pictures of a finished puzzle are created on the device and handed, through the iOS share sheet, to the destination you choose. They are not sent to our server. How the destination handles them is governed by that service's own policy.

• Our server runs on Amazon Web Services (AWS) in the Tokyo region.
• Saved puzzles are kept until you delete the puzzle or your account.
• For troubleshooting and abuse prevention, the server keeps access records (IP address, time, request type and path, and result), which are deleted automatically after 30 days.
• The database is backed up automatically against failures, so deleted data may remain in backups for up to 35 days.

• Name or email address.
• Contacts, location or audio.
• Photos you did not choose, or the contents of your music library and your listening history.
• Payment information, health information or advertising identifiers.

The third-party services the app uses are Firebase Analytics (Google LLC), iCloud Keychain (Apple) for syncing your nickname across your devices, and the App Store (Apple) for purchases. Our server runs on Amazon Web Services. The app shows no third-party advertising, performs no behavioral tracking, and does not sell personal information or share it with third parties for advertising or similar purposes.

• Once you have a nickname, you can delete this app's data with “Delete Jigsaw data” under “Settings / Legal” on the home screen.
• Deleting it removes every puzzle you own (photo, thumbnail, board, participants and invite link) and your participation record from puzzles you joined as a friend (those puzzles remain, as they belong to their owners). The sessions on every device end, and the link between your nickname and user identifier is erased.
• Because the nickname is shared with Cube, it stays after deletion. Saving a puzzle again with the same nickname starts with new, empty data. To have the nickname itself deleted, or for how records already published on Cube's public rankings are handled, please see the Cube privacy policy or contact us below.
• Your nickname's secret token stays in your iCloud Keychain even after you delete the app.
• You can also delete saved puzzles one at a time from the list.
• Deleting the app from your device does not delete your puzzles on our server. To have them deleted, use “Delete Jigsaw data” before removing the app, or contact us below.
• If you used Sign in with Apple in an earlier version, that account and its puzzles remain on our server. To have them deleted, please contact us below.

This app is not designed for children. We do not knowingly collect personal information from children.

Please contact MusicFlow with any questions about this policy.

Contact:

https://www.musicflow.tokyo/contact