Terms of Service

End-User License Agreement (EULA) — This EULA is a legal agreement between you and GameHaven for use of the GameHaven mobile application. By downloading, installing, or using the App you agree to these terms. This EULA is between you and GameHaven only, not Apple; GameHaven is solely responsible for the App. It must comply with the Apple Media Services Terms and Conditions, which prevail in any conflict.

License Grant — We grant you a limited, non-exclusive, non-transferable, revocable license to download, install, and use the App on Apple-branded devices you own or control, per this EULA and the Apple Media Services Terms.

Restrictions — You may not: copy, modify, or create derivative works of the App; reverse engineer, decompile, or disassemble it; rent, lease, lend, sell, or sublicense it; exploit bugs, cheats, or vulnerabilities; use it for any unlawful purpose; use automated systems or bots; or circumvent content limits, paywalls, or premium restrictions.

Auto-Renewable Subscriptions

Subscription Plans — GameHaven Premium (Monthly): $3.99 per month · GameHaven Premium (Annual): $34.99 per year. Actual prices may vary by region and currency; the price confirmed at purchase applies.

Premium Features — Unlimited Multiplayer & Tournaments · Full Shop Access · Advanced Stats · Unlimited Trivia Questions with Fresh AI Content · Unlimited Rocket Blast Off Words with AI Generator · Unlimited Word Search, Crossword & Sudoku Puzzles · 2x Coin Earnings.

Free Tier — Free users have access to all single-player games with content limits: a starter pool of 100 trivia questions, 80 Rocket Blast Off words, 2 word search puzzles per day, 2 crossword puzzles per day, and 2 Sudoku puzzles per day. When you reach a limit you can watch an optional short ad to keep playing, or upgrade to Premium. Free users may also buy basic avatars in the shop with earned coins. Multiplayer, tournaments, the full cosmetics shop, advanced stats, and ad-free play require a premium subscription.

Billing & Renewal — Payment is charged to your Apple ID at confirmation. Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current period, charged within 24 hours prior. Prices may change; you'll be notified in advance and must agree to continue.

Free Trial — We may offer a free trial for new subscribers (duration shown on the purchase screen). If you don't cancel before it ends, it converts to a paid subscription. One trial per Apple ID. Premium supports Apple Family Sharing.

Managing & Cancelling — Manage or cancel any time via Settings > [Your Name] > Subscriptions, the App Store app, or apps.apple.com/account/subscriptions. Cancellation takes effect at period end; no partial refunds.

Restore Purchases — Reinstalling or switching devices: tap 'Restore Purchases' on the subscription screen (same Apple ID).

Refunds — All purchases are processed by Apple; refund requests go through reportaproblem.apple.com. We do not process refunds directly.

Acceptable Use

• GameHaven is provided for personal, non-commercial entertainment

• You must not use the App to harass, bully, or harm other players

• You are responsible for maintaining the security of your account

• Display names must be appropriate, family-friendly, and inoffensive

• Referral rewards are for genuine new-player referrals and require you to be 13 or older with an accurate date of birth — self-referral, fake accounts, false age information, or other abuse may result in forfeited rewards

Multiplayer Conduct — Treat all players with respect; do not intentionally disconnect to avoid losses; do not use external tools for unfair advantage; offensive, discriminatory, or inappropriate behavior is prohibited. We may suspend or terminate accounts that violate these standards without notice or refund. Public matchmaking (including Quick Match) may pair you with players you don't know, who will see your display name and avatar emoji. There is no free-form text chat; interaction is limited to gameplay.

User Content — You are solely responsible for your display name and any content you create. We may remove or modify content that violates our community standards. The App includes automated content filtering, but we do not guarantee all inappropriate content is caught.

Account & Data — You may use GameHaven as a guest, sign in with Apple, or sign in with email/password (managed by Amazon Cognito). Guest data is stored locally only; signed-in accounts may sync to AWS. You can delete your account and all data any time from your Profile — permanent and irreversible.

Age Requirement — GameHaven is intended for users of all ages. By using it, you confirm you meet Apple's minimum age for your region, or that a parent/guardian has consented on your behalf. All in-app purchases respect Apple's Ask to Buy parental controls.

Intellectual Property — All content, graphics, game mechanics, sounds, AI-generated content, and design elements are owned by us or our licensors. AI-generated content is for personal use within the App only.

Third-Party Services — The App uses Apple (Sign in with Apple, App Store/StoreKit, MultipeerConnectivity, optional Game Center) and Amazon Web Services (Cognito for auth, RDS for our database, ECS for our PostgREST API) for cloud sync and online multiplayer, plus Google AdMob for optional non-personalized, child-directed rewarded ads. No third-party analytics or tracking SDKs are used.

Disclaimer of Warranties — THE APP IS PROVIDED 'AS IS' AND 'AS AVAILABLE' WITHOUT WARRANTIES OF ANY KIND. AI-GENERATED CONTENT IS FOR ENTERTAINMENT AND MAY CONTAIN INACCURACIES.

Limitation of Liability — TO THE MAXIMUM EXTENT PERMITTED BY LAW, GAMEHAVEN IS NOT LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

Indemnification — You agree to indemnify and hold harmless GameHaven from claims arising out of your use of the App or violation of these terms.

Termination — We may suspend or terminate your access at any time for violations or any other reason. Coins, XP, and unlocked cosmetic/boost items are virtual, have no monetary value, cannot be redeemed for cash or transferred, and are forfeited on suspension, termination, or deletion.

Apple-Specific Terms (Required) — This EULA is between you and GameHaven only, not Apple; Apple has no maintenance/support obligation; in the event of a warranty failure you may notify Apple for a refund of the purchase price (if any); Apple is not responsible for claims relating to the App; Apple and its subsidiaries are third-party beneficiaries of this EULA and may enforce it; and you represent you are not in an embargoed country or on any U.S. restricted-parties list.

Dispute Resolution — Disputes are first addressed by good-faith negotiation; if unresolved within 30 days, by binding arbitration (except where prohibited), with a class-action waiver. EU/UK residents retain local-court rights.

Governing Law — Governed by the laws of the United States and the state in which we operate. Apple's terms prevail where required. EU/UK residents keep mandatory consumer protections.

Severability / Entire Agreement / Changes — Standard severability; these Terms + Privacy Policy are the entire agreement; we may update these Terms and will update the 'Last updated' date on material changes.

Contact — support@garbageapps.com (within 30 days).

Online Multiplayer Operations — Match time limits (24h for 1v1, 6h for tournament rounds); tournament forfeit rules; asynchronous score-based play; replay data retention on AWS for your account's lifetime; and subscription-downgrade behavior during active play (existing matches finish; you lose the ability to start new online matches/tournaments and access to AI content until renewed — local Wi-Fi and pass-and-play remain available).

Push Notifications & Data Locality — Optional push alerts for friend requests, match invites, completed async matches, and tournament forfeits (disable in iOS Settings). Cloud and online multiplayer data are stored in AWS data centers in the United States (us-east-1); by using online/cloud features you consent to this transfer, secured under AWS's compliance posture (ISO 27001/27017/27018, SOC 1/2/3, GDPR-compatible SCCs).

Last updated: June 30, 2026

Privacy Policy

Information We Collect

Information You Provide

• Display name and avatar emoji you choose

• Apple ID information if you sign in with Apple (name, email — only what you authorize), or your email address if you sign in with email and password

• Support requests, feedback, and conversation messages you submit through the app

Automatically Collected Information

• Game statistics, scores, and match history

• Device identifiers for same-network multiplayer sessions

• Local network presence when using nearby (same-Wi-Fi) multiplayer

• For online (cross-network) multiplayer: your display name, avatar emoji, and game moves are transmitted in real time to your opponent. Completed match records (host/guest names, scores, winner, timestamps) are retained on our servers for match history.

• App usage data such as play time and game preferences (a small summary of your stats and recent games is also written to an on-device shared container so the optional home-screen widgets can display them; this widget data stays on your device)

• Free-tier usage counters (e.g. daily puzzle count, questions answered)

Purchase & Subscription Information

• Subscription status (active, expired, or cancelled)

• Purchase history and transaction identifiers processed by Apple

• Subscription plan type (monthly or annual) and renewal dates

• We do NOT collect or store your payment card details — all payments are processed securely by Apple through the App Store

How We Use Your Information

• To create and manage your player profile

• To save and sync your game progress across devices

• To enable multiplayer gameplay and tournaments

• To display achievements and track your progress

• To manage your subscription status and premium feature access

• To enforce free-tier content limits (daily puzzles, question banks)

• To improve app performance and fix bugs

• We do NOT use your data for advertising, profiling, or marketing purposes

Data Storage & Processing

Your game data is stored locally on your device by default. If you sign in (with Apple or with an email and password) and enable cloud sync, your data is transmitted to and stored on servers provided by Amazon Web Services, Inc. (AWS), our cloud infrastructure provider. AWS processes data on our behalf and is contractually obligated to protect your information.

Data may be stored on servers located in the United States. By using cloud sync, you consent to the transfer of your data to the United States. We rely on AWS's data processing agreement and industry-standard security measures (including encryption in transit and at rest) to help protect your data during international transfers.

Third-Party Services

Apple (App Store, StoreKit, Sign In & Game Center) — We use Apple's Sign in with Apple as one optional authentication method. Apple provides us only the information you authorize (name, email). All in-app purchases and subscriptions are processed entirely by Apple through StoreKit and the App Store. Apple collects payment and transaction data subject to Apple's Privacy Policy (apple.com/privacy). We do not have access to your payment method details. We do NOT use any third-party payment processors or analytics SDKs. For advertising we use only Google AdMob, to show optional rewarded ads to players who are not Premium subscribers — configured for non-personalized, child-directed delivery (no IDFA, no cross-app tracking); see "Data Sharing & Sale" below. If you are signed into Apple Game Center, we submit two integer counters to your Game Center profile — your total wins and your lifetime coins earned — which Apple uses to populate the leaderboards inside the Game Center overlay. Game Center submissions are governed by Apple's Game Center privacy policy (apple.com/legal/privacy/data/en/game-center); we do not see your Game Center profile or social graph.

Amazon Web Services (Cloud Infrastructure & Authentication) — When cloud sync is enabled, your profile, game stats, match history, subscription status, saved games, and online multiplayer match data are stored using Amazon Web Services (AWS). Email and password authentication is handled by Amazon Cognito (an AWS service); your password is never sent or stored in plaintext — Cognito uses the Secure Remote Password (SRP) protocol. See AWS's privacy notice at aws.amazon.com/privacy.

Same-Network Multiplayer (MultipeerConnectivity) — Same-network multiplayer uses Apple's MultipeerConnectivity framework to discover nearby players on the same Wi-Fi or Bluetooth network. Device names and game data are exchanged peer-to-peer during active sessions only and are not persisted on our servers or on other players' devices.

Cross-Network Online Multiplayer — Online multiplayer matches (premium feature) route through our AWS infrastructure rather than peer-to-peer. Your display name, avatar emoji, and individual moves are transmitted to the AWS server and visible to your opponent for the duration of the match. You can either create a private match and invite a specific friend (private matches are invite-only and are not listed publicly), or join public matchmaking. In public matchmaking your display name and avatar emoji are shown to other signed-in players in an in-app match browser, and the Quick Match option may automatically pair you with another player you have not met. We do not provide free-form text chat between players — only your display name, avatar emoji, and in-game moves are shared. After a match completes, a record (player names, scores, winner, timestamps) is retained for your match history; raw move data and board state for that match are also retained on AWS for replay and dispute resolution.

Data Sharing & Sale

We do NOT sell, rent, or trade your personal information, and we do not share it with third parties for their own marketing. To show optional rewarded ads to players who are not Premium subscribers, we integrate Google AdMob, configured for non-personalized, child-directed delivery: AdMob does not use your data to target ads, does not use the Advertising Identifier (IDFA), and does not track you across apps. We do not integrate any third-party analytics or attribution SDKs, and we do not participate in data broker arrangements. Apart from AdMob (for ad delivery only) and our service providers (Apple and Amazon Web Services), your data is not shared.

Tracking & App Tracking Transparency

GameHaven does NOT track you across other companies' apps or websites. We do not use the Advertising Identifier (IDFA), and we do not participate in any cross-app tracking, retargeting, or targeted advertising programs. We fully comply with Apple's App Tracking Transparency (ATT) framework — we will never request tracking permission because we do not track. Our App Store Privacy Nutrition Label accurately reflects that we collect no data used to track you.

Children's Privacy (COPPA Compliance)

GameHaven is designed to be family-friendly and suitable for all ages. We comply with the Children's Online Privacy Protection Act (COPPA), the EU's General Data Protection Regulation as it applies to children (GDPR Article 8), and applicable international children's privacy laws.

We do not knowingly collect personal information from children under 13 (or the applicable age of digital consent in your jurisdiction) without verifiable parental consent.

Any ads shown to players who are not Premium subscribers are non-personalized and child-directed — they involve no behavioral profiling and no Advertising Identifier (IDFA). The app does not link to social media and does not enable unrestricted communication between users. All in-app purchases are processed through Apple's parental controls system (Ask to Buy).

If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us at the email below. We will promptly investigate and delete any such information from our servers as soon as reasonably practicable after verification.

Refer a Friend (optional): the referral feature is gated behind a one-time date-of-birth check confirming you are 13 or older. The date of birth you enter is used solely for this age check and is stored only on your device — it is not transmitted to or stored on our servers. When a code is redeemed, we record only which account referred which — to deliver the in-app coin reward and prevent abuse — and collect no additional personal information. Referral rewards are in-app coins with no cash value.

Your Rights & Choices

• Access: View all your personal data through your Profile at any time

• Correction: Modify your display name and avatar at any time

• Deletion: Delete your account and ALL associated data via Profile > Delete Account & Data — this is permanent and irreversible

• Portability: Your game data is visible in your Profile and stored locally on your device

• Revocation: Revoke Sign in with Apple access via iOS Settings > Apple ID > Sign-In & Security. For email/password accounts, use Profile > Delete Account & Data to fully remove your Amazon Cognito user record and cloud data.

• Opt-out: Use the app as a guest without creating a cloud account — no personal data leaves your device

• Subscription management: Cancel or change subscriptions via iOS Settings > [Your Name] > Subscriptions or directly at apps.apple.com/account/subscriptions

California Residents (CCPA/CPRA)

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) to:

• Know what personal information we collect, use, and disclose

• Request deletion of your personal information

• Opt out of the sale or sharing of personal information — we do NOT sell or share personal information

• Not be discriminated against for exercising your privacy rights

• Correct inaccurate personal information we hold about you

• Limit the use and disclosure of sensitive personal information — we only use it for the purposes described in this policy

To exercise these rights, use the in-app deletion feature or contact us at the email below. We will respond to verifiable consumer requests within the timeframe required by the CCPA (generally 45 days). We will not charge a fee for processing your request unless it is manifestly unfounded or excessive.

European Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply. Our legal bases for processing your data are:

• Consent — when you sign in and enable cloud sync

• Performance of a contract — to provide the game services and manage your subscription

• Legitimate interest — to improve the app and prevent abuse

You have the right to access, rectify, erase, restrict processing, object to processing, and port your data. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal. You may also lodge a complaint with your local supervisory authority (e.g. the ICO in the UK, CNIL in France). For data transfers outside the EEA, we rely on our service providers' Standard Contractual Clauses (SCCs) and data processing agreements.

Data Retention

Local data is retained on your device for as long as the app is installed. Cloud data is retained for as long as you maintain an active account. Subscription and purchase records are retained as long as required by applicable tax and accounting law (typically 3–7 years).

When you delete your account, all cloud data — including your profile, game stats, match history, subscription records, and saved games — is permanently and immediately removed from our servers. This action is irreversible. Uninstalling the app removes all locally stored data from your device.

Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS 1.2+), authentication via Apple Sign In (token-based) or Amazon Cognito (SRP-based for email/password, so your password is never sent in plaintext), row-level security (RLS) on our cloud database, and access controls on our cloud infrastructure (private VPC subnets for the database). However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the 'Last updated' date below and, where required by law, through in-app notification. Continued use of GameHaven after changes are posted constitutes acceptance of the updated policy. We encourage you to review this policy periodically. If we make material changes that affect the processing of children's data, we will take additional steps to notify parents and guardians.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern about a child's data, please contact us at: support@garbageapps.com. We aim to respond to all inquiries within 30 days.

Push Notifications

If you grant push-notification permission, Apple's Push Notification service (APNs) issues a unique device token for your installation. We store this token in our database, keyed only to your GameHaven user id, so we can deliver in-app alerts when: a friend sends you a friend request; someone invites you to an online match or tournament; an opponent finishes their turn in an asynchronous score-based match; or a tournament round you were assigned to is forfeited on timeout. Device tokens are sent to Apple servers when notifications are delivered; we do not share them with any other third party. You can disable push notifications at any time in iOS Settings > Notifications > GameHaven, or by deleting your account.

AI Content & Online Multiplayer Data

AI-Generated Content (Anthropic's Claude API) — Premium subscribers receive AI-generated trivia questions, crossword clues, and word-search lists via Anthropic's Claude API, which runs Anthropic's Claude Haiku 4.5 model on our behalf. The prompts we send describe the requested content type (e.g. "generate 10 trivia questions at medium difficulty") and do not include personally identifying information about you, your account, or your gameplay. Generated content is cached on your device after delivery, and a copy of the generated content itself — the questions, words, and clues only, never anything about you — is also stored in a shared content library on our AWS servers so the same content can be reused for all players without regenerating it. This shared library contains game content only and no personal information. Anthropic processes these prompts to generate the content and does not use them to train its models, consistent with Anthropic's commercial API terms.

Online Match Replay Data — When you play an online multiplayer match, the match row (host id, guest id, game type, display names, avatar emojis, scores, winner, timestamps, board state, and "content blob" for score games) is stored on our AWS infrastructure for the duration of the match and a short period afterward for dispute resolution. Completed match rows are retained as part of your match history; you can delete your entire match history along with the rest of your account from Profile > Delete account and data.

Match Expiration & Auto-Forfeit — Every online match has an expires_at timestamp — 24 hours for 1v1 matches, 6 hours for tournament-round matches. A server-side cleanup process running every few minutes marks expired unfinished matches as "abandoned" and, for tournament rounds, auto-forfeits the absent player so the bracket can advance.

Friends — When you add a friend, we store the relationship as two rows (one per direction). Each non-guest account is assigned a unique player tag (a short handle such as #AB12CD, shown on your profile). Friend searches match an exact player tag (not a display name) against our profiles table for non-guest accounts; results are returned to you only and are not shared with the people being searched.

AI Display-Name Moderation — Every display name you save passes through an on-device rule-based filter and then Anthropic's Claude API (Claude Haiku 4.5) for a context-aware second review. The proposed name is included in the prompt only for this single check; we do not retain it on our servers beyond the request (logs are kept at most one month for debugging, then deleted).

AI Help Chat — Powered by Anthropic's Claude API. Each message is forwarded with recent history and a small device context blob (app/iOS/hardware version, premium/signed-in status — no PII). We log only a fixed topic tag + timestamp; your message text, name, and account id are never logged.

Anonymized Error Reporting — Non-fatal errors send a small diagnostic (error code, summary, app/iOS/hardware version, optional structured context, and an anonymized 16-char SHA-256 prefix of your account id). The full identifier and personal information are never sent.

Remote Feature Flags — The app reads public config flags at launch and every ten minutes; these can only disable/parameterize existing features, never introduce new behavior. No personal information is sent.

Transactional Emails — We send a small set of transactional emails through Resend (welcome, premium feature tour, trial-ending reminder, new-device security alert, friend-request notice, account-deletion confirmation). You can disable categories in Profile → Notification Preferences, except the account-deletion and new-device-login alerts (required for legal record-keeping and security). No personal information beyond your display name (and a friend's display name) is included.

Last updated: June 30, 2026