M U L E Y← Back to the fun partPRIVACY, IN HUMAN WORDS
MULEY needs a little data to keep score with your friends. This policy explains what that means in the app and on muley.app.
MULEY is a daily word game for small groups of people who choose to play together. We do not show ads, sell personal information, build advertising profiles, or include third-party behavioral tracking SDKs.
The app uses Apple’s iCloud and CloudKit services to make leagues, completed results, challenges, and notifications work. The website uses Cloudflare to deliver and protect the site and to provide privacy-first website analytics.
To provide MULEY and its league features, the app handles:
MULEY does not ask for access to your contacts, precise location, photos, health data, or payment information.
You provide a display name and league details directly. Gameplay and activity information is created when you play, finish a game, join a league, or send or answer a challenge. iOS provides the app-specific iCloud identifier after you use an iCloud feature.
We use this information only to save play, sync your MULEY identity, create and join leagues, calculate standings, show completed results to league members, deliver challenges, prevent duplicate activity, respond to support requests, and send notifications you enable. We do not use it for cross-app tracking or targeted advertising.
Your display name, membership, completed results and guesses, standings, game activity, and challenges are available to the members of the relevant league. Your unfinished board remains on your device and is not shown to league mates.
MULEY uses CloudKit’s public database to support code-based leagues. League records are not published on the MULEY website and there is no searchable public player profile, but they are not stored in a per-user private CloudKit database. Someone who obtains a valid invite code may be able to join and view the league information described above. Treat invite codes as private and share them only with the people you want in the league.
If you allow notifications, MULEY can send a daily reminder, league activity, and challenge alerts through Apple’s notification services. You can change the reminder time, turn league alerts off in MULEY, or disable notifications in iOS Settings at any time.
On supported devices, MULEY may use Apple’s on-device Foundation Models to write short result commentary from game facts. Otherwise it uses local templates. MULEY does not send those facts to a third-party AI service.
The MULEY website uses Cloudflare Web Analytics to understand aggregate page views and visits, referring sites, page paths, general country, browser and device categories, and website performance such as Core Web Vitals. We use these measurements to understand interest in MULEY and improve the site.
Cloudflare describes Web Analytics as privacy-first: it does not use cookies or local storage for analytics, fingerprint visitors, track individuals over time or across sites, or log URL query strings. The site does not use advertising pixels or behavioral advertising analytics. Cloudflare also processes standard network and security information to deliver and protect the site. See Cloudflare Web Analytics and Cloudflare’s Privacy Policy.
If you email us or send TestFlight feedback, we receive the message, email address, attachments, and diagnostic information you choose to provide or that Apple includes with the report. We use it to answer you, troubleshoot, and improve MULEY.
We use Apple for iCloud, CloudKit, notifications, TestFlight feedback, and optional on-device model features, and Cloudflare to host and secure muley.app. These providers may process information only as needed to provide and protect their services, under their terms and privacy obligations. We require providers processing information for us to protect it consistently with this policy and applicable law.
We do not sell or rent personal information. We do not share it with advertisers or data brokers. We may disclose information if required by law, to protect MULEY or its users, or as part of a business transfer subject to this policy and applicable law. See Apple’s Privacy Policy and Cloudflare’s Privacy Policy.
On-device information remains until you clear it, delete MULEY, or iOS removes it. CloudKit-backed league, result, activity, and challenge records are retained while needed to operate MULEY, preserve league history, resolve support or integrity issues, or meet legal obligations.
Leaving a league removes your current membership and the league from your device, but it does not necessarily erase completed results already shared with that league, the league record, or records needed by other members. Deleting the app alone does not delete CloudKit records.
You may ask for a copy, correction, or deletion of information associated with you by emailing support@muley.app. Because we do not receive your Apple Account email, we may ask for your display name, league code, or a reasonable in-app verification step. We will respond within a reasonable period and honor applicable privacy rights, subject to information we must keep for security, legal, or other users’ legitimate needs.
We minimize the information MULEY handles and rely on Apple and Cloudflare platform security controls. No storage or transmission system is perfectly secure, and invite-code leagues depend on members keeping their codes within the intended group.
MULEY is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us.
We may update this policy as MULEY changes. The effective date above will change when we publish an update. If a change materially affects how information is handled, we will provide notice where reasonably appropriate.
QUESTIONS OR REQUESTS
Privacy questions, access requests, and deletion requests all go to the same place.