Privacy Policy

Panjo is made by Sacred Blue Studios Inc. This policy describes what the Panjo app and the panjo.app website actually collect and why. The short version: you can play Panjo without an account and the core game works entirely offline; creating an account adds cloud features, and those are described below.

Playing without an account

Scores, settings, favourites, and songs you create are stored on your device. You can erase them at any time with Reset Data in Settings. Nothing you do in offline play is sent to us.

If you create an account

Accounts are optional and use Firebase Authentication (email and password, Google, or Sign in with Apple). With an account we store:

• Profile: display name, email address, and an avatar photo if you choose one.
• Progress: your game progress and settings, synced so a new device picks up where you left off.
• Leaderboards: your best score per song. Leaderboard entries are visible to other players.
• Bands and challenges: band names, membership, invite codes, and live gameplay events while you play together. Presence (whether you are online in a band) is visible to your bandmates.
• Purchases: which packs or subscription tier you own, so paid content unlocks on your devices.

You can delete your account from Settings in the app. Deletion removes your authentication record and profile.

Purchases

Payments are processed by Apple through the App Store; we never see your payment details. We use RevenueCat to keep track of what a purchase unlocks. RevenueCat receives an app-generated identifier and purchase receipts, not your name or email. See the RevenueCat privacy policy.

Advertising

Free play may show optional rewarded ads (for example, to revive a run) served by Google AdMob. On iOS, we ask for tracking permission through Apple's App Tracking Transparency prompt first; if you decline, ads are still available but are not personalised. Ads in Panjo are opt-in: they only play when you choose to watch one. See Google's privacy policy.

The microphone permission

iOS requires us to declare a microphone purpose string because of an audio library we use. Panjo never records audio. "Make a Melody" records the notes you tap, not sound from your microphone.

Generated artwork

Some artwork (spirit-animal banners, song backgrounds) is generated with Google's Imagen service. The prompts contain game content, such as an animal name or a song title, never your personal information. Generated images are cached on your device.

The website

panjo.app is a static site. We do not run analytics or set cookies. Our hosting provider (Firebase Hosting) records standard server logs, such as IP address and user agent, for security and operations, retained per Google's policies. The site loads fonts and a styling library from CDNs, which receive your IP address to serve those files.

Children

Panjo is enjoyable for all ages, but it is not directed to children under 13. Accounts and any future social or sharing features require users to be 13 or older. We do not knowingly collect personal information from children under 13; if you believe a child has provided us personal information, contact us and we will delete it.

Your choices

• Play without an account; the core game does not need one.
• Reset local data or delete your account from Settings.
• Decline the iOS tracking prompt; ads then remain non-personalised.
• Email us to ask what we hold about you or to request deletion.

Security and retention

Cloud data lives in Google Firebase with access rules that restrict each account's data to that account. We keep account data while the account exists and delete it when the account is deleted. No storage or transmission is perfectly secure, but we design for least access.

Changes

When this policy changes we update the date above; for material changes we will provide additional notice in the app or on this site.

Contact

Sacred Blue Studios Inc — info@sacredbluestudios.com