Juste Apps

SUS · Privacy

SUS privacy policy

Your players, word packs and games stay on your phone. SUS Premium goes through Apple or Google and RevenueCat, anonymous usage statistics go to PostHog and error and crash reports to Sentry, both in the EU, and the feedback you choose to write comes to us.

Last updated:

1. Who is responsible

SUS (“SUS - Guess who’s the Spy”, “SUS - Qui est l’Espion ?” in French) is a party game made by JUSTE APPS, SASU, RCS Créteil 130 436 108, 23 avenue de la Chapellerie, 94370 Sucy-en-Brie, France. JUSTE APPS is the controller of the personal data described here.

For privacy questions or requests, email sus@justeapps.com. Publisher information is available in our legal notice.

2. What stays on your phone

The players’ names you type, your custom word packs, your game settings and the games you play are stored on your phone only. They are not sent to us or to anyone else.

3. Anonymous usage statistics

To improve the game, SUS sends us anonymous usage statistics: what happens in the app, not who you are or what you play with. They tell us, for example, how many games reach their end, or where people stop.

These are events such as the app being opened, a game starting, ending or being left, a word pack being created, or SUS Premium being bought, with a few details that help us read them, such as the number of players or how long a game lasted.

Each event also says which app sent it and whether SUS Premium is active, when it was sent, and what PostHog’s software adds about your phone: the app’s version, the operating system and its version, the device model, the language and the time zone. It carries a random identifier that PostHog’s software creates on your phone, so that we can count phones rather than events. That identifier stays on your phone until you delete the app. It is not linked to your name, to RevenueCat’s identifier, to your feedback, to other apps or to an advertising identifier.

Statistics never include a player’s name, a word, the name of a pack, your feedback or your email address. They do not record the screens you visit, your taps or your sessions, and SUS does not build a profile of you.

We use PostHog, as our processor, to receive and store the statistics, in the European Union (Frankfurt). PostHog receives your IP address with each connection, as any server does. It uses it to add an approximate location to each event, your country, region and city, then discards it: the address is not kept with the statistics, and the location is never more precise than the city. Statistics are deleted at most 13 months after they were sent.

This relies on our legitimate interest in measuring the app’s audience to improve it (Article 6(1)(f) GDPR). The statistics are not linked to you, serve only to measure and improve SUS, and are not shared with anyone else for their own use. See PostHog’s privacy policy.

4. Error and crash reports

To keep the game working, SUS sends us a report when something goes wrong: an error, a crash, or the app no longer responding. A crash is reported the next time you open the app.

A report says what went wrong and where in the app’s code, with what Sentry’s software adds about your phone: the app’s version, the operating system and its version, the device model, the language and the time zone, the free memory and storage, the battery level, the type of connection, and whether the app was open on screen. It also lists the last steps in the app before the error, such as the screens opened, the app going to the background and back, the messages the app writes to its log, and the network requests it made, with their address and result but not their content. Each time you use the app, it also tells Sentry whether that use ended normally or in a crash, so that we can measure how often it crashes.

Reports carry a random identifier that Sentry’s software creates on your phone, so that we can tell how many phones an error affects. That identifier stays on your phone until you delete the app. It is not linked to your name, to RevenueCat’s or PostHog’s identifiers, to other apps or to an advertising identifier.

Reports never include a player’s name, a word, the name of a pack, your feedback or your email address. They do not record your screen, and they carry no account or user identifier: SUS has none.

We use Sentry, run by Functional Software, Inc., as our processor, to receive and store the reports, in the European Union (Germany). Sentry receives your IP address with each connection, as any server does. It uses it to add an approximate location to each report, your country, region and city, then discards it: the address is not kept with the report. Reports are deleted 30 days after they were sent.

This relies on our legitimate interest in finding and fixing the app’s faults (Article 6(1)(f) GDPR). Reports serve only that, and are not shared with anyone else for their own use. See Sentry’s privacy policy.

5. SUS Premium and RevenueCat

Apple or Google handles payment for SUS Premium under its own terms and privacy policy. We never receive your card details.

We use RevenueCat, as our processor, to check purchases, give and restore access to SUS Premium, and understand how subscriptions perform. Its software connects when the app starts, even if you never buy anything. RevenueCat processes:

We do not send RevenueCat your players, word packs, feedback, email address or usage statistics. This relies on our contract with you, to provide what you bought, and on our legitimate interest in preventing fraud and understanding subscription performance (Article 6(1)(b) and (f) GDPR). Purchase records are kept as long as needed to restore access, resolve billing disputes and meet legal obligations; deleting the app does not delete them. See RevenueCat’s privacy policy.

6. Feedback you send

Send Feedback, in Settings, sends your message to our feedback service. Writing to us is optional. When you send feedback, we receive:

Nothing else about you is sent: no device identifier, no account, no location. Our feedback service does not keep your IP address. To limit abuse, it counts requests by a hash of the address, which is forgotten after a minute. SUS remembers the address you entered, on your phone, so that you do not have to type it again.

We use your feedback to improve SUS and, if you left an address, to reply to you, based on our legitimate interest in answering the people who write to us and in improving the app (Article 6(1)(f) GDPR). We do not use it for marketing, and we do not sell it.

Feedback is stored by Cloudflare, in a database located in the European Union. Your email address is erased 90 days after we have handled your feedback; the rest of the feedback is deleted 2 years after it was sent. A reply is an email like any other, as described in our studio privacy policy.

7. Who receives it

Your data is read only by the people at Juste Apps who make SUS and handle its support. The following providers process it on our behalf:

RevenueCat, OpenAI and Google may process information outside the European Economic Area, including in the United States, under the safeguards their terms provide, such as the European Commission’s standard contractual clauses. PostHog, Inc. and Functional Software, Inc., which runs Sentry, are based in the United States: they store the statistics and the reports in their EU regions, and their terms provide the same safeguards for any access from outside the European Economic Area. Information may also be disclosed where required by law. We do not sell your personal data.

SUS is distributed by Apple’s App Store and Google Play. When you download, buy, rate or review the app, Apple or Google may process information under its own policy: Apple, Google. The rating prompt SUS sometimes shows is theirs, and we do not see what you answer unless you publish a review.

8. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, restriction of processing, or object to processing. Data portability applies in certain circumstances.

Contact sus@justeapps.com to make a request. To help us find your feedback, tell us roughly when you sent it and the address you left, if any. For a purchase, tell us roughly when you made it. Usage statistics and error reports are not linked to you, so we usually cannot tell which are yours; deleting the app deletes the identifiers they carry, and error reports are deleted after 30 days. Erasing your data or deleting the app does not cancel a subscription: cancel it in your App Store or Google Play settings. Do not send identity documents unless requested through an appropriate channel.

You may also lodge a complaint with your local data protection authority. In France, you can contact the CNIL.

9. Changes to this policy

If SUS starts handling data differently, this policy will be updated before the change ships. The date above identifies the latest revision.