Oval Development ("Oval Development", "we", "us", "our") is an indie software studio that builds and operates a portfolio of apps and websites, including TokeBox, Floor Ruling, StoryInfinity, and ovaldevelopment.com (collectively, the "Services"). This Privacy Policy describes what personal data we collect, how we use it, who we share it with, how long we retain it, and the rights you have over it.
This policy applies to all Services operated by Oval Development. Where a specific app has additional privacy details, those are linked from within this policy.
We collect only the data needed to provide and improve the Services. What we collect depends on which Service you use.
TokeBox (iOS)
Shift and earnings data — entered by you (hours, tips, income). Stored locally on your device. We do not transmit this data to our servers.
Subscription status — if you purchase a subscription, Apple processes the payment and our subscription management provider (RevenueCat) records entitlement status tied to an anonymous identifier. We do not receive your payment details.
Floor Ruling (iOS)
Email address — collected through our authentication provider (Clerk) when you create an account.
Ruling requests — the text of the poker ruling questions you submit. This is sent to the Anthropic API to generate a ruling and is logged to enforce free-tier usage limits and to improve the service.
Subscription status — managed by RevenueCat if you purchase Pro. Payment itself is handled by Apple.
StoryInfinity (Web — coming soon)
Email address — if you join the waitlist or create an account.
Story content and prompts — text you submit is sent to AI providers (such as Anthropic) to generate narrative responses and may be retained to maintain your story's continuity.
ovaldevelopment.com
Server logs — our hosting provider (Vercel) automatically records standard request logs (IP address, user agent, timestamp, requested URL) for security and operational purposes.
Waitlist submissions — if you sign up for a waitlist, we collect the email address you provide.
We do not use advertising cookies or third-party analytics trackers on our marketing pages.
3. Data We Do Not Collect
We do not collect your name unless you voluntarily provide it.
We do not collect your precise or approximate location.
We do not collect payment card or bank details. All in-app purchases are processed by Apple.
We do not collect contacts, photos, microphone, camera, or health data.
We do not track you across other companies' apps or websites.
We do not use your data to serve advertising.
4. How We Use Your Data
We use the data we collect only for the following purposes:
To provide the Services — authenticating you, generating AI responses to your requests, syncing subscription entitlements, delivering the features you use.
To enforce usage limits — counting requests on free tiers so we can fairly allocate service capacity.
To improve the Services — diagnosing bugs, monitoring reliability, understanding which features work well.
To communicate with you — responding to your support requests and, if you opted in, sending waitlist or product updates.
To comply with legal obligations — including responding to lawful requests and protecting against fraud or abuse.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects about you.
5. Third-Party Services
We rely on a small number of trusted service providers to operate the Services. Each is bound by a data processing agreement or equivalent terms requiring them to protect your data with safeguards at least equal to those described in this policy, and to use it only to provide services to us.
Apple — App Store distribution and in-app purchase processing. See Apple's Privacy Policy.
We do not sell your personal data. We do not share your personal data with advertisers, data brokers, or third parties for their own marketing purposes.
6. Data Retention
Account data (email, authentication records) is retained for as long as your account is active. When you delete your account, this data is deleted within 30 days, except where longer retention is required by law.
Usage logs (ruling request counts, diagnostic logs) are retained for up to 12 months, then deleted or aggregated into anonymous statistics.
TokeBox shift data stays on your device. Uninstalling the app removes it (unless you have backed it up via iOS device backup).
Support correspondence is retained for up to 24 months so we can follow up on related issues.
Server logs held by Vercel are retained per their standard retention (typically 30 days).
7. Your Rights
Regardless of where you live, you have the following rights over your personal data:
Access — request a copy of the personal data we hold about you.
Correction — ask us to correct inaccurate or incomplete data.
Deletion — ask us to delete your personal data ("right to be forgotten").
Portability — request your data in a commonly used, machine-readable format.
Objection and restriction — object to certain uses of your data, or ask us to restrict processing.
Withdraw consent — where we rely on your consent, you may withdraw it at any time.
Complain to a regulator — residents of the EEA, UK, and similar jurisdictions have the right to lodge a complaint with their supervisory authority.
To exercise any of these rights, email support@ovaldevelopment.com. We respond to verified requests within 30 days.
8. Account Deletion
If you have an account in one of our apps, you can delete your account and its associated data at any time:
In-app — open Settings → Account → Delete Account inside the app. Deletion begins immediately and completes within 30 days.
By email — send a deletion request to support@ovaldevelopment.com from the email address associated with your account.
Deleting your account removes your email, authentication record, and usage history from our systems and from our processors (Clerk, RevenueCat). Limited records may be retained where required to meet legal, tax, fraud-prevention, or accounting obligations.
9. Children's Privacy
Our Services are not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction, such as 16 in parts of the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@ovaldevelopment.com and we will delete it promptly.
10. Data Security
We apply reasonable administrative, technical, and physical safeguards designed to protect your personal data, including encryption in transit (TLS), encryption at rest where supported by our processors, scoped access controls, and regular security reviews of our dependencies. No method of transmission or storage is perfectly secure, but we work to follow industry best practices.
11. International Data Transfers
We and our service providers operate primarily in the United States. If you access the Services from outside the United States, your data may be transferred to, stored in, and processed in the United States or other countries where our providers operate. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required by applicable law.
12. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you specific rights, including the rights to know, delete, and correct the personal information we hold about you, and the right to opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. To exercise your rights, email support@ovaldevelopment.com.
13. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you within the app or by email. Your continued use of the Services after the effective date of an updated policy constitutes acceptance of the changes.
14. Contact Us
For any questions about this Privacy Policy or your personal data, contact: