Privacy Policy
This policy explains what the JustMorriz app collects, why, how long we keep it and what you can ask us to do with it. It is currently available in English only.
Last updated: 9 August 2026
Who we are
JustMorriz ("the app") is developed and operated by Lumevo Lab ("we", "us"), the data controller for the personal data described below. You can reach us at any time at info@lumevolab.com.
The app is a Nine Men's Morris game for iOS, Android and the web. It is free, contains no advertising and no in-app purchases. We do not sell your data, and we do not share it with advertising networks or data brokers.
What we collect and why
How much we hold depends on how you use the app. You can play as a guest without giving us an email address at all.
| Data | Why we need it |
|---|---|
| Account identifier — a user ID, and the email address if you sign in with email, Google or Apple | To sign you in and to attach your profile and progress to you, so they survive a reinstall or a new device. Guest accounts have an ID but no email address. |
| Profile — nickname, chosen avatar, country code taken from your device language settings | To identify you to other players in matches, invitations and the leaderboard. |
| Game data — ratings and rating history, games played, wins, losses and draws, recent results, puzzle progress | To run the rating system, the leaderboard and your statistics screen. |
| Friends and blocks — the players you add as friends and the ones you block | To let you invite specific people to a game, and to stop unwanted contact. |
| Online match data — the moves and state of a match in progress, and its result | To play the match, to let you reconnect after losing signal, and to update both players' ratings on our servers. |
| Play log — one record per game started: your user ID, the mode and difficulty, country code, platform (iOS/Android/web), device type (phone/tablet) and the app version you are running | To understand how the game is actually used — which modes are played, on which devices, and how quickly players move to a new release — so we know what to improve and what to keep supporting. |
| Notification tokens — a push token per device | To deliver game invitations and turn notifications. Only if you allow notifications. |
| Analytics and crash reports — app events, device model and OS version, and technical details of a crash | To see which parts of the app are used and to find and fix crashes. Collected via Firebase Analytics and Firebase Crashlytics, and only in the published (release) versions of the app. |
We do not collect your precise location, your contacts, your photos, your microphone or camera, or any payment details. The country shown next to your name comes from your device's language and region settings, not from GPS.
What other players can see
Other players can see your nickname, avatar, country, rating and games record — on the leaderboard, in matchmaking and in a match. Your email address is never shown to other players.
Legal basis
For users in the European Economic Area and the UK, we process personal data on these bases under the GDPR:
- Performance of a contract — account, profile, matchmaking, online matches, ratings and leaderboard: without this data the game cannot work.
- Legitimate interests — the play log, crash reports and product analytics, kept to the minimum needed to keep the app stable and to decide what to build next.
- Consent — push notifications, which are sent only after you allow them in the system dialog and which you can revoke at any time in your device settings.
Who processes the data
The app runs on Google Firebase (Google Ireland Limited /
Google LLC), which acts as our processor for authentication, database,
online matches, push notifications, analytics and crash reporting. Data
is stored in Google's European regions (Firestore in the
eur3 multi-region, the realtime database used for online
matches in europe-west1).
If you sign in with Apple or Google, that provider confirms your identity to us; their own privacy policies apply to what happens on their side. Apple's "Hide My Email" is supported: in that case we only ever see the relay address.
Some data may be transferred to or accessed from outside the EEA by these providers under the European Commission's Standard Contractual Clauses. We do not transfer your data to anyone else.
How long we keep it
- Account, profile and game data — for as long as your account exists. Delete the account and it goes with it.
- Online matches — kept while the match is live and shortly afterwards, then removed automatically.
- Play log — retained as usage history for the statistics described above; it is tied to your user ID and is deleted together with your account.
- Push tokens — until you turn notifications off, sign out, or uninstall the app.
- Analytics and crash data — kept according to Firebase's own retention settings (currently up to 14 months for analytics events).
A guest profile is not recoverable: it exists only on the device where it was created, and logging out or uninstalling destroys it.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or export it in a portable form. Write to info@lumevolab.com and we will answer within 30 days.
Deleting your account
Send us an email at info@lumevolab.com from the address linked to your account — or, if you signed in with Google or Apple, tell us your nickname in the app. We delete the account together with your profile, ratings, rating history, friends, leaderboard entry and play log. Deletion is permanent and cannot be undone.
You also have the right to lodge a complaint with your local data protection authority.
Children
JustMorriz is suitable for all ages, but it is not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.
Note that nicknames are visible to other players: we recommend choosing one that does not reveal a real name.
Security
Data travels over encrypted connections and is stored on Google's infrastructure. Access to the database is restricted by server-side security rules, so a player can only read and write their own data; ratings for online matches are calculated on our servers rather than by the app, so results cannot be tampered with from a device. Requests to our backend are additionally verified with Firebase App Check.
No system is perfectly secure, but if a breach ever affected your personal data we would notify you and the competent authority as the law requires.
Changes to this policy
If we change how we handle your data we will update this page and the date at the top. Significant changes will also be announced in the app.
Contact
Questions about this policy, or about your data, go to the same address as everything else — we read every message.
Privacy contact
info@lumevolab.com
For help with the game itself, see the Help & Support page.