How Hunt of Secrets handles data

Hunt of Secrets lets a host create private clue-hunt games for real spaces. This policy explains what data is used to run the app, generate games, recognize objects, improve reliability, and support account deletion.

Last updated: September 25, 2026

Who Operates The App

EVL LABS, MB operates Hunt of Secrets. Contact support@ev1labs.com about your personal data or privacy rights.

Data Used For App Functionality

Account data: user id, email address, sign-in provider, and display name from Apple or Google sign-in.
Game data: game title, theme, difficulty, selected language, object names or descriptions, clues, hints, sessions, team names, score, timer, and progress data.
Photos or videos: reference photos of game objects selected or captured by the host. These are used to create and recognize private game objects.
Derived visual data: standard remote play shares only the active stage's private Apple Vision feature print. It is not a viewable photo. Reference photos and future-stage answers are not returned to players.
Location signal: the app may use nearby location during a hunt to improve object recognition. Testing telemetry should use derived proximity and quality signals, not exact private addresses.
Diagnostics: app version, build number, screen or flow, generation status, scan confidence, hint usage, timing, quality scores, and error state.
Purchases: App Store product id, transaction id, sandbox or production environment, subscription status and period, and remaining hunt credits. Apple processes payment; Hunt of Secrets does not receive payment card details.

AI Processing

OpenAI API keys are never stored in the iOS app. When a host requests a custom AI-generated game, its settings, object names or descriptions, and reference images are sent with consent through Hunt of Secrets to OpenAI to generate the private game text. Standard camera matching uses Apple Vision on the device.

Where additional AI checking is enabled, the player gives separate consent for each check before a captured photo and the host's reference photo are sent through our server to OpenAI. For remote-team AI checks, the host separately agrees to store reference photos privately on our server until the game or account is deleted. Reference photos are not returned to players. Hunt of Secrets does not archive players' check photos.

Technical request IDs, account or team IDs, stage IDs, checksums, timestamps and results are retained to prevent duplicate checks and record game progress. Remote attempt records are deleted with their room, game or account. Quota reservation metadata older than 24 hours is removed on the next verification reservation, or when the account is deleted. Additional AI checking is not available to everyone; describing it here does not enable it.

Hunt of Secrets sends OpenAI Responses API requests with store: false. According to OpenAI's current API data controls, API inputs and outputs are not used to train OpenAI models by default. A background response may still be stored temporarily, generally for about 10 minutes, so the app can poll for completion. OpenAI may retain limited abuse-monitoring logs for up to 30 days, and images flagged by automated safety review may be retained for legally required review. See OpenAI API data controls for current provider details.

Photos And Private Spaces

Photos are intended for private game creation and play. Users should avoid capturing faces, documents, payment cards, addresses, or other sensitive personal information unless it is truly needed for their private game.

Tracking

The app is not designed to track users across third-party apps or websites. No advertising tracking domains are declared in the app privacy manifest.

Retention And Deletion

Delete your account in Settings > Account > Delete Account to remove your profile, hunts, objects, sessions, progress, credit balance and server photos. Purchase verification and technical audit records may be retained to prevent duplicate credit grants and handle refunds. These include store transaction references, products, quantities, refund state and pseudonymous purchase identifiers, but no names, email addresses, photos or card details.

For a Sign in with Apple account with a stored credential, the backend securely stores an encrypted Apple refresh token and revokes it before deleting the account. An older account without a stored token is still deleted and the app provides Apple's manual removal instructions.

Diagnostic and product logs should not contain photos, secrets, prompts, or exact GPS coordinates. When an account is deleted, its AI generation, scan diagnostic, and product event logs are deleted together with the account.

Subscriptions

If Apple subscriptions are enabled, subscription cancellation is managed through the user's Apple account. Deleting a Hunt of Secrets account does not cancel an Apple subscription by itself.

Support

See the Support page for troubleshooting guidance, useful diagnostic details, and what should not be sent.