Bezier Curve
Privacy Policy
What we collect, why we collect it, who processes it, and how to have it deleted. Last updated 14 August 2026.
Bezier Curve Inc (“we”, “us”) operates Grand Shelem and this website. This policy explains what personal data we hold, why, and how to remove it.
We do not sell personal data. We do not show advertising, use advertising identifiers, or track you across other apps and websites.
What we collect
Account identity. You sign in with Apple, Google, or an email address. We receive a stable identifier for your account and, where you sign in with email, that address. We never receive or store a password. Email sign-in uses a one-time six-digit code, and Apple and Google sign-in return a signed token rather than credentials.
Profile. A display name you choose, an avatar picked from a fixed set we ship with the app, an optional country, and a Friend Code we generate so other players can add you.
Gameplay. Completed games, the seats and teams involved, scores, the cards played in each round, and aggregate statistics. In ranked play we also store a skill rating and its history.
Social. Your friends list and pending match invitations.
Network address. We record the IP address used when an account is created. It is used solely to limit automated account creation and abuse.
Diagnostics. When the app encounters an error we may send a crash report containing the device model, operating system, app version, and recent in-app diagnostic logs. For crashes the app classifies as fatal, the report also includes a screenshot of the app at the moment of the crash. Logs are filtered to remove credentials before sending.
Purchases. If you buy a subscription, our payments processor records the purchase against your game account. Card and payment details are handled by Apple or Google and never reach us.
What we do not collect
In-game chat is not stored. Messages are delivered live between players and are never written to our database. Once a table closes, they are gone.
We do not collect contacts, precise location, photos, or microphone or camera data.
Why we can process it
We process account, profile, gameplay, and social data to provide the game you asked us to provide. We process network addresses and abuse signals on the basis of our legitimate interest in keeping the service usable and fair. We process diagnostics on the basis of our legitimate interest in fixing defects.
Who processes it for us
We use a small number of service providers, who act on our instructions:
- Supabase: authentication and our database.
- Render: application hosting.
- Sentry: crash and error reporting, including the fatal-crash screenshot described above.
- Apple and Google: sign-in, and payment processing for purchases.
- RevenueCat: subscription status, if and when subscriptions are offered.
How long we keep it
Account, profile, gameplay, and social data are kept while your account exists. Account-creation IP addresses are kept only as long as they are useful for abuse prevention. Crash reports are retained by our reporting provider on a rolling basis and expire automatically.
Deleting your account
You can delete your account from within the app, or by emailing us. Deletion removes your account and its associated data, with two narrow and deliberate exceptions that are explained in full on our account deletion page.
Children
Grand Shelem is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will remove it.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to some processing. Email us and we will act on the request.
Changes
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your data, we will say so in the app.
Contact
Email [email protected].