Bezier Curve

Privacy Policy

What we collect, why we collect it, who processes it, where it goes, and how to have it deleted. Last updated 25 August 2026.

Bezier Curve Inc (“we”, “us”) operates Grand Shelem and this website. This policy explains what personal data we hold, why, and how to remove it.

We do not sell personal data. We do not show advertising, use advertising identifiers, or track you across other apps and websites.

What we collect

Account identity. You sign in with Apple, with Google, or with a one-time code sent to your email address. From Apple or Google we receive a stable identifier for your account and your email address; if you use Apple’s Hide My Email, we receive the private relay address Apple generates rather than your personal one. If you sign in by email, we receive the address you enter. Grand Shelem never asks you for a password, and no password can be used to reach the game: every one of these methods returns a signed token rather than credentials.

Profile. A display name you choose, an avatar picked from a fixed set we ship with the app, an optional country, and a Friend Code we generate so other players can add you.

Gameplay. Completed games, the seats and teams involved, scores, the cards played in each round, and aggregate statistics. A finished game also records the display names of everyone who was at the table, so that it stays readable as a shared record for the other three players. In ranked play we also store a skill rating and its history.

Social. Your friends list and pending match invitations.

Network address. We record the IP address used when an account is created. It is used solely to limit automated account creation and abuse.

Diagnostics. When the app encounters an error we may send a crash report containing the error itself, the device model, the operating system, the app version, and a short trail of the screens visited beforehand.

Feedback you send us. If you write to us through the feedback form in the app, we receive your message, an email address if you choose to provide one, and — unless you switch it off before sending — a copy of the app’s recent on-device log. That log is scrubbed for credentials before it leaves your device, but the scrub is a best-effort filter rather than a guarantee.

Purchases. If you buy a subscription, our payments processor records the purchase against your game account. Card and payment details are handled by Apple or Google and never reach us.

What we do not collect

In-game chat is not stored. Messages are delivered live between players and are never written to our database. Once a table closes, they are gone.

We do not collect contacts, precise location, photos, or microphone or camera data.

Why we can process it

We process account, profile, gameplay, and social data to provide the game you asked us to provide. We process network addresses and abuse signals on the basis of our legitimate interest in keeping the service usable and fair. We process diagnostics on the basis of our legitimate interest in fixing defects.

Who processes it for us

We use a small number of service providers, who act on our instructions and process your data only to run the service described here. Each publishes its own data-protection commitments.

• Authentication and database hosting — your account, profile, friends, and gameplay history.
• Application and scheduled-job hosting — runs the game server.
• Content delivery and network infrastructure — carries traffic between your device and our servers.
• Backup storage — holds copies of our database.
• Crash reporting and feedback intake — diagnostic reports, and anything you send us through the feedback form.
• Email delivery — sends the one-time codes used to sign in.
• Business email — hosts the mailbox you write to us at.
• App distribution and payment processing — the app stores.
• Subscription management — if and when subscriptions are offered.

Our operational monitoring is deliberately outside this list: it collects counters and server health only, and carries no personal data at all.

Where your data is processed

Bezier Curve Inc is based in Canada. Our service providers store and process personal data in the United States, where it is subject to US law and may be accessible to US authorities. Content delivery may route traffic through servers in other countries.

How long we keep it

Account, profile, gameplay, and social data are kept while your account exists. The IP address recorded when an account is created is kept as part of our abuse-prevention record, and is not removed when the account is deleted. Crash reports are held by our reporting provider and expire on its retention schedule.

We keep backup copies of our database on a rolling basis of roughly 30 days. Data that has been deleted from the live service can therefore still exist in a backup for up to that long.

Deleting your account

You can delete your account from within the app, or by emailing us. Deletion removes your account and its associated data, with a few narrow and deliberate exceptions that are explained in full on our account deletion page.

Changes

If we change this policy we will update the date at the top of this page.

Contact

Email [email protected].