SOFA × HEIST

Privacy Policy · Last updated 18 August 2026

Sofa Heist ("the app") is a party game companion. This policy explains what data the app collects and how it's used.

What we collect

Names you enter during gameplay. Player names are used to generate the story for that game session. They stay on your device, with one narrow exception described under Name insights below: if you turn on sharing, counts of well-known names may be shared, and any other name may be sent to our server alongside a one-way hash — see that section for exactly what happens to it and when.

Purchase information. If you buy a story pack or voice pack, the purchase is processed by Apple (via the App Store) and, if configured, by our purchase-management provider, RevenueCat. We receive confirmation that an entitlement is active, not your payment details — Apple/your device handles all payment information directly and Sofa Heist never sees your card details.

Locally stored preferences. Which packs you've purchased and which theme/voice you've selected are stored on your device (using your browser's or OS's standard app storage) so they persist between sessions. This data is not sent to us.

Name insights (on by default, can be turned off)

To work out which characters and story packs to build next, the app keeps a tally of how often well-known names are chosen.

This is on by default. You are told about it on first play and can turn it off there, or at any time afterwards in Settings. Turning it off also deletes whatever has been collected.

What is and isn't involved:

Sharing (on by default, can be turned off separately)

Counts can additionally be contributed so the app can show the most popular picks by country, and so we can work out which names to add. This is a separate setting from counting and can be turned off on its own.

What is sent depends on whether the app recognises the name:

Names the app recognises (around 1,900 well-known people and characters) are sent as plain country totals.

Any other name is sent to our server immediately, alongside a one-way hash and a deduplication token, in the same request — it is not withheld and requested separately later. What is gated is whether the server ever surfaces or acts on that name: it is held privately and is never shown, used, or added to any public list unless at least 12 unrelated people independently submit that same name, at which point it is, by construction, one that many unconnected households chose. If it never reaches that threshold, it is deleted within 45 days.

Your country is determined by the receiving server from your connection's region. We do not collect or store your IP address, precise location, or any device identifier. Published country figures below 5 are suppressed. You can turn sharing off at any time in Settings.

If you would rather share nothing at all, turn off Name insights in Settings; that stops both the counting and the sharing.


What we don't collect

Third-party services

Voice playback

Read-aloud uses your device's built-in text-to-speech engine. Story text is processed entirely on-device; it is not sent to any server.

Children's privacy

Sofa Heist does not knowingly collect personal information from children. The app contains no chat, social, or data-collection features aimed at minors.

Changes to this policy

If this policy changes, the update date above will be revised. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact

Questions about this policy: [YOUR EMAIL ADDRESS]

← Back to Sofa Heist