Privacy Policy · Last updated 18 August 2026
Sofa Heist ("the app") is a party game companion. This policy explains what data the app collects and how it's used.
Names you enter during gameplay. Player names are used to generate the story for that game session. They stay on your device, with one narrow exception described under Name insights below: if you turn on sharing, counts of well-known names may be shared, and any other name may be sent to our server alongside a one-way hash — see that section for exactly what happens to it and when.
Purchase information. If you buy a story pack or voice pack, the purchase is processed by Apple (via the App Store) and, if configured, by our purchase-management provider, RevenueCat. We receive confirmation that an entitlement is active, not your payment details — Apple/your device handles all payment information directly and Sofa Heist never sees your card details.
Locally stored preferences. Which packs you've purchased and which theme/voice you've selected are stored on your device (using your browser's or OS's standard app storage) so they persist between sessions. This data is not sent to us.
To work out which characters and story packs to build next, the app keeps a tally of how often well-known names are chosen.
This is on by default. You are told about it on first play and can turn it off there, or at any time afterwards in Settings. Turning it off also deletes whatever has been collected.
What is and isn't involved:
Counts can additionally be contributed so the app can show the most popular picks by country, and so we can work out which names to add. This is a separate setting from counting and can be turned off on its own.
What is sent depends on whether the app recognises the name:
Names the app recognises (around 1,900 well-known people and characters) are sent as plain country totals.
Any other name is sent to our server immediately, alongside a one-way hash and a deduplication token, in the same request — it is not withheld and requested separately later. What is gated is whether the server ever surfaces or acts on that name: it is held privately and is never shown, used, or added to any public list unless at least 12 unrelated people independently submit that same name, at which point it is, by construction, one that many unconnected households chose. If it never reaches that threshold, it is deleted within 45 days.
If you would rather share nothing at all, turn off Name insights in Settings; that stops both the counting and the sharing.
Read-aloud uses your device's built-in text-to-speech engine. Story text is processed entirely on-device; it is not sent to any server.
Sofa Heist does not knowingly collect personal information from children. The app contains no chat, social, or data-collection features aimed at minors.
If this policy changes, the update date above will be revised. Continued use of the app after changes constitutes acceptance of the revised policy.
Questions about this policy: [YOUR EMAIL ADDRESS]