Privacy Policy

Effective date: June 11, 2026 · Who we are: Tribe Industries Inc.

Bird Bam ("Bam," "we," "us") is a mahjong companion app made by Tribe Industries Inc., a Utah corporation. This policy explains what information we collect when you use the Bam iOS app and the brdbam.com website, how we use it, who can see it, and the choices you have.

Information we collect

Account information. When you create an account we collect your email address and a password, or — if you sign in with Apple or Google — the email address (and, if you share it, the name) those providers send us. We never see your Apple or Google password. You choose a display name, and Bam assigns your account a username automatically.

Profile details you choose to add. A profile photo, your city, a short bio, and how many years you've been playing are all optional. Add as much or as little as you like.

Game content. The groups you belong to, the sessions and hands you log, scores, stats, achievements, your solo hand log, and any photos you add — winning hands, session album shots, and your profile picture.

Contacts, only if you ask (optional). If you use "Find friends from contacts," the app reads the email addresses in your address book — not names, not phone numbers — and sends them to our server over an encrypted connection solely to check for matches. They are processed in memory and never stored: our server compares one-way coded versions (HMAC hashes computed with a secret key) against the hashes of members who have chosen to be discoverable, returns any matching profiles, and discards your contact list. The only contact information we store is a one-way hash of your own email address, and only while your "Discoverable by contacts" setting is on. That setting is off until you turn it on in Settings ▸ Privacy; turning it off again deletes your stored hash. To prevent abuse, we also keep a short log of each matching request — when it ran and how many addresses were checked, never the addresses themselves.

Notifications. If you turn on notifications, we store your device's push token so we can send them (for example, when someone follows you). We also keep your in-app notifications — what they say and whether you've read them — so we can show them to you in the app. Decline or revoke push permission any time in iOS Settings.

Purchases. Bam Pro subscriptions are billed by Apple. We never see your payment card details — we only receive your subscription status (active, trial, expired) so we can unlock Pro features. Our paywall provider, Superwall, processes device-level information to display the paywall and measure purchases (see "Service providers" below).

Support. If you email us, we keep the correspondence so we can help you.

What we don't collect: your location (city is optional and self-reported), your contacts' names or phone numbers, advertising identifiers, or cross-app tracking data. We use no advertising or general-purpose analytics SDKs; the only third-party SDK in the app is Superwall, our paywall provider (see "Purchases" above).

How we use your information

• To run Bam: accounts, groups, sessions, scores, stats, photos, and the activity feed.
• To connect you with other players you choose to follow or play with.
• To send notifications you've opted into.
• To process and honor your Bam Pro subscription.
• To respond to support requests.
• To keep Bam safe: preventing abuse, enforcing blocks, and securing accounts.
• To comply with the law.

We do not sell your personal information, and we do not use it for third-party advertising.

What other players can see

• Your profile — username, display name, photo, city, bio, years playing, and your stats and achievements — is visible to other Bam members by default. Turn on Private profile in Settings ▸ Privacy and only your followers can see it.
• Your activity — wins, solo mahjs, achievements, and new follows — appears in your followers' feeds. Wins logged in a private group hide the group's name and details from the feed.
• Session and hand photos are visible to the members of the group that played that session.
• Contact discoverability: while "Discoverable by contacts" is on, people who have your email address in their phone's contacts can find your profile through contact matching.
• Blocking someone hides your activity from each other and removes you from each other's contact-matching results.

Service providers

We share data only with the providers we need to run Bam, and only what they need to do their jobs:

• Supabase hosts our database, authentication, and file storage (privacy policy).
• Apple handles Sign in with Apple, in-app purchases, and push notification delivery (privacy policy).
• Google handles Sign in with Google, if you choose it (privacy policy).
• Superwall powers our subscription paywall and processes device information and purchase events to display and measure it (privacy policy).

We may also disclose information if the law requires it, to protect the safety of our members, or as part of a business transfer (we'd notify you of that).

Data retention and deletion

We keep your information while your account is active. You can delete your account any time in Settings ▸ Delete account. When you do, your profile and content stop being visible immediately, and we delete or de-identify the personal data tied to your account within 30 days, except where we're legally required to keep it. One note: scores, hands, and comments you contributed to a group's shared sessions are part of that group's record — those entries remain for the other players, with your identity removed.

Security

We protect your data with encryption in transit (TLS), database row-level security so members can only access what they're permitted to see, secure credential storage in the iOS Keychain, and one-way peppered hashing for contact matching. No system is perfectly secure, but we work to keep yours safe.

Children

Bam is not directed to children under 13, and you must be at least 13 to create an account. If we learn we've collected personal information from a child under 13, we'll delete it. If you believe that has happened, email us.

Your rights and choices

You can edit your profile, change your privacy settings, and delete your account directly in the app. You can also email us to request a copy of your data, ask us to correct or delete it, or ask questions about this policy.

California residents: you have the right to know what personal information we collect, to delete it, and to correct it — and the right not to be discriminated against for exercising those rights. We do not "sell" or "share" personal information as those terms are defined in the CCPA/CPRA.

EEA and UK residents: we process your data to perform our contract with you (running Bam), with your consent (e.g., contacts access, notifications), and for our legitimate interests (e.g., keeping Bam safe). You have rights of access, correction, deletion, portability, restriction, and objection, and the right to lodge a complaint with your local supervisory authority.

To exercise any of these rights, email support@brdbam.com.

Where your data lives

Bam's servers are located in the United States. If you use Bam from elsewhere, your information will be transferred to and processed in the United States.

Changes to this policy

If we change this policy, we'll post the new version here and update the effective date. For material changes, we'll also let you know in the app.

Contact us

Questions, requests, or concerns:

Tribe Industries Inc. support@brdbam.com https://brdbam.com