# Privacy Policy for AAUPNoKings App **Last Updated:** March 18, 2026 **App Version:** 1.0.0.30 ## Introduction This Privacy Policy describes how the AAUPNoKings App ("we," "our," or "the App") collects, uses, and protects your information when you use our mobile application. Note -- you control what information you share. We only collect the information you provide, and you can delete it at any time directly within the app. Moreover, you can use the app completely anonymously if you choose, and you can play Bingo in Airplane mode, so that you do not have to connect to the internet, and no information will be shared with us or anyone at all (in this case the ReFISHtance montage will not update and you will not be able to share or read messages from other users). ## Information We Collect ### Information You Provide When you use the App, you may voluntarily provide the following information: - **User Name**: An optional display name for your fish avatar in the Resistance School - **Protest Message**: An optional message you wish to amplify (e.g., "Protect Funding for Science"), which will be displayed alongside your fish avatar in the montage - **Email Address**: An optional email address if you wish to be contacted about future AAUP-CSU events ### Automatically Collected Information - **Game Progress**: Your bingo game score and completed squares - **Fish Avatar**: The color and shape you select for your fish avatar (e.g., Fish_C, Puff, Turtle, Crab, Jelly) - **Appreciation/Likes**: Records of which protest messages you have "liked" or shown support for - **Anonymous User ID**: If you use the app without signing up, a randomly generated anonymous identifier is created to track your game progress - **Timestamp**: The date and time when you sign up or update your information ### Technical Information - **Camera Access**: The App requests camera permission only for QR code scanning functionality. No photos or videos are stored or transmitted. ## How We Use Your Information We use the collected information for the following purposes: - **Game Functionality**: To track your bingo progress and display your fish in the collective montage - **Event Communication**: To contact you about future AAUP-CSU events (only if you provide an email address, and you will have the option to remove it at any time) - **Display Messages**: To show your optional protest message alongside your fish avatar - **Community Engagement**: To track which messages resonate with the community through the "like" feature - **Aggregate Statistics**: To display total points and number of fish across all users ## Data Sharing We do not sell, trade, or rent your personal information to third parties. Your information is used exclusively by AAUP-CSU for the purposes stated above. **Email Addresses**: If you provide an email address, it will be shared only with AAUP-CSU for the purpose of contacting you about future events. It will not be shared with any other organizations. **Protest Messages and Likes**: Your optional protest message and fish avatar are visible to all App users in the collective montage. Other users can show appreciation for messages by "liking" them. Like counts are publicly visible alongside messages. User names are displayed with messages if provided. ## Data Storage Your information is stored securely using Firebase Firestore, a cloud-based database service provided by Google. Firebase employs industry-standard security measures to protect your data. ## Local Storage The App stores certain information locally on your device to improve performance and user experience: - **Game State**: Your bingo card configuration, toggled squares, and progress - **User Preferences**: Your selected avatar color and shape - **Login Information**: Your user ID to maintain your session across app uses - **Avatar Change Tracking**: Whether you've received the one-time reward for customizing your avatar - **Masked Email**: After you submit your signup information containing an email address, the actual email is immediately deleted from local storage and replaced with a masked version (e.g., "b****") for your protection This locally stored data remains on your device and is used to restore your progress when you reopen the App. You can clear this data by uninstalling the App or clearing the App's data through your device settings. ## Email Privacy Protection When you provide an email address on the Sign Up page: 1. Your email is transmitted securely to Firebase Firestore so that AAUP-CSU can contact you about future events 2. **Immediately after successful submission**, the actual email address is permanently deleted from your device's local storage 3. A masked version of your email (showing only the first letter followed by "****") is stored locally instead, to prevent accidental re-submission of your actual email on future updates 4. If you wish to provide a different email address, simply enter a new valid email address on the Sign Up page, and it will be processed and masked the same way 5. If you wish to remove email communication, you can leave the email field blank or enter a masked email, and AAUP-CSU will have your original email address already on file This two-step masking process protects your email privacy in local storage while still allowing AAUP-CSU to reach you about events. ## Your Rights and Choices You have the following rights regarding your information: - **Update Information**: You can update your user name, protest message, or email at any time by accessing the Sign Up page again - **Remove Email**: You can remove your email address at any time by updating your information and leaving the email field blank - **Unlike Messages**: You can remove your "like" from any protest message by clicking the heart icon again - **Anonymous Participation**: You can use the App anonymously without providing any personal information. An anonymous identifier will be generated for game functionality only - **Opt-Out**: You can stop using the App at any time, which will prevent any new data from being collected - **Data Access**: You can request access to the information we have collected about you ## Camera Permission The App requests camera permission solely for scanning QR codes to unlock bingo squares. The camera is only activated when you explicitly tap the "Scan QR Code" button. No images are captured, stored, or transmitted during this process. ## Children's Privacy This App is intended for general audiences and is not directed at children under 13. We do not knowingly collect personal information from children under 13. ## Third-Party Services The App uses the following third-party services: - **Firebase (Google)**: For data storage and authentication services - **Flutter**: The framework used to build the application These services may have their own privacy policies governing their data collection and use practices. ## Changes to This Privacy Policy We may update this Privacy Policy from time to time. Any changes will be reflected by updating the "Last Updated" date at the top of this policy. Continued use of the App after changes are made constitutes acceptance of the updated policy. ## Data Retention We retain your information for as long as necessary to provide the App's functionality and fulfill the purposes outlined in this policy. If you wish to have your data deleted, please contact us using the information below. ## Version History **v1.0.0.9** (March 6, 2026) - Added email masking: Email addresses are masked in local storage after submission for privacy protection - Added privacy policy summary dialog on first app launch - Improved email privacy handling with one-way masking process - Updated documentation of data collection and protection practices **v1.0.0.8** (February 25, 2026) - Added new avatar options (Turtle, Crab, Jelly) and montage popup previews - Added post-click messaging for QR-unlocked bingo squares - Refined QR link confirmations to website URLs only **v1.0.0.7** (February 22, 2026) - Added Rally Posters page with GitHub image integration - Improved navigation UI across all pages - Enhanced carousel functionality for poster viewing **v1.0.0.6** (February 22, 2026) - Code refactoring: Extracted components into modular files - Improved code maintainability and organization **v1.0.0.5** (Initial Release) - Initial release of AAUPNoKings Bingo App ## Security We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. ## Contact Information If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact: **Brian Munsky** - Email: brian.munsky@gmail.com ## Your Consent By using the AAUPNoKings Bingo App, you consent to the collection and use of information as described in this Privacy Policy. --- *This privacy policy is designed to be transparent about our data practices and to give you control over your personal information.*