RIGGED
Privacy Policy
Zero bytes collected.
Not anonymised. Not aggregated. Not “only to improve the experience”. There is no server to send anything to, so there is no version of this where we quietly change our minds.
- No account
- Nothing to sign up for. No email, no phone number, no profile, no password to lose.
- No analytics
- No crash reporting, no event tracking, no advertising SDK, no attribution.
- No backup
- Android’s cloud backup is switched off in the manifest. Your settings never leave the phone, not even to your own Drive.
Where the data goes
Phone to phone. Nowhere else.
Play Together needs the network permission because Android has no “local network only” permission to ask for. The packets go to the phone next to you and stop there. There is no middle.
Cards are sent per device: the host tells your phone your own hand and everyone else’s card count. Nobody’s hand crosses the wire to somebody who should not see it.
Permissions
Three, and what each one is for.
This is the complete list from the app’s manifest — not the highlights. There is no location permission, no contacts, no camera, no phone state, no storage, and no advertising ID.
INTERNET
Talking to the phone next to you
Opening a socket or sending a broadcast on your own Wi-Fi needs this, even though the packets never leave the room.
Not used for: any server, any API, any download, any advert. Every game works in aeroplane mode except Play Together.
ACCESS_NETWORK_STATE
Telling two failures apart
“You are not on Wi-Fi” and “you are on Wi-Fi but nobody is hosting” look identical to a player and need opposite advice.
Not used for: reading your network name, your SSID list, or anything that identifies where you are.
RECORD_AUDIO
Two games that listen to how you say it
Yes or No and Magic 8-Ball let you ask out loud. Asked for the first time you open one of them, never at launch, and switchable off inside both.
Not used for: transcribing, recognising speech, identifying a voice, or uploading anything. Deny it and both games still work — you just tap instead of talking.
One detail worth being exact about, because “we never record you” is the kind of sentence people write without checking. The meter scores delivery — how loud you got, how steady you held it, how long you hesitated. It is a party gag and the app labels it as one; it is not a lie detector, because there is no acoustic signature of lying and anything sold as one is a coin flip with a waveform on it.
Normally the samples are read as a live stream and thrown away as they arrive — nothing is ever written down. On a platform that refuses to stream, the recorder falls back to a single temporary file in the operating system’s own cache folder, which is deleted the moment the score is read. That is the whole truth of it: never kept, never copied anywhere, never sent, and never touched by any other part of the app.
On your device
What is stored, and where.
One JSON file in the app’s private folder, which no other app on your phone can read. Uninstalling the app deletes it. It holds:
- Your settings — sound, haptics, reduce motion, accent colour, animation speed
- Lists you have typed — names, options, dares, forfeits, teams
- Photos you have picked for Mystery Boxes or Tier Ranker, copied into the app’s own folder so it does not need standing access to your gallery afterwards
- Your RIGS balance — play money that cannot be bought, sold or cashed out
- A random 16-character id, generated on your device, so a host can give you your seat back if your Wi-Fi drops mid-game. It is not a hardware id, it is not derived from anything about you or your phone, it identifies nothing outside that one game, and it never leaves your local network
None of it is transmitted anywhere. Android’s automatic cloud backup is
explicitly disabled — allowBackup="false" and a
dataExtractionRules file that excludes everything — so it is not copied
to your Google Drive either, and it does not follow you to a new phone. That is the
trade: nothing to restore, because there is nothing stored anywhere but here.
Don’t take our word for it
Four ways to check this yourself.
Anyone can write “we respect your privacy”. Below are things you can actually test, in about two minutes, with no tools beyond the phone in your hand.
- Put the phone in aeroplane mode and play. Every game except Play Together works exactly the same. Nothing spins, nothing waits for a network, nothing degrades — because nothing needed one.
- Check the permission list yourself. Settings → Apps → RIGGED → Permissions. You should see nothing beyond a microphone entry. No location, no contacts, no files, no nearby devices.
- Read the data safety label on Google Play. We fill it in; Google audits it against what the app actually does and can pull the listing if the two disagree. It says no data collected and no data shared.
- Open devtools on this page and count the requests. There should be exactly three, all to this domain, and the table below names them. If you find a fourth, this page is lying to you — and the address at the bottom is how to say so.
| File | Origin | Why | Size |
|---|---|---|---|
| / | this domain | The policy. CSS is inline; the diagram is inline SVG. | ≈36 KB |
| /favicon.ico | this domain | The icon in your tab and in search results. | ≈9 KB |
| /mark.png | this domain | The logo at the top of this page. | ≈8 KB |
| Third-party domains contacted: none. No fonts, no scripts, no frames, no beacons, no analytics. | 0 | ||
Third parties
There are none.
No advertising network. No analytics provider. No crash reporter. No attribution SDK. No social login. No payment processor — because there is nothing to buy: no subscription, no in-app purchase, no coin pack, and no way to spend real money anywhere in the app.
The app is built with open-source Flutter packages for playing sound, reading files and speaking text. They run locally on your device and none of them phone home. Nobody is paying us for a slot inside this app, which is the actual reason there is nothing to disclose here.
Children
Rated 18+, and honestly so.
RIGGED is not directed at children. The dare and confession decks reference drinking and adult situations, so the listing is rated for adults and carries no “Family” tag — a rating we chose knowing it costs us reach, because the alternative is claiming something the app does not honour. Since nothing is collected from anybody, no data is knowingly collected from children either.
Changes
If this ever stops being true.
If a future version collects anything, this page changes before that version ships, the date at the bottom changes with it, and the Play data safety label is updated in the same release. A policy quietly edited after the fact is worth nothing, and the edit history of this page is public.
There is no mailing list to notify, because there are no email addresses on file. The date below is the honest signal — if it has not moved, nothing has changed.
Contact
A real person reads this.
Questions about privacy, a bug, or something in here that reads as evasive — say so, and it gets fixed or explained.