Privacy

Last updated: October 21, 2026

Version scope: This policy covers existing built-in PlayDock gameplay, including versions 1.1 and 1.2. The optional Creator features described below apply to the Creator-enabled 1.3 beta; they are not features of the earlier versions.

The short version: Built-in PlayDock gameplay has no accounts, advertising, cross-app tracking, or native product-analytics SDK. Optional Creator uses the cloud services described below. Live camera frames and movement points are processed on your device for gameplay and are not uploaded to PlayDock or an Internet service. Copy Cat can assemble a local result photo in memory; PlayDock does not upload it. When a game's media downloads, Cloudflare records media-request fields that we can view in its R2 Operations analytics. For App Store privacy disclosure, PlayDock classifies Usage Data — Product Interaction as linked, used for App Functionality, and not used for tracking. It also classifies Cloudflare request, reliability, and security information as Diagnostics — Other Diagnostic Data, linked, used for App Functionality, and not used for tracking. The request does not attach a PlayDock account or advertising identifier. Cloudflare may process normal network and security information such as IP address, routing/system data, Customer Logs, and derived Network Data to deliver and protect the requested files. If you start optional TV casting, the rendered game picture — including the camera view when a game shows one — and audio are sent over your local network to the receiver you select. If you choose “Yes, report crashes”, PlayDock sends crash reports and a few kinds of error reports to Google Firebase Crashlytics, our service provider; you can turn this off at any time in Settings.

Optional Creator: Create and Remix in the 1.3 beta

Create and Remix are cloud features, separate from on-device gameplay tracking. When you use them, your prompts, edit messages, selected image or audio-file attachments, and the content needed to fulfil your request are sent to the Create service, hosted on Modal, and its AI providers, including OpenAI. The service stores those inputs, generated game code and artwork, gameplay previews, and project/run history so you can reopen and edit saved creations. We declare Other User Content, Photos or Videos, Audio Data, and Gameplay Content as linked, used for App Functionality, and not used for tracking.

Ready games, their previews and covers can be reached through their unique public links; not all generated outputs are private. Deleting the app or forgetting its access code does not automatically delete server copies or public links. Send privacy or deletion requests to [email protected]. We do not promise automatic deletion on a fixed schedule.

Optional Creator voice dictation sends a temporary microphone recording to OpenAI for transcription, returns the text to your draft, and deletes the native temporary recording. This is separate from an audio-file attachment you select and upload, which is stored with the project. Gameplay camera frames and pose landmarks remain on the device; this Creator feature does not upload them for gameplay.

Data collected

Product Interaction and Other Diagnostic Data from media delivery, and, only if you choose “Yes, report crashes”, Crash Data, Other Diagnostic Data and a random installation identifier (Device ID) for crash reports. Creator additionally stores the text, selected media and generated gameplay content described above. All these categories are classified as linked, used for App Functionality, and not used for tracking.

Camera

Used live, on this device, to turn your movement into game input. PlayDock does not upload live camera frames or pose landmarks to PlayDock or an Internet service. Copy Cat can assemble a local result photo in memory; PlayDock does not upload it. An optional cast can send the rendered camera view to the local-network receiver you select.

Accounts

Built-in gameplay is guest-only — no player email/password account or cloud save. Optional Creator in the 1.3 beta uses an access code and service session, with saved cloud projects and run history; it does not require a player email/password account.

Game downloads

A game's media downloads when you select its Download button, or automatically while the app is open if Download all games is on. That option is selected by default at the end of setup, with the total size shown, uses Wi-Fi or mobile data, and can be switched off in Settings. For built-in games, these downloads are images, sounds, video and 3D artwork checked against the app's built-in manifest. Creator games are separate: generated game code and assets can be hosted by the service or downloaded for local play.

Who We Are

PlayDock (the “App”) is provided by Rebuff Corp (“we”, “us” or “our”), 13727 SW 152 Street, #762, Miami, FL 33177, United States, which is responsible for the processing of information described in this Privacy Policy. Questions and requests may be sent to [email protected].

What We Collect

For the downloadable game-media packs (one for each game other than Balloon Pop), the app requests files from PlayDock's Cloudflare R2 content-delivery origin. Cloudflare’s R2 Operations analytics make objectName, datetime, actionType, actionStatus, bucketName, and responseStatusCode for these requests available to us. These fields show which game media object was requested. We use them to deliver and operate the requested game media.

For App Store privacy disclosure, PlayDock classifies this as Usage Data — Product Interaction, linked, used for App Functionality, and not used for tracking. It classifies Cloudflare request, reliability, and security information as Diagnostics — Other Diagnostic Data, linked, used for App Functionality, and not used for tracking. The guest-only app does not attach a PlayDock account or advertising identifier to the request. Cloudflare may receive the IP address and normal routing, system, Customer Log, derived Network Data, and security information needed to return and protect the selected files. Retention of these records is described under “Data Retention and Deletion”.

The built-in game catalog, its executable code and software development kit, and the body-tracking models ship inside the signed app. Optional Creator in the 1.3 beta may load generated game code and assets from the Create service or from a downloaded package. PlayDock does not include an account system, advertising SDK, cross-app tracking, or a native product-analytics SDK. Local profile, score, and activity information is stored in the app container on the device as described below and is not uploaded to PlayDock for gameplay.

How Your Camera Is Used

For built-in gameplay, PlayDock asks for up to three permissions: the camera, which is what makes the games playable — the app reads your body position from the camera and uses it to move things on screen; only if you cast, local network access (see Casting to a TV); and, only if you say yes when PlayDock offers game-time reminders, notifications (see Notifications).

Camera frames are analysed on this device, by machine-learning models bundled inside the app, and converted into body landmarks (the approximate position of joints such as wrists, shoulders and hips).
Those landmarks are used as game input and then discarded. They are not written to storage.
Some games show the camera picture on screen while you play; others use the camera only to track your movement and show no picture. Either way the iOS camera indicator is on whenever PlayDock is using the camera. PlayDock does not upload live gameplay video to PlayDock or an Internet service. Copy Cat can assemble a still result photo locally in memory; PlayDock does not upload it.
PlayDock does not upload gameplay camera frames, derived pose landmarks, or progress to PlayDock or an Internet service. If you start optional casting, the rendered game picture — including the camera view when a game shows one — and audio are sent over your local network to the receiver you select.

Optional Creator voice dictation in the 1.3 beta also asks for microphone access when you choose that feature. You can turn the camera permission off at any time in the iOS Settings app, under Privacy & Security → Camera. The games need the camera to read your movement, so they will not be playable while it is off, but the app will not stop you from revoking it.

Game Media Downloads

The built-in games' software is installed with the app, and Balloon Pop is included in full, ready to play with no download and no connection. This section covers only built-in game-media packs; optional Creator in the 1.3 beta is described above. The bigger built-in games keep their large media — images, sounds, video and 3D artwork — as a separate media download so the app itself stays small. Here is exactly how that works:

When downloads occur. Game media is downloaded only (a) when you select Download for a particular game, or (b) if the “Download all games” option is enabled during setup or in Settings, in which case, while the App is open, it downloads the media for each game one at a time over Wi-Fi or a cellular data connection, including media for the games in Game Pack 1, which can be played only once Game Pack 1 is unlocked. The option is selected by default at the end of setup, and the total download size is displayed before you continue. These downloads are paused while Low Data Mode is enabled. You may disable the option at any time in Settings, and you may cancel or remove any game’s downloaded media from that game’s page.
Built-in media packs contain only inert media — images, audio, video and 3D models, with no executable game code. Creator uses a separate route that can load generated code and assets as described above.
Configured media delivery. Media-pack downloads are requested from PlayDock's configured Cloudflare R2 content-delivery origin.
Request processing. The app sends the requested media-object path without attaching a PlayDock account or advertising identifier. Cloudflare may receive normal network and security information, including the IP address. Its R2 Operations analytics make objectName, datetime, actionType, actionStatus, bucketName, and responseStatusCode available to us. PlayDock classifies Product Interaction as linked, used for App Functionality, and not used for tracking. It classifies the request, reliability, and security information as Other Diagnostic Data, linked, used for App Functionality, and not used for tracking.
Every file is verified. The app ships with a built-in manifest listing every downloadable file and its cryptographic fingerprint (SHA-256). Each downloaded file is checked against that manifest before it is ever used; a file that does not match is discarded and nothing is installed.
On-device app storage. Downloaded media is stored in the app's container on this device. You can remove a game's download from its page in the app, and deleting the app removes that container from the device, subject to any separate device backups you control.
Offline afterwards. Once a game's download finishes, its stored media can be used in airplane mode without another pack request. Optional casting is a separate local-network feature.

Casting to a TV

PlayDock can optionally show the game on a television by casting to a PlayDock TV receiver you select on your local network. Casting is not required for phone play and begins only when you choose it.

When you tap Cast, PlayDock looks for a PlayDock TV receiver on the local network you are already on. This is why iOS asks for local-network permission, and why the app declares it.
While you keep casting, PlayDock streams the game picture — which includes the camera view of you when the game shows one — and the game audio to the receiver you chose, so the TV can display them.
The stream also carries a randomly generated identifier for the sending device so that the receiver can recognise it when it reconnects. The stream is transmitted over your local network without encryption.
PlayDock sends that stream to the selected receiver over your local network; it does not route the stream to PlayDock's Internet services.
Casting stops when you stop it, when you leave the app, or when the receiver disconnects. PlayDock does not make a claim here about what a receiver may retain.
Only cast to a receiver you recognise, for the same reason you would only screen-share to a device you trust.

Balloon Pop can run without a media download or Internet connection. After another game's media pack is stored, that game can open without another pack request until its media is removed or updated. Optional casting uses the local network you choose.

In-App Purchases

Purchases of Game Pack 1, and the redemption of codes for it, are processed by Apple in accordance with Apple’s terms. We do not receive or store your payment information or your Apple Account credentials. To determine whether Game Pack 1 has been unlocked, the App verifies the purchase records that Apple makes available on your device; this verification does not transmit purchase information to us. Offer codes are entered on Apple’s redemption screen. The App does not transmit purchase or redemption information to us; Apple provides us with sales and redemption reports in accordance with its terms.

Diagnostic Information

To support troubleshooting, the App records failure events on your device, such as a game failing to load. These events may include timestamps, app, game and operating-system versions, the device model, the screen and game in use, dock and cast state, fixed error names and codes, and crash and performance summaries supplied by Apple’s MetricKit; they do not include camera images, names or any text you enter. These on-device diagnostic files are excluded from device backups, replace older entries when a size limit is reached, and are removed when you delete the App; copies written to the device’s system log are managed by iOS.

Crash reports (optional). During setup, and once for players updating from an earlier version, the App asks “Let PlayDock report crashes?” with two choices, “Yes, report crashes” and “No thanks”. Nothing is sent unless you choose “Yes, report crashes”. You can change your choice at any time in Settings › Report crashes.

If you choose “Yes, report crashes”, the App sends reports to Google Firebase Crashlytics, a service provided by Google that we use as our service provider, when the App crashes, and when the camera, body tracking or a game’s window fails. A report contains: a technical crash trace (the locations in the App’s code where the problem happened, and, for some crashes, the error message the system or a software library produced); the kind of problem and a fixed error code; the game and its version; the screen; whether a TV was connected or a cast was running; the app, iOS and device-model versions; the time; and random identifiers that Firebase creates for this installation of the App (a Firebase installation ID and a Crashlytics installation ID). Firebase also receives the device’s IP address when a report is sent. PlayDock never adds camera images or video, movement or fitness data, names, photos, or anything you type to a report, and the App does not attach a user ID or any account to them.

We use crash reports only to find and fix problems in the App. We do not use them to contact anyone, to build a profile of anyone, or for advertising. The App does not include Google Analytics or any advertising SDK.

If you turn crash reports off (choose “No thanks” or switch off Report crashes in Settings), the App stops sending immediately: it records no further reports, deletes the reports waiting on the device to be sent, and removes any remaining crash-report files the next time it starts, before anything else runs. Only a report that was already being transmitted at that moment cannot be recalled. Reports already sent before you turned it off remain with Firebase until they are deleted as described under “Data Retention and Deletion”.

If you have enabled sharing with app developers in your device’s settings, Apple may also provide us with crash and performance reports in accordance with Apple’s privacy policy.

What Is Stored On Your Device

So the app can remember where you left off, PlayDock saves a small amount of information in its app container on this device. PlayDock does not upload this profile, progress, or settings data to PlayDock or an Internet service for gameplay. Separate copies may exist if you create an export or use a device backup:

Whether you have completed setup, and your play-space preferences
A local display name and a short bio, if you enter them, plus any goals you set
Activity summaries derived from your own gameplay (for example active minutes and an estimated effort figure), plus awards and quests
Game scores, play history, favourites and ratings
Game and app settings, such as handedness, difficulty and theme
Downloaded game media, for games you downloaded or that Download all fetched
A fitness profile: body-proportion and movement-range measurements derived from camera calibration (shoulder and hip proportions; reach, squat and side-step ranges; and related visibility, confidence and timestamp values) and, only if they were entered in an earlier version of the App, height, weight, age or year of birth, and sex. The current version of the App does not ask for these details. The App uses the calibration measurements, and any previously entered weight, to estimate calories; together with your movement during play, they produce the activity summaries used for activity history, goals, awards and quests. Raw camera video and raw landmark histories are not retained. This information is not transmitted to us. You may export it using the Export Data function, which first presents a question intended to be answered by an adult, to a destination you select (for example, Files or AirDrop). Exported copies are governed by the destination you choose and are not deleted if you reset the App or delete it from your device.

Built-in profile, progress and fitness information has no cloud save. Optional Creator projects and run history are stored by the service as described above. Any export or device backup you create is governed by the destination or backup service you choose.

Notifications. PlayDock may show notifications it plans on your device from your play history; nothing is sent to us. Turn them off in Settings › Notifications or in iOS Settings.

Data Retention and Deletion

On-device profile, progress and settings information is retained until you remove it, subject to the App’s storage limits; diagnostic files rotate as described under “Diagnostic Information”. You can remove on-device information yourself at any time:

Delete the app. Deleting PlayDock removes its app container from this device, including the items listed above and downloaded game media. It does not delete a separate export or device backup you created, or Apple’s records of your purchases.
Clear it in the app. The Fitness screen has separate controls. Reset calibration removes the stored calibration. Reset fitness profile restores the fitness profile to its defaults but does not delete activity history, goals, awards or quests. Clear game progress removes game scores, play history, favourites and ratings but does not affect fitness information. A game’s downloaded media can be removed from that game’s page.

Cloudflare retains media-request, network and security records as described in the Cloudflare Privacy Policy. Deleting the App does not delete records already held by Cloudflare. To request access to or deletion of information processed for PlayDock, contact [email protected].

Crash reports sent to Firebase Crashlytics, including the installation identifiers attached to them, are kept for 90 days; Firebase begins deleting them after 90 days, from its live and backup systems. Deleting the App, or turning crash reports off, does not delete reports already sent. To ask us to delete crash reports sent from your device, contact [email protected]; because reports carry only random installation identifiers, we may ask you for the date and time of the problem so that we can find them.

PlayDock asks for camera access before it uses the camera, and explains why first. If you cast, iOS likewise asks for local-network access the first time, and if you say yes to game-time reminders, iOS asks whether PlayDock may send notifications. Granting any of these is a choice you make on this device, and each can be withdrawn at any time in iOS Settings. Crash reports are off until you choose “Yes, report crashes”; you can change that choice at any time in Settings › Report crashes.

Third Parties

Cloudflare, Inc. provides content delivery for the downloadable game-media packs and processes the request information described above. Cloudflare’s Data Processing Addendum applies to personal information it processes on our behalf. Cloudflare’s terms separately permit it to use derived Network Data to provide, maintain, develop and improve its services. We require service providers that receive user data on our behalf to provide protection at least equivalent to that described in this Privacy Policy and required by Apple’s App Review Guidelines. Cloudflare’s own processing and retention are described in the Cloudflare Privacy Policy. The app contains no advertising network, attribution, analytics or measurement SDK, social login, or cross-app tracking; its optional gameplay crash-report SDK is Firebase Crashlytics, used only after you choose “Yes, report crashes” and only when configured in the build. Optional Creator also sends the requested text and selected content to its AI and hosting providers as described above. Optional local-network casting sends the rendered game picture and audio to the receiver you select.

Google LLC provides Firebase Crashlytics, which receives the crash reports described under “Diagnostic Information” only if you choose “Yes, report crashes”. Google processes them on our behalf under the Firebase Data Processing and Security Terms, and we use them only to fix problems in the App. Only people we authorise in our Firebase project, and Google as our service provider, can access them. Google’s processing is described at firebase.google.com/support/privacy.

The body-tracking models bundled in the app are built on open-source machine-learning software (Google MediaPipe and TensorFlow.js) and execute on the device from files inside the app. PlayDock does not upload gameplay camera frames or derived pose landmarks to Google or another machine-learning provider.

Tracking

PlayDock does not use the advertising identifier or link activity across other companies' apps or websites. It does not attach a PlayDock account or advertising identifier to a media request, but Cloudflare may receive network request data including the IP address for delivery and security. PlayDock classifies the retained Product Interaction and Other Diagnostic Data as linked, used for App Functionality, and not used for tracking. Looking for a cast receiver reads what that receiver broadcasts on your local network and is not used for cross-app tracking. Crash-report identifiers are random, created for this installation of the App, and used only to count and fix problems; they are not used to track you across other companies’ apps or websites. PlayDock does not present the App Tracking Transparency prompt because the app has no cross-app tracking path.

Children’s Privacy

PlayDock is a general-audience application that may be used by families, including children under the age of 13. The App does not require any player to provide a name, age, contact details or photograph, has no player-to-player chat, messaging or advertising. Built-in gameplay does not transmit locally entered profile/progress information to us; optional Creator in the 1.3 beta transmits and stores the prompts, selected attachments and generated content described above. Built-in profile names, photographs, fitness information and progress are stored on the device; they can leave it through optional casting to a receiver the user selects, an export the user makes, or a device backup. When the App is used, it transmits the content-delivery request information described under “Game Media Downloads”, including the device’s IP address, which we use solely to deliver and secure game media and to support the internal operation of the App, and it uses Apple’s services for purchases, restoring purchases and code redemption. We do not use content-delivery request information to contact any individual, to build a profile of any individual or for advertising, and it is retained only as described in “Data Retention and Deletion”. Purchases, code redemption and the export of fitness data are preceded by a question intended to be answered by an adult. A parent or guardian may contact us at [email protected] to ask about, or to request the deletion of, information relating to their child. Deleting the App removes its on-device data and downloaded media, but not separate exports, device backups, Apple’s purchase records or records held by Cloudflare.

If a parent or player chooses “Yes, report crashes”, the App sends the crash reports described under “Diagnostic Information”. They contain random installation identifiers and the device’s IP address, and no other personal information. We collect them solely to support the internal operations of the App, specifically to maintain and analyse its functioning and to find and fix crashes and failures, and we do not use or disclose them to contact any individual, to build a profile of any individual, for advertising, or for any other purpose. How we keep to that: the App attaches only fixed error codes and the random installation identifiers, never a name, user ID or account; the App contains no analytics or advertising software; only the PlayDock team members we add to our Firebase project can see reports; Google processes them only on our behalf under the Firebase Data Processing and Security Terms; and Firebase begins deleting them after 90 days. A parent or guardian may contact us at [email protected] to ask about, or to request the deletion of, crash reports sent from their child’s device.

Your Rights

Depending on where you live, privacy laws may give you rights to access, correct, export, or delete personal information, or to object to or restrict certain uses. PlayDock's local profile, progress, and settings are under your control on this device. For media delivery, PlayDock classifies retained Product Interaction and Other Diagnostic Data as linked, used for App Functionality, and not used for tracking. If you have a privacy question or request, contact us and we will respond as required by applicable law.

A parent or guardian may exercise these rights on behalf of a child. You can access, export or delete built-in profile/progress information on your device as described above. Optional Creator content and service history may also be held on our servers; contact us for privacy or deletion requests concerning those copies. Where the law of the European Economic Area or the United Kingdom applies, we process content-delivery request information on the basis of our legitimate interest in delivering and securing the App, and crash reports on the basis of your consent, which you can withdraw at any time in Settings › Report crashes. You may lodge a complaint with your local data-protection authority.

Changes to This Policy

If PlayDock ever changes what it does with data, this page will be updated before that change ships, and the "Last updated" date at the top will change with it.

Contact

Questions or requests concerning this Privacy Policy may be sent to [email protected] or to Rebuff Corp, 13727 SW 152 Street, #762, Miami, FL 33177, United States.