Privacy Policy

1. Scope

This Policy covers the Mission Impossible iOS app, related support, and jrtechnologies.org. It describes the product's intended US launch practices. Some features and service providers may be added as the app develops; we will update this Policy before using them in a materially different way. Stripe and Link process purchases made through the browser checkout under their own terms and privacy notices.

2. Information we collect

Account and profile

We collect information you provide, such as email address, account name, profile image or avatar, authentication details, settings, and support messages. Passwords are handled by our authentication service rather than stored as readable passwords. If you use an identity provider, we receive identifiers and profile information it makes available to us.

Friends, events, missions, and proof

We process friend requests and relationships; group membership; event invitations, attendance, settings, and timing; mission text, assignments, favorites, and secret-mission reveal state; text, photo, or video proof; reviews and reports; point records, winners, and statistics. We also process the people shown or heard in media users upload. Please obtain permission before uploading other people's information or recordings.

Purchases and eligibility

For Mission+ and Premium Event Passes purchased through Stripe-hosted Checkout, we receive product, transaction, subscription, refund, and entitlement information from Stripe and Link to verify access and prevent duplicate credits. Stripe and Link process payment details; Mission does not receive your full payment-card number. To prevent repeat claims of the one-time free premium event, the app may use Apple's DeviceCheck and App Attest signals, an Apple account fraud metric, account verification status, account age, and repeated-signup patterns. We do not plan to create a custom device fingerprint.

Device, usage, and website data

We may process app version, device and operating-system information, push tokens, IP address, timestamps, feature and purchase-flow events, server logs, crash and performance data, and security signals. Our website host may receive standard request data such as IP address, browser type, and pages requested. We use this information to operate and secure the service, troubleshoot errors, and understand feature use. Camera, photo-library, and notification permissions are requested through iOS when a feature needs them; you can change them in iOS settings.

First-party development analytics. When this development-only feature is enabled, Mission assigns a random installation ID and records a narrow list of app interactions: first open, event creation, paywall view, browser checkout handoff and return, theme selection, Premium trophy view, recap share-sheet opening, and advanced-stats view. An authenticated interaction is associated with the signed-in Mission account; only the first account used with an installation is used for installation-to-host reporting. The events contain an event type, time, and optional product type, not mission proof, media, email, full payment details, or arbitrary user-entered text. These records stay in Mission’s development database and are not exported as billing events to PostHog. UI events expire after 90 days and installation markers after 180 days. Browser handoff records do not prove that Stripe Checkout loaded or that a payment succeeded.

3. Why we use information

We use the information above to create and secure accounts; deliver events, missions, proof review, scoring, and stats; send requested service and safety notices; verify purchases and free-grant eligibility; respond to support and privacy requests; investigate abuse, fraud, and technical problems; comply with law; and improve reliability and product design. We do not use the app to target ads based on activity across other companies' apps or websites, and we do not sell personal information for money.

4. Who can see information

Your profile and activity are visible according to the app feature you use. Friends and group or event members may see names, memberships, invitations, missions, scores, winners, and history. Before a submission is reviewed, its proof is visible to eligible event participants so they can review it. A secret mission is intended to remain hidden from unauthorized participants until revealed. A premium recap image may be shared by a user outside the app and can include event name, winner, final scores, and theme, but not submitted proof. Think carefully before uploading sensitive material or sharing a recap.

When Mission enables its posting filter, we send text you submit for public or shared spaces, including names, mission descriptions, and text proof, and JPEG/PNG proof photos to OpenAI for automated content moderation before posting. Mission does not include your account ID, email address, report details, or private media URL in that request. Apple Sensitive Content Analysis may also examine proof photos and videos on your device under your iOS safety settings; that analysis is on-device. Video proof is unavailable while the OpenAI posting filter is enabled. A rejected post is not shown to other participants.

We use providers for hosting and storage, database and authentication, email delivery, push notifications, crash monitoring, analytics, and purchase processing. Our current development stack includes Cloudflare, Neon/Postgres, Better Auth, Resend, Sentry, and PostHog; the planned browser checkout uses Stripe Managed Payments and Link. Their roles and final production configuration must match the live app and App Store disclosures. Providers receive information needed to perform their services under applicable agreements. We may also disclose information with your direction, to comply with law, to respond to valid legal process, or to protect users, our rights, and service security. A business transfer may involve information subject to appropriate safeguards.

5. Retention and deletion

We keep account and gameplay data while needed to provide the service and for legitimate security, dispute, and legal purposes. Proof media and text are intended to be deleted from active storage immediately after a submission is reviewed. The submission outcome, reviewer, point record, and necessary audit records remain for event integrity. Open safety reports remain available to reviewers until a decision. Closed reports and their personal links and free text are removed 30 days after closure unless a documented legal hold applies. Mission does not keep proof bytes or media hashes for a report. Pending proof is intended to be removed when the submission is resolved or, if it is still pending, at the event's one-week settlement cutoff. We target no more than 30 days of recoverable database history and keep a separate deletion-intent record for up to 30 days so account deletion can be reapplied after a database restore. Provider logs may persist for limited operational periods before expiry.

When you delete your account, we remove your sign-in credentials and personal content, revoke account access, and replace text you authored in shared groups, events, missions, and proposals with neutral labels, subject to lawful retention. To preserve other participants' event history, participation, points, and times remain but your displayed name is replaced with “Deleted User.” Information required for fraud prevention, legal compliance, disputes, or security may be retained only as needed for those purposes. Deleting the app alone does not delete your account. See Account Deletion.

6. Your choices and privacy rights

You can edit profile and notification settings, block users, manage iOS permissions, and initiate account deletion in the app. You can request access to, correction of, or deletion of your personal information by emailing info@jrtechnologies.org. Depending on your state, you may also have rights to obtain a copy of certain data, appeal a denial, or opt out of certain uses. We will honor applicable rights, verify requests where needed, and explain any legal exceptions. We will not discriminate against you for exercising a privacy right.

We do not currently sell personal information or use it for cross-context behavioral advertising, so there is no sale or targeted-advertising opt-out to exercise for those practices. If that changes, we will provide the notices and choices required by applicable law before doing so.

7. Children and safety

Mission Impossible is for people age 13 and older, or older where local law requires. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has an account or submitted information, email us so we can investigate and delete it as appropriate. Parents and guardians can contact us about a minor's information.

8. Security and location

We use access controls, private media storage, authentication, and other technical and organizational measures designed to protect information. No service can guarantee perfect security. Mission Impossible is intended for a US-only launch, and information may be stored or processed in the United States by us and our service providers.

9. Changes and contact

We will post an updated date when this Policy changes and provide additional notice for material changes where required. Questions, requests, and complaints can be sent to info@jrtechnologies.org or JR Technologies LLC, 30 N Gould St, #68608, Sheridan, WY 82801, United States.