Privacy Policy

BingoBuddy is operated by PI-ATAWI Investment Enterprise, an Indigenous-owned company based in Alberta, Canada. We are the data controller for the information described here. Contact us any time at general@pi-atawi.com.

• Your email address — to sign you in and to send receipts and support replies.
• Sign-in codes — stored hashed, never in plain text, and deleted once used or expired.
• Your scan packs — what you bought, how many scans are left, when they expire, and the date your membership year ends.
• A scan count — the date and time of each photo you scan, so your balance can be counted down. Not the photo, and not what was in it.
• Your game setup — colours, games and patterns, so they come back when you sign in on another device.
• Last active time — a single timestamp, so we can see roughly how many people are using the app.
• The date you accepted these terms.

• Your full card photos are not stored. A photo is sent for reading, the numbers come back, and the full image is discarded. A small thumbnail of each scanned photo is kept with your cards (below), so a win can show you which photo the card came from — clearing your cards deletes it. If you use your phone as your laptop's camera, the photo waits on our server only until your laptop picks it up — seconds, normally — and is deleted the moment it does.
• Your scanned cards are stored with your account — card numbers, called numbers, photo thumbnails and your bingo's phone number — so your cards follow you between your phone, laptop and tablet. “New night (clear all)” deletes them everywhere at once. They are used for nothing except showing you your own cards. One exception: a snapshot of what your cards said is kept for 90 days after each save and after you delete them, solely so a dispute (“the app misread my card”) can be checked against a record — then it is purged automatically.
• Your card details. Payments go directly to Stripe; we only ever see that a payment succeeded.
• No advertising identifiers, no tracking pixels, no analytics profile.
• No microphone recordings — see below.

When you turn on listen mode, your browser uses its own built-in speech recognition to turn the caller's voice into text. That happens through your browser and its provider — on most phones and on Chrome, that means Google. We never receive your audio, and no recording is made or kept by us. Listen mode is off until you switch it on, and stops the moment you turn it off or leave the screen.

One cookie: a signed sign-in token so you stay logged in for 90 days. It is strictly necessary for the app to work, contains no tracking, and is not shared. There are no advertising or analytics cookies, which is why BingoBuddy has no cookie banner.

BingoBuddy will carry adverts — some for our own products, the rest from businesses who pay us directly to appear. They are nothing like the adverts you meet elsewhere on the internet, and this section is our commitment about how they work.

A sponsor buys a space on the screen and that is all they buy. Their picture is served from our own website, the same as every other picture in the app. They give us no code, no pixel, no tag and no tracking script of any kind, and we would not install one. They never receive your email address, your name, your location, or anything you have done in the app — not in a list, not in a report, not in aggregate.

All a sponsor is ever told is how many times their picture was shown and over what dates. That is a number our own server counts. Nobody outside this app is watching you look at it.

They appear in one place only: while your photos are being read — the half-minute or so you would be waiting anyway — and they stop the moment your cards are ready. Nothing is ever shown over your cards while you are playing, and nothing interrupts a game.

We use a small number of processors, each for one job:

• Stripe — payments and receipts.
• Resend — sending sign-in codes.
• Supabase — the database holding the items listed above.
• Vercel — hosting the website.
• Anthropic — reading the numbers in a card photo at the moment you scan it.

Some of these process data outside Canada, including in the United States, where it may be accessible to courts and law enforcement under the laws of that country. We never sell your information, and we never share it for advertising.

Questions about how we use service providers outside Canada, or about anything else on this page, go to Troy L'Hirondelle, Owner at general@pi-atawi.com. He will answer you himself.

Your account details stay while your account is open. Scan records are kept for 13 months so allowances and billing can be checked, then removed. Sign-in codes are deleted as soon as they are used or expire. Payment records are kept by Stripe as long as tax law requires.

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and everything attached to it. Email general@pi-atawi.com and we'll action it within 30 days. Deleting your account removes your email, purchase history and scan counts from our database.

If you think we've mishandled your information you can complain to the Office of the Information and Privacy Commissioner of Alberta, which is the regulator for an Alberta business like ours under the province's Personal Information Protection Act.

BingoBuddy is for adults — you must be 18 or older. We don't knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18 we close it and delete what we hold about them. If you believe a child has made an account, email us and we will deal with it.

Traffic is encrypted in transit. Sign-in codes are hashed. Session tokens are signed and stored in a cookie your browser won't hand to scripts. No system is perfectly secure, but we keep what we hold deliberately small so there is little to lose.

If we change this policy we'll update the date above and, for anything material, tell you in the app.