Privacy

Privacy Policy

Last updated: 23 July 2026

Terroshi is a location game about belonging. To make that work we need to know you're actually at a place when you Visit — and nothing more. This policy explains exactly what we collect, why, how long we keep it, and how to delete it. We wrote it in plain language on purpose.

The short version. We use your precise location only to confirm you're at a spot when you tap Visit, and the raw GPS reading is discarded — never stored. Your home area is kept only as a coarse, fuzzed cell. We don't track you across other apps or websites, we don't show ads, and we never sell your data. You can delete your account and its data from inside the app at any time.

Who we are

Terroshi ("we", "us") operates the Terroshi iOS app and this website. You can reach us any time at support@terroshi.com.

What we collect and why

Everything below is used to run the game itself. None of it is used to track you or sold to anyone.

Precise location (a GPS fix, at the moment you Visit)

When you tap Visit, the app sends your current precise GPS fix to our server so we can confirm you're physically at that spot. This is the only time a precise fix leaves your device. See the retention statement below — the raw fix is never kept.

Home area (coarse, privacy-fuzzed)

So local leagues and neighborhood medals work, we store an approximate home district as a single coarse map cell (an H3 cell) — deliberately fuzzed so it never points at your address. We never store or display your live or precise home location.

Apple user ID (Sign in with Apple)

Sign in with Apple is the only way to create an account. We receive only Apple's stable account identifier, which ties your session and your gameplay to you. We do not request or store your email address or name.

Your handle (public username)

The name you pick is shown publicly — on the map when you hold a crown, on leaderboards, podiums, and to people you follow. Choose accordingly.

Push notification token

If you allow notifications, we store a device push token so we can tell you when someone takes your crown or you're close to promotion. You can turn notifications off in iOS Settings at any time.

Gameplay data

Your visits (recorded as a spot and the calendar day — see retention below), crowns, points, streak, league standing, seasons, and medals. This is the game.

Social actions

Who you follow, and any blocks or reports you make. Reports are used to keep the community safe and to act on abuse.

How we handle location data (retention)

The precise GPS fix you send when you Visit is never persisted. We use it in the moment to verify you're within range of the spot, and then discard it. A recorded visit stores only three things: which spot it was, the calendar day of the visit, and an accuracy confidence value (how trustworthy the reading was). It does not contain your coordinates. Your home area is stored only as a coarse, privacy-fuzzed cell. We never keep a trail of where you've been, and we never show anyone's live location.

What we do not do

No third-party tracking. We do not track you across other apps or websites, and there is no App Tracking Transparency prompt because there is nothing to track.
No ads. There is no advertising and no ad networks in the app.
No data sale. We never sell or rent your personal data.
No third-party analytics SDKs collecting your data for their own purposes.

How your information is shared

We share data only in these limited ways:

With other players, by design: your public handle, crowns, points, league standing, and podium positions are visible to others — that's the game.
With service providers we rely on to run the app: Apple (Sign in with Apple, push notifications), and our hosting and database provider. They process data on our behalf, not for their own purposes.
When required by law, or to protect the safety and rights of players.

Deleting your account and data

You are always in control. To delete your account and its data:

In the app: open Profile → Delete account. This removes your account and associated data.
By email: if you can't access the app, write to support@terroshi.com from the address tied to your account and we'll handle it.

See the account deletion page for step-by-step instructions. Deletion soft-deletes the account immediately so it disappears from the game; residual copies are purged from backups on our normal backup rotation, and we retain only what a limited set of legal or fraud-prevention obligations require.

Data security

Traffic between the app and our servers is encrypted in transit. Visits are verified server-side (including device attestation and speed checks) so the leaderboard reflects real presence. We keep access to production data limited to what's needed to operate the game.

Children

Terroshi is not directed to children under 13, and we don't knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

Your choices

Turn location off in iOS Settings — you simply won't be able to record a Visit.
Turn push notifications off in iOS Settings at any time.
Change your public handle in the app.
Delete your account and data (see above).

Changes to this policy

If we make material changes, we'll update this page and the "last updated" date above.

Questions? support@terroshi.com