Shuffly
Privacy Policy
Last updated: 28 July 2026
The short version
Shuffly works without an account. Your groups, member names, and shuffle history are stored only on your device and never uploaded anywhere. The one thing that can leave your phone is anonymous usage analytics, and only if you say yes when the app asks. You can turn it off, or delete it, at any time in Settings. The website works the same way: shufflyapp.com only runs anonymous analytics after you accept the cookie banner.
Who we are
Shuffly is made by BQKode, based in Norway. BQKode is the data controller for any personal data processed by the app. You can reach us at hello@shufflyapp.com.
Data that stays on your device
Everything you create in Shuffly is stored locally on your iPhone:
- Groups and the names of their members
- Shuffle results and history (used by the Fairness Engine)
- Match, darts, and minigolf scores and events
- Role templates and per-mode settings
This data never leaves your device, is never transmitted to us or anyone else, and is deleted when you delete the app. It may be included in your personal device backup (iCloud or local) under Apple’s standard backup terms. That backup belongs to you, and we have no access to it.
Anonymous usage analytics (opt-in)
To understand which features are used and to catch crashes, Shuffly can collect anonymous usage analytics using PostHog, hosted in the European Union (eu.i.posthog.com).
Analytics only runs with your consent. The app asks once, and nothing is sent unless you agree. If you consent, the following is collected:
- A randomly generated anonymous identifier (not linked to your name, email, phone number, or Apple ID, none of which we ever have)
- Feature usage events (for example “a shuffle was run in Team Builder”)
- App-open, update, and install events, plus a per-session identifier that groups the events from a single visit
- App version, build number, and app environment
- Standard technical context automatically added by our analytics tool: device model and type, iOS version, app language and time zone, screen size, and network type (Wi-Fi or cellular)
- Crash and error reports
The app enforces an allow-list on every analytics event: member names, group names, roles, results, and any other content you type are never sent. Screen recordings and session replays are not used.
The legal basis for this processing is your consent (GDPR Art. 6(1)(a)). Analytics data is used only in aggregate to improve Shuffly, is never sold, and is never used for advertising or cross-app tracking.
Your controls (in the app)
- Turn analytics off: Settings → “Share anonymous usage data”. Collection stops immediately.
- Delete analytics data: Settings → “Delete analytics data” stops collection and clears the anonymous identifier on your device, unlinking any previously collected events from your installation.
- Delete everything local: delete the app, or use the in-app reset options.
Cookies on shufflyapp.com
This website (shufflyapp.com) does not use cookies for advertising or cross-site tracking, and does not set any cookie before you make a choice. On your first visit we ask whether we can run anonymous analytics, using the same tooling as the app: PostHog, hosted in the European Union.
- If you accept, PostHog sets a first-party cookie (and local storage entry) holding a randomly generated anonymous ID. It is never your name, email, or any account, because the website has none. We then collect page views, referrers, browser/device type, and approximate (country-level) location so we can see which pages and app-download links are actually used.
- If you decline, or you take no action, no analytics cookie is set and nothing is sent to PostHog. Only a small local preference recording your choice is kept, so we don’t ask again. That preference is strictly necessary for the site to function, and isn’t itself a tracking cookie.
Session recordings/screen replay are not used on the website. You can change your mind at any time via the “Cookie settings” link in the site footer, which re-opens the consent banner. The legal basis for this processing is your consent (GDPR Art. 6(1)(a) / ePrivacy Directive Art. 5(3)).
Purchases
If Shuffly offers in-app purchases, they are processed entirely by Apple through the App Store. We never see or store your payment details. The “Shuffly Pro” unlock is tied to your Apple ID and follows you across your devices through the App Store, exactly as any other App Store purchase does. Your session-pack balance is stored on your device and mirrored to your own private iCloud key-value storage so it stays in sync across your devices. Neither is visible to us.
Children
Shuffly has no accounts, no social features, no advertising, and no tracking across apps or websites. It does not knowingly collect personal data from anyone, including children. Names entered into groups stay on the device of the person who typed them.
Data retention
Local data stays on your device for as long as you keep it. Analytics events (if you opted in) are retained in PostHog for up to 12 months and then deleted or reduced to aggregate statistics.
Your rights
Under the GDPR you have the right to access, correct, delete, and port your personal data, to withdraw consent at any time, and to object to processing. Because analytics is anonymous, the most effective way to exercise these rights is the in-app “Delete analytics data” control. For anything else, email hello@shufflyapp.com. You also have the right to lodge a complaint with your local supervisory authority (in Norway, that is Datatilsynet).
Changes to this policy
If we change what data Shuffly collects, we will update this page and the “Last updated” date before the change ships, and the app will ask for consent again where required.