Privacy Policy

Last updated: July 2026

1. Introduction

homeroom games (“the Service,” “we,” “us,” or “our”), operated by Nevermind Software, LLC, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app and related services (served at /play). By using the Service, you consent to the practices described here. If you do not agree, please do not use the Service.

2. Information we collect

2.1 Information you provide

• Phone number. Your mobile number is your account identity. You sign in by entering it and confirming a one-time code we text you; we store it in normalized form.
• Display name and avatar. The name you choose to show other players, and an avatar you can re-pick, which can be a color and emoji or a photo you upload.
• Content you provide. The moves, answers, text, and other content you submit while using the Service, including images and files you upload to customize games.
• Photos, video, and audio. Photos you upload or capture with your camera, and, during a live call, your camera and microphone streams. We use these for the feature you provide them to, for example your avatar, a photo you add to a game or a shared link, or a clip of the moment a game ends that you save to your profile. Providing them is optional. Depending on the feature, this content may be shown to the other players in your game, saved by them to their own profiles, or, if you add a photo to a shared link, shown publicly to anyone who has that link (see sections 6 and 7).
• Communications. Support requests and any feedback you send us.

2.2 Information collected automatically

• Gameplay data. The games you join and your moves, scores, and outcomes.
• Presence and activity. Whether you currently have the app open and which game, if any, you are viewing, which other players in that game can see. We use the app-open signal to route notifications, showing you a notice in the app instead of texting you when you are already looking at it. We also keep a short-lived record of the in-app notices we show you, such as when it becomes your turn or a game ends, which can include players’ first names.
• Basic technical data. Standard connection information (such as IP address, browser, and device type) that our providers process to deliver and secure the Service.
• Device identifier. We assign your browser a random identifier, stored in local storage, and record which signed-in phone numbers have used that browser. We use this only to keep the Service secure and to enforce access restrictions (for example, so a suspended account cannot regain access by signing out). It is not used for advertising or cross-site tracking, and it persists until you clear your browser storage.

Product analytics. We use analytics service providers to understand how the Service is used. This usage data covers things like pageviews and in-app interactions, and may include session replays of how the app’s screens are used. In replays, text you type is masked by default, and live camera and microphone streams are not captured. Once you sign in, analytics are linked to your account identifiers, including your display name and a pseudonymous identifier derived from your phone number; the raw number itself is not part of your analytics profile. Analytics run by default. You can turn them off at any time, including replays, with the Product analytics toggle in your profile settings, and we honor the Global Privacy Control (GPC) browser signal as an opt-out. We do not use advertising trackers, and we do not sell or share your personal information for advertising.

2.3 AI processing data

We use AI in some features, such as generating game results from what players submit and removing the background from a photo you upload. The text, photos, and other content you provide to those features are processed by our AI service providers to produce the result. See sections 5 and 11.

3. How we use your information

• To create your account, sign you in, and run games.
• To track turns and scores and connect live calls.
• To send you game text messages you have opted into (see section 4).
• To generate content and process the photos and text you provide in certain features (see section 5).
• To provide support, debug issues, and keep the Service secure.
• To prevent fraud and abuse and comply with legal obligations.

4. Text messages

We send text messages (SMS) through our messaging provider, Twilio, in two ways. First, when you sign in, we text you a one-time verification code. Second, if you opt in, we send automated game notifications such as turn reminders, results, rematch requests, and edition-ready alerts. To deliver these, we share your phone number and the message content with Twilio.

• Message frequency varies with how actively your games are played.
• Message and data rates may apply depending on your mobile plan.
• You can mute notifications per game in the app, reply STOP to unsubscribe, or reply HELP for help.
• Consent to marketing texts is not required to use the Service.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. We do not sell your personal information, and text-messaging opt-in and consent are never shared with any third party. The only parties that receive your phone number are the service providers described in section 7 (such as Twilio, our SMS delivery provider), and only so they can deliver the messages you requested, not for their own marketing.

5. How we use AI

We use AI to process content you provide. For example, we write an edition or story from players’ answers, judge photo and word rounds, restyle or edit a photo, and remove the background from a photo you upload such as your avatar. When you use these features, the text, photos, and other content you provide are sent to an AI service provider to produce the result. We do not use your content to train AI models, and each provider’s processing of that content is governed by our agreement with it and its own terms. This content is used to produce your result, not to advertise to you.

6. Live calls

Games may include a live audio/video call, delivered through our real-time communications provider. If you turn on your microphone or camera, that audio/video is streamed to the other players in your game in real time. We do not record calls, and live call streams are not captured in the analytics session replays described in section 2.2. Call rooms are temporary and expire automatically. Separately, players in your game can save a short clip of the moment a game ends, as described in section 2.1.

7. How we share information

7.1 Service providers

We share data with service providers that help us operate the Service, under agreements that limit what they can do with it. They fall into these categories:

• Hosting and infrastructure providers that run our backend and store your account, games, and uploaded content.
• Communications providers that deliver your sign-in verification codes and the game text messages you opt into (see section 4).
• Real-time audio/video providers that power live calls.
• AI providers that process content you provide, such as generating game results and editing or cutting out photos (see section 5).
• Analytics providers that measure how the Service is used, including session replays, linked to your account identifiers as described in section 2.2.
• Browser push services (Apple, Google, Mozilla): if you turn on push notifications, your browser registers a subscription with its push service, which relays our notifications to your device.

Other players in a game you join can see your display name, avatar, and the game content you submit, and can hear or see you on a live call if you unmute. Some group features let the players in your game message each other, so your phone number may be visible to the other players in a game you join. A photo you add to a shared link is embedded in that link’s public preview image, so anyone who has the link can see it. Any player in your game can save the end of the game to their own profile as a clip; if your camera or microphone was on right after the game ended, the clip includes a still and a short recording of your video and audio from that moment (see section 2.1).

7.2 Legal requirements

We may disclose information if required by law or in response to court orders, subpoenas, or lawful requests, or to protect the rights, safety, and security of our users, the public, or us.

7.3 Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

7.4 Aggregated and de-identified data

We may share aggregated or de-identified data that cannot reasonably identify you.

8. Data retention

We retain personal information for as long as needed to provide the Service, keep it secure, and meet our legal obligations. In general:

• Account data (phone number, display name, avatar) is retained while your account is active, and game content is retained while the game exists.
• Saved clips are kept until you delete them from your profile or delete your account.
• Short-lived data is deleted automatically on a schedule, for example shared-link preview photos, presence and in-app notification records, analytics session replays, inactive sign-in sessions, and live call rooms.
• Security records (such as the device identifier described in section 2.2 and any access restrictions) are retained as long as needed to keep the Service secure and enforce those restrictions.

When you delete your account, we delete or de-identify your personal information. Your account record, sign-in sessions, uploaded photos, and saved clips are deleted from our systems. Your seats in shared games are de-identified, so the games your friends played stay intact without pointing back at you. Your analytics records are likewise de-identified: we remove your name and account identifiers from your analytics profile rather than erasing the underlying event history, which then no longer identifies you. Deleted data may persist in encrypted backups for a limited period before being overwritten.

9. International data transfers

We are based in the United States, and your information may be processed and stored in the United States and other countries whose data-protection laws differ from those where you live. We implement appropriate safeguards, including data processing agreements with our providers. By using the Service, you consent to these transfers.

10. Your privacy rights

10.1 Universal rights

Wherever you live, you can ask us to:

• Access a copy of your personal information.
• Correct inaccurate information.
• Delete your account and associated data.
• Export your data in a machine-readable format where feasible.

Edit your display name and avatar any time in the app, delete your account and its associated data from the profile menu (we delete or de-identify your data as described in section 8), mute texts per game or reply STOP, and log out to end a session on a device.

10.2 California residents (CCPA/CPRA)

You have the right to know the categories and specific pieces of personal information we collect and the purposes for collecting it, to request deletion, and to non-discrimination for exercising your rights. We do not sell your personal information or share it for cross-context behavioral advertising. Your privacy choices: our first-party product analytics are not a sale or share of personal information, and you can still opt out of them at any time with the Product analytics toggle in your profile settings, or by enabling the Global Privacy Control (GPC) signal in your browser, which we honor as an opt-out.

10.3 European/UK residents (GDPR)

We process your personal data based on performance of our contract with you, your consent, our legitimate interests, and legal obligations. You may withdraw consent, object to or restrict processing, and lodge a complaint with your local supervisory authority.

10.4 Exercising your rights

Email us at support@nevermind.llc with your request and enough information to verify your identity. We respond to legitimate requests within the time required by applicable law, and we aim to respond within 30 days.

11. AI-specific disclosures

• When you use AI features, the content you provide, including any photos, is sent to our AI service providers for processing, solely to produce that feature’s result.
• We do not use your personal content to train AI models.
• AI-generated content may contain errors, and we cannot guarantee its accuracy, uniqueness, or copyright status.
• We may log content briefly for debugging, safety, and abuse-prevention.

12. Data security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and reliance on established service providers that maintain their own security programs. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Data breach notification

If a breach affects your personal information, we will notify you promptly and within the timelines required by applicable law, describe the data affected, explain the steps we are taking, offer guidance on protecting yourself, and report to authorities as required.

14. Cookies and similar technologies

We do not use advertising cookies. Our analytics provider sets its own cookies and local-storage entries to measure usage and record the session replays described in section 2.2. You can turn analytics off, along with those cookies, with the Product analytics toggle in your profile settings, and we honor the Global Privacy Control browser signal. We also store a few items in your browser’s local storage to keep you signed in and remember your games, such as your session token, game tokens, and the random device identifier described in section 2.2, plus a short-lived tab identifier in session storage for the presence signal; that one is cleared when you close the tab. Clearing your browser storage signs you out on that device.

15. Links to other sites

The Service may link to sites we don’t operate (such as our providers’ pages). We are not responsible for their content or privacy practices; please review their policies.

16. Marketing and communications

We send service communications about your account, security, and policy/legal updates. We will only send promotional messages with your consent, and you can opt out of those at any time.

17. Children’s privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. Users aged 13–17 should have a parent or guardian’s consent. You must also be old enough to consent to receive text messages on your mobile plan. If you believe a child under 13 has provided us information, contact us and we will delete it.

18. Changes to this policy

We may update this policy periodically. We will notify you of material changes in the app or by other means and revise the “Last updated” date above. Continued use after changes take effect means you accept the updated policy.

19. Contact us

For privacy questions, requests, or complaints, email support@nevermind.llc or write to us at:

Nevermind Software, LLC
67 West St, Suite 401
Brooklyn, NY 11222
United States

Website: https://nevermind.llc · Typical response time: within 30 days.

20. Accessibility

We strive to make our app and privacy practices accessible to all users. For accessibility assistance or an alternative format of this policy, contact support@nevermind.llc.