Offline play and anonymous online records
Offline casual play is designed to remain local. Online cloud or economy use is planned to create an anonymous server record bound to a random Keychain identifier and device attestation; ranked play also requires optional Game Center identity. The record has no Project Zoomies email or password, but it is still deletable app-account data.
Local game data
The current development client has a local delete confirmation flow. The release path must immediately clear local profile and cache after confirmation. Removing the app may also remove local data, subject to iOS backup and device settings.
Apple services
If a player chooses to use Apple Game Center or makes an App Store purchase, those services are provided by Apple. Their profile, purchase history, and account controls are managed through Apple, not by Project Zoomies. Apple’s own instructions apply to those records.
Planned server deletion
Delete Player Data is planned to revoke sessions, make the anonymous record inaccessible, remove custom leaderboard entries, delete identity, attestation, preference, and run-detail records, and propagate processor deletion. Necessary financial or StoreKit records may be retained only in minimised, disassociated form; active-system and backup deadlines still require legal confirmation. The production backend and deletion-status route are not deployed, so this is architecture, not a live service claim.
Questions
Email support@zoomiess.app for a question about this policy. This pre-release placeholder will be replaced with a monitored public inbox before launch.