Privacy Policy

Last updated: April 18, 2026

This Privacy Policy explains how DOMU Inc. ("we," "us," or "our") collects, uses, and protects information when you use the iro mobile application ("iro," the "App").

Who we are

iro is a daily color game built and operated by DOMU Inc. We can be reached at hello@domu.one.

Information we collect

We collect the minimum information needed to operate iro:

Account data. When you open iro, we create an anonymous account using Firebase Authentication. If you choose to link a Google or Apple account, we store the resulting authentication identifier so you can recover your account on another device. We do not receive or store your Google or Apple password.
Username. If you set a display name, it is stored alongside your account and shown on the leaderboard and Gallery. You can change or remove it at any time.
Game data. We store the colors and palettes you submit, your scores, and the timestamps of your daily plays. This data is associated with your account so we can show your history in "My palettes" and on the leaderboard.
Device and diagnostic data. Firebase may collect basic device, OS, and crash diagnostics to help us keep iro running reliably. This is anonymized and not used for advertising.

We do not collect your real name, email address (beyond what is required for Sign in with Google or Sign in with Apple), location, contacts, photos, or browsing history.

How we use information

To provide the daily games, your visual journal, and the community Gallery.
To rank entries on daily leaderboards.
To recover your account across devices when you sign in with Google or Apple.
To diagnose crashes and improve the app's reliability.

How we share information

We do not sell your data. We do not share it for advertising. We use the following third-party services to operate iro:

Google Firebase (Authentication, Firestore, Cloud Functions, Hosting) — backend infrastructure. Firebase Privacy
Google Vertex AI / Gemini — generates the daily compose word and definition. No user data is sent to the AI service.
Sign in with Google / Sign in with Apple — optional sign-in providers if you choose to link your account.

Data shared with other players

The following information is visible to other iro players:

Your username (or "Anonymous" if you have not set one).
Palettes you submit in compose (visible in the daily Gallery).
Your daily scores in match and remember (visible on the leaderboard).

Children's privacy

iro is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.

Your rights

You can:

Delete your account. Open the profile screen and tap "Delete account." This permanently removes your account and associated data, including your palettes, scores, and username.
Change or remove your username. Tap the pencil icon next to your name on any leaderboard.
Request a copy of your data by emailing hello@domu.one.

If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under GDPR / CCPA, including the right to access, correct, port, or restrict processing of your personal data. Contact us at hello@domu.one to exercise any of these rights.

Data retention

We retain your data for as long as your account is active. When you delete your account, we delete your data within 30 days, except where required to retain it for legal compliance or fraud prevention.

Security

We use industry-standard security measures provided by Google Firebase to protect your data in transit and at rest. No internet-based service is 100% secure, but we work to safeguard your information.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects when the policy was last revised. Material changes will be communicated through the App.

Contact

Questions or requests? Email us at hello@domu.one.