Privacy Policy

Effective date: May 2, 2026 · Last updated: May 2, 2026

This Privacy Policy describes how Let's Mahj (“Let's Mahj,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our mobile applications, websites (including this marketing site), and related online services (collectively, the “Services”). By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Information we collect

We collect information in three broad categories: information you provide, information collected automatically, and information from third parties when needed to operate the Services.

Account and profile. When you register or use the app, we may collect identifiers such as your name, email address, phone number (if you choose to provide it), password or authentication credentials (stored using industry-standard hashing where applicable), and profile details you choose to add.

Location and locality. To help you find neighborhood Mahjong groups, we may collect a postal or ZIP code, general area, or coarse location you enter or approve. As described in our product FAQ, we focus on approximate locality (for example, ZIP-level discovery) rather than publishing your home address. Meeting places you share with a group are visible according to your group settings and what you choose to post.

Groups, games, and community content. We process information you submit in connection with groups, games, RSVPs, messages, invites, and other community features. That may include scheduling details, notes, and similar content.

Device and technical data. We automatically collect certain technical information when you use the Services, such as device type, operating system version, app version, mobile identifiers (where permitted), IP address, diagnostic logs, crash reports, and usage events needed to secure and improve the Services.

Communications. If you contact us (for example at hello@letsmahj.com), we retain those messages and our replies to help resolve requests and improve support.

Cookies and similar technologies (web). On our websites we may use cookies, local storage, or similar technologies for essential functionality, preferences, analytics, or marketing as described in any cookie notice we display and your browser settings.

2. How we use information

We use the information above to:

  • Provide, maintain, and improve the Services, including scheduling, notifications, and group features;
  • Authenticate users, prevent fraud, abuse, and security incidents, and enforce our terms and community standards;
  • Send transactional or service-related messages (for example, account verification, game reminders, or policy updates);
  • Analyze usage in aggregate or de-identified form to understand product performance and plan improvements;
  • Comply with legal obligations and respond to lawful requests from public authorities; and
  • Communicate with you about optional updates or offers where permitted by law and your preferences.

Consistent with our product principles, we do not sell your personal information as a line of business. We do not run third-party advertising in the core product experience described on our public site; if that changes, we will update this policy and any required notices.

3. How we share information

We may share information only as described below:

  • With other users according to product functionality—for example, displaying your name or RSVP status to members of a group you join, or sharing game details within that group.
  • With service providers who process data on our behalf under contracts (for example, hosting, email delivery, analytics, crash reporting, customer support tools, or push notifications). They may access information only to perform services for us and must protect it appropriately.
  • For legal reasons if we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of Let's Mahj, our users, or the public.
  • In connection with a business transaction such as a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and continuity commitments.
  • With your direction or consent, such as when you connect a third-party integration we explicitly offer.

4. Retention

We retain personal information for as long as your account is active or as needed to provide the Services, comply with legal obligations (for example, tax or accounting rules), resolve disputes, and enforce our agreements. Retention periods may vary by data category; when retention is no longer necessary, we delete or de-identify information where feasible.

5. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights that apply to you, contact us at hello@letsmahj.com. We will verify your request as required by law and may need additional information to process it.

California residents. If the California Consumer Privacy Act (CCPA) or California Privacy Rights Act (CPRA) applies, you may have additional rights regarding personal information, including the right to know, delete, and correct, and to opt out of certain sharing (we do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined in California law without offering an opt-out mechanism where required). You may designate an authorized agent as permitted by law.

European Economic Area, UK, and Switzerland. If the GDPR or UK GDPR applies, our legal bases for processing may include contract, legitimate interests (such as securing the Services and improving the product), consent where required, and legal obligation. You may have rights to access, rectification, erasure, restriction, portability, and objection, and to withdraw consent where processing is consent-based.

6. International transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we implement appropriate safeguards (such as standard contractual clauses) for transfers of personal data from the EEA, UK, or Switzerland.

7. Security

We use administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Children

The Services are not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.

9. Third-party links and services

The Services or our websites may link to third-party sites or services (for example, app stores). Their privacy practices are governed by their own policies. We are not responsible for third-party sites or services.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. For material changes, we may provide additional notice (for example, in-app or by email). Your continued use of the Services after the effective date constitutes acceptance of the updated policy where permitted by law.

11. Contact

For privacy questions or requests, contact us at hello@letsmahj.com.