Privacy Policy for Tessa

Last updated: November 5, 2026

Overview

Tessa turns your photos into jigsaw puzzles on iPhone and iPad. It has no account system, advertising, analytics, or third-party tracking SDKs. Your puzzle library is stored on your device and is not uploaded to the developer's servers.

If you choose nearby co-op, Tessa sends the puzzle photo and shared game state directly to the invited guest's device. The guest can choose to keep an independent copy. These optional transfers are explained below.

This policy applies to the Tessa app and its Photos share extension. The ldomaradzki.com website has its own technical and analytics behavior.

Choosing Photos

Tessa uses Apple's photo picker to let you select a photo for a puzzle. The selected image is processed on your device. You can also send a selected photo to Tessa through the Photos share sheet.

Tessa does not automatically send your photo library to the developer or to other players. Choosing a photo does not start co-op sharing. A photo stored in iCloud may need to be downloaded by Apple's photo services before it can be used. Live Photos are used as still images.

Data Stored on Your Device

Tessa stores the following information locally so puzzles can be resumed and replayed:

  • A local image copy for each saved puzzle
  • Puzzle title, configuration and crop information
  • Board state, progress and elapsed time
  • Completed runs and personal-best records
  • App preferences, such as puzzle setup and gameplay options

Saved puzzle data is stored in the app's private storage, which Tessa marks as excluded from device backups. The Photos extension uses local shared storage to hand a selected image to the app. Tessa does not provide cloud synchronization or a developer-hosted backup of your puzzle library.

Deleting a puzzle removes its saved puzzle data and image copy from that device. Deleting the app removes its local puzzle library. These actions do not delete the original photo from your photo library or a copy another player has already kept. Restoring Premium restores the purchase entitlement, not deleted photos or puzzle saves.

Nearby Co-op and Photo Sharing

Nearby co-op is optional. A Premium owner can host a puzzle, and a guest can join for free on a nearby device. The first pairing uses the host's invitation QR code. Tessa uses the local network to discover and connect the devices, and sends the puzzle image and game state directly over the connection. The developer does not receive or relay these photos or game sessions.

The host controls whether the puzzle room is sharing. Opening the host's room menu starts sharing, as explained in the app; sharing can be turned off from that menu. Only invite someone you are comfortable sharing the puzzle photo with.

While joining or playing, the guest device holds a temporary local copy of the image and shared progress, including for reconnection. When leaving, the guest can choose Keep a Copy to save an independent puzzle in their own library, subject to the app's ordinary library limits. Leaving without keeping a copy discards the session's temporary copy during normal cleanup. If the app stops unexpectedly, a temporary file may remain until it is cleaned up.

An explicitly kept copy can remain on the guest's device after the room closes. Turning off sharing, forgetting a pairing, or deleting the host's puzzle does not delete that copy. The guest controls their saved copy.

Remembered Devices

After pairing, Tessa can remember the paired device to make future nearby joins easier. Pairing information includes a pairing identifier, security credentials and a player color. It is stored locally in the device's Keychain, without Keychain cloud synchronization, and is used to recognize a previously paired device while sharing is available.

Use Forget paired devices in the puzzle room to remove Tessa's saved pairings on that device and stop sharing. A future connection then requires pairing again. Keychain pairing records are separate from puzzle-library files; use this control when you want to remove remembered pairings. Forgetting devices does not erase puzzle copies another player has saved.

Permissions

  • Photos: Apple's photo picker lets you select an image. Photo access can be managed in iOS or iPadOS Settings where applicable.
  • Local Network: used to discover and connect nearby co-op devices.
  • Camera: used to scan an invitation QR code when joining a nearby puzzle. Tessa does not use this permission to record co-op video.

You can manage these permissions in Settings. Declining co-op camera or local-network access does not prevent you from playing your own saved puzzles.

Purchases and Apple Services

Tessa Premium is an optional one-time purchase handled by Apple's App Store. Tessa uses StoreKit to check the purchase entitlement and support restoration. Tessa does not receive your payment-card details. Family Sharing of Premium does not share your puzzle library or photos.

Apple may process App Store, purchase and iCloud Photos information under Apple's own privacy policies. Tessa does not add third-party analytics, advertising or crash-reporting SDKs, or combine Apple's store information with a developer-hosted activity profile.

Support

If you email for help, the developer receives the information you choose to include in that message, such as your email address, app version or description of a problem. You do not need to send personal photos to get help. Do not include a photo unless you intend to share it with support.

Contact hello@ldomaradzki.com, or use the contact information on the About page.

Families and Children

Tessa is intended for families of all ages. It does not require accounts or collect analytics from children or other players. Nearby co-op shares a selected puzzle photo with the invited device as described above. A grown-up should help children choose appropriate photos and people to play with. Purchase and restore options are behind the app's grown-up gate.

Changes to This Policy

This policy will be updated when the app's data practices change. The date above identifies the current revision.