This Privacy Policy explains how the Daily World Puzzle app (the “App”, “we”, or “us”) collects, uses, retains, and deletes personal information. We do not sell your personal data.

1) What information we collect

• Account information: If you sign in (e.g. Google Sign-In), we may process your account identifier, display name, email, and profile photo provided by the identity provider. You may also play with a limited anonymous session before linking an account.
• Gameplay and progress: Puzzle sessions (image IDs, difficulty, moves, duration), completed World Puzzle dates and difficulty medals, journal entries you unlock, and local preferences (for example audio or settings stored on device).
• Leaderboard nickname: An optional unique display name you choose for public Day / Week / Month scorelists (app and web).
• Avatar and country flag: An optional avatar and an optional country flag you select in the app. The country is not taken from your device location; it is only shown next to your name on scorelists (app and web) if you choose one.
• Inspiration: A virtual in-app balance you earn by finishing puzzles and may spend on optional peeks (for example revealing today’s World Puzzle goal before clearing 3×3). Balance and grant/spend history are stored on your account.
• Private leagues: League membership, invite codes you create or join, and scores shared only with league members.
• Entitlement and purchases: Free / Free Trial / Premium status and subscription signals via Google Play Billing and RevenueCat (purchase tokens and entitlement status — not your full card number).
• Master download ledger: Which full-resolution catalog images you requested to download (used to enforce Free Trial quotas).
• Integrity / abuse prevention: Firebase App Check tokens (e.g. Play Integrity or debug tokens in development) and soft rate limits on Cloud Functions.
• Diagnostics and analytics: App opens, screen views, feature events (for example puzzle start/complete, paywall views, trial start), crash reports when Crashlytics is enabled, and basic device/app technical data needed to run Firebase.
• Support messages: If you email us, we process the content of your message and the address you write from.

We do not collect health data, precise continuous location for tracking, contacts, SMS, or microphone audio for advertising. Background music in the App is played from on-device assets and is not uploaded.

2) How we use your data

• Provide sliding-puzzle gameplay, catalog sync, World Puzzle, Story Cards, and Journal.
• Sync progress, Inspiration balance, and preferences across devices when you are signed in.
• Show public or member-only leaderboards (Day / Week / Month, catalog boards, private leagues).
• Verify Free Trial / Premium access and restore purchases.
• Issue time-limited signed download links for full masters when your entitlement allows it.
• Protect the service with App Check and rate limits.
• Show the optional daily reminder. It is off by default, scheduled entirely on your device, and sends nothing to us — turning it off or revoking the notification permission stops it.
• Measure product usage, fix bugs, and improve features (Firebase Analytics / Crashlytics).
• Respond to support and account-deletion requests.
• Comply with law and protect against abuse or fraud.

3) Legal bases (GDPR)

• Contract / service delivery — running the App you chose to use.
• Legitimate interests — security, abuse prevention, product improvement with aggregated or limited analytics.
• Consent — where required (for example certain optional analytics or marketing communications, if we introduce them).
• Legal obligation — tax, accounting, or regulatory retention where applicable.

4) Where data is stored

• On your device (local preferences and offline progress).
• On Google Firebase infrastructure. We configure primary services in EU regions where available (e.g. Firestore in europe-west1).
• Purchase processing by Google Play and RevenueCat under their own terms and locations.

5) How long we retain data

• Account & cloud profile: until you delete your account or we close the service.
• Gameplay / journal in cloud: while your account exists, unless you delete it.
• Analytics events: typically up to ~14 months (Google Analytics defaults) unless configured shorter.
• Crash reports: typically up to ~90 days (Crashlytics defaults).
• Subscription records: retained by Google Play / RevenueCat as required for billing and law.
• Email deletion requests: processed within 30 days; request metadata removed after completion.

6) Sharing with service providers

We share data only with processors that help run the App:

• Google Firebase — Auth, Firestore, Storage, Hosting, Analytics, Crashlytics, Functions.
• Google Play — distribution and billing.
• RevenueCat — subscription entitlement sync.

We do not share personal data with third parties for advertising networks or cross-app tracking. Future AI editorial tooling for World Puzzle content is operated by us; we do not sell player profiles to advertisers.

7) Children

The App is not directed at children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal data from children. If you believe a child provided data, contact us and we will delete it.

8) How to delete your account and data

• In the App (recommended): Me / Settings → Account → Delete account and data (when available in your build).
• Web instructions: Account deletion page (required by Google Play; works without reinstalling the App).
• Email: write to bobo.cpu@gmail.com from the same address linked to your account. Subject: Account Deletion Request.

After verification we delete account data from our Firebase project. Billing records may remain with Google Play / RevenueCat where law requires. Local data remains until you clear app storage or uninstall.

9) Your rights (GDPR / similar laws)

• Access, rectification, erasure, restriction, portability, and objection where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local supervisory authority (in the Czech Republic: ÚOOÚ).

10) Contact

• Email: bobo.cpu@gmail.com
• Developer / operator: Robert Sauer
• App: Daily World Puzzle (Android package one_world_puzzle.com)