For privacy-related questions or requests, contact us at support@puzzleworksapp.com.
Types of Data Collected and Accessed
PuzzleWorks collects and accesses the following types of data:
- Account data: Email address, password (stored in hashed form), and optional full name for sign-up and authentication.
- Profile data: Username, display name, profile avatar, and banner image.
- Photos and camera: Access to your device camera and photo library for puzzle completion photos (up to 3 per completion), UPC/barcode scanning, and profile avatar uploads. Photos are stored in our secure cloud storage.
- Messages: Direct messages (DMs), group chat content, and event chat messages you send and receive.
- Device data: Push notification tokens (FCM) so we can send you notifications for messages, events, and other app updates.
Purposes of Use
We use your data to:
- Authenticate your account and keep it secure (including optional two-factor authentication).
- Manage your profile and display it to other users.
- Store and share your puzzle completions and photos in the activity feed.
- Enable messaging (DMs, group chats, and event chats).
- Run community events (races, competitions) and show results.
- Send push notifications based on your preferences.
- Moderate content: before upload, images are checked for inappropriate content using Safe Search (Google Vision API) to keep the community safe.
Sharing
We do not sell your data. We share data only with service providers necessary to operate the app:
- Supabase: Hosting, authentication, database, and file storage. Your data is stored on Supabase infrastructure.
- Firebase: Push notifications via Firebase Cloud Messaging (FCM).
- Google Vision API: Used for image moderation (Safe Search) before puzzle and avatar uploads. Images are processed to detect inappropriate content and are not stored by Google for other purposes.
We do not use analytics, crash reporting, or advertising tools that collect personal data.
Secure Handling
We take steps to protect your data:
- All connections use HTTPS (encryption in transit).
- Data stored with Supabase is encrypted at rest.
- Database access is restricted using Row Level Security (RLS) so users can only access data they are allowed to see.
- Images are checked for inappropriate content before upload.
Data Retention and Deletion
When you delete your account:
- Your profile, puzzle completions, photos, avatars, messages, and related data are deleted immediately.
- We do not retain your data in backups after account deletion.
You can delete your account at any time from the app: Account Settings → Delete Account.
Your Rights
You can:
- Access: View and download your data through the app.
- Correct: Update your profile, username, and other information in Account Settings.
- Delete: Permanently remove your account and all associated data using the Delete Account option in the app.
For any privacy requests, contact us at support@puzzleworksapp.com.