Developer Contact

For privacy-related questions or requests, contact us at support@puzzleworksapp.com.

Types of Data Collected and Accessed

PuzzleWorks collects and accesses the following types of data:

• Account data: Email address, password (stored in hashed form), and optional full name for sign-up and authentication.
• Profile data: Username, display name, profile avatar, and banner image.
• Photos and camera: Access to your device camera and photo library for puzzle completion photos (up to 3 per completion), UPC/barcode scanning, and profile avatar uploads. Photos are stored in our secure cloud storage.
• Messages: Direct messages (DMs), group chat content, and event chat messages you send and receive.
• Device data: Push notification tokens (FCM) so we can send you notifications for messages, events, and other app updates.
• Advertising data: When ads are shown in the mobile apps, Google AdMob (and related Google advertising services) may collect device and advertising identifiers and other data described in Google’s policies to deliver and measure ads.

Purposes of Use

We use your data to:

• Authenticate your account and keep it secure (including optional two-factor authentication).
• Manage your profile and display it to other users.
• Store and share your puzzle completions and photos in the activity feed.
• Enable messaging (DMs, group chats, and event chats).
• Run community events (races, competitions) and show results.
• Send push notifications based on your preferences.
• Moderate content: before upload, images are checked for inappropriate content using Safe Search (Google Vision API) to keep the community safe.
• Show ads in the mobile apps (when advertising is enabled) to support the product.

Sharing

We do not sell your personal information. We share data only with service providers necessary to operate the app:

• Supabase: Hosting, authentication, database, and file storage. Your data is stored on Supabase infrastructure.
• Firebase: Push notifications via Firebase Cloud Messaging (FCM).
• Google Vision API: Used for image moderation (Safe Search) before puzzle and avatar uploads. Images are processed to detect inappropriate content and are not stored by Google for other purposes.
• Google AdMob / Mobile Ads: Serves ads in the mobile apps when advertising is enabled. Depending on your region and consent choices, AdMob may collect device and advertising identifiers and other data described in Google’s policies to deliver and measure ads. In the EEA/UK we use Google’s User Messaging Platform (UMP) for consent where required. You can also review tracking permission prompts on iOS when shown.

Analytics and crash reporting: We do not currently use third-party analytics or crash-reporting SDKs.

Advertising: The mobile apps may show ads served by Google AdMob (and related Google advertising services), as described above.

Secure Handling

We take steps to protect your data:

• All connections use HTTPS (encryption in transit).
• Data stored with Supabase is encrypted at rest.
• Database access is restricted using Row Level Security (RLS) so users can only access data they are allowed to see.
• Images are checked for inappropriate content before upload.

Data Retention and Deletion

When you delete your account:

• Your profile, puzzle completions, photos, avatars, messages, and related data are deleted immediately.
• We do not retain your data in backups after account deletion.

You can delete your account at any time from the app: Account Settings → Delete Account.

Your Rights

You can:

• Access: View and download your data through the app.
• Correct: Update your profile, username, and other information in Account Settings.
• Delete: Permanently remove your account and all associated data using the Delete Account option in the app.

For any privacy requests, contact us at support@puzzleworksapp.com.