Privacy policy
The short version
- You don’t need an account. Your game progress stays on your device unless you turn on cloud save.
- If you turn on cloud save, we store your email address and a copy of your game progress so you can restore it on another phone. You can delete it in the app at any time.
- The app shows ads from Google AdMob. Where the law requires it, we ask your permission before ads can be personalised. You can change your mind at any time in Settings.
- Purchases are handled by Apple or Google. We never see your card details.
- We don’t sell your personal information.
1. Who we are
Wordway is made by Creatively Apps Limited, a company registered in England and Wales (company number 17537980), registered office 80 Cramptons Road, Sevenoaks TN14 5DY (“we”, “us”). We are the controller of the personal information described in this policy. You can reach us at privacy@creativelyapps.com.
2. What we collect
Stored only on your device
Your progress (levels completed, coins, streaks, achievements, settings and in-progress puzzles) is saved on your phone. Unless you turn on cloud save, it isn’t sent to us. If you delete the app, this data is deleted with it.
Cloud save (optional)
If you choose Back up progress in Settings, we collect your email address (to send you a sign-in code and identify your save) and store a copy of your game progress (levels, coins, streaks, achievements and game statistics) linked to it. It is stored with our database provider, Supabase, in the UK (London region). Your device-only settings (sound, reminders) are not uploaded.
Daily reminders (optional)
If you turn on the daily reminder, the reminders are scheduled by your phone itself. No information is sent to us or anyone else to deliver them.
Collected by our partners when you use the app
| Information | Why | Who receives it |
|---|---|---|
| Advertising ID (IDFA on iOS, only if you allow tracking; Google Advertising ID on Android), IP address, device and app information, ad interactions | To show ads, measure them, limit how often you see the same ad, and prevent fraud. Personalised ads only with your consent where required. | Google (AdMob) |
| Purchase history, an anonymous app user ID, device and app information | To process purchases, restore them on a new device and prevent fraud | Apple or Google, and RevenueCat (our purchase-management provider) |
| Email address and a copy of your game progress (only if you turn on cloud save) | To sign you in and back up and restore your progress | Supabase (our database and sign-in provider, UK region) and our email delivery provider Brevo |
| Your choices on the ad consent form | To remember and respect your choices | Google (User Messaging Platform), stored on your device |
Collected by us
- Support emails: if you contact us, we receive your email address and whatever you choose to tell us.
- Configuration requests: the app may download a small settings file from our website (for example, how often ad breaks can appear). Like any web request, this reveals your IP address to our hosting provider, which keeps short-term server logs for security.
- Website: Our website doesn’t use advertising or tracking cookies. Our hosting provider keeps standard server logs.
3. Our partners
These companies process information under their own privacy policies:
- Google AdMob and Google’s User Messaging Platform: policies.google.com/privacy, and how Google uses information from apps that use its services: policies.google.com/technologies/partner-sites
- RevenueCat: revenuecat.com/privacy
- Supabase (cloud save): supabase.com/privacy
- Apple (App Store purchases): apple.com/legal/privacy
- Google Play (purchases): policies.google.com/privacy
4. Why we can use it (legal bases)
Under UK GDPR and EU GDPR we rely on:
- Consent: for personalised advertising and for accessing your device’s advertising identifier where consent is required (including Apple’s App Tracking Transparency prompt). You can withdraw consent at any time.
- Contract: to deliver purchases you make and to restore them, and to provide cloud save when you ask for it.
- Legitimate interests: to show non-personalised ads that fund the free game, to keep the app and website secure, to prevent fraud, and to answer support requests. We balance these interests against your rights, and you can object (see section 9).
- Legal obligation: to keep records we are required to keep, for example for tax.
5. Ads and your choices
- UK, EEA and Switzerland: on first launch we show Google’s consent form. You can accept, reject, or choose purposes. To change your choices later, open Settings → Ad privacy choices in the app.
- iPhone and iPad: if you tap “Ask App Not to Track”, your IDFA isn’t shared. You can change this in iOS Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in your device settings (Settings → Privacy → Ads, or Google → Ads).
- US states with privacy laws (for example California): sharing an advertising ID for personalised ads may count as “sharing” or “targeted advertising”. You can opt out using the device settings above. We honour Global Privacy Control signals on our website.
- Remove ads: buying “Remove ads” turns off ad breaks. Reward videos then only appear if you choose to watch one.
6. How long we keep it
- Game progress: on your device until you delete the app or reset progress.
- Cloud save (email and progress copy): until you delete it in the app (Settings → Cloud save → Delete cloud save and account), or after 24 months without use.
- Support emails: up to 24 months after the conversation ends, unless we need them longer for a legal claim.
- Purchase records: as long as needed to provide restores and meet tax and accounting rules (normally 6 years in the UK).
- Server logs: 30 days.
- Partner data: according to each partner’s retention policy (see section 3).
7. International transfers
Our partners may process information outside the UK and EEA, including in the United States. Where they do, transfers are protected by adequacy regulations (such as the UK–US Data Bridge for certified companies), the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses.
8. Children
Wordway is a general-audience game and isn’t directed at children under 13. Cloud save is not intended for children under 13. We don’t knowingly collect personal information from children under 13 (or the equivalent minimum age in your country). Ads are limited to content suitable for a general audience. If you believe a child has given us personal information, contact us and we will delete it. [If you choose to target children, you must use Google Play’s Families-certified ad settings, child-directed ad requests and parental-consent flows, and update this section.]
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or move your personal information, to restrict or object to how it is used, and to withdraw consent. Because we don’t hold your game data on our servers, most requests are best handled by:
- deleting the app or using Reset progress (removes your local data)
- using Settings → Cloud save → Delete cloud save and account (removes your email and cloud copy)
- changing ad choices in the app’s Settings, or resetting your advertising ID
- contacting Google, Apple or RevenueCat for data they hold (see section 3)
For anything else, email privacy@creativelyapps.com. We will reply within one month. We won’t treat you differently for using your rights.
10. Security
We use reputable providers and encrypted connections (HTTPS). No system is perfectly secure, but we limit what we collect so there is little to protect.
11. Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app before it takes effect.
12. Contact and complaints
Creatively Apps Limited, 80 Cramptons Road, Sevenoaks TN14 5DY · privacy@creativelyapps.com
If you’re unhappy with how we’ve handled your information, please contact us first. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.