How we handle your data

What data we process

1. Player profile and progress. When you first use the app, you’re automatically given an anonymous player ID, which is a random string with no name or email address attached. We store your game progress under this ID, including solved puzzles, levels, streaks, playing statistics such as words found in each language, stamps earned, your chosen home language, mascot and list. This information is stored on your device and in our cloud database, so you can take your progress with you to a new device.

2. Optional account. You can link your profile to an Olympheon account using "Sign in with Apple" or "Sign in with Google". If you do, we also process your email address, the name provided by Apple or Google, and the username you choose. Friend features process the connection between your account and your friends’ accounts.

3. Purchases. Payments are handled entirely by Apple (App Store) or Google (Google Play). We never see or store your payment card or bank account details. To link your purchases, including passes and puzzle books, to your profile, our systems process the product purchased, the status and end date of a subscription, the store used (Apple or Google), and a pseudonymous linking ID, which is your player ID. We use RevenueCat as a processor for this purpose. See below.

4. Technical data. When you use the app, our systems process a limited amount of technical data needed to keep it working, including the app version, operating system and version, device language and time zone, and technical logs of server requests. These logs include your IP address, which is retained briefly for security and abuse prevention.

5. Usage statistics and error reporting. To improve the app, we measure how it’s used, including which screens you view, which levels and daily challenges you start and complete, which language you choose, and whether you view a shop page. We also collect technical details such as the app version, device type and operating system, along with error reports such as crashes. We also capture session recordings, which are a series of screenshots showing what happens on your screen while you play, so we can see where players get stuck. Fields containing personal information, such as your username, are obscured in these recordings. This data is linked to your pseudonymous player ID, not your name or email address, and is stored within the EU. You can turn this tracking off at any time in the app under Settings > Usage Statistics. The game will continue to work as normal.

6. Stored only on your device. Preferences such as board style, colour-blind assistance and sound settings stay on your device and aren’t sent to us. Reminders and notifications are scheduled locally on your device. Our servers do not send push notifications.

Advertising

The free version of the app shows ads through Google AdMob, including short ads between levels and optional ads you can choose to watch in exchange for a hint or a second chance.

Even without your consent, Google processes certain technical data for this purpose: your IP address (which is used to determine a country or region), device and app details, and limited identifiers needed to display an ad, apply frequency limits and prevent fraud. This is why we cannot say that no data is processed without consent: the ads are not personalised, but they are not completely data-free.

Google only uses your device's advertising identifier to personalise and measure ads if you explicitly consent to this (on iOS through Apple's tracking permission prompt, and in the EU through our consent screen). You can withdraw your consent at any time: in the app via Settings > Privacy > Ad privacy choices, and on iOS also via Settings > Privacy & Security > Tracking.

With a Thuispas or Wereldpas, or in a booklet you have purchased, the app does not show interstitial ads. Ads you choose to watch for a hint or a second chance remain available, including for subscribers.

Why we use your data and our legal basis

• Providing the game (saving progress, syncing between devices, unlocking purchases): necessary to perform our contract with you.
• Security and preventing misuse (technical logs, purchase validation): legitimate interests.
• Improving the app (usage analytics, session recordings, error reporting): legitimate interests. You can turn this off at any time via Settings > Usage analytics, without affecting the game.
• Optional features (account, friends): performing our contract with you, at your request.
• Showing ads in the free version: necessary to perform our contract with you, as advertising funds the free app.
• Personalised ads: only with your consent, which you can withdraw at any time without affecting the game.

We do not use your data for automated decision-making that has legal effects, and we do not sell it.

Who else is involved

• Google Firebase (Google Ireland Ltd / Google LLC): database, sign-in and server functions. Google Privacy Policy
• RevenueCat, Inc. (US): subscription and purchase management, linked to your pseudonymous player ID. RevenueCat Privacy Policy
• PostHog, Inc. (US, with data stored on servers in the EU): usage analytics, session recordings and error reporting. PostHog Privacy Policy
• Apple and Google Play: payments and app distribution, under their own terms and privacy policies.
• Google AdMob (Google Ireland Ltd / Google LLC): displaying and measuring ads, and preventing fraud. For personalised ads, Google acts as an independent data controller rather than as a processor. How Google uses advertising data

We enter into data processing agreements with our processors. Some processors, including RevenueCat, PostHog and Google LLC, process data in or from the United States. These transfers are based on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs).

How long we keep your data

• Game progress and profile: for as long as you use the game. If you delete your account or ask us to delete it, we will remove the data from our active systems within 30 days.
• Purchase records: for as long as required by law for tax and record-keeping purposes, after which they are deleted.
• Technical logs: no more than 12 months, with security logs kept for as little time as reasonably possible.
• Usage statistics and error reports: no more than 24 months when linked to your player ID, with session recordings kept for no more than 3 months.
• Advertising data: we do not store this ourselves. We only see aggregated reports with totals, not individuals. Google's retention policy applies to the underlying data.

Your rights

Under the GDPR, you have the right to access, correct or delete your data, restrict how it is processed, receive or transfer your data, and object to processing based on legitimate interests. You can withdraw your consent at any time, including consent to personalised advertising. To do so, email [email protected]. We will respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.

You can delete your account and data directly in the app under Settings > Delete account, or by emailing [email protected].

Children

Words with Mia is designed for players aged 13 and over and is not a children's app. If you live in the Netherlands and are under 16, only use the optional account features with permission from your parent or guardian. We do not knowingly collect data from children under 13. If we discover that this has happened, we will delete the data.

Changes

If we make significant changes to this policy, we will let you know in the app. The latest version is always available on this page.