← Back to Jigsaw

Privacy Policy

Last updated: October 1, 2026

1. Introduction

Jigsaw ("we," "our," or "us") is a sudoku game with irregular pieces for iPhone. This Privacy Policy explains what the game stores, what it doesn't, and how the little data there is moves between your device, our backend (Firebase) and the subscription service (RevenueCat).

Jigsaw has no ads, no analytics, no camera, no microphone, no location, no contacts and no social features. It does not track you across apps or websites and never shows Apple's tracking prompt. What it holds is your puzzle progress.

2. How Your Data Flows

• Device → your own storage: Your progress (which levels you have solved, your best result on each, and any game in progress) and your settings are saved on your phone. The game is fully playable offline and without an account.
• Device ↔ Apple ↔ Firebase Authentication (optional): If you choose Sign in with Apple, Apple authenticates you and hands a token to Firebase Authentication, which creates an account with a random user ID (a "UID"). We never see your Apple password.
• Device ↔ Google ↔ Firebase Authentication (optional): If you choose Continue with Google, Google authenticates you in its own sign-in sheet and hands a token to Firebase Authentication, which creates an account with a UID in the same way. We never see your Google password.
• Device ↔ Firebase Authentication, email and password (optional): If you choose Continue with email, the email address, password and optional name you type go straight to Firebase Authentication over an encrypted connection. Firebase stores the email and a salted hash of the password, never the password itself, and we never see it. If you tap Forgot password, Firebase emails a reset link to the address you typed. Jigsaw sends no other email. Whichever method you pick, signing in is entirely optional.
• Device ↔ Cloud Firestore (only when signed in): Your finished levels are copied to a single document at users/{your UID} so they survive a new phone. Security rules allow that document to be read and written only by the signed-in account whose UID names it.
• Device ↔ RevenueCat ↔ Apple: If you buy Jigsaw Pro, Apple processes the payment and RevenueCat tells the game whether Pro is active. RevenueCat receives an anonymous app user ID, or your Firebase UID if you are signed in, and the receipt data Apple returns. We never see your payment method.

3. Information We Collect

If you sign in

• Your Firebase UID
• With Sign in with Apple, what Apple returns: an email address (often a private relay address you chose) and, on your very first sign-in only, your name if you shared it
• With Google, what Google returns to Firebase Authentication: your Google account's name, email address and profile photo link. Jigsaw does not show or use the photo.
• With email, the email address you enter, a salted hash of your password (never the password itself) and your name if you add one
• The date your account was created

Game progress

• For each level you have finished: stars earned, time taken, number of mistakes, number of hints used, and when you finished it

On your phone only, and never uploaded: games in progress (the digits and notes on the board), your daily hint count, and your settings (haptics and language).

Purchase state

• Whether your Jigsaw Pro purchase or subscription is active, as reported by RevenueCat and Apple

What we do NOT collect

• No analytics, crash-reporting SDKs or advertising identifiers
• No location, contacts, photos, camera or microphone
• No payment card details (Apple handles payment)
• No other free text: the only places to type in Jigsaw are the name, email and password fields on the email sign-in screen, and the word or password that confirms account deletion

4. Third-Party Services

• Google Firebase (Authentication, Cloud Firestore): accounts (including email and password sign-in and password reset emails), progress backup, and account deletion. Firebase privacy
• Google Sign-In: Continue with Google. Google privacy
• RevenueCat: Pro purchase and subscription status. RevenueCat privacy
• Apple: Sign in with Apple and App Store payments. Apple privacy

We do not sell or share your personal information with anyone else.

5. Playing Without an Account

Everything in Jigsaw works without signing in. In that case nothing about your progress ever leaves your phone. The only network traffic is RevenueCat checking whether Pro is active, and loading the web pages you open from Settings.

6. Data Retention & Deletion

Your cloud progress is kept for as long as your account exists. In the app, open Settings, then Personal information, then Delete account, and confirm with the same sign-in you used:

• Apple: type the confirmation word, then confirm in the Apple sheet. The app also revokes its access to your Apple ID.
• Google: type the confirmation word, then confirm in the Google sheet. The app also revokes its access to your Google account.
• Email: enter your account password.

The app then deletes your Firestore document and then your Firebase account (with the email, name and any password hash it held), immediately and permanently. Only after the account is gone does the app clear the progress stored on your phone.

Deleting your account does not cancel a Jigsaw Pro subscription, because Apple bills it. Cancel it in your Apple ID settings. Subscription records held by RevenueCat and Apple are kept under their own retention policies. If you no longer have the app installed, email support@moetalaat.com and we will delete your account for you.

7. Legal Basis for Processing (GDPR)

If you are in the EEA, United Kingdom, or Switzerland, we process personal data on these bases:

• Contractual necessity (Art. 6(1)(b)): creating your account when you ask for one, backing up your progress, and delivering Pro when you pay for it.
• Legitimate interest (Art. 6(1)(f)): keeping the game working and preventing abuse.

8. International Data Transfers

Firebase, Google Sign-In and RevenueCat may process data in the United States and elsewhere. These providers offer Standard Contractual Clauses for cross-border transfers.

9. Your Rights

You have the right to:

• See what is stored about you, which for Jigsaw is the progress visible in the game itself
• Have your account and its data deleted, from Settings in the game or by writing to us
• Request a copy of your data by emailing us

EEA/UK residents (GDPR): you also have the right to data portability, the right to restrict or object to processing, and the right to complain to your local data protection authority.

California residents (CCPA/CPRA): you have the right to know what personal information is collected and the right to delete it. We do not sell or share personal information.

10. Children's Privacy

Jigsaw is not directed to children under 13 (or 16 in the EEA) and is not listed in the App Store's Kids category. We do not knowingly collect personal information from children. If you believe a child has an account, contact us and we will delete it.

11. Security

Data in transit is encrypted with TLS. Firestore access is restricted by security rules to the account that owns each document, and deleting an account first asks you to confirm with the same sign-in you used. Email passwords are held by Firebase Authentication only as salted hashes. No system is perfectly secure, but we keep what we hold to the minimum the game needs.

12. Changes to This Policy

If this policy changes, the new version will be posted on this page with a new date at the top. Material changes will also be mentioned in the app's release notes.

13. Contact

Questions about your privacy: support@moetalaat.com

14. Summary

• No ads, no analytics, no tracking
• Progress lives on your phone; signing in with Apple, Google or email is optional and only backs up finished levels
• We never see your Apple, Google or email password
• Apple takes the payment, RevenueCat tells the game you are Pro
• Delete your account from Settings and it is gone from our servers immediately