Privacy Policy

1. Data Controller

Data controller within the meaning of the GDPR:

Tobias Hötzel
Sennestraße 14, 44143 Dortmund, Germany
Email: loopcrafts.app@gmail.com

2. Overview: How Gridflow handles your data

Gridflow is an iOS logic puzzle app (Hashi × Numberlink). Your game progress, streaks, and best times are stored exclusively on your iPhone (via SwiftData). There is no Gridflow backend server. Your data does not leave your device, except in the narrowly defined cases described below.

Gridflow does not use behavioral tracking, ad networks, or marketing analytics. No user profiles are created.

3. Local Data Storage

All data you generate (solved puzzles, streaks, best times, hint usage) is stored locally on your device in the app sandbox. Other apps cannot access it. When you delete the app, all data is removed.

Puzzle database: The daily puzzles are included as a SQLite database in the app bundle — shipped on install, no network required.

Legal basis: Art. 6(1)(b) GDPR.

4. Anonymous Usage Analytics: TelemetryDeck

Gridflow uses TelemetryDeck for anonymous usage analytics. TelemetryDeck is a privacy-focused analytics service explicitly designed for GDPR compliance.

What TelemetryDeck collects:

• Anonymized app events (e.g. "puzzle solved", "difficulty chosen", "app opened")
• iOS version, device type, and app version (no device serial number)
• An anonymous, non-reversible user hash (derived from app ID + device identifier, one-way hashed)

What TelemetryDeck does NOT collect: No names, email addresses, Apple Account data, IP addresses, puzzle content, or personal identifiers. No user profiles are created that could be traced back to you.

Processor: TelemetryDeck GmbH, Munich, Germany. Data stored exclusively in the EU. Privacy policy: telemetrydeck.com/privacy

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a stable app and understanding anonymous usage patterns to improve the app. The anonymization is technically designed so that no personal reference is possible.

Right to object: You may object to processing at any time via email: loopcrafts.app@gmail.com

5. Premium Purchase: RevenueCat

The one-time Premium purchase is managed via RevenueCat, Inc. (San Francisco, USA). RevenueCat receives technical information for purchase validation, e.g. an anonymous device ID and the App Store purchase status.

RevenueCat processes this data as a processor and is committed to the EU-US Data Privacy Framework. Privacy policy: revenuecat.com/privacy

Legal basis: Art. 6(1)(b) GDPR — purchase verification is required to unlock Premium.

6. Payment Processing: Apple In-App Purchase

Purchases are processed exclusively through Apple's In-App Purchase system. Gridflow does not receive payment data (e.g. credit card numbers). All payment data remains with Apple. Privacy policy: apple.com/legal/privacy

7. No Cookies, No Tracking, No Ads

Gridflow is a native iOS app and uses neither cookies nor web tracking technologies. No ad networks are integrated, no user profiles are created, and no data is used or shared for advertising purposes.

8. No Sharing with Third Parties

Your data is not sold or shared for advertising purposes. Sharing occurs only with the processors listed above (TelemetryDeck, RevenueCat, Apple) — only to the extent technically required for the respective service and on the basis of corresponding data processing agreements.

9. Your Rights as a Data Subject

You have the following rights against the data controller:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR) — e.g. LfDI NRW (ldi.nrw.de) in Germany, the Austrian DSB (dsb.gv.at), or the Swiss FDPIC (edoeb.admin.ch)

Since all game progress data is stored locally on your device, you can remove it at any time by deleting the app. For requests regarding third-party data (RevenueCat, TelemetryDeck), please contact those providers directly.

All other requests: loopcrafts.app@gmail.com

10. Children

Gridflow is not specifically directed at children under 13. We do not knowingly collect personal data from children under 13.

11. Changes to this Privacy Policy

This privacy policy may be updated for new features or legal changes. The date of the last update is shown above. For material changes, users will be informed in the app.