RiddleVerse Privacy Policy
RiddleVerse is published by KreativeKoalaSolutions LLC, 5900 Balcones Drive, Ste 100, Austin, TX 78731, USA ("we", "us"). This page explains what RiddleVerse collects, why, who receives it, and how you can have it deleted. It supplements our company-wide Privacy Policy. We do not sell your personal data.
What we collect
- Account details. If you sign in (Google sign-in or email), we receive your email address and display name. Playing the web puzzles at /play does not require an account.
- Game data. Your puzzle progress, scores, streaks, badges, coin balance and coin history, leaderboard entries, your preferred topics, and any games you create or remix, including the text prompts you type for them.
- Voice input (optional). If you tap the microphone button when creating a game, the app asks for the microphone permission and uses Android's speech recognition to turn your speech into text. We receive only the resulting text that you then submit as a prompt, not an audio recording.
- Device and usage data. App version, device model and Android version, language, approximate region derived from IP address, crash and performance data, and in-app events (for example puzzle started or completed).
- Notification token. If you allow notifications, a push token so we can send daily puzzle and streak reminders. You can turn notifications off in Android settings.
- Advertising identifier. The Android app declares the advertising ID permission and shows ads (see below).
- Purchase records. If you buy coins or a subscription, Google Play and our purchase provider send us confirmation of the purchase (product, time, transaction ID). We never see your card number.
How we use it
To run the game and your account, keep scores and leaderboards, generate puzzles and games, send reminders you allow, verify purchases, measure and fix crashes and performance, show ads, prevent abuse, and meet legal obligations.
Who receives it
We use the following service providers, each under its own privacy terms:
- Google: Firebase Authentication, Firestore, Cloud Messaging, Analytics and Performance Monitoring; Google Sign-In; Google Play Billing; Google AdMob (ads).
- Supabase: database hosting for game, leaderboard and usage data.
- Unity Ads (through AdMob mediation): ad serving.
- RevenueCat: purchase and subscription management.
- TikTok (TikTok Business SDK): measures app installs and in-app events for attribution. It can use device identifiers such as the advertising ID.
- AI providers (Anthropic, OpenAI, Google, Replicate): when you generate or remix a game, the text you enter and the game description are sent to these providers to produce puzzles, text and images. Do not put personal information in prompts.
- Fly.io: hosting of our servers.
We may also disclose information if the law requires it or to protect against fraud and abuse.
Ads and your choices
The app shows interstitial and rewarded ads. Ad partners may use the advertising ID to serve and measure ads. You can reset or delete your advertising ID, or opt out of ads personalization, in Android Settings under Google, then Ads. You can disable notifications and the microphone permission in Android Settings at any time.
Coins
Coins are a virtual in-game item. They have no cash value and cannot be withdrawn or exchanged for money, and we do not currently pay creators or players. Coin purchases are processed by Google Play.
Retention and deletion
We keep account and game data while your account is active. You can ask us to delete your account and the data we hold about you at any time: see how to delete your account. Purchase and tax records may be kept as the law requires. Data held by Google, advertising partners and the other providers above follows their own retention rules.
Children
RiddleVerse is not directed to children under 13 and we do not knowingly collect their personal data. If you believe a child has given us information, write to us and we will delete it.
Security and transfers
Data is sent over HTTPS and stored with the providers above, which may process it in the United States and other countries. No system is perfectly secure.
Your rights
Depending on where you live you may have the right to access, correct, delete or export your data, or to object to certain processing. Email [email protected] and we will respond within 30 days.
Changes
If we change this policy we will update the date above and, for material changes, tell you in the app or on this site.