Privacy policy

What we store

Your account: email address, username and name, and either a password (stored only as a secure hash) or the link to the Google or Apple account you signed in with.

Playing as a guest: if you start in the iOS app without an account, we create a guest account with no email address, name or password. Your training, settings and product events are kept with it exactly as with an account (see below). Guests aren't on leaderboards or rankings.

Your training: the result of every round you play (game, level, score, accuracy, time, typical answer time), which rounds you start, your check-ups and Daily Challenge results, and your settings such as language, colors and sound.

Players you hide and names you report from a ranking or a duel. A report is reviewed by us; the reported player isn't told who reported them.

Your ratings of the games (stars and any message you write), so we can see what to improve. Deleting your account erases the messages.

Sign-in sessions: so you stay signed in, we keep each session with the device's IP address and browser or app version. Sessions expire after 30 days.

How you use the app: a few product events, such as opening the app (with its version and your iOS version), opening Premium, a purchase going through, sharing a result or tapping a reminder. Our server also records events from the rounds, sessions, check-ups and duels you play, how you signed up, and subscription renewals, expiries and refunds. We use these events to understand how the app is used and what to improve; they're never sold or used for ads. They're kept with your account (or with no account, for visitors); once it's deleted, they stay only as anonymous statistics.

Your Premium status: whether you have Premium and until when, and the Apple transaction ID that identifies your subscription. Payment goes through Apple; we never see your card.

Abuse protection: to limit how often the same device can call our servers, we keep a request count per account or, for visitors, per IP address.

What we don't do

No ads in the app, and we never sell your data or share it with data brokers. We don't track you across other apps or websites, and the app never reads your iPhone's advertising identifier (IDFA).

Who can see what

Your username, levels and scores appear on public leaderboards and Daily Challenge rankings, and in duels you create or play, to anyone with the duel's link. Your email address is never shown to anyone.

Services we rely on

Our hosting and database providers store the data above on our behalf. An email provider sends password reset emails and, unless you turn them off in Settings, an email when your next check-up is due. If you sign in with Google or Apple, they confirm who you are; we receive your name and email address from them.

On the website we use Google Analytics to count visits and see which pages and steps people use, so we can make them clearer. Google sets cookies for this and receives your browser details and IP address; it doesn't get your email or game results. Advertising features and Google signals are off. The iOS app doesn't use Google Analytics.

If the iOS app crashes, a crash report (device model, iOS and app version, and where in the app it happened) goes to Sentry, our crash-reporting provider, so we can fix it. It doesn't include your email or game results.

If you turn on Game Center in the iOS app's Settings, your best level in each game goes to Apple's Game Center leaderboards under your Game Center name.

To see which of our ads on Facebook and Instagram bring players, the iOS app uses Meta's SDK: it tells Meta when the app is installed and opened and when a subscription is bought, with your device model, iOS version and settings such as language and time zone. Meta never gets your email, name, username or game results, or your iPhone's advertising identifier. In the EU it stays off unless you allow it, and you can turn it off at any time in Settings › Ad measurement.

Your control

Delete your account at any time in the app's Settings. Deleting it permanently erases your email, name, username, sign-ins and sessions; your rounds and events stay only as anonymous statistics, no longer tied to your email, name or username.

A guest account is yours to keep or drop: creating an account (with Apple, Google or email) moves everything in it into that account, and signing in to an account you already have moves your guest rounds there (in a game that account already plays, its own rounds stay and the guest's are dropped). Delete guest data in Settings deletes the guest account at once (its rounds stay only as anonymous statistics), and a guest account that isn't used for 30 days is deleted with everything in it (never while it has Premium, or within 30 days of it ending).

On your device the app keeps a copy of your recent results and settings so it opens instantly. Signing out or deleting the account clears it.

Children

MindHone is not directed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, we'll update this page and the date above.