What we collect, and why.

Information you give us

• Account details. An email address and a display name when you create an account. If you sign in with Apple and choose to hide your email, we only ever see Apple's relay address.
• Support correspondence. Anything you write to us at support@adamai.no, along with your email address, so we can reply.

Information created as you use the app

• Game and progress data. Puzzles completed, games played, ratings, streaks, and in-app currency balances. This is stored against your account so your progress follows you between devices.
• Purchase records. When you buy something, Apple confirms the transaction to us and we record which item was unlocked. We never receive your card details. Payment is handled entirely by Apple.
• Basic technical data. App version, device model and operating system version, collected with crash reports so we can reproduce and fix problems.

Why we're allowed to hold it

Under the GDPR we rely on two grounds. Account and progress data is processed because it is necessary to perform the contract you enter into when you use the app. Crash and diagnostic data is processed under our legitimate interest in keeping the app working. Where we ask for consent, you can withdraw it at any time.

Who we share it with

We do not sell personal data and we do not share it for advertising. We use a small number of processors who handle data on our instructions:

• Supabase — database and authentication hosting, in the EU region.
• Apple — app distribution, sign-in, purchases and crash reporting.
• Vercel — hosting for this website.
• [[ANY OTHER SERVICE — analytics, email, error tracking. Delete this line if there are none.]]

We may also disclose information where the law requires it.

Where it's stored

Data is stored on servers in the European Union. Where a processor transfers data outside the EU or EEA, it does so under the European Commission's Standard Contractual Clauses.

How long we keep it

Account and progress data is kept for as long as your account exists. When you delete your account we remove it within 30 days, apart from records we're legally required to keep, such as transaction records held for accounting purposes under Norwegian bookkeeping rules. Support emails are kept for two years. Crash reports are kept for 12 months.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. Email support@adamai.no from your account address and we'll respond within 30 days at no charge. You can delete your account yourself at any time from Settings → Account → Delete account.

If you think we've handled your data badly, you can complain to the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no, or to the supervisory authority in your own country.

Children

Our apps are not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, email support@adamai.no and we will delete it.

Security

Data is encrypted in transit and at rest. Access to production data is limited to the people who need it to run the service. No system is perfectly secure, but if a breach affects you we will tell you and the relevant authority as required by law.

Changes

If we change this policy we'll update the date at the top of this page, and tell you in the app if the change is significant.

Contact

Bobstr AS, Finstadskogen 18, 1406 Ski, Norway. Organisasjonsnummer 925 122 238. Email support@adamai.no.