Privacy Policy

This page is a translation of the French version, which prevails in case of discrepancy.

This policy explains what data the SudoKoum application ("the app", "we") processes, why, and what your rights are. Our guiding principle is data minimization: SudoKoum is a Sudoku game that works without a traditional account, without advertising and without any marketing tracker.

1.Data controller

For any question about your data or to exercise your rights, write to us at the address above.

2.What we do NOT collect

To remove any ambiguity, SudoKoum does not collect:

• your real name, unless you sign in with Google (see §6), your postal address or phone number
• your geolocation
• your contacts, photos (other than a chosen avatar, see §3) or other files
• any data for advertising purposes: there is no advertising in the app
• any data via third-party analytics trackers. No external audience-measurement tool is built in (no Google Analytics, no advertising SDK). The app itself counts anonymous usage totals, described in §3.
• your payment details: payments are handled exclusively by Apple and Google (see §7).

The link attached to a shared achievement only counts the number of visits per day and per language, with no IP address and no cookie.

3.Data we process

Data	Detail	Where it is stored
Account identifier	A technical identifier generated automatically (Firebase Authentication). Without Apple or Google sign-in, it is not linked to any real-world identity.	Firebase servers + device
Email address, name and profile photo (optional sign-in)	Sent by Apple or Google when you link your account (§6). Apple sends only the address, which may be its private relay address. They are used solely to recover your account and are not shown to anyone.	Firebase Authentication
Username	The username you freely choose (may be fictitious). Visible to other players in challenge leaderboards.	Firebase servers + device
Sharing ID	A random code (e.g. "ABCD-1234") used to add you as a friend. Reveals no personal information.	Firebase servers + device
Game progress	XP, level, wins, streaks, achievements, best scores.	Device, and cloud backup (Firebase) so you can recover it
Detailed statistics	History of your games (time, mistakes, hints, score, outcome of the game, whether the mistake limit was on, hardest technique the grid required), up to 1,500 games on the device, the 500 most recent of which are also in the cloud backup.	Device, and cloud backup (Firebase) so you can recover it
Shared best times	Your best Solo time per difficulty and your time on the Daily quest, shown to your friends so you can compare results. Can be turned off in the app settings.	Firebase servers
Avatar	A photo optionally chosen as an avatar, visible to other players next to your username.	Device + Firebase Cloud Storage, so it follows your account
Challenges and friends	Usernames and sharing IDs of added friends, results of shared challenges.	Firebase servers
Notification token	A technical token used to send challenge notifications.	Firebase servers
Device identifier	A random code created by the app to send notifications to the right phone. It is neither the advertising identifier nor the phone's own identifier.	Firebase servers + device
Anonymous usage statistics	Daily totals (screens opened, buttons tapped, games started), with the platform, version and language of the app, whether the app was opened from a challenge link, the choice to link an account or not at the end of the first launch and the version of that first launch. They contain no identifier, no username and no time of day. They cannot be used to identify you. Can be turned off in the app settings.	Device, then Firebase servers in the form of totals
Premium status	The fact that the "lifetime" purchase was made (without any payment detail).	Device + platform (Apple/Google)

4.Purposes and legal bases (GDPR)

We process this data to:

• provide the game and its features (progress, leaderboards, challenges between friends), legal basis: performance of the service you request
• back up and restore your progress across devices, legal basis: performance of the service / your consent when you link an account (see §6)
• send you notifications related to challenges, legal basis: your consent (system notification permission, revocable at any time)
• ensure security and the integrity of the game (limit fraud), legal basis: our legitimate interest.
• measure use of the app to improve it (screens viewed, steps of the first launch at which players stop), legal basis: our legitimate interest. These anonymous statistics are for our use only and fall under the audience measurement that the CNIL exempts from consent. You can object at any time (Settings → Privacy → Anonymous usage statistics). If a send was waiting for the network when you object, that last send still goes out once the connection returns.

5.Hosting and processors

Your online data is hosted by Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Messaging), a Google service. We also rely on:

• Apple (App Store, payments, and, if you use it, "Sign in with Apple")
• Google (Google Play, payments, and, if you use it, Google sign-in)
• Expo (technical delivery of push notifications).

These providers may process data outside the European Union (in particular in the United States). Such transfers are governed by the mechanisms provided for by the GDPR (standard contractual clauses, applicable adequacy frameworks).

6.Account sign-in (optional)

By default, you play with an anonymous account, without providing any personal information. You may choose to link your progress to an Apple or Google account in order to recover it if you change device. In that case, we receive a stable account identifier, the account's email address and, with Google, its name and profile photo. With "Sign in with Apple", you can hide your email address (Apple private relay). This data is used solely to associate your progress with you. It is not used for any marketing purpose.

7.In-app purchases

The purchase of the premium version (one-time "lifetime" payment) is handled directly by Apple or Google. We neither see nor store your payment information. We only receive confirmation that the purchase was made, in order to unlock premium features. Restoring the purchase ("Restore purchase") relies on your Apple/Google account.

8.Push notifications

If you allow them, we send you notifications related to challenges (invitation, a friend's result). You can disable them at any time in your phone settings. The notification token then stops being used.

9.Retention period

• Online data is kept for as long as your account exists.
• You can delete your account directly in the app (Settings → Account → Delete my account): your associated online data (profile, cloud progress, friends) is then erased.
• Anonymous usage statistics are kept for 25 months at most. As they do not identify anyone, deleting your account does not erase them. The markers used to count them on the device are erased after 13 months.
• Copies kept on the device are erased when you uninstall the app. Deleting your account also erases your online avatar.

10.Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability of your data. Erasure can be carried out autonomously via account deletion (§9). You can object to anonymous usage statistics directly in the app, using the "Anonymous usage statistics" switch in the settings. For the other rights, contact us (§1).

You also have the right to lodge a complaint with the competent supervisory authority (in France, the CNIL, www.cnil.fr).

11.Children

SudoKoum is a general-audience puzzle game. We do not knowingly collect data from children below the age required by local regulations. The applicable age rating is shown on the app's listing in each store.

12.Changes

We may update this policy. In the event of a significant change, we will indicate it in the app or on this page. The date at the top of the document reflects the latest version.