Cluey Privacy Policy

Cluey is a daily puzzle game made by Kyron Infotech (“we”, “us”), Renown Shafalya, Ahmedabad, Gujarat 380058, India. You can reach us at info.kyroninfotech@gmail.com.

This policy covers the Cluey app only. Our website has its own privacy policy. For the purposes of India’s Digital Personal Data Protection Act, 2023, we are the data fiduciary for the information described here; under the GDPR and UK GDPR, we are the controller.

To work, Cluey keeps the following in its own storage on your device:

• your puzzle progress and games in progress
• streaks, best times, stats, detective rank, commendations and case files
• your settings: sound, haptics, motion, appearance, and which reminders are on and when
• a display name, if you choose to type one on your profile

If you play without signing in, we never receive this information and it is not copied to our servers. Deleting the app, or clearing its storage, removes it permanently. Your phone’s own backup (Google or iCloud) may include it, under your account with them and their terms. If you sign in, it is also saved to your Cluey account, as described next.

Signing in is optional, and every puzzle can be played without it. If you choose to sign in, you can use your Google account, or Google Play Games on Android. Firebase Authentication, a Google service, then creates a Cluey account for you and receives:

• with Google: your name, email address, profile picture and Google account ID
• with Google Play Games: your Play Games player ID, gamer name and avatar

Your progress is then saved to Cloud Firestore, hosted in Mumbai, India, under your account: streaks, results and best times, detective rank, commendations, case files, settings and your display name. This lets you restore it on a new phone or after reinstalling. Only you can read or change your saved progress; our database rules block everyone else, including other players.

If you use Google Play Games, your achievements and leaderboard scores are handled by Google Play Games under Google’s terms, and your gamer name and scores may be visible to other players there.

We use your account details only to sign you in, to link your saved progress to you, and to reply if you contact us. We do not send you marketing email, we do not link your account to analytics or crash reports, and we do not share your account details with anyone else.

You can delete your Cluey account and everything saved to it at any time. The steps are also on Delete your Cluey account:

• in the app: open Settings and choose Delete account
• by email: write to info.kyroninfotech@gmail.com from the email address of your Google account (or include your Play Games gamer name) and ask us to delete your account

We delete the account and its saved progress within 30 days of your request. Signing out does not delete your account. Progress stored on your phone stays until you delete the app or clear its storage. Analytics and crash data are not linked to your account and are deleted on their normal schedule, shown under At a glance.

If you signed in with Google, you can also remove Cluey’s access from your Google Account’s third-party connections.

Cluey uses Firebase Analytics, a service of Google LLC, to tell us how the games are played. It records events such as:

• which game was opened, whether it was solved, how long it took and how many hints were used
• opening an older day in the Archive, earning a case clue, and the Sunday accusation (right or wrong, never the suspect’s name)
• tapping Share (that a share happened, not what was shared or to whom)
• changing a setting such as sound or a reminder
• which screens are viewed, first open, sessions and time spent in the app

With these, Firebase receives your device model, operating system, app version, language and an approximate location at country or city level, worked out from your IP address. It also assigns a random app-instance identifier. On Android, Firebase may also read your device’s advertising ID if your phone makes it available. Cluey has no ads and does not use it for advertising.

We use this to see which puzzles are too hard or too easy, which games people come back to, and where the app needs work. We do not use it to identify you, we do not combine it with information from other sources to build a profile of you, and we do not sell it. Development and test builds send nothing.

Google’s handling of this data is described in the Firebase privacy and security overview and Google’s privacy policy. On Android you can reset or delete your advertising ID in your phone’s settings, under Google, then Ads.

If Cluey crashes, or certain features run into an error (reminders, sound, downloading puzzles), Firebase Crashlytics, also a Google service, sends us a report. A report contains the technical details of the error, the device model, operating system and app version, the time, and a random Crashlytics installation identifier. We use reports only to find and fix bugs.

Each day Cluey downloads that day’s puzzles, the week’s Case of the Week and the reminder schedule from Google Cloud Firestore, hosted in Mumbai, India. Like any request over the internet, these downloads reveal your IP address and basic technical information to Google, which processes it to deliver the service. Nothing about your play, your progress or your device is sent in these requests, and we do not use them to identify you. If there is no connection, Cluey uses puzzles built into the app instead.

Reminders are scheduled on your phone by the app itself, so we do not run a server that sends you messages. Cluey asks for permission before showing any, and you can turn each reminder off in Cluey’s settings or turn notifications off entirely in your phone’s settings.

When you tap Share, Cluey makes an image and a short text showing your result (never the answer or the culprit) and hands it to your phone’s share sheet. You choose where it goes. We do not see the recipient or the message.

In India, we process the information described here on the basis of your consent: for analytics and crash reports, given when you install and use Cluey after this notice is made available to you; for your account and cloud save, given when you choose to sign in. You can withdraw consent at any time, as explained under Your rights and choices.

If you are in the European Economic Area or the United Kingdom, we process your account and saved progress to provide the service you asked for when you signed in, and we rely on our legitimate interest in understanding how Cluey is used and keeping it working for analytics and crash reports. You can object to the latter at any time.

Google provides Firebase Authentication, Firebase Analytics, Firebase Crashlytics and Cloud Firestore to us as a service provider and processes the information on our behalf. Sign-in with Google and Google Play Games are provided by Google under its own privacy policy. Google Play and the App Store handle downloading and installing Cluey under their own privacy policies.

We do not sell, rent or trade personal data, and we do not share it with anyone for advertising. We would disclose information only if the law required it.

Puzzle downloads are served from Mumbai, India. Firebase Analytics and Crashlytics may process information on Google’s servers in the United States and other countries. Google applies safeguards recognised under data protection law to these transfers, including standard contractual clauses.

Wherever you live, you can ask us what information we hold about you, ask us to correct or delete it, and withdraw your consent or object to processing. In India you also have the right to grievance redressal and to nominate someone to exercise your rights. In the EEA and UK you can also ask for restriction or portability and complain to your data protection authority.

To make a request, write to info.kyroninfotech@gmail.com. We answer within 30 days.

If you have signed in, write from your account’s email address (or include your Play Games gamer name) so we can find your account. Analytics and crash data are not linked to your account or contact details, so we usually cannot pick those out from an email alone. In practice:

• to delete your account and saved progress, follow Delete your Cluey account
• to stop all analytics and crash reporting, uninstall Cluey; this version has no in-app switch for analytics
• to start fresh, uninstall and reinstall: you get a new app-instance identifier that cannot be linked to the old one
• to delete everything stored on your phone, clear Cluey’s storage or uninstall it
• to stop reminders, turn them off in Cluey’s settings or your phone’s notification settings

Cluey is made for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children. Cluey does not ask for anyone’s age, and signing in is optional.

India’s DPDP Act treats anyone under 18 as a child. If you are under 18 in India, or under the age of digital consent where you live, please use Cluey, and sign in, only with a parent’s or guardian’s permission. If you believe a child’s information has reached us, write to info.kyroninfotech@gmail.com and we will delete what we can identify.

Everything Cluey sends or receives travels over encrypted HTTPS connections. Information on your phone is protected by your phone’s own security. Access to our Firebase project is limited to us. The database lets the app read released puzzles only, and lets each signed-in player read and change their own saved progress and nobody else’s. No system is perfectly secure, but we keep what we collect small so there is little to protect.

If we change what Cluey handles, for example by adding ads or purchases, we update this policy before that version is released and change the date at the top. Significant changes will also be mentioned in the app’s release notes.

Kyron Infotech, Renown Shafalya, Ahmedabad, Gujarat 380058, India. Email info.kyroninfotech@gmail.com.

Grievance officer: Keval Patel, info.kyroninfotech@gmail.com. We acknowledge grievances within 48 hours and resolve them within one month.