Recallm Privacy Policy
We collect only the data the game needs to work. No ads, no analytics, no tracking.
1. Data controller
The controller of your personal data is [FULL NAME], doing business as [BUSINESS NAME], [ADDRESS], Poland, VAT/NIP [NIP] (“we”).
Privacy contact: contact@devcraft.it.
2. What data we process
- Account identifier. On first launch the app creates an anonymous account with a random identifier. You do not need to provide any personal details to play.
- Sign-in data (optional). If you link your account with Google, we receive your email address and basic profile information (name, profile picture) from Google. If you sign in with an email link, we process your email address and send a sign-in link to it. Until sign-in is completed, the email address is stored locally on your device.
- Game progress. Completed exercises, answers given, scores, number of attempts, lives counter, and the dates your account was created, last active, and when exercises were completed.
- Settings. Your selected app language.
- Technical data. Our servers automatically keep request logs (including IP address, request time, and account identifier when an error occurs) for security and troubleshooting.
The app does not request access to your camera, microphone, location, contacts, or files.
3. Purposes and legal bases
- Providing the service — running your account, saving progress, checking answers, and syncing progress across devices once you sign in (Art. 6(1)(b) GDPR — performance of a contract).
- Community statistics — comparing your results with other players (e.g. a percentile). Results of all players are aggregated into anonymous summaries that do not reveal any individual's data (Art. 6(1)(f) GDPR — our legitimate interest in offering this feature).
- Security and bug fixing — technical logs (Art. 6(1)(f) GDPR — our legitimate interest in keeping the service stable and secure).
4. Who processes data on our behalf
The app runs on Google Firebase (Firebase Authentication, Cloud Firestore, Cloud Functions, Cloud Storage), provided by Google Ireland Limited, which processes data on our behalf under a data processing agreement. Game data is stored in Google Cloud regions within the European Union (Belgium, the Netherlands). Account data (Firebase Authentication) may also be processed in other Google locations, including the USA — such transfers rely on the European Commission's EU-US Data Privacy Framework adequacy decision or on standard contractual clauses.
If you sign in with Google, Google also processes your data as an independent controller under its own privacy policy.
We do not share your data with anyone else unless required by law.
5. How long we keep data
- Account and progress data — until your account is deleted.
- Technical logs — about 30 days.
- When you switch from a guest account to an account that already has progress (e.g. on a second phone), the empty guest account is deleted immediately.
6. Deleting your account
You can ask us to delete your account and all associated data at any time by writing to contact@devcraft.it. If your account is linked to an email address, please write from that address. We will delete the data within 30 days of your request, except for technical logs, which expire on their own.
Uninstalling the app does not delete data from our servers. If you play as a guest (without signing in), you will lose access to that account after uninstalling.
7. Your rights
You have the right to access, rectify, erase, and port your data, to restrict its processing, and to object to processing based on legitimate interest. To exercise these rights, write to contact@devcraft.it.
You may also lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl), or the authority in your EU country of residence.
Providing sign-in data is voluntary — without it you can play as a guest, but you will not be able to move your progress to another device. We do not make decisions about you based solely on automated processing, including profiling.
8. Children
The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has provided us with data, contact us and we will delete it.
9. Changes to this policy
We may update this policy, for example when we add new features. The current version is always available at this address, and we will notify you in the app about significant changes.