Privacy Policy
Last updated: May 2026. This policy explains what data GridFlick collects, how it is used, and your rights under UK GDPR.
Who we are
GridFlick is developed and operated by CrownCode, based in the United Kingdom. If you have any questions about this policy, you can contact us at the address below.
What data we collect
GridFlick is designed to collect as little data as possible. Here is everything we collect:
- Device UUID — a random identifier generated on your first launch and stored on your device. It is never linked to your name, email, or any personal information. It is used to associate your analytics events so we can understand how the app is used without identifying you personally.
- Puzzle activity — when you start and complete a puzzle, we record the puzzle number, date, your score, and whether you achieved a perfect game. This is sent to our analytics systems.
- Paywall events — we record when the paywall screen is shown and when a purchase is completed. No payment details are collected by us.
- Local stats — your streak, win percentage, score history, and puzzle completion records are stored privately on your device only. This data never leaves your phone unless it is part of an analytics event.
We do not collect your name, email address, location, contacts, camera, microphone, or any other personal information.
How we use your data
- To understand how players use the app (which puzzles are completed, where players drop off, conversion to paid)
- To improve puzzle quality and difficulty over time
- To diagnose and fix technical issues
- To measure the effectiveness of the onboarding experience
We do not use your data for advertising, profiling, or any purpose beyond operating and improving GridFlick.
Third-party services
GridFlick uses the following third-party services. Each has its own privacy policy linked below.
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database and analytics event storage | Device UUID, puzzle events, paywall events |
| Firebase (Google) | Analytics and crash reporting | Device UUID, puzzle events, app usage data |
| Google Play Billing | Payment processing for in-app purchases | Purchase confirmation (no card details) |
Data retention
Analytics events stored in our database are retained for up to 24 months, after which they are deleted. Local data stored on your device (stats, streak, purchase status) remains until you uninstall the app or clear the app's data.
Your rights under UK GDPR
As a UK resident you have the following rights regarding your data:
- Right to access — you can request a copy of the data we hold about you
- Right to erasure — you can request that we delete your data
- Right to object — you can object to how we process your data
- Right to portability — you can request your data in a portable format
Because we only store an anonymous device UUID and puzzle activity, we cannot identify you by name. If you wish to exercise these rights, please contact us with your device UUID (which you can find by contacting us) and we will action your request within 30 days.
Children
GridFlick is not directed at children under the age of 13. We do not knowingly collect data from children. If you believe a child has provided data through our app, please contact us and we will delete it promptly.
Changes to this policy
We may update this privacy policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.
Contact us
If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at privacy@gridflick.com