1. Introduction
This Privacy Policy explains how Farkas József ("I", "me", or "my") collects, uses, and protects personal information when you use the NOREN mobile application ("the App"). I am committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
By using NOREN, you agree to the practices described in this Privacy Policy.
2. Who I Am
NOREN is developed and operated by Farkas József, an individual developer based in Hungary.
Contact: jozsef.farkas@gmail.com
3. Data I Collect
3.1 Account Data
When you create an account using Sign in with Apple, I receive:
- A unique, anonymised Apple user identifier
- Your display name (optional, as shared by Apple)
- An email address (optional; Apple may relay a private address)
I do not receive your Apple ID password or payment details.
3.2 Profile Data You Provide
After sign-in, you may optionally provide:
- A username (max 20 characters, publicly visible on leaderboards)
- A country selection (used for country-level leaderboards)
3.3 Gameplay Data
I automatically collect:
- Puzzle solve times, solve dates (in your local timezone), and error counts
- Your current streak and best streak
- Your tier / ranking percentile
- Replay statistics (Premium subscribers)
3.4 Technical Data
- Your device timezone offset (used to determine your local puzzle day and reminder timing)
- Approximate country from IP address (used for leaderboard auto-detection; never stored permanently without your confirmation)
- App version and basic crash/error logs (anonymised)
- Usage events linked to your account (e.g. puzzle opened, puzzle solved, subscription started) — used only to operate and improve the App, never for advertising or shared with third parties beyond the processors listed in Section 7
3.5 What I Do NOT Collect
4. How I Use Your Data
I use your data exclusively to:
- Provide the daily puzzle experience and maintain your solve history
- Calculate leaderboard rankings, tier levels, and streak counts
- Send push notifications you have opted into
- Process and manage your Premium subscription via Apple In-App Purchase
- Understand feature usage and detect/fix technical issues (account-linked usage data and anonymised crash logs)
I do not use your data for advertising, profiling, or any automated decision-making that produces legal or similarly significant effects.
5. Legal Basis for Processing (GDPR)
- Contractual necessity (Art. 6(1)(b)): processing required to provide the App and your account
- Legitimate interests (Art. 6(1)(f)): analytics for improving the App, security and fraud prevention
- Consent (Art. 6(1)(a)): push notifications — withdraw at any time in iOS Settings
6. Data Retention
I retain your personal data for as long as your account is active. If you delete your account, your profile, solve history, and leaderboard entries are deleted within 30 days. Anonymised, aggregated statistics may be retained indefinitely as they cannot be traced back to you.
7. Data Sharing
I do not sell your personal data. Limited data is shared only with:
- Apple Inc. — Sign in with Apple authentication, App Store billing, push notifications (APNs). Apple Privacy Policy
- Supabase Inc. — Backend database and Edge Functions hosting (EU / Frankfurt region). Supabase Privacy Policy
- RevenueCat, Inc. — Subscription and purchase management for Premium. RevenueCat receives purchase and entitlement data via Apple In-App Purchase to verify and manage your subscription status. RevenueCat Privacy Policy
All service providers are contractually prohibited from using your data for their own purposes.
8. International Data Transfers
Your data is stored on Supabase servers in the EU (Frankfurt). Where any transfer outside the EEA occurs, Supabase relies on Standard Contractual Clauses approved by the European Commission.
9. Your Rights (GDPR)
You have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your account and data
- Restriction — ask me to stop processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — for push notifications, via iOS Settings > Notifications
To exercise any of these rights, contact me at jozsef.farkas@gmail.com. I will respond within 30 days.
You also have the right to lodge a complaint with the Hungarian supervisory authority: NAIH (naih.hu).
10. Children's Privacy
NOREN is not directed at children under 13 (or 16 in the EEA). I do not knowingly collect personal data from children. If you believe a child has provided me with personal data, please contact me and I will delete it promptly.
11. Security
I implement industry-standard technical measures including encrypted data transmission (TLS), database access controls, and anonymised crash reporting. If you have security concerns, please contact me immediately.
12. Changes to This Policy
I will notify you of material changes via an in-app notice at least 14 days before the change takes effect. The effective date at the top of this document reflects the latest revision.
13. Contact
Farkas József
Email: jozsef.farkas@gmail.com
Country: Hungary