Your data, kept to a minimum.

01The short version

• No account, no sign-in. We never ask for your name, email, or phone number.
• Your progress stays on your device. Levels, stars and settings are saved locally — we don’t upload or back them up.
• No ads and no ad tracking. We don’t show ads, use advertising identifiers, or sell your data — ever.
• We use Google Firebase for pseudonymous analytics and crash reports, so we can see where players get stuck and fix bugs.
• Optional notifications are sent through Firebase only if you allow them.
• Purchases (the optional “Unlimited” pass) are handled by the App Store / Google Play through RevenueCat — we never see your card details.

02Information we collect

a. Stored only on your device

Your level progress, stars, current level, hearts and settings (sound, haptics, language, theme) are stored locally on your device. This data is not transmitted to us and is removed when you delete the Game.

b. Analytics & diagnostics (Firebase Analytics & Crashlytics)

To understand how the Game is played and to fix problems, we collect pseudonymous usage and diagnostic data, including:

• gameplay events — for example which level you start, complete or fail, the number of attempts, moves and time taken, hearts used, and which purchase was made;
• a non-identifying “current level” property describing your progress band;
• an automatically generated app-instance identifier, your device model, operating system version, app version, language and approximate region or country (derived from your IP address — not precise GPS location);
• crash reports, including diagnostic logs and device state at the time of a crash.

This data is not linked to your real-world identity.

c. Push notifications (Firebase Cloud Messaging)

If you allow notifications, the Game registers a device push token so we can send occasional reminders to come back and play. This is optional — if you decline, the Game works normally and no token is used to message you.

d. Purchases (RevenueCat + App Store / Google Play)

If you buy the optional “Unlimited” pass, your payment is processed entirely by Apple’s App Store or Google Play — we never receive your payment-card details. To unlock and verify your purchase we use RevenueCat, which receives the store transaction/receipt, an anonymous app-user identifier, and basic device and country information to keep your entitlement in sync across reinstalls.

e. Remote content (Firebase Remote Config & Cloud Storage)

The Game downloads configuration values and level packs from Firebase. Like any network request, these include standard technical information such as your IP address and device type; we do not use them to identify you.

03What we don’t collect

We do not collect, request, or have access to:

• your name, email address, phone number or postal address;
• your contacts, photos, camera or microphone;
• precise or GPS location;
• advertising identifiers (such as IDFA) for ad targeting — the Game contains no ads.

We never sell your personal information or share it for cross-app advertising.

04How we use information

We use the limited information above only to:

• run, maintain and improve the Game — including seeing where players get stuck and balancing difficulty;
• diagnose and fix crashes and technical problems;
• deliver and verify your purchases and restore them when you reinstall;
• send optional re-engagement notifications (only if you opted in);
• keep the Game secure and prevent fraud, abuse and cheating.

05Third-party services

We rely on a small number of trusted providers. Their handling of data is governed by their own privacy policies:

• Google Firebase — Analytics, Crashlytics, Cloud Messaging, Remote Config and Cloud Storage. See the Google Privacy Policy and Firebase privacy & security.
• RevenueCat — purchase and subscription management. See the RevenueCat Privacy Policy.
• Apple App Store and Google Play — payment processing and app distribution, under Apple’s and Google’s privacy policies.

06Data retention

Analytics and crash data are retained according to Firebase’s default retention periods and then aggregated or deleted. Data stored on your device remains until you delete the Game. Purchase records are kept for as long as needed to provide your entitlement and to meet legal and accounting obligations.

07International transfers

Our providers (Google and RevenueCat) may process and store data on servers located outside your country, including in the United States. Where required, these transfers rely on appropriate safeguards under applicable data-protection law.

08Your choices & rights

• Notifications: turn reminders on or off at any time in your device’s system settings.
• Analytics: you can limit analytics through your device’s privacy settings, and deleting the Game stops all further collection and removes the data stored on your device.
• Purchases: manage or cancel your subscription, and restore purchases, from your App Store or Google Play account.
• Legal rights: depending on where you live (for example under the GDPR or CCPA/CPRA), you may have the right to access, correct, delete, restrict, object to, or port your data, and to opt out of any “sale” of personal information — which we do not do. Contact us to exercise these rights and we will respond within the time required by law (generally within 30 days).

09Children’s privacy

Hepta is a general-audience casual puzzle game. It is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@qrdynamic.xyz and we will delete it.

10Security

We use reasonable technical and organisational measures to protect the limited data we process. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice. Your continued use of the Game after an update means you accept the revised policy.

12Contact us

If you have any questions about this Privacy Policy or your data, contact QRdy at support@qrdynamic.xyz.