Genius Privacy Policy
3 Oct 2026 · @Caner
Effective date: 3 October 2026
Genius collects as little as it can. There is no sign-up, no email, no real name, no ads, no tracking and no data selling. You can play without ever telling us who you are, and you can delete everything from inside the app at any time.
1. Who we are
Genius ("the app", "we", "us") is a number puzzle game for iPhone, developed and operated by Caner OBALI, Australia. We are the data controller for the information described in this policy.
This policy applies to the Genius iOS app and the online services it uses (player codes, leaderboards and feedback). It does not cover the App Store itself, which Apple runs under its own privacy policy.
Summary
2. Information we collect
2.1 Stored on our servers
Pick a nickname that does not reveal who you are. Nicknames are checked against a list of offensive words; one that breaks the rules is refused or hidden from leaderboards.
2.2 Stored only on your phone
These never leave your device: your level progress and solved puzzles, puzzles in progress (so the clock and hint survive leaving the app), your daily streak, settings (language, theme, vibration, daily reminder), and scores waiting to upload while you are offline. Your sign-in session is kept in the iOS Keychain. Deleting the app removes this data; the Keychain session is ignored on reinstall, so you start as a new player.
2.3 Collected automatically by our infrastructure
Like any internet service, our hosting provider receives your IP address and basic request details (time, endpoint) when the app talks to our servers. These are kept in short-lived security and error logs and are not used to identify you or build a profile.
2.4 What we never collect
-
Your name, email, phone number or postal address
-
Location, contacts, photos, camera, microphone or health data
-
Advertising identifiers (IDFA) or any cross-app or cross-site tracking
-
Payment information (the app has no purchases)
-
Analytics or crash data through third-party SDKs
2.5 Notifications
The daily reminder uses notifications scheduled on your phone. No push token or device identifier is sent to us or anyone else. You can turn it off in Profile or in iOS Settings.
2.6 Information from Apple
If you allow "Share with App Developers" in iOS, Apple may give us anonymous crash reports and usage statistics. Apple also provides aggregated download and sales numbers. None of this identifies you to us.
3. How we use information, and our legal bases
We use your information only to run the game. We do not use it for advertising, profiling, automated decisions with legal effects, or training AI models.
Where we rely on legitimate interests, we have weighed them against your rights. The data involved is minimal and pseudonymous, so the impact on you is low. You can object at any time (section 6).
4. Sharing and service providers
We do not sell, rent or trade your information, and we do not share it for advertising. It is shared only in these cases:
-
Other players. Your player code or nickname, total points and rank appear on the daily and all-time leaderboards. Nothing else about you is shown.
-
Supabase (privacy policy) hosts our database and anonymous sign-in. It processes data only on our instructions under a data processing agreement. Our project is hosted in sydney AU, on Amazon Web Services infrastructure.
-
Apple distributes the app and delivers notifications scheduled on your phone. Apple handles its data under its own privacy policy.
-
Legal reasons. We may disclose information if the law requires it, to respond to valid legal requests, or to protect the rights and safety of our players or ourselves.
-
Change of ownership. If the app is sold or transferred, the data may move to the new owner, who must keep honouring this policy. We will tell you in the app first.
International transfers
Our servers may be in a different country from you, including outside the EEA, the UK or Türkiye. When personal data is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses in our provider's data processing agreement, and the transfer rules of KVKK where they apply.
5. Security and retention
How we protect your data
-
All traffic between the app and our servers is encrypted with HTTPS (TLS).
-
Data is encrypted at rest by our hosting provider.
-
Row-level security rules mean a player can only add or delete their own scores and change only their own nickname. Feedback can be sent but not read back through the app.
-
Your sign-in session is kept in the iOS Keychain.
-
Because we hold no names, emails or passwords, a breach would expose very little.
No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
How long we keep it
Accounts are not deleted for inactivity, so your scores are still there when you come back.
6. Your rights and choices
Delete your account in the app
Go to Profile → Delete my account and confirm. It takes effect immediately:
-
Your account ID, player code, nickname and all your scores are permanently deleted from our servers.
-
You disappear from every leaderboard.
-
Your levels, progress and streak on this phone are erased.
-
Feedback you sent is kept, but no longer linked to you.
-
The app needs a player code to work, so you get a brand-new one. None of your old data is linked to it.
Deletion cannot be undone. Deleted data may stay in encrypted backups for a short time before they are overwritten.
Other choices
-
Change your nickname at any time in Profile. To remove it completely, delete your account.
-
Turn the daily reminder off in Profile or iOS Settings.
-
Don't send feedback if you don't want its details stored.
Your legal rights
Depending on where you live (for example under the GDPR in the EEA, the UK GDPR, KVKK in Türkiye, the Australian Privacy Act, or US state laws such as the CCPA/CPRA), you may have the right to:
-
access the data we hold about you and get a copy of it
-
correct inaccurate data
-
delete your data
-
restrict or object to processing, including processing based on legitimate interests
-
data portability
-
withdraw consent at any time, without affecting earlier processing
-
complain to your data protection authority, such as your EU/UK regulator, the KVKK Board in Türkiye, or the OAIC in Australia
To make a request, email us at canerobal@gmail.com with your player code (shown in Profile). Since we hold no names or emails, the player code is how we find your data. We answer within 30 days, free of charge. We will never treat you differently for using your rights.
California residents: we do not sell or share personal information for cross-context behavioural advertising, and we have not done so in the past 12 months.
7. Children
Genius suits all ages, but it is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect personal information from them. The app never asks for age, name, contact details or location, and gameplay needs none. A child should not use a nickname that reveals who they are. If you believe a child has given us personal information, email us or use Delete my account, and we will delete it.
8. Changes to this policy
If we change how we handle your data, we will update this page and its effective date. For significant changes, such as collecting a new type of data, we will also tell you in the app before they take effect. Keeping the app after a change means the updated policy applies.
9. Contact us
Questions, requests or complaints about privacy:
-
Email: canerobal@gmail.com
-
In the app: Profile → Send feedback
-
Developer: Caner OBALI, Australia
Please include your player code if your request is about your own data.
