Privacy policy

Effective date: November 14, 2026

Vocabulatrix is a word game for iPhone and iPad. It has no accounts and no logins. This page says what the game keeps, who gets it, why and for how long.

Your data

  • No account and no login.
  • We don't track you across other apps or websites: no tracking prompt, no advertising identifier.
  • We don't sell your data.
  • What we keep, why and for how long is in the privacy policy.
  • Settings → Delete my data really deletes it: your progress and Creds on this phone and in your iCloud, your records with the services we use for purchases and analytics, and everything on our own server. It can't be undone. (Request logs on our servers expire on their own within 30 days.)

Your anonymous ID

The first time you open the game, it makes a random ID for you. It doesn't contain your name, email or phone number. It's kept in your phone's Keychain and, if you're signed in to iCloud, in your own iCloud account. It's the only ID the services below see. Settings → Your ID shows it.

On your phone and in your iCloud

Your progress, your settings and your Codebook are saved on your phone. If you're signed in to iCloud, the game also keeps a copy in your own iCloud account, with your anonymous ID, so you can pick up where you left off. Apple holds that copy under Apple's privacy policy; we can't see it.

What we keep, who gets it, why and for how long

Purchases go through Apple. We never see your name or your payment details.

RevenueCat: purchases and Creds

Gets
Your anonymous ID, your purchase records from the App Store, your Cred balance and each Cred earned or spent.
Why
To sell Cred packs, hold your Cred balance and restore purchases.
Kept
Until you use Delete my data.
Policy
RevenueCat's privacy policy

PostHog: analytics and game settings

Gets
Your anonymous ID; what happens in the game, such as puzzles started and solved, hints used and purchases; and your device's basics: operating system and version, device model, app version, language setting and screen size. PostHog discards your IP address and records no location. Nothing is recorded from your screen.
Why
To see how the game is played so we can make it better, to change game settings without an app update, and to test changes.
Kept
Until you use Delete my data, or until PostHog's retention period for our account ends, whichever comes first.
Policy
PostHog's privacy policy

Our Cred server (on Cloudflare)

Gets
Your anonymous ID and each Cred earned or spent; the words you send with “That's a word?” (below); a security key your phone makes for this game with Apple's App Attest, which shows a request came from the real app; and, like any web server, your IP address in its request logs.
Why
To apply the Creds you earn and spend, and to make sure only the real game earns them.
Kept
Each Cred earned or spent for 30 days. A note that you got your starting Creds, and your phone's security key, until you use Delete my data. Request logs expire within 30 days.
Policy
Cloudflare's privacy policy

Our puzzle server (on Cloudflare)

Gets
Your IP address and the request details in its logs, when the game downloads new puzzles.
Why
To deliver new puzzles.
Kept
Request logs expire within 30 days.
Policy
Cloudflare's privacy policy

Expo: app updates

Gets
Each update check, with your platform, the app's runtime version and your IP address. It isn't linked to your anonymous ID.
Why
To deliver fixes to the app.
Kept
Under Expo's policy.
Policy
Expo's privacy policy

iCloud (Apple): backup

Gets
Your anonymous ID, your progress and your settings, in your own iCloud account.
Why
Backup and restore.
Kept
Until you use Delete my data.
Policy
Apple's privacy policy

Ads

This version of the game has no ads and no ad software.

Age

Where the law requires it, the game asks Apple for your age range, on Apple's own screen. It doesn't ask anywhere else. If Apple says you're under 13, the game turns off analytics for you: nothing is sent to PostHog. Your age range stays on your phone and is used only for those rules. We never send it anywhere. Your phone keeps two things, and only on that phone: the day the game last asked Apple, and whether the under-13 settings are on. That lets the game ask Apple at most once a year, sooner only when Apple or a change to the game needs a fresh answer.

When a law asks for a parent's or guardian's OK before a child keeps playing after a big change to the game, Apple sends them the request and tells the game only yes or no.

Restoring on a new phone

If you're signed in to iCloud, your anonymous ID follows you to a new phone, and your progress and Creds come with it. Without iCloud, reinstalling on the same phone keeps your ID, because it's in the phone's Keychain, but a new phone starts fresh.

Your ID and Delete my data

Settings → Your ID shows your anonymous ID. Quote it if you write to us.

Settings → Delete my data deletes your records at RevenueCat, at PostHog and on our own server, then clears the copy in your iCloud and the ID on your phone. You start fresh, with no progress and no Creds. It can't be undone. It needs a connection: if our server can't be reached, nothing is deleted, and you can try again.

Notifications

If you clear every puzzle, the game offers to tell you when new ones arrive. It's off unless you say yes. The notifications are scheduled on your phone: there's no push server, and nothing is sent to us.

“That's a word?”

When you tap “That's a word?”, we keep the word, the puzzle and the time on our server, with your anonymous ID, so a person can review the word and send you Creds if it's added. We keep it until it's reviewed, plus 90 days. Delete my data removes it.

Where the game is offered

Vocabulatrix is offered in 144 App Store storefronts. It isn't offered in the European Union, Iceland, Russia, Belarus or mainland China. This policy covers players everywhere the game is offered, including the United Kingdom, Norway and Switzerland.

Changes

When this policy changes, we update this page and its effective date.

Contact

Questions about your data: support@vocabulatrix.com.