Privacy Policy

Last updated: September 14, 2026

Your puzzles live on your device. You do not need a Monodoku account. We use gameplay data to improve the game, and advertising services to support it. Here is what each part collects and what choices you have.

Who we are

Monodoku and this website are operated by Appverse LLC, a company incorporated in Wyoming, United States, with its main office in Atlanta, Georgia. “We” means Appverse LLC. We are responsible for the personal data we collect for the purposes below (the “controller” under EU and UK data law). Contact us at [email protected].

Progress and gameplay data

The app stores your levels, unfinished puzzles, tools, streaks, achievements, theme unlocks, profile name, avatar, frame and preferences on your device. Your chosen profile name is not an account name and does not have to be your real name. Downloaded themes and previews are cached locally.

After the first-launch agreement, the app sends our server gameplay events such as levels started or completed, hints and Locates used, attempts, rewards, ad activity and feature use. Events include timestamps, sessions and foreground play duration, current and first installed app version and platform, campaign progress, puzzle-attempt and layout fingerprints, board size and difficulty, technique and pacing settings, experiment group and configuration version, board loading and frame performance, counts of manual and assisted moves, mistakes, Hints and Locates used, game mode, feature interactions, ad placement, and reward or permission status. They carry a persistent random installation ID so we can understand play across sessions. A common random identifier also helps us connect our gameplay, purchase-access and friend-invitation records for the same installation. This is pseudonymous data, not fully anonymous data. Offline events may be queued and sent when a connection returns.

We may compare different settings across groups of installations to evaluate features, performance and game balance. We use this information to understand where players get stuck, improve lessons, balance puzzles and rewards, and check that features and ads work. We do not send your chosen profile name, cloud save or private feedback text to Tenjin as gameplay events. The app does not ask for contacts, camera access, microphone access or precise GPS location.

The installation identifier and original install information are separate from your cloud save. On iOS they are stored in the device Keychain and may remain after the app is deleted and reinstalled; on Android they are stored in app data excluded from backup and normally reset when that data is cleared or the app is uninstalled. This is not an account and does not identify the same person across different devices or platforms.

Purchases and subscriptions

Apple or Google processes subscription payments. We do not receive your card details or store password. To verify access, restore purchases and deliver daily gifts, our server keeps store transaction identifiers or purchase tokens, product, store environment, purchase and expiry dates, status, refunds, price and currency when supplied by the store, and a separate pseudonymous installation identifier. We link installations that restore the same subscription, record when they check in, and keep gift-delivery and acknowledgement records to avoid duplicates. These records do not require a Monodoku account. We use them to provide your purchase, resolve problems, prevent abuse and meet applicable recordkeeping obligations.

Subject to your measurement choices, we send purchase and renewal revenue to Tenjin using the existing attribution installation identifier and permitted device/app metadata. This includes the product, actual amount and currency, and a pseudonymous reference. We do not send your purchase receipt or store purchase token to Tenjin. Turning off Ad measurement stops future purchase reporting once the server receives that choice; it does not cancel your subscription or remove previously reported data.

Feedback and support

If you submit feedback in the app, we receive your message, any rating you selected, the screen it came from, your level, language, platform, device model, OS and app versions, anonymous user and installation IDs, and submission time. We also receive a diagnostic snapshot of game state and a bounded list of recent in-game actions to help reproduce the issue; this does not include a screenshot, device name or cloud save. Messages go to our private support dashboard. Please avoid sensitive personal information. If you email us, we receive your email address and whatever you include so we can reply. Public store reviews are handled separately by Apple or Google.

Advertising: Google AdMob

Monodoku uses Google AdMob to show ads, including optional rewarded ads for game tools. Google's SDK may process advertising or app/device identifiers, your IP address and approximate location derived from it, app and device information, ads viewed and tapped, and diagnostic/performance information. Google uses these for ad delivery, measurement, analytics and fraud prevention. This also involves the ad-technology partners Google uses to select and measure ads.

Where applicable, Google's consent form explains the ad purposes and partners and lets you make choices. The app waits for the consent flow before requesting ads. Depending on your choices and region, ads may be personalized, limited, non-personalized or unavailable. See Google's advertising information and Privacy Policy.

Our server issues a pseudonymous user identifier and stores each installation separately. We keep its credential in iOS Keychain or supported Android credential storage to recognize returning installations when recovery is available. Android recovery can depend on Google backup and restore settings. We do not use advertising identifiers to work around a failed recovery.

Install and ad-revenue measurement: Tenjin, Meta and TikTok

We use Tenjin to understand which advertising campaigns bring players to Monodoku and whether those campaigns cover their costs. Subject to applicable consent choices, Tenjin may receive installation, advertising and app-specific identifiers, IP address, approximate country, device model, operating system, language, app version, install-referrer or campaign data, sessions and selected gameplay milestones.

We also send ad-impression revenue information, including the ad format, placement, ad unit, serving network, currency and estimated revenue. We can also report a milestone when cumulative ad revenue reaches a threshold within a set time after installation. These signals help connected advertising partners optimize campaigns; they are kept separate from actual purchases in our records. This measures what an ad earned for us; it is not your income or payment information. Tenjin can exchange attribution information with connected ad partners under the relevant consent settings. See Tenjin's Privacy Policy. When enabled, the Meta and TikTok mobile SDKs receive selected events and ad-value conversion signals directly, including a pseudonymous app user reference. Some optimization signals use purchase event names to represent ad earnings; they do not represent a purchase by you. See Meta's Privacy Policy and TikTok's Privacy Policy.

The agreement and permissions are separate

Accepting our Terms of Use and acknowledging this policy does not grant Apple tracking permission, notification permission or consent to every advertising purpose. On iOS, Apple's tracking choice controls access to the advertising identifier and tracking that requires that permission. Denying it does not prevent you from playing. It does not turn off all game analytics, essential requests or privacy-limited attribution.

Tenjin receives the ad-consent result before connecting. The app also honors supported sale/sharing and targeted-advertising opt-out signals supplied by the consent platform. Settings contains an Ad measurement control in builds configured with Tenjin, and Privacy choices when Google's consent platform requires that entry. Turning off measurement stops new events to Tenjin, Meta and TikTok; it does not remove events already sent or turn off our own gameplay analytics.

Apple and Google game services

When available and connected, Apple Game Center/iCloud or Google Play Games can save progress and record achievements under your platform account. This includes campaign and puzzle progress, rewards and tool balances, streaks, theme unlocks and in-game profile selections. The app uses platform player identifiers to keep accounts' saves separate. We do not receive your Apple or Google password. Cloud save content is sent to the platform service, not our gameplay-analytics server.

Sync stays within the same supported ecosystem; there is no Monodoku account or iPhone-to-Android sync. Device backups may also preserve progress. Cloud saves and platform achievements can remain after you uninstall. Control cloud saves in the app and manage platform data in your Apple or Google account settings. See Apple's privacy information and Google's Privacy Policy.

Daily reminders

If you allow notifications, your device schedules local daily reminders. Our server supplies a bank of reminder text; it does not receive an APNs or Firebase messaging token for this feature. Reminder preferences stay on your device. Permission decisions and reminder opens may appear in gameplay analytics. Turn reminders off or change their timing in Settings, or revoke notification permission in your device settings.

The website, downloads and hosting

Visiting the website or making app requests, including checking for required updates or downloading configuration, themes or reminder text, exposes ordinary request information to our servers and hosting/delivery providers: for example, IP address, request time, requested URL and browser or app information. App requests include a User-Agent header with the app version and build, operating system version and device model. That header does not include your personal device name or installation identifier. We use this information to deliver content, support compatible app versions, operate the service and investigate errors or abuse. Cloudflare delivers downloadable theme files.

The website uses functional browser storage, such as session/security cookies, a saved display preference. It does not currently embed an advertising pixel or third-party visitor analytics script. Opening a store, policy or shared link also subjects that visit to the destination's privacy practices.

Friend-challenge links contain the puzzle layout, starting animal, completion time, mistakes, Hints and Locates used, and an anonymous referral ID for the sending installation. Anyone with the link can read those details. Links do not contain your profile name, avatar, campaign progress or a contact list. Challenges are played in the app; the website shows a preview and download links. Your chosen messaging service handles messages under its own privacy policy.

To award referral tools, the app sends our server the challenge link and a completed solution when a recipient finishes. We validate the completion and keep the sender and recipient's anonymous installation IDs, a puzzle fingerprint, completion date, whether a reward was earned, and reward totals and acknowledgements. We do not store the submitted solution or a friends list. These records prevent duplicate rewards and enforce daily limits. Offline completions wait on the device until a connection is available. The app checks for rewards using a private device credential that is never included in shared links. Referral credentials and pending claims are specific to that installation; they are not synchronized through Game Center or Google Play Games.

Why we process data and who receives it

Where EU/UK law applies, we rely on providing the service you request for game functionality and support, our legitimate interests for proportionate gameplay analysis, reliability and abuse prevention, legal obligations where applicable, and consent for advertising or tracking where required. We consider your rights when relying on legitimate interests; you can object using the contact details below. Accepting the Terms is not a blanket consent.

Access is limited to people and service providers who need it for these purposes, including hosting, support, advertising and attribution providers. We may disclose information when legally required, to protect rights and security, or as part of a business transfer subject to applicable privacy protections. We do not sell a list of players for money. Ad-related sharing can nevertheless count as “selling” or “sharing” under some US state laws; the applicable ad-privacy choices cover that use.

How long data stays

Purchase, restore and gift records are kept while needed to honor subscriptions, prevent duplicate delivery, handle refunds or disputes, and meet financial or legal recordkeeping requirements. Uninstalling does not cancel a subscription or notify us to delete its records. Contact support with your store order reference if you need help identifying purchase records; do not send passwords or payment-card details.

Local progress and preferences stay until you reset or remove them, subject to device and cloud backups. We normally remove raw server gameplay and ad-revenue events after 90 days, or sooner when either category exceeds 250,000 records. Daily analytics and ad-revenue summaries are kept for up to 400 days. Compact lifetime revenue totals remain linked to the anonymous user for reporting; synthetic advertising signals are recorded separately from actual revenue. Attempt and installation summaries are removed after 400 days without activity; an active installation summary keeps its first-seen date while it remains active. Cleanup runs periodically and can briefly lag these periods. Feedback and its diagnostic snapshot are normally removed after 365 days or sooner if more than 10,000 reports are retained. Small deduplication records expire after 90 days for gameplay and ad events, and 365 days for feedback. You can request deletion of data tied to your installation. Deleting the app by itself does not delete previously sent server data or platform cloud saves.

Referral records are kept while needed to deliver rewards and prevent the same completion being rewarded again; contact us to request deletion using the Referral ID shown in the app’s friend-challenge screen. Uninstalling does not notify our server or delete these records.

Ad, attribution, email and infrastructure records follow the relevant providers' retention practices as well as our instructions where they act for us. Backup copies or legally required records may remain after deletion until their normal expiry or the obligation ends. We do not promise that uninstalling removes all copies from every provider.

Your rights and choices

Depending on where you live, you may request access, correction, deletion or a portable copy of your data, restrict or object to certain processing, withdraw consent, and opt out of covered sale/sharing or targeted advertising. You can complain to your local data-protection authority. Withdrawing consent does not undo lawful processing before withdrawal. We do not penalize you for exercising applicable privacy rights.

Email [email protected] with your request. In the app, use Settings → More options → Copy privacy request ID to help us locate our server records. Include it before uninstalling. We may need proportionate verification; that ID does not identify every record held independently by Apple, Google or an ad provider. We will explain any further information or provider-specific step needed. An authorized agent may contact us where local law allows it. If we refuse a request, you may reply to appeal where that right applies.

You can change Apple's Tracking setting or Android's advertising-ID settings, revisit available in-app ad choices, and manage notification and cloud-save settings. A deletion request covers existing data; continuing to play may generate new gameplay records. Tell us if you also want to object to future processing so we can address that separately.

Children

Monodoku is a general-audience game and is not directed at children under 13. We do not knowingly collect personal information from children under that age. Local rules may require a higher age or parental permission. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate steps, including deletion.

Security and international processing

We and our providers may process information outside your country, including in the United States. Where required, international transfers need appropriate safeguards, such as approved contractual protections. We use access controls and encrypted network connections for production services. No system can guarantee absolute security.

Changes and contact

We will update the date above when this policy changes and provide notice of material changes in the app or release notes. Where a change requires new consent, we will ask separately. For privacy questions or requests, contact Appverse LLC at [email protected].