foldora

Foldora · Privacy

Privacy Policy

Effective date: 10 October 2026.

1. Who we are

Foldora is a word-puzzle game published by Inovy (“we”, “us”). Inovy is the controller of the personal data described in this policy. You can reach us at privacy@inovy.dev.

2. Data we process

  • Account. An anonymous account is created automatically the first time you open Foldora (hosted on Supabase, EU region, Ireland). You may optionally sign in with Apple or Google. If you do, we receive a user ID and the name and email address that the provider chooses to share (Apple may give us a private relay email address). We use this only to sync your progress across your devices.
  • Game data. Your level progress; your coin balance and purchases ledger; your Daily Word results (number of tries and whether you won or lost, not the letters you typed); streaks; the words you save in your word book; stamps; weekly league points and the display name or initials shown in leagues; and the friends you connect with through invite links.
  • Purchases. Payments are processed by Apple; we never see your card or payment details. Adapty, our purchase validation and entitlements provider, receives your purchase receipts and your app user ID.
  • Analytics. We use Mixpanel (EU data residency) to measure usage events such as screens viewed, levels completed and purchases. These events do not include words or letters you type.
  • Crash reports. Sentry (EU, Germany) receives crash and error reports without personal data.
  • Session replay. Microsoft Clarity records how screens are used, with the game board and keyboard views masked so that what you type is not captured.
  • Advertising (when enabled). Foldora may show interstitial and rewarded ads through Google AdMob. Where required, we ask for your consent through Google’s User Messaging Platform (UMP). Personalised ads and Meta (Facebook SDK) advertising attribution are used only after you allow tracking in Apple’s App Tracking Transparency prompt.
  • Notifications. The optional daily reminder and streak reminders are scheduled locally on your device. Push notifications are used only for friend nudges and league results and use a push token that is stored with your account. You can turn notifications off in your device settings.
  • Feedback. If you send us feedback in the app, we receive your message and, if you provide it, your email address.

3. How we use it

To run the game and sync your progress; to provide purchases, leagues and friends features; to send the notifications you have allowed; to understand and fix problems and improve Foldora; to measure and show advertising where enabled; and to answer your feedback. We do not sell your personal data.

4. Who processes it for us

  • Supabase (EU, Ireland): account, sign-in, database and sync.
  • Apple: App Store payments, Sign in with Apple, push notification delivery.
  • Google: Sign in with Google, Google AdMob and Google UMP.
  • Adapty: purchase validation and entitlements.
  • Mixpanel (EU): product analytics.
  • Sentry (EU, Germany): crash reports.
  • Microsoft Clarity: masked session replay.
  • Meta Platforms: advertising attribution, only after you allow tracking.

5. Your choices

On iPhone, advertising tracking and Meta attribution stay off unless you allow tracking in Apple’s prompt. You can change this any time in iOS Settings → Privacy & Security → Tracking. Where consent is required, the Google UMP form lets you set or change your ad choices. Notifications are controlled in your device settings.

6. Retention

We keep your account and game data for as long as your account exists. When you delete your account, we delete your account and the game data linked to it from our servers (see Delete account). Records that Apple and Adapty keep for billing and legal reasons, and analytics and crash data that are not linked to your name, stay with those providers under their own retention periods.

7. International transfers

Our main database is in the EU (Ireland), and Mixpanel and Sentry process data in the EU. Some providers, such as Adapty, Microsoft Clarity, Google and Meta, may process data in the United States or other countries. Where a transfer needs safeguards, we rely on Standard Contractual Clauses (SCCs) or another lawful transfer mechanism.

8. Your rights

Under the GDPR and, where it applies, the Turkish KVKK, you have the right to access your data, have it corrected or deleted, restrict or object to processing, receive a copy of it, and withdraw consent at any time. You can delete your account yourself in the app, or write to privacy@inovy.dev. You may also complain to your local data-protection authority.

9. Deleting your account

Open Foldora, go to Settings → Delete account and confirm. You can also follow the steps on our Delete account page or email privacy@inovy.dev.

10. Children

Foldora is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided personal data, contact privacy@inovy.dev.

11. Content attribution

Foldora’s word-frequency data is derived from wordfreq by Robyn Speer, licensed under CC BY-SA 4.0.

12. Changes and contact

If we change this policy we will update the effective date above. Questions: privacy@inovy.dev.