Privacy Policy

Effective date: March 11, 2026

1. Information We Collect

1.1 Anonymous users (no sign-in)

If you use Vajeh without signing in, we collect only the following:

• Anonymous User ID: A randomly generated identifier created on first launch. This ID has no link to your real identity and is used solely to save and restore your game progress.
• Device platform: Whether you are using Android or iOS, stored on our servers to correctly route features and notifications.
• Push notification token (FCM token): A device-level token generated by Firebase Cloud Messaging, used to deliver notifications to your device. This token does not identify you personally.
• Country code: A two-letter country code (e.g., "US", "IR") detected from your device locale, a client-side country lookup, or Google Cloud request headers. Used to tailor content and notifications. We do not store your IP address itself.
• App launch count: The number of times you have opened the App, stored only on your device.
• Game progress: Your played words, guess history, win/loss record, streaks, and remaining word balance. Stored on-device and synced to our servers.
• Crash and diagnostic data: Technical information sent automatically when the App crashes (e.g., device model, OS version, stack trace). Contains no personal information.
• Anonymous usage events: In-app actions logged without any personally identifiable information. See the full list in Section 4.

1.2 Authenticated users (optional sign-in)

If you choose to sign in with Google or Apple, we additionally collect:

• Display name: The name associated with your Google or Apple account, shown in your profile within the App.
• Email address: The email address associated with your Google or Apple account, used for account identification and support.
• Profile photo URL: A link to your Google or Apple profile picture, displayed within the App.
• Authentication provider: Whether you signed in with Google or Apple.

This information is provided voluntarily when you choose to sign in. You can use Vajeh fully without signing in; sign-in only unlocks bonus features like cross-device sync and a word bonus.

1.3 Purchase data

When you make an in-app purchase, we store:

• Transaction ID (from Apple or Google)
• Product ID and word count purchased
• Purchase platform (Android or iOS)
• Verification status (pending, verified, or refunded)
• Purchase timestamp

We do not store your payment method, credit card details, or billing address. All payment processing is handled entirely by Apple App Store or Google Play Store.

2. How We Use Your Information

• Save and restore game progress across sessions and devices.
• Deliver push notifications such as daily word reminders and game updates.
• Identify and fix bugs using crash reports and diagnostic data.
• Improve the App by analyzing aggregated, anonymous usage patterns.
• Provide and validate in-app purchases by verifying receipts with Apple and Google servers.
• Serve advertisements through Google AdMob to support free access to the App.
• Deliver remote configuration (e.g., game settings, feature flags) without requiring an App update.
• Protect the service using authentication, receipt verification, and other anti-abuse safeguards.

3. Consent & Ad Personalization

When required by law or platform policy, Vajeh presents a consent dialog powered by Google's User Messaging Platform (UMP) before requesting ads. The dialog covers ad-related privacy choices such as:

• Personalized advertising: Whether AdMob may use your device advertising identifier to show relevant ads.

Where supported, you can review these choices again from Vajeh's Settings screen through the privacy options entry point, and you may also use your device's own privacy settings. If you decline personalized ads, you may still receive non-personalized ads or no ad request may be made until consent requirements are satisfied.

4. Push Notifications

Vajeh may request permission to send you push notifications (e.g., daily word reminders, new content alerts). Specifically:

• We will ask for permission only after you have used the App a reasonable number of times.
• Your FCM token is stored on our servers, linked to your anonymous user ID and device platform.
• You may opt out of notifications at any time through your device's system settings.
• Revoking notification permission does not affect your ability to use the App.

5. Analytics Events We Track

The following usage and diagnostics events may be sent to Firebase Analytics or related Google services. We do not intentionally attach payment details or direct identifiers such as your raw card data to these events:

App lifecycle

• App open
• Startup completed or failed (with duration)

Gameplay

• Game started (with difficulty and remaining words)
• Guess submitted (guess number only)
• Game won or lost (with guess count and duration)
• Word skipped
• Out of words shown
• Hint opened or revealed

Navigation

• Settings opened
• Stats opened

Monetization

• Store opened
• Purchase started, completed, cancelled, or failed
• Daily reward claimed
• Rewarded ad started, completed, skipped, or failed

Notifications

• Notification permission dialog shown, granted, or denied

Privacy & ads

• Consent state updated
• Privacy options opened or failed
• Rewarded ad loaded or failed to load

Diagnostics

• Error occurred (error type and message only, no personal data)

6. AI-Powered Features

Vajeh may offer features powered by artificial intelligence (AI) or machine learning to enhance your gameplay experience, such as intelligent hints or suggestions.

• On-device processing: Where AI features run directly on your device, no gameplay input is transmitted to external servers for that purpose.
• No personal profiling: We do not use AI to build a personal profile of you or make automated decisions that affect you outside the App.
• Accuracy: AI-powered suggestions are provided for entertainment and educational purposes only and may not always be correct.
• Improvement: Aggregated, anonymized usage patterns may be used to improve AI feature quality over time.

7. Third-Party Services

Vajeh integrates the following third-party services, each governed by their own privacy policies:

• Firebase Authentication (Google): Creates and manages user sessions (anonymous and authenticated). Firebase Privacy Policy
• Firebase Analytics (Google): Collects anonymous usage events described in Section 5. Firebase Privacy Policy
• Firebase Crashlytics (Google): Receives crash reports and diagnostic data. Firebase Privacy Policy
• Firebase Cloud Messaging (Google): Manages delivery of push notifications via your device's FCM token. Firebase Privacy Policy
• Firebase Remote Config (Google): Delivers App configuration values without requiring an update. Firebase Privacy Policy
• Google AdMob: Displays advertisements to support the free version of the App. AdMob may use a device advertising identifier for ad personalization, subject to your consent. Google Privacy Policy
• Google User Messaging Platform (UMP): Presents the consent dialog and privacy options flow for advertising in compliance with GDPR and other regulations. Google Privacy Policy
• Google Play / Apple App Store: Manages in-app purchases and app distribution. Their respective privacy policies apply. Google | Apple

8. Data Storage & Security

• On-device storage: Game progress and app state are stored in a local database on your device.
• Server storage: Your user ID, profile data (if signed in), FCM token, device platform, game progress, and purchase history are stored on Google Cloud Platform infrastructure with encryption at rest and in transit (TLS/HTTPS).
• Access control: Server-side data is protected by Firebase security rules that allow only your own authenticated session to read or write your data.
• Input validation: All data submitted to our servers is sanitized and validated to prevent injection attacks and data corruption.
• Transaction safety: Critical operations (purchases, entitlements, profile updates) use atomic database transactions to prevent race conditions and data loss.

9. Data Retention

• Active accounts: We retain your data for as long as it is needed to operate the App, provide restore or sync features, and comply with legal obligations.
• Inactive accounts: We may review and clean up inactive data over time, but we do not promise automatic deletion on a fixed schedule unless required by law.
• Account deletion: When you delete your account (via the App or by contacting us), all server-side data is permanently erased, including your user profile, game statistics, purchase history, and FCM tokens.
• Local data: On-device data is generally removed when you uninstall the App, although server-side records linked to your account may remain until you delete that account.

10. Your Rights & Choices

• View your data: Your game statistics, profile information, and purchase history are visible within the App at any time.
• Delete your account: You can delete your account and all associated data directly from within the App (Settings → Delete Account). You can also email us at support@vajeh.app.
• Review ad privacy choices: Use Vajeh's in-app privacy options flow from Settings when available, or use your device's ad/privacy settings where supported by the platform.
• Analytics and diagnostics: We use analytics and crash reporting to operate and improve the App. If your platform or Google account offers privacy controls that affect these services, those controls may also apply.
• Notification opt-out: Disable notifications any time in your device's system settings.
• Data portability: Contact us at support@vajeh.app to request a copy of your data in a machine-readable format.
• Right to object: If you are in the European Economic Area (EEA) or a jurisdiction with similar rights, you may object to the processing of your data. Contact us and we will address your request in accordance with applicable law.

11. Children's Privacy

Vajeh is designed for general audiences and is appropriate for all ages. We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). Anonymous accounts do not require or collect any personal information. If a child signs in with a social account, the information collected is limited to what is described in Section 1.2. If you believe a child has provided personal information without parental consent, contact us and we will delete it promptly.

12. International Data Transfers

Our infrastructure is hosted on Google Cloud Platform. Data may be processed in the United States or other countries where Google operates data centers. By using the App, you consent to this transfer. All transfers are protected by Google's data processing agreements and comply with applicable laws, including the EU General Data Protection Regulation (GDPR) where applicable.

13. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: (a) know what personal information we collect and how it is used, (b) request deletion of your personal information, (c) opt out of the "sale" of personal information. We do not sell personal information. To exercise your rights, contact us at support@vajeh.app.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated through an in-app notification and by updating the effective date above. We encourage you to review this page periodically.

15. Contact Us

If you have any questions or requests regarding your privacy, please reach out: