Privacy Policy

Effective date: March 27, 2026

Vajeh is a mobile Persian word game available on Android and iOS and operated from the United Kingdom. This Privacy Policy explains what information we collect, how we use it, when we share it, and the choices available to you when you use the Vajeh app and related services.

1. Scope

This Privacy Policy applies to the Vajeh mobile app, our related backend services, and the support and legal pages available at vajeh.app. It does not apply to third-party services such as Apple, Google, or other providers we use to operate the app; those services have their own privacy policies.

2. Information We Collect

2.1 Account and session information

Vajeh supports both anonymous play and optional sign-in. Depending on how you use the app, we may collect:

User ID: a Firebase user identifier for your account or anonymous session.
Account state: whether the session is anonymous or authenticated.
Authentication provider: for example Google on Android or Apple on iOS.
Profile information you choose to share by signing in: display name, email address, and profile photo URL supplied by your sign-in provider.
Linked account identifiers: technical references used to move progress cleanly from an anonymous session to a signed-in account.

2.2 Gameplay and app data

To run the game and preserve progress, we process gameplay and app-state data such as:

current and completed games, guesses, results, and timing data;
statistics such as wins, losses, streaks, guess distribution, and related counters;
word balance, claimed daily rewards, rewarded-ad grants, and purchased word entitlements;
app settings and local app state, including launch count and notification-prompt state;
country code and platform information used to operate the service and localize behaviour.

2.3 Purchase and entitlement data

If you buy word packs, we store purchase and entitlement records needed to verify, grant, recover, and restore purchases. This may include:

transaction ID or purchase token;
product ID, pack ID, platform, and word count;
verification, refund, and restore status;
purchase timestamps and entitlement counters;
hashed purchase proof values used for fraud prevention and duplicate protection.

We do not receive or store your payment card details. Payments are processed by Apple App Store or Google Play.

2.4 Notifications and device tokens

If notifications are available and you allow them, we may process:

your Firebase Cloud Messaging (FCM) token;
platform information and token registration timestamps;
notification permission status and related settings.

2.5 Diagnostics, analytics, and service integrity data

We use analytics, crash reporting, and service-protection tools to operate and improve Vajeh. Depending on your device and platform configuration, this may include:

app open, startup, gameplay, store, consent, and notification events;
technical diagnostics such as device model, OS version, app version, crash logs, and error messages;
app integrity and anti-abuse signals used by Firebase App Check and platform attestation providers.

2.6 Country information

We may determine your country code in one of three ways:

from a country code supplied by the app after an IP-based lookup through ipapi.co;
from your device locale as a fallback; or
from Google infrastructure request headers on our backend.

We use country information at a country level only. We do not request precise location permissions.

We do not intentionally collect your contacts, photos, microphone input, precise GPS location, or payment card details in Vajeh.

3. How We Use Your Information

to create and maintain anonymous and signed-in sessions;
to save, sync, recover, and restore gameplay progress and entitlements;
to grant free words, daily rewards, login bonuses, and rewarded-ad word grants in line with app rules;
to verify purchases with Apple and Google and prevent fraud or abuse;
to send app notifications, if you have enabled them;
to configure and improve the app using Remote Config, analytics, and diagnostics;
to show ads and manage ad-consent choices where ads are enabled;
to maintain service security, investigate incidents, and comply with legal obligations.

4. Legal Bases for Processing

If you are in the United Kingdom, European Economic Area, or another jurisdiction with similar requirements, we generally rely on the following legal bases:

Contract: to provide the app and deliver the features you request.
Legitimate interests: to secure, operate, improve, and support Vajeh.
Consent: where required, including for certain advertising choices and device-level permissions such as notifications.
Legal obligations: where processing is required by applicable law.

5. Advertising and Consent

Vajeh may display Google AdMob ads, including optional rewarded ads. When required by law or platform policy, the app uses Google's User Messaging Platform (UMP) to collect and manage ad-related privacy choices.

If you consent to personalised advertising, Google may use device- or app-level identifiers in line with its own policies.
If you do not consent, you may receive non-personalised ads or ads may remain unavailable until consent requirements are satisfied.
Rewarded ads are optional and are used to grant additional in-app word credits.
Where supported, you can reopen the privacy options flow from the app's Settings screen.

6. How We Share Information

We do not sell your personal data. We share data only as needed to run Vajeh, process transactions, protect the service, or comply with law.

Our main service providers are:

Google Firebase and Google Cloud: authentication, callable backend functions, analytics, crash reporting, messaging, remote configuration, app integrity, and hosting. Firebase Privacy & Security
Google AdMob and UMP: advertising and consent management. Google Privacy Policy
Apple: Sign in with Apple, App Store purchases, and related platform services. Apple Privacy Policy
Google Play and Google Sign-In: Android purchases and sign-in services. Google Privacy Policy
ipapi.co: country-level IP geolocation used by the app for country detection. ipapi Privacy Policy

We may also disclose information if required to comply with law, enforce our terms, protect users, or respond to valid legal requests.

7. International Transfers

Vajeh is operated from the United Kingdom and is available internationally. Our service providers may process data in the United States, the United Kingdom, the European Economic Area, or other countries where they operate. Where applicable, we rely on contractual and technical safeguards provided by those processors.

8. Data Retention

Account and gameplay data: retained for as long as needed to operate the app, provide sync and restore features, and meet legal obligations.
Crash and analytics data: retained according to the settings and retention policies of the underlying Firebase services.
Deleted accounts: when you delete your account, our Firebase Auth deletion flow triggers cleanup of your main user record and related purchases, statistics, and stored notification tokens on our backend.
Local data: some game data is stored on your device and may be removed when you uninstall the app, subject to your device or platform backup settings.

9. Your Choices and Rights

Sign in or stay anonymous: core gameplay is available without social sign-in.
Delete your account: you can delete your account from the app's Settings screen.
Notifications: you can disable notifications in your device settings at any time.
Ad choices: where supported, you can revisit ad privacy options from within the app.
Access, correction, deletion, objection, restriction, portability, or complaint rights: depending on where you live, you may have privacy rights under applicable law. Contact us at support@vajeh.app and we will handle requests as required by law.

10. Children's Privacy

Vajeh is a general-audience game. We do not knowingly collect personal information from children in a manner prohibited by applicable law. If you believe a child has provided personal information unlawfully, contact us and we will investigate and, where appropriate, delete the relevant data.

11. Security

We use reasonable technical and organisational measures to protect data, including encrypted transport, controlled backend access, purchase verification, and integrity checks. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect product, operational, or legal changes. We will update the effective date on this page, and for material changes we may also provide notice in the app or on our website.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at:

support@vajeh.app

We aim to respond within a reasonable time.