WordFlow Privacy Policy

Overview

WordFlow creates an anonymous player account when you first open the app. Signing in with Apple, Google, Facebook, Game Center, or Play Games is optional and can be used to protect or restore your progress.

Data We Collect

We use this information to provide WordFlow, secure accounts, validate purchases, investigate errors, understand use of the game, and measure advertising. These purposes are distinct. The permissions described below do not control every type of collection; accepting this policy is not a separate consent to every purpose.

Advertising And Tracking

WordFlow uses Google Mobile Ads. On Apple devices, WordFlow requests App Tracking Transparency permission before accessing the advertising identifier for tracking. You may refuse that request or change permission later in system settings. Ads can still appear when tracking is not allowed, but they should not use the advertising identifier for cross-app tracking.

Analytics: our own analytics records game interactions and sessions using your player ID. Native apps also include Google Analytics for Firebase, which can collect app-use events and installation or device identifiers automatically. A player ID or installation identifier does not make these records anonymous.

Meta App Events: configured iOS releases send app activation events to Meta for install and session measurement. Automatic Meta purchase and interface-event logging is disabled. Refusing Apple's tracking permission prevents the advertiser-identifier collection controlled by that permission, but does not by itself stop Meta activation events or our own analytics.

Public website: wordflow.dendria.ca uses no cookies and no advertising trackers. Cloudflare Web Analytics measures page views and loading performance without cookies or persistent identifiers. When you tap a download or store button, the site sends one event containing only the button placement, the store, the page language, any campaign tag in the link (for example utm_source), and the approximate country derived by Cloudflare from the connection. These events are not linked to a player ID, device identifier, or IP address in our records.

Crash reporting: Firebase Crashlytics collects native crash reports and receives selected error reports and diagnostic context. Reports can be associated with your signed-in or anonymous player ID.

WordFlow does not send your name, email address, chat messages, or submitted words to Meta App Events. Email addresses are used for account functionality and are not used for tracking.

How We Share Data

We share data only as needed with service providers and platform operators:

• Firebase and Google Cloud for authentication, databases, analytics, crash reporting, messaging, and backend services.
• Google Mobile Ads for advertising and measurement.
• Meta (Facebook App Events) for install and session measurement in configured iOS releases.
• RevenueCat for purchase validation, entitlements, and restoration.
• Apple and Google platform services for distribution, purchases, optional sign-in, achievements, leaderboards, and push delivery.
• Cloudflare for public website and game-asset delivery, and cookieless website analytics.

We may also disclose information when required by law, to protect players and the service, or as part of a business transaction subject to appropriate safeguards. Provider processing is also described in their terms and privacy policies. DendrIA remains responsible for its handling of your personal information.

Processing outside Québec: personal information may be stored, accessed, or processed outside Québec, including elsewhere in Canada and in the United States, depending on the service provider. Laws and access rules can differ in those locations. Contact our privacy officer for information about the providers and safeguards applicable to your data.

Retention And Security

Account, progress, social, and purchase records are kept while needed to provide WordFlow and maintain entitlements. Current first-party analytics includes older records without a fixed automatic expiry; account deletion includes erasure of the associated first-party analytics. Support correspondence and third-party analytics, advertising, and crash reports have separate retention arrangements. Contact our privacy officer to request the retention period applicable to a particular record and its deletion. Legal, fraud-prevention, backup, and transaction-record obligations may require some records to be retained; we will explain applicable limits when handling your request.

We use access controls, encryption in transit, and provider security controls. No online service can guarantee absolute security.

Children

WordFlow is a general-audience game that includes a Kid Mode designed for children ages 4–12 and configured by a parent or guardian. Kid Mode age, difficulty, voice, and guidance settings are stored on the device. The anonymous player account and the app-wide data practices described in this policy still apply while Kid Mode is used.

Kid Mode settings are not a parental-consent mechanism and do not switch off app-wide analytics. In Québec, collection from a child under 14 generally requires the consent of the parent or tutor, unless the collection is manifestly for the child’s benefit. A parent or tutor should contact our privacy officer about consent, access, or deletion requests concerning a child. Do not send identity documents or sensitive information in an initial email; we will explain any necessary verification.

Your Rights And Choices

Depending on your location, you may ask to access, correct, export, object to, restrict, or delete personal data. You may also withdraw consent where consent is the legal basis.

• Delete your WordFlow account: open Settings, choose Account, then choose Delete account. This deletes your profile, progress, purchases, and social data from WordFlow. Platform subscriptions are not cancelled automatically.
• Advertising choices: use the App Tracking Transparency prompt and your device privacy or advertising settings. These settings do not disable all analytics or diagnostic collection.
• Analytics and withdrawal requests: current versions do not provide an in-app switch for our analytics. Email our privacy officer to request withdrawal of consent, object to collection, or ask for deletion. An email request does not immediately disable SDK collection on an installed app; we will explain the actions available and confirm how the request is handled.
• Notifications: change notification permission in device settings.
• Requests: email [email protected]. We may need to verify your identity before fulfilling a request.

App Store Privacy Label

Apple groups the data above into these labels: name, email address, emails or text messages, gameplay content, coarse location, user ID, device ID, purchases, product interaction, advertising data, crash data, performance data, and other diagnostic data.

Most account, gameplay, social, purchase, usage, device, and advertising data is linked to your WordFlow account or device. Crashlytics reports can be linked to your player ID; other performance and diagnostic data may be collected without that link. Store labels are summaries and do not replace the data practices and choices described in this policy.

Contact And Policy Changes

Privacy officer / Responsable de la protection des renseignements personnels — DendrIA S.E.N.C.: [email protected]. Send privacy questions, complaints, access or correction requests, export requests, and consent-withdrawal requests to this address. We may verify your identity using information proportionate to the request.

We may update this policy when WordFlow or legal requirements change. The update date at the top identifies the latest version.