Privacy policy

About this policy

This policy covers the Kedimo app for iPhone and iPad and kedimo.app. Kedimo does not require a player account. Local game storage and information sent to service providers are explained separately below.

Draft information: the operator’s legal name, address, privacy contact and effective date are awaiting confirmation. This document is not yet the final published policy.

Game data on your device

Your current puzzle, scores, unlocked cat colors and settings are saved on your device so you can resume playing offline. Kedimo does not provide its own account-based cloud save or public leaderboard.

Deleting the app can remove local progress. Apple device backups are managed through your Apple settings. Deleting local files does not automatically delete information already received by service providers.

Advertising and your choices

Kedimo uses Google AdMob for between-game ads and Google’s User Messaging Platform (UMP) for regional privacy choices. The current app requests non-personalized ads. Ad delivery can still involve IP addresses, device or app identifiers, technical information and ad interactions for delivery, measurement and fraud prevention.

Where available, revisit advertising privacy choices in the app’s settings. These choices are separate from notification permission and analytics. Buying Remove Ads disables in-game ads; it does not disable all other processing described here.

Purchases and restoration

Apple processes the optional one-time Remove Ads payment. RevenueCat helps verify purchases, restore access and maintain the ad-free entitlement using transaction information and an app user identifier. Kedimo does not receive your payment card details.

Restoring a purchase checks your entitlement; it does not restore a lost puzzle or local game progress.

Usage analytics and diagnostics

The production app sends PostHog gameplay, app lifecycle, tutorial, settings and notification-open events linked to installation/session identifiers. App version, language and technical context help us understand use and improve the game. PostHog uses its EU endpoint. These events are not necessarily anonymous just because no name is supplied.

Sentry receives crash/error information and sampled performance diagnostics to help identify faults. Screen recordings, session replay and attached screenshots are disabled. Diagnostics can nevertheless contain technical identifiers.

The current production app starts analytics automatically and has no in-app analytics opt-out. The required legal basis and any additional consent or objection controls must be confirmed before publication.

Reminders and support

Optional reminders are scheduled locally after system permission. You can change notification permission in iOS settings and use the reminder control in Kedimo. Opening a reminder can generate an analytics event.

If you contact support, the information you send, such as your email address, message and relevant device details, is used to respond. Do not send passwords, full payment details or unrelated sensitive information. The public contact address is still pending.

Website and hosting

The website selects an initial language from your browser preferences, without requesting your location. Choosing a language stores the functional “kedimo-language” preference in your browser until you clear site data or replace the choice. The current website includes no advertising or analytics tracking scripts.

Cloudflare is the planned website host and also serves the app’s public configuration. Requests to these services can involve IP addresses, requested URLs, timestamps and browser/device information for delivery and security. Following an App Store link takes you to Apple’s service.

Recipients and international processing

The providers named above receive information needed for their respective functions. Their own privacy information is linked below. A provider may have independent obligations, including for payments or advertising.

Processing can take place outside your country. Before publication, the operator must confirm provider roles, processing locations, agreements and applicable transfer safeguards. An EU analytics endpoint alone is not a promise that every provider processes all data only in the EU.

• Google AdMob / UMP
• Apple
• RevenueCat
• PostHog
• Sentry
• Cloudflare

Retention, deletion and security

Local progress remains on your device until it is removed or replaced. Website language preferences remain until cleared or changed. Purchase records may need to remain available to validate or restore an entitlement.

Specific retention periods for analytics, diagnostics, support records and hosting logs are still being confirmed. The final policy must explain these periods and any legal retention duties. Deletion requests must account for provider-held data as well as device data.

No device or online service is immune from data loss or unauthorized access. The release review must confirm access controls, provider settings and deletion procedures rather than promise absolute security.

Legal grounds and privacy rights

The final policy must identify the legal ground for each purpose, including consent where required, providing requested services, legal duties or assessed legitimate interests. Reading this policy or accepting game terms does not itself give consent to optional tracking.

Depending on the law that applies, you may have rights to access, correct, delete or receive your data, restrict processing, object, withdraw consent and complain to a data protection authority. Withdrawal does not undo earlier lawful processing.

The contact route and a proportionate way to match requests to installation-linked data are pending. Regional duties, including any applicable sale/sharing opt-out or appeal process, must be checked before launch; this draft does not claim those controls already exist.

Children

Kedimo is designed with adult cat lovers in mind. An App Store age rating is not itself a privacy consent threshold. The intended distribution ages and any required parental safeguards must be confirmed before release.

A route for parents to report suspected collection of a child’s information will be included with the final privacy contact.

Changes and contact

The final policy will show its effective date and operator contact details. Material changes to purposes, providers or choices will require an updated notice and any consent required by law.

Still to complete: legal operator name, business/contact address, public privacy email and the review items identified above.