Privacy Policy

OneWord ("we", "our", or "us") is operated by Mark Sayer. This policy explains how we collect, use, and protect your information when you use the OneWord app.

1. Information We Collect

We collect the following information to operate the game:

• Account data: Email address, username, and authentication credentials (managed by Supabase Auth).
• Game data: Your daily scores, guess history, streaks, and leaderboard rankings.
• Device data: Device type and operating system version for crash diagnostics.
• Purchase data: Subscription status and in-app purchase receipts (managed by RevenueCat — we do not store payment card details).
• Notification tokens: If you enable push notifications, your device token (managed by OneSignal).

2. How We Use Your Information

• To authenticate you and maintain your account.
• To display your scores on global and friends leaderboards.
• To manage subscriptions and in-app purchases.
• To send you daily game reminders (only if you opt in).
• To improve the game through aggregate, anonymised analytics.

3. Data Sharing

We do not sell your personal data. We share data only with the following service providers, strictly to operate OneWord:

• Supabase — database and authentication (servers in Sydney, Australia).
• Netlify — serverless functions and hosting (USA).
• RevenueCat — subscription and IAP management (USA).
• OneSignal — push notifications (USA).

All providers are bound by their own privacy policies and applicable data protection laws.

4. Data Retention

We retain your account and game data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days. Anonymised aggregate statistics may be retained indefinitely.

5. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Delete your account and all associated data (available in Settings → Delete Account).
• Withdraw consent for push notifications at any time in Settings.

6. Children's Privacy

OneWord is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us immediately.

7. Security

All data is transmitted over HTTPS. Authentication is handled by Supabase Auth with industry-standard encryption. We do not store passwords in plain text. Row-level security (RLS) policies ensure users can only access their own data.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via in-app notice or email. Continued use of OneWord after changes constitutes acceptance of the updated policy.

9. Contact Us

Questions about this policy? Send us a message and we'll get back to you.

---

OneWord · com.marksayer.oneword