Privacy Policy.
Effective: May 21, 2026 Updated: May 21, 2026
01Introduction
Welcome to Riddle ("the App"), developed and operated by Llaps Digital ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
The company is committed to protecting user privacy. Riddle is designed with a privacy-first approach: we do not require accounts, do not ask for your name or email, and most of your activity stays on your device or inside your personal iCloud account. Please read this Privacy Policy carefully. By using the App, you consent to the practices described herein.
02Information We Collect
2.1 Information Stored Locally on Your Device
The following data is stored on your device (using SwiftData, Apple's native persistence framework) and is never transmitted to servers operated by Llaps Digital:
- Your riddle attempts, solved/unsolved status, and timing data
- Hint usage and powerup inventory
- Daily login streaks and win streaks
- Experience points (XP), level, and 5D Framework progress (Mechanism, Subject, Cognitive Skill, Tone, Answer Structure)
- Achievement progress
- Practice mode history
- App settings, notification preferences, and appearance choices
2.2 Information Stored in Your Personal iCloud (CloudKit)
To enable cross-device sync between your iPhone and iPad, the App writes a copy of your progress data to your personal iCloud account using Apple's CloudKit service. Specifically:
- Data is written to your private CloudKit database, inside the container
iCloud.com.llaps.RiddleApp - Only you can read this data — it is tied to your Apple ID and encrypted in transit and at rest by Apple
- Llaps Digital cannot read, access, or export the contents of your private CloudKit data
- If you are not signed into iCloud, or you have disabled iCloud for Riddle in iOS Settings, no CloudKit sync occurs
CloudKit's behavior is governed by Apple's iCloud terms and privacy policy: apple.com/legal/privacy
2.3 Information Collected by Third-Party Services
Google AdMob. The App displays rewarded video ads (used to earn hints and backup riddles). When ads are displayed, Google may collect device identifiers, IP address, approximate location derived from IP, and interaction data for ad personalization, frequency capping, fraud prevention, and measurement. Ad personalization is subject to your App Tracking Transparency (ATT) choice (see Section 2.5). You can also opt out of personalized advertising in iOS Settings › Privacy & Security › Apple Advertising. For more information, see Google's Privacy Policy.
Apple StoreKit (In-App Purchases & Subscriptions). When you purchase a subscription tier (Riddler, Sage, or Mastermind) the transaction is processed by Apple. Llaps Digital receives anonymized subscription status from Apple (whether you have an active subscription and which tier) but does not receive your name, billing address, or payment information. Apple's handling of purchase data is governed by Apple's privacy policy.
Apple Push & Local Notifications. Notification scheduling happens on your device via UNUserNotificationCenter. If you grant notification permission, the App schedules local reminders (daily riddle, streak-at-risk). No remote push notifications are sent and no notification content leaves your device.
2.4 Information We Do Not Collect
The company does not collect, store, or have access to:
- Your name, email address, phone number, or contact information
- Your precise location
- Your browsing history outside the App
- Health, biometric, or sensor data
- The content of your iCloud-synced riddle progress (your private CloudKit data is unreadable to us)
- Any personally identifiable information beyond what is described in this Policy
2.5 App Tracking Transparency (ATT)
On first run, iOS may present an App Tracking Transparency prompt asking whether the App may track you across other companies' apps and websites. This prompt controls whether the IDFA (Identifier for Advertisers) is shared with Google AdMob for personalized advertising:
- If you allow tracking: AdMob may serve personalized ads using your IDFA
- If you ask the App not to track: AdMob serves only non-personalized (contextual) ads; the IDFA is not shared
You can change this choice at any time in iOS Settings › Privacy & Security › Tracking › Riddle.
03How We Use Information
The company uses the limited information available to it for the following purposes:
- To display advertisements through Google AdMob (when you watch a rewarded video to earn a hint or backup powerup)
- To verify subscription status and unlock paid features
- To synchronize your progress across your own devices via iCloud
- To deliver local notifications you have opted into
04Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. Information may be shared only in the following circumstances:
- With Google AdMob for advertising (see Section 2.3)
- With Apple for processing subscriptions and operating iCloud sync
- If required by law, court order, or governmental authority
- To protect the rights, privacy, safety, or property of Llaps Digital, our users, or the public
05Third-Party Services and Links
The App may contain links to external resources (App Store subscription management, support pages, social media). These third-party sites have their own privacy policies. Llaps Digital is not responsible for the privacy practices of external sites.
06Data Security
The company implements appropriate technical and organizational measures to protect information:
- Local data is stored using SwiftData and protected by iOS's standard data protection
- iCloud-synced data is encrypted in transit and at rest by Apple, and is readable only by you
- Subscription receipts are validated against Apple's servers over encrypted HTTPS
- Communications with Google AdMob use encrypted HTTPS
- Llaps Digital does not operate any server that stores your personal data
07Your Rights and Choices
7.1 General Rights
You have the right to:
- Delete all on-device data by uninstalling the App
- Remove your iCloud-synced data by disabling iCloud for Riddle (iOS Settings › [your name] › iCloud › Apps Using iCloud) or by deleting the App and removing its iCloud data via iOS Settings
- Opt out of personalized advertising via the ATT prompt or iOS Settings › Privacy & Security › Tracking
- Disable notifications entirely (iOS Settings › Notifications › Riddle)
- Manage or cancel subscriptions through your Apple ID (iOS Settings › [your name] › Subscriptions)
7.2 European Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to Access: Request information about data processing
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Request transfer of your data
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw consent at any time
Since the App does not maintain accounts and most data lives on your device or in your private iCloud, you can exercise many of these rights directly by managing the App, your iCloud settings, or your ATT preference. For requests we can act on (for example, questions about AdMob processing), contact us at co@llaps.digital.
Legal Basis for Processing. We process data based on legitimate interests (improving and operating the App), consent (where required, such as for ad personalization via ATT), and contractual necessity (delivering the App's paid features).
7.3 California Users (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of personal information collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt out of the sale of personal information
- Right to Non-Discrimination: Equal service regardless of privacy choices
We do not sell personal information as defined by the CCPA. To exercise your rights, contact us at co@llaps.digital.
08Children's Privacy
Riddle is intended for users aged 13 and older. By using the App, you represent that you are at least 13 years old.
As stated throughout this Privacy Policy, the company does not collect, store, or have access to any personal information that would identify a child, including the contents of their private iCloud-synced progress. If you are a parent or guardian and have concerns about your child's use of the App, please contact us at co@llaps.digital.
09International Data Transfers
When you view advertisements served by Google AdMob, validate purchases with Apple, or sync via iCloud, data may be transferred to and processed in countries outside your residence, including the United States. These countries may have different data protection laws. By using the App, you consent to such transfers. For EU users, we rely on standard contractual clauses and other appropriate safeguards offered by Apple and Google where required.
10Data Retention
- Local Data: Retained on your device until you delete it or uninstall the App
- iCloud-Synced Data: Retained in your private iCloud until you remove it via iOS Settings or delete the App with iCloud data removal
- Advertising Data: Retained according to Google AdMob's policies
- Subscription Data: Retained according to Apple's policies for the duration required by tax and audit obligations
11Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date and, where appropriate, providing notice within the App. Your continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
12Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:
Back to Riddle