The short version
- You can play offline without an account. Online play needs an account: your name, a username, your email and a password (or Google Sign-In).
- Other players see your username, profile photo, country flag, level and results. Your username, flag and scores also appear on our public website leaderboards.
- We use your location only to work out your country and region for your flag. Your exact position never leaves your phone.
- Ads are shown by Appodeal and its partner networks, which use your device's advertising ID. Subscribers don't get forced ads.
- Payments and donations, in the app or on our website, go through Paystack or Flutterwave. We never see your full card number.
- We don't sell your personal information. You can delete your account in the app at any time.
This summary is for convenience. The full text below is what applies.
This policy explains what information the 10+ Number Puzzles app (also shown as "Number Puzzles"; Android package com.fibigames.numberpuzzles) and the website at 10plusnumberpuzzles.com collect, why, who we share it with, and the choices you have.
Plain words first: we collect what we need to run the game, keep matches fair, and pay for it with ads and optional purchases. Nothing else.
1. Who we are
10+ Number Puzzles is owned and run by Dr. Iyoke Richard Sopuruchukwu, an individual developer based in Nigeria ("we", "us"). We are the data controller for the personal information described here.
Contact us about anything in this policy at richardiyoke@gmail.com.
2. What we collect
2.1 Information you give us
- Account details: first name, last name, username, email address and password. Your password is stored only as a one-way bcrypt hash; we can't read it.
- Google Sign-In: if you sign in with Google, Google shares your name, email address and profile picture link with us.
- Optional profile details: a profile photo, gender and date of birth, if you choose to add them. Gender and date of birth can't be changed once saved.
- Payment and donation details: the product, amount and currency, and the email address the payment provider needs. If you donate on our website without an account, we also keep the email address and the optional name you enter, to send your receipt and keep our accounts.
- Messages to us: what you send through the contact form on our website (your name, email address, topic, optional in-app username and your message), anything you send when you email support, and the optional reason you give when you delete your account.
- Room chat: messages you type in a multiplayer room.
2.2 Information created when you play
- Offline play: your stages, best times, settings, themes and coin balance are stored on your device only. We don't receive them.
- Online play: match results, finishing positions, mistakes and times, your rating and level for each puzzle, wins, losses and streaks, room and tournament membership, invitations you send and receive, and your Daily Puzzle times and progress.
- Fair play checks: the server times Daily Puzzle attempts itself and records how boards were solved, so it can flag results that are faster than a person can play.
2.3 Information from your device
- Location (optional): when you create or update your account, the app may ask for location permission and reads your phone's approximate position. The phone itself turns that into a country and region (for example "Nigeria, Enugu"). We receive only the country and region, never your coordinates. If you refuse, we use the region your phone is set to instead.
- Push notifications: if you allow notifications, a push token, your time zone, language and app version, so reminders arrive at a sensible local time. We also record when a notification was sent and opened.
- App integrity: to stop modified apps and bots, the app asks Google Play Integrity (Android) or Apple App Attest (iPhone) to confirm it's a genuine copy. We receive a verdict and, on iPhone, a device key; not your personal data.
- Technical data: your IP address, device type, operating system and app version reach our servers with every request, and may appear in our server logs.
- Advertising ID and ad data: collected by our advertising partners, not by us. See section 5.
3. How we use it
| Why | What we use | Legal basis |
|---|---|---|
| Create your account, sign you in, keep you signed in | Account details, email, password hash, device tokens | Contract |
| Run online matches, rooms, tournaments, the Daily Puzzle and leaderboards | Username, photo, country, gameplay results, ratings | Contract |
| Show your country flag | Country and region | Consent (location) or legitimate interests (device region) |
| Send verification codes and password-reset emails | Email address | Contract |
| Send reminders and invites as push notifications | Push token, time zone, notification settings | Consent |
| Take payments, deliver coins and subscriptions, handle refunds | Payment records | Contract, legal obligation (tax and accounting) |
| Show ads and pay for the free game | Advertising ID and device data (collected by ad partners) | Consent where the law requires it, otherwise legitimate interests |
| Keep the game fair and secure: stop cheating, fraud and abuse | Gameplay results, app integrity checks, IP address, logs | Legitimate interests |
| Answer your messages and handle account deletion | Email address and your messages | Contract, legal obligation |
We don't use your information for automated decisions that have legal or similarly significant effects on you. Fair-play checks flag results for a human to look at.
4. What other players and the public can see
- Inside the app: other players see your username, profile photo, country flag, level and rating in matches, rooms, tournaments, invites and leaderboards, along with your results. Messages you send in a room are seen by everyone in that room.
- On our public website: the leaderboards show your username, country flag, rating, wins, losses and streaks, and your Daily Puzzle times and mistakes. Anyone can view them without an account, and search engines may index them. We never show your photo, email or real name there.
- Donor wall: if you donate, the app's donor wall shows your first and last name (or your username if you haven't given a name), your profile photo, the total you've donated and how many donations you've made. Anyone using the app can see it. Donations made on our website without an account are never shown there.
- Profile photos are stored on our server and can be opened by anyone who has the link.
- Room invite links and QR codes contain a room code, not your personal details.
Choose a username you're comfortable being public. You can change your username and photo in the app.
5. Advertising
The free version of the game shows ads (banners, full-screen ads, native ads, and rewarded videos you can choose to watch for coins or lives). Ads are served by Appodeal, which works with these partner networks:
Amazon Publisher Services, AppLovin, BidMachine, Bigo Ads, Chartboost, Digital Turbine (DT Exchange), InMobi, ironSource (Unity LevelPlay), Meta Audience Network, Mintegral, MobileFuse, Moloco, myTarget, Ogury, PubMatic, Smaato, Start.io, TaurusX, Unity Ads, Verve, Liftoff (Vungle) and Yandex.
These companies collect data directly from your device through their software in the app, such as your device's advertising ID, IP address, device model, operating system, language, approximate location from your IP address, and which ads you see and tap. They use it to choose ads, measure them, cap how often you see them, and prevent ad fraud. They act under their own privacy policies; Appodeal's is at appodeal.com/privacy-policy.
- Your choices: where the law requires it (for example in the European Economic Area and the UK) you'll be asked for consent to personalised ads, and you can decline. On Android you can reset or delete your advertising ID in Settings → Google → Ads. You'll still see ads, just less personalised ones.
- Subscribers don't get banners or full-screen ads; rewarded videos stay optional.
6. Payments
Coin packs, subscriptions and donations are paid through Paystack or Flutterwave, whichever you choose at checkout, in the app or on our website's donation page. You enter your card, bank or mobile-money details on their secure checkout, not in our app or on our website, and we never receive your full card number or security code.
We keep a record of each payment: the product, amount, currency, status, date, the provider's reference and customer ID, the payment method type, and the transaction details the provider returns to us, which can include your email address and limited card information such as the card type, issuing bank and last four digits. We need these records to deliver what you bought, handle renewals, cancellations, refunds and disputes, prevent fraud, and meet tax and accounting rules.
Paystack's privacy policy: paystack.com/privacy. Flutterwave's: flutterwave.com/privacy-policy.
7. Service providers
We share information with these companies only so they can provide a service to us or to you:
| Provider | What for | Data involved |
|---|---|---|
| Render | Hosts our servers and short-lived game data | Everything the app sends to our servers |
| Aiven | Hosts our database | Account, gameplay and payment records |
| Google Sign-In, sending our emails (Gmail), Firebase app configuration, Play Integrity, Google Play Games saved games, and turning a location into a country on Android | Name, email, profile picture link, IP address, device information, location (on your device) | |
| Apple | App Attest and location lookup on iPhone, once the iPhone app is available | Device key, location (on your device) |
| Expo (650 Industries) | Delivers push notifications to your device | Push token, notification content |
| Appodeal and partner networks | Advertising | See section 5 |
| Paystack, Flutterwave | Payments | See section 6 |
| YouTube (Google) | Tutorial videos on the How to Play screens and web pages | Collected by YouTube when you play a video |
| Website host | Serves this website | IP address and browser details in server logs |
Cloud save: if you use cloud save on Android, your stages, best times and theme settings are saved to your own Google Play Games account, not to our servers. Google's privacy policy applies to that copy.
We may also disclose information if the law requires it, to protect players or the service from fraud or harm, or to a new owner if the game is ever sold or transferred (you'd be told if that changes how your information is used).
We do not sell your personal information. Advertising partners collecting device data for personalised ads may count as "sharing" or "targeted advertising" under some laws, such as California's; you can opt out as described in section 5.
8. International transfers
We're based in Nigeria, and our providers operate data centres in other countries, including the United States and Europe. Your information may be processed outside the country where you live. Where the law requires it, we rely on safeguards such as our providers' standard contractual clauses.
9. How long we keep it
| Information | How long |
|---|---|
| Account and profile details, gameplay history, ratings | While your account exists; erased or anonymised within 30 days of deleting your account |
| Room chat messages | 30 minutes, and at most the latest 24 messages in a room |
| Email verification codes and password-reset links | Until used or expired |
| Push tokens | Until you sign out, turn notifications off or uninstall; tokens that stop working are switched off |
| Payment records | As long as tax and accounting law requires, usually up to 6 years, even after your account is deleted |
| Contact form messages | Deleted automatically two years after you send them, or sooner if you ask |
| Server logs | A short period for security and troubleshooting |
| Offline progress, coins and settings | On your device until you delete the app or clear its data |
10. Deleting your account
Delete your account in the app from Account → Delete Your Account. You'll be asked for your password. If you signed up with Google and never set a password, set one from your account first, or email us from the address on your account.
- Your account is closed straight away: you can't sign in, and your name is taken off leaderboards and the donor wall.
- Within 30 days we erase or anonymise your personal details, including your name, username, email, photo, gender, date of birth, location and device tokens.
- We keep payment records for as long as the law requires (section 9), and match results that other players' histories depend on, with your identity removed.
- Cancel any subscription in the app before deleting your account. Deleting your account doesn't cancel it with the payment provider, and a period you've already paid for isn't refunded unless the law requires it.
- Coins and offline progress stay on your device until you uninstall the app. Cloud saves stay in your Google Play Games account until you remove them there.
You can also ask us to delete your account by emailing richardiyoke@gmail.com with the subject "Account Deletion Request". We may ask you to confirm you own the account.
11. Your rights and choices
Depending on where you live (including under Nigeria's Data Protection Act 2023, the EU and UK GDPR, and US state laws such as California's), you may have the right to:
- access the personal information we hold about you and get a copy of it in a portable format;
- correct it (you can edit most of your profile in the app);
- delete it (section 10);
- object to, or ask us to restrict, how we use it;
- withdraw consent at any time, for example by turning off location or notification permission in your phone's settings;
- opt out of targeted advertising (section 5);
- not be treated differently for using these rights.
Email richardiyoke@gmail.com to use any of these rights. We'll reply within 30 days, or tell you if we need longer. You can also complain to your data protection authority; in Nigeria that's the Nigeria Data Protection Commission (ndpc.gov.ng).
12. Children
10+ Number Puzzles is not directed at children. You must be at least 13, or older where your country sets a higher minimum age for using online services without a parent's consent, to create an account. The ads in the game aren't set up for children.
We don't knowingly collect personal information from children under that age. If you believe a child has created an account, email richardiyoke@gmail.com and we'll delete it.
13. Security
Connections to our servers are encrypted (HTTPS). Passwords are stored as bcrypt hashes; sign-in tokens are hashed, rotated and can be revoked; payment webhooks are signature-checked; and app integrity checks and rate limits protect our servers from abuse.
No system is perfectly secure. If a breach affects your personal information, we'll tell you and the relevant authorities as the law requires.
14. Our website
- The website doesn't use cookies, analytics or advertising trackers.
- Our website host logs your IP address and browser details when you visit, to deliver the site and keep it secure.
- Tutorial videos are YouTube embeds from the privacy-enhanced youtube-nocookie.com domain, and they only load when you press play. After that, YouTube's privacy policy applies.
- Google Play download links tell Google Play which button you tapped, so we can see which pages lead to installs. They don't identify you.
- Opening a room invite link on the website shows the room code; nothing is stored about you.
- Donation page: you can donate without an account. You pay on Paystack's or Flutterwave's checkout; we keep the payment record described in section 6 plus the email and optional name you gave, and email you a receipt. Web donations never appear on the in-app donor wall.
- Contact form: your message is stored on our servers and forwarded to our email inbox so we can reply. We use your email address only to answer you and never add it to a mailing list. Your IP address is used briefly to limit how many messages one visitor can send, and isn't stored with the message.
15. Changes to this policy
We'll update this policy when the game or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your information, we'll tell you in the app before it takes effect.
16. Contact
Dr. Iyoke Richard Sopuruchukwu
Email: richardiyoke@gmail.com
Website: 10plusnumberpuzzles.com