Privacy Policy

Effective: April 25, 2026 — Last updated: May 5, 2026

This Privacy Policy explains what data VariantDoku ("the App", "we", "us", "our") collects, how it is used, and the choices you have. By using VariantDoku you agree to the practices described here.

1. Data we do not collect

• We do not collect names, email addresses, phone numbers, or device identifiers.
• We do not use third-party analytics or advertising SDKs.
• We do not track you across other apps or websites.
• We do not access your contacts, photos, microphone, camera, or location.

2. Data we do collect

2.1 Anonymous puzzle activity

The App loads puzzle catalog data from our backend. When you browse, search, filter, open, save, resume, or complete puzzles, the App may send anonymous puzzle activity to our backend, such as puzzle identifiers, search text, filter selections, completed puzzle IDs, in-progress puzzle IDs, and saved puzzle IDs. We use this data to return puzzle lists, personalize ranking, and increment aggregate solved counters. Ranking inputs are processed to generate the response and are not stored as a user profile. We do not include an account, name, email address, Apple ID, advertising identifier, or app-specific device identifier in these requests.

2.2 Device integrity (App Attest)

The App uses Apple's App Attest framework to verify that API requests come from a genuine, unmodified copy of the App on a real Apple device. This involves exchanging cryptographic attestations between your device, Apple, and our backend. App Attest does not expose your Apple ID, advertising identifier, or any persistent user-level identifier to us; it only allows our backend to confirm that requests originate from a legitimate App instance.

2.3 Subscription state

Your subscription and purchase status is managed entirely by Apple's In-App Purchase system. The App reads your entitlement (whether you have an active Variant+ subscription or Lifetime purchase) from Apple's StoreKit. We do not see your Apple ID, payment information, or billing history.

2.4 Local app data

The following information is stored only on your device and never leaves it:

• Saved puzzle progress (cells, pencil marks, undo history, elapsed time)
• App settings (highlight peers, double-tap behavior, theme preferences)
• Daily-limit counters (for free-tier users)
• Streak data (current streak, longest streak, last solved date)

You can clear this data at any time by deleting and reinstalling the App.

3. Apple's role

VariantDoku is distributed through the Apple App Store. Apple collects information related to your account, purchases, and subscriptions in accordance with Apple's Privacy Policy. We have no access to that information.

4. Infrastructure and server logs

Our website and API are served through infrastructure providers, including Cloudflare. These providers may process standard network and security metadata such as IP address, timestamps, request paths, HTTP status codes, user agent, and related connection information to deliver the service, protect it from abuse, and keep it available.

Our backend server also logs standard request metadata (timestamp, request path, query string, HTTP status, user agent, and IP address) for operational and security purposes. Puzzle IDs and search/filter terms may appear in request paths or query strings. Logs are retained for up to 30 days and are not used for advertising or profiling.

The backend database stores the puzzle catalog and aggregate puzzle solve counts. Database backups may be stored with infrastructure providers for disaster recovery. These backups do not contain App user accounts because the App does not create user accounts.

5. Children

VariantDoku is suitable for users of all ages and does not knowingly collect personal data from anyone, including children under the age of 13. If you believe a child has provided personal data through the App, please contact us so we can address it.

6. Your rights

Because the App does not use accounts or app-specific identifiers, we generally cannot link puzzle activity to a specific individual. Some operational logs may contain IP addresses or similar request metadata for a limited time. If you reside in the European Economic Area (GDPR) or California (CCPA/CPRA) and believe that we hold data about you, you may contact us at support@variantdoku.com and we will work in good faith to respond.

7. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent changes. Continued use of the App after a change indicates acceptance of the updated policy.

8. Contact

Questions about privacy: support@variantdoku.com