Privacy Policy

Last updated: Jun 22, 2026

This Privacy Policy describes how your information is collected, used, and protected when you use the Knotty mobile application (the "App"). The App is published under the brand name KnottyVentures.

We have designed the App to collect as little personal data as possible. We do not require an email address, phone number, real name, or any other personally identifying information to play.

1. Who We Are

The App is operated by:

"KnottyVentures" is a trade name used for marketing the App and is not a separate legal entity. The data controller for the purposes of the EU General Data Protection Regulation (GDPR) is the sole proprietor named above.

2. What Data We Collect

Anonymous account identifier

When you first open the App, we automatically create an anonymous account through Firebase Authentication. This account is identified by a randomly generated user ID (UID). The UID is not linked to your real identity, e-mail, or any other personally identifying information.

Generated username

The App automatically generates a username for you (for example, "Knotty-AB12CD3"). You can change this username at any time. Your username is stored locally on your device and synchronized with our cloud backend so that other players can see it on the leaderboard.

Game statistics

We store your gameplay progress, including experience points (XP), player level, and accuracy percentage. This data is associated with your anonymous UID and is used to display the leaderboard.

Technical account metadata

To operate your account we also store the timestamp of your last activity ("last seen at") and which sign-in method you are currently using ("provider", such as anonymous, email, or Google). This data is associated with your UID.

Optional sign-in data

The App works fully without any sign-in. If you choose to upgrade your anonymous account to a permanent one — for example, to recover your progress on a new device — you can sign in using one of the following methods:

• E-mail and password — your e-mail address is stored both on your device and in our cloud backend, associated with your UID.
• Google Sign-In — Google provides us with the e-mail address of your Google account, which is stored both on your device and in our cloud backend, associated with your UID. We do not receive your Google password.

Sign-in is entirely optional. If you do not sign in, no e-mail address is collected at any point.

Local-only data

Per-question statistics (which questions you have seen, how often you answered correctly) and your settings (sound, theme) are stored only on your device and are never sent to our servers.

3. What We Do Not Collect

To make our position absolutely clear, we (the operator of the App) do not collect, request, or have access to:

• Your real name, phone number, or postal address (we never ask for these; an e-mail address is only collected if you choose to sign in, as described in Section 2)
• Your location (GPS or otherwise)
• Your camera, microphone, contacts, photos, or any other device sensors
• Any payment or financial information

The App does not offer in-app purchases.

Local storage

The App stores certain data locally on your device using standard application storage (a SQLite database for game content and player progress, plus configuration files for settings). The App is not a web application and does not use HTTP cookies. This local data never leaves your device unless explicitly described elsewhere in this Policy.

4. How We Use Your Data

We use the data described in Section 2 only for the following purposes:

• Providing the App's core functionality (saving your progress between sessions)
• Displaying the global leaderboard so you can see your position relative to other players
• Restoring your account if you reinstall the App on the same device

We do not use your data for profiling, e-mail marketing, or any purpose unrelated to running the App. We do not sell your data.

5. Third Parties

We rely on the following third-party services to operate the App:

Firebase (Google LLC / Google Cloud)

We use Firebase Authentication to create your anonymous account and Firestore to store your game progress and the leaderboard. Firebase is operated by Google and your data is processed on Google's infrastructure.

• Firebase Privacy and Security: https://firebase.google.com/support/privacy
• Google Privacy Policy: https://policies.google.com/privacy

We have configured Firebase to collect only the minimum data necessary to operate the App. We do not use Google Analytics, Firebase Analytics, Mixpanel, or any other dedicated behavioral analytics platform, and we do not embed any social media SDKs in the App.

Google Sign-In (Google LLC)

If you choose to sign in using your Google account, the Google Sign-In SDK provides us with an identity token that contains the e-mail address associated with your Google account. We use this token solely to link your Google identity to your account in our App. We do not receive your Google password and we do not request access to any other Google services (such as Gmail, Drive, or Contacts).

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation requires us to inform you of the legal basis on which we process your data. The bases are as follows:

• Performance of a contract — Article 6(1)(b) GDPR. Processing your anonymous UID, generated username, XP, level, and accuracy is necessary to provide the App's core functionality (saving progress, restoring your account, and displaying the leaderboard) as agreed in our Terms of Service.
• Legitimate interests — Article 6(1)(f) GDPR. We may process minimal technical data (such as basic error information) to keep the App running, prevent abuse of the leaderboard, and protect against fraud. We have assessed that this interest does not override your rights and freedoms, given the limited scope of data involved.

We do not rely on consent for the App's core functionality, because that processing is covered by performance of a contract.

7. Data Retention

Your data is retained as long as you keep the App installed and use it. Specifically:

• Local data (per-question statistics, settings) remains on your device until you uninstall the App or clear its data.
• Cloud data (UID, username, XP, level, accuracy) is stored on Firebase until you delete your account.

You can delete your account at any time from within the App. When you delete your account, your cloud data is permanently removed from our servers within a reasonable period.

If you simply uninstall the App without first deleting your account, your cloud data remains on our servers (associated with your anonymous UID, with no way for us to identify or contact you unless you previously signed in with an e-mail address or Google account). You may request deletion of your data at any time using the methods described in Section 8.

8. Your Rights Under GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR:

• Right of access — You may request a copy of the data we hold about you.
• Right to rectification — You may correct inaccurate data (for example, by changing your username in the App).
• Right to erasure ("right to be forgotten") — You may delete your account at any time using the Delete account button in the App's Profile section, which removes your cloud data. If you no longer have the App installed, you may request deletion through our account deletion page or by e-mailing the address in Section 13.
• Right to restriction of processing — You may request that we limit how we process your data in certain circumstances.
• Right to data portability — You may request your data in a machine-readable format.
• Right to object — You may object to processing based on our legitimate interests.
• Right to lodge a complaint — You may file a complaint with a supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.cz).

To exercise any of these rights, contact us at knottyventures@gmail.com. Because the App does not collect your real identity, you may need to provide us with your username (visible in your Profile) so we can locate your data.

9. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect data from children under 13. If you are a parent or guardian and believe your child has provided us with data, please contact us at knottyventures@gmail.com and we will remove the data.

10. International Data Transfers

Firebase processes data on Google's global infrastructure, which may include servers located outside the European Economic Area. Google provides appropriate safeguards for international data transfers under GDPR, including Standard Contractual Clauses. For details, see Google's documentation linked in Section 5.

11. Security

We rely on Firebase's industry-standard security measures, including encryption of data in transit (TLS) and at rest. While we take reasonable precautions, no system is completely secure. You acknowledge that you provide your data at your own risk.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL. The "Last updated" date at the top reflects the most recent revision. For material changes, we will notify users through the App.

13. Contact

If you have questions about this Privacy Policy or about how we handle your data, contact us at: