PRIVACY POLICY

Jigsaw Joy

Last updated: August 2026

1. Who we are

Jigsaw Joy is developed and operated by Ryan McGregor, United Kingdom. If you have any questions about this privacy policy or how we handle your data, please contact us at info@jigsawjoy.co.uk.

2. What data we collect and why

When you register, we collect your email address and a hashed password. We use this to create and secure your account. You may also set an optional display name.

We store your progress, puzzle completions, scores, streaks, achievements, challenge points, event progress, and in-game currency balances. This is necessary to provide the game experience and is stored against your account.

If you unlock collections using in-game coins or make purchases through the App Store or Google Play, we record what you own so your purchases are restored correctly.

If you use the custom photo feature, images you upload are stored to enable that feature. They are not shared with third parties or used for any other purpose.

Basic device information (screen size, operating system) is collected automatically by the app framework to ensure the app displays correctly on your device.

3. What we do not collect

We do not collect:

• Your location
• Your contacts or address book
• Precise device identifiers (IMEI, advertising ID)
• Any data from children — this app is not directed at children under 13

4. Who we share data with

We use the following third-party services to operate the app:

Supabase — provides our database and authentication infrastructure. Your account data and gameplay data are stored on Supabase servers. Supabase is GDPR-compliant and data is stored within the EU. Privacy policy: https://supabase.com/privacy

Apple App Store / Google Play — if you make purchases through the app, payment processing is handled entirely by Apple or Google. We receive confirmation of the purchase but not your payment details. Their privacy policies apply to that transaction.

We do not sell your data. We do not share your data with advertisers.

5. How long we keep your data

We keep your account and gameplay data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal reasons.

6. Your rights under UK GDPR

As a UK resident, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing of your data
• Data portability

To exercise any of these rights, contact us at info@jigsawjoy.co.uk. We will respond within 30 days.

7. Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS) and secure authentication via Supabase. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this policy as the app develops. We will notify you of significant changes through the app or by email. The date at the top of this policy indicates when it was last updated.

9. Contact