Privacy Policy

Effective Date: March 4, 2026 · Last Updated: March 4, 2026

Icos ("we", "our", or "us") operates the Icos mobile application (the "App"), a daily puzzle game available on iOS and Android. This Privacy Policy explains how we collect, use, and protect your information when you use the App.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address — if you sign up with email, Google, or Apple
Display name — chosen by you, visible to group members
Authentication provider — which sign-in method you use

You can use the App without creating an account (anonymous/guest mode). In this case, we assign a random anonymous identifier with no personal information attached.

1.2 Game Data

To provide the game experience, we collect:

Puzzle completion records (date, solve time, hints used, undos used)
Streak data (current streak, longest streak, streak freezes)
Group membership and leaderboard rankings

1.3 Device Information

We automatically collect limited device information:

Device type and operating system version
App version
IP address (used for security and rate limiting; not stored long-term)

1.4 Local Storage

The App stores data locally on your device for offline functionality:

Cached puzzle data for offline play
Your preferences (theme, sound settings, accessibility options)
Current game state (so you can resume if the app closes)

This local data is not transmitted to our servers and is deleted when you uninstall the App.

2. How We Use Your Information

Purpose	Data Used
Provide the game experience	Game data, account info
Maintain your streak and statistics	Puzzle completion records
Enable group leaderboards	Display name, solve times, group membership
Account security and fraud prevention	IP address, authentication tokens
Enable offline play	Cached puzzles (device-local only)

3. Data Sharing

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

We use the following service provider to operate the App:

Supabase (database, authentication, real-time features) — Supabase Privacy Policy

If you sign in with Google or Apple, those providers process your authentication according to their own privacy policies:

We may disclose information if required by law, court order, or to protect our rights and safety.

4. Data Security

We implement industry-standard security measures:

All data transmitted over HTTPS/TLS encryption
Passwords are hashed using bcrypt (we never store plaintext passwords)
Database access controlled by row-level security policies
Score submissions are rate-limited and integrity-checked

5. Data Retention

Account data: Retained until you delete your account
Account deletion: 30-day grace period, after which data is permanently removed. Leaderboard entries are anonymized to "Deleted User"
Anonymous accounts: Purged after 90 days of inactivity
Game records: Retained for leaderboard and statistics functionality

6. Your Rights

You have the right to:

Access your personal data via the Profile screen in the App
Correct your display name at any time
Delete your account and all associated data from the Profile screen
Export your data by contacting us
Opt out of non-essential data collection

If you are in the European Economic Area (EEA), you have additional rights under GDPR, including the right to data portability and the right to lodge a complaint with your local data protection authority.

If you are a California resident, you have rights under the CCPA, including the right to know what personal information is collected and the right to request deletion.

7. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

8. International Data Transfers

Your data may be processed and stored on servers located in the United States. By using the App, you consent to the transfer of your information to the United States, where data protection laws may differ from your country of residence.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, through in-app notification. Your continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: sarathfrancis90@gmail.com