Draft for legal review. This policy has not yet been reviewed by a solicitor and may change before Limbs launches. Items in [brackets] are still to be confirmed.
Privacy policy
Last updated: [date of publication]
The short version
Limbs has no accounts. We never ask for your name, email address, phone number, contacts or location. When you first open the app it makes up a random identifier (an "install id") and everything below is tied to that, not to you. Delete the app and the link between that id and your phone is gone.
Who we are
Limbs is run by [legal name of the owner or company, registered address]. We are the data controller for the information described here. Contact: [privacy contact email, e.g. privacy@playlimbs.com].
What we collect and why
| What | Why | Kept for |
|---|---|---|
| The install id (a random code made on your phone) | To keep your streaks, challenges and purchase together without an account | On your phone until you delete the app |
| If you turn on the daily reminder: your push token, phone platform (iOS or Android), time zone, reminder hour and app version | To send one reminder a day when the new goal is up | Until you turn the reminder off, or the token stops working; then deleted |
| Your result for each daily puzzle: the date, number of guesses and score | To show everyone's anonymous totals ("how everyone did") on the result screen | [retention period to confirm]; only totals are published |
| Friend challenges: the code, both players' scores and guess counts | To show the head-to-head result | Challenges expire after 48 hours; [deletion period to confirm] |
| Usage events: puzzle started, guess made (right or wrong, never who you guessed), hint used, puzzle finished, share and challenge taps, reminder choice, paywall views and purchases; app version, phone model and operating system; app errors | To learn which goals are too hard or too easy, and to find and fix crashes | [retention period set in PostHog, to confirm] |
| The Season Ticket purchase, if you buy one | To unlock the archive and practice, and to restore the purchase on a new phone | As long as the purchase is valid, and as the law requires for tax records |
The legal basis is our legitimate interest in running and improving the game (the reminder is based on your consent, which you can withdraw at any time in the app's settings). [Solicitor to confirm the lawful bases.]
Who processes it for us
- Supabase: database and file hosting for puzzles, reminders, results and challenges ([region to confirm]).
- PostHog: usage events and error reports, hosted in the EU.
- Expo, Apple and Google: delivering push notifications.
- RevenueCat, Apple and Google: processing and restoring the Season Ticket purchase.
- Cloudflare: hosting this website. The site sets no cookies and runs no analytics.
Apple and Google also collect crash reports and app usage under their own policies if you have agreed to share them with developers in your phone's settings.
What we don't do
- No advertising, no ad tracking, no selling or sharing data for marketing.
- No access to your contacts, photos, camera, microphone or location.
- No profiles of who you are: events carry the install id, never a name.
Your rights
Under UK data protection law you can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Because we don't know who you are, we will need the install id shown at the bottom of the app's Settings screen to find your data. Turning the reminder off deletes your push details straight away. You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
[Solicitor to confirm the minimum age and any age-appropriate design obligations.]
Changes
If this policy changes, the new version will be posted here with a new date.