Privacy Policy

Last updated: April 2026

SynTech (Pty) Ltd ("we", "us", or "our") operates the WordSurge mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and protect your information.

1. Information We Collect

We collect only the data necessary to provide and improve the App.

a) Account Information

• Username
• Email address
• Encrypted password (never stored in plain text)
• Authentication tokens

b) Authentication via Third Parties

If you sign in using Google Sign-In, we receive:

• Name
• Email address
• Unique account identifier

c) Gameplay Data

• Scores, rankings, and leaderboard data
• Game progress and session state
• Game mode preferences and activity history

d) Analytics & Diagnostics (Optional)

Collected only with your consent:

• App usage events (e.g., sessions, features used)
• Crash reports and performance data
• Device type, OS version

e) Advertising Data

If ads are enabled, we may collect:

• Advertising identifiers (e.g., IDFA on iOS, where permitted)
• Interaction with ads

2. How We Use Information

We use your data strictly to:

• Provide account authentication and secure login
• Deliver gameplay features (progress, leaderboards)
• Maintain and improve app performance
• Detect fraud, abuse, or security incidents
• Deliver advertising (if enabled)

We do not sell your personal data.

3. Tracking & App Tracking Transparency (ATT)

We comply with Apple's App Tracking Transparency framework.

• We will request permission before tracking your activity across apps and websites
• If you deny permission, we will not access or use the IDFA
• Ads may still be shown, but they will be non-personalised
• You can change tracking permissions anytime in your device settings

4. Third-Party Service Providers

We use the following providers:

• Google Firebase (Analytics & Crashlytics) — policies.google.com/privacy
• Amazon Web Services (AWS Cognito) — aws.amazon.com/privacy
• Google Sign-In — policies.google.com/privacy
• Google AdMob (Advertising) — policies.google.com/technologies/ads

These providers process data on our behalf and are contractually obligated to protect it.

5. Data Sharing

We do not sell or rent your data. We only share data:

• With service providers listed above
• When required by law or legal process
• To protect rights, safety, and security

6. Data Retention

• Account data: retained while your account is active
• Gameplay data: retained while your account exists
• Analytics data: retained up to 24 months
• Deleted accounts: permanently erased within 30 days

7. Your Privacy Rights

Depending on your location, you may have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent
• Object to processing
• Request data portability

To exercise your rights, contact us using the details below.

8. Data Security

We implement industry-standard safeguards including:

• Encryption in transit (HTTPS)
• Secure authentication systems
• Access controls

9. Data Breach Notification

If a data breach occurs that affects your personal data, we will:

• Notify relevant authorities within 72 hours where legally required
• Notify affected users without undue delay where risk is high

10. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children under 13. If such data is identified, it will be deleted promptly.

11. International Data Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are applied.

12. Changes to This Policy

We may update this Privacy Policy. Continued use of the App constitutes acceptance.

13. Contact Us