Privacy Policy
Effective 12 November 2026
In short
- You can play without an account. We give your installation a random identifier — not your advertising ID.
- Photos you turn into puzzles stay on your phone. A photo only reaches our server if you choose to send it as a private link, and it is deleted after 7 days.
- Your nickname, your times and your moves are visible to other players on leaderboards and challenges. Nothing else about you is shown.
- We use Google services for purchases, ads, analytics and crash reports. We do not sell your data.
Who we are
Puzami is published by Tam Duc Studio, an individual developer in Vietnam, who is responsible for the data described here. Questions or requests: hamhansamu@proton.me — we answer within 30 days. You must be 18 or older to use the app; if someone younger has used it, write to us and we will delete what we hold.
Your photos
When you make a puzzle from your own photo, the app reads the photo you pick (through your phone's photo picker, without access to the rest of your gallery) or the one you take with the camera, and keeps a cropped copy on your phone only. Playing it, solving it and keeping your best times for it all happen on the phone.
Private links. If you tap Send to a friend, the app shrinks the photo (at most 1600 pixels) and uploads it to our server together with the puzzle settings, and gives you a link. Anyone who has the link can open the puzzle and see the photo, up to 20 devices per link. The link and the photo are deleted 7 days after you create it, or earlier if you delete it. Private links never appear in the public feed or on leaderboards. People who open your link can see the photo and could take a screenshot — only send photos you are happy for them to see, and only photos you have the right to share (see our Terms).
If someone reports a private-link photo, we keep it until a moderator has reviewed it, for at most 30 days, even if the link has expired.
What we collect
Account and device. A random identifier our server creates for your installation. If you link Google Play Games: your Play Games player identifier and display name. If you buy VIP or Remove Ads: your Google account identifier, which product you hold and until when, verified with Google Play — we never see your card.
Your profile. The nickname and mascot you choose for leaderboards and challenges.
What you play. For the daily puzzle and challenges: which puzzle you played (image, board size and the number that sets the shuffle), your time, your number of moves and the list of moves you made. We use the move list to check that the puzzle was really solved, and to show your solve as a "ghost" to people racing you. Puzzles you play on your own, including all puzzles made from your photos, are not sent to us.
Challenges and the feed. Challenges you create (puzzle, your result, whether it is public), who has played them and their results. Reports and blocks you make.
Private links. The photo, the puzzle settings, when the link was created, and which devices opened it and their results.
Usage and diagnostics. Crash reports; usage events such as which puzzles and screens are opened; which campaign link you installed from, if any; short technical error summaries with no identifiers; and the days on which the app is used. Usage events follow the Settings → Usage analytics switch: off by default in the EEA and the UK, on by default elsewhere. Crash reports are always on so we can fix the app. Links you share from the app carry a short source tag (for example that it came from a challenge) so we can count how many people open or install the app from shares; it contains nothing about you or the person you send it to.
Advertising. Free players see ads from Google AdMob. What AdMob collects, and whether ads are personalised, follows the choice you make in the consent dialog, which you can change in Settings → Ad privacy choices.
Notifications. If you allow notifications: a notification token for your device, used to tell you when someone beats your time on a challenge (at most once per challenge per day) or when a new daily puzzle is ready.
How we use it
- To run the app: puzzles, daily puzzles, leaderboards, challenges, private links, VIP.
- To check results are genuine and keep leaderboards fair, including detecting automated solving.
- To keep the community safe: handling reports, hiding content, banning abuse. We keep a record of these moderation actions.
- To fix problems and understand how the app is used.
- To show ads, according to your consent choice.
Who receives it
- Google — Play Billing (purchases), Play Games (only if you link it), AdMob (ads) and Firebase (analytics, crash reports and notifications).
- Other players see your nickname, mascot, results and ghost replays on leaderboards, challenges and the public feed. People you send a private link to see the photo in it and the results of others who opened the same link.
- Our server runs on rented infrastructure that stores data for us and may not use it for anything else.
We do not sell personal data.
What stays on your phone
Your photos and the puzzles made from them, games in progress, your personal best times, your settings and downloaded image packs. Settings → Delete my data removes all of this and asks our server to delete what it holds about you; uninstalling the app removes what is on the phone.
How long we keep it
| Data | Kept |
|---|---|
| Photos you play on your phone | Not sent to our server |
| Private-link photos and links | 7 days after the link is created (reported photos: until reviewed, at most 30 days) |
| Device identifier, nickname, mascot, results and move lists of daily puzzles and challenges, challenges you created, blocks | Until you ask us to delete them |
| Reports you make or receive | Until reviewed, then 90 days. Penalties (warnings, bans): 180 days |
| Usage and technical data (counters, rewarded-ad grants, error summaries, days of use) and feedback | Up to 90 days |
| Notification tokens | Until you turn notifications off; deleted if not refreshed for 60 days |
| Records of moderation actions | 1 year |
| Purchase records | As long as tax and accounting law requires |
Your choices and rights
You can turn off usage analytics, personalised ads and notifications in Settings at any time, play without a nickname by only playing on your own, and keep any challenge out of the public feed. You can ask us for a copy of your data, to correct it or to delete it by writing to hamhansamu@proton.me — it's free, and we answer within 30 days.
Deleting your data
In the app (fastest): Settings → Delete my data. The app asks our server to delete your device identifier, nickname, results, move lists, challenges, private links and their photos, and blocks, then clears the phone and starts fresh. Your entries disappear from leaderboards. Deleting your data does not cancel a subscription: cancel it in Google Play first, or billing continues.
By email: write to hamhansamu@proton.me and ask us to delete your data. If you bought VIP, write from your Google account address; otherwise tell us your nickname, and we will explain how to find your device identifier. We delete it within 30 days. Reports already filed are kept for the period above so moderators can answer appeals, and records the law requires (such as proof of purchase) are kept as required. Uninstalling the app does not by itself delete what is on our server.
If you are in the EEA or the UK
We rely on: contract to run the app and the features you use; consent for analytics and personalised ads; and legitimate interests to keep leaderboards fair, prevent abuse and keep the community safe — you can object at any time by writing to us. Our server is outside the EEA; sending your data there is necessary to provide the features you use, and Google applies its own safeguards to the data it receives. You may complain to your data protection authority.
If you are in California: we do not sell your personal information, and do not share it for cross-context behavioural advertising beyond the ad consent choice above.
Security
Traffic is encrypted, private-link addresses are long random codes that cannot be guessed or listed, and your device secret is kept in the phone's secure storage. If a breach ever affects your data, we will tell you.
Images made with AI
The pictures in our puzzle library are created by us with the help of AI image tools. They are illustrations, not photos of real people or events.
Changes
We will update the date above when this policy changes, and tell you in the app about important changes.
Language
If a translation and the English version disagree, the English version prevails.