Privacy Policy

Effective Date: May 29, 2026 · Last Updated: May 29, 2026

1. Introduction

This Privacy Policy describes how the NumSum team ("we," "us," or "our") handles information in connection with the NumSum mobile application (the "App").

We have designed NumSum to be a privacy-respecting product. The App is intended to function as a self-contained, single-player puzzle experience. Where this Policy describes rights or obligations under data-protection laws, those provisions apply only to the limited extent any information is actually processed.

2. Information We Collect

NumSum does not ask you to create an account and does not directly collect your name, email address, postal address, or telephone number. However, the App integrates third-party SDKs provided by Google LLC ("Google") which automatically collect certain information for analytics and advertising purposes, as described below.

The categories of data collected through these SDKs include:

• Device identifiers: including the Identifier for Advertisers (IDFA) on iOS where you have granted permission via App Tracking Transparency, Identifier for Vendors (IDFV), and equivalent identifiers on Android.
• Device and environment data: device model, operating system version, language, country/region, and approximate (IP-derived) location.
• Usage and interaction data: app events, screen views, session length, and feature engagement.
• Crash and performance data: diagnostic information used to detect and fix problems.
• Advertising data: ad impressions, clicks, and (when permitted) signals used for ad personalization and frequency capping.

NumSum does not collect contacts, photos, calendar entries, microphone or camera input, biometric or health data, precise GPS location, or in-app purchase / billing information (the App contains no in-app purchases or subscriptions).

2a. Third-Party Services Used

The App uses the following Google services. Their handling of data is governed by Google's privacy policies:

• Google Analytics for Firebase — used to understand aggregate app usage and improve the product. See Google Privacy Policy.
• Google AdMob — used to display advertising within the App. On iOS, personalized advertising requires your consent via the App Tracking Transparency (ATT) prompt; if you decline, only non-personalized ads are shown. See How Google uses advertising data.

Google LLC acts as an independent data controller / business with respect to data it receives through these SDKs.

3. Information Stored Locally on Your Device

To function as a game, the App stores a small amount of data locally on your device using the operating system's standard local-storage facilities (for example, AsyncStorage on iOS and Android). This data never leaves your device and is never transmitted to us or any third party. It includes:

• Your preferences for sound effects and vibration (on/off).
• Progress markers such as which puzzles you have completed.
• The current state of an in-progress puzzle so you can resume it later.

You may clear this information at any time by deleting the App from your device, or by using your device's standard application data-management tools. Deleting the App permanently removes all locally stored data.

4. Children's Privacy

NumSum is rated 4+ and is designed to be appropriate for users of all ages, including children. We do not knowingly collect personal information that directly identifies any individual user, including children under the age of 13 (United States, Children's Online Privacy Protection Act, "COPPA"), under 16 (European Economic Area, General Data Protection Regulation, "GDPR-K"), or any other age specified by applicable law.

To support COPPA compliance, the App is configured so that the AdMob SDK treats requests as "tagged for child-directed treatment" where applicable, which disables personalized advertising and restricts the use of identifiers and audience signals for advertising purposes. Google Analytics for Firebase is similarly configured to disable advertising features in those contexts.

If you believe that, despite the design of the App, a child has somehow provided personal information to us, please contact us through the App settings and we will take prompt action.

5. Third-Party Services

The App integrates the following third-party software development kits (SDKs) provided by Google LLC: Google Analytics for Firebase (analytics) and Google AdMob (advertising). These SDKs collect the categories of data described in Section 2 and process them under Google's terms and privacy policies.

We do not embed attribution, social-login, or other unrelated tracking SDKs in the App.

The App is distributed through the Apple App Store, and may in the future be distributed through Google Play. The operators of those platforms (Apple Inc. and Google LLC) may collect information about app downloads, installations, and device characteristics in accordance with their own privacy policies, which we encourage you to review.

6. Data Security

Because no data is transmitted from the App, there is no in-transit data to secure on our side. The locally stored preferences described in Section 3 are protected by the standard sandboxing and storage-encryption features of your mobile operating system. We recommend that you keep your device's operating system up to date and that you use a device passcode to protect locally stored information from physical access by others.

7. Your Rights

Depending on your jurisdiction, you may have rights with respect to personal data under laws such as the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA), Japan's Act on the Protection of Personal Information (APPI), and similar laws. These rights typically include:

• The right to access the personal data we hold about you.
• The right to request correction or deletion of that data.
• The right to object to or restrict certain processing.
• The right to data portability.
• The right to lodge a complaint with a supervisory authority.

Because NumSum does not maintain user accounts and does not directly collect personal identifiers, we generally cannot link any data to an individual user on our side. For data collected through Google's SDKs, you can exercise the following controls:

• iOS tracking: open Settings → Privacy & Security → Tracking, or Settings → NumSum, and disable "Allow Tracking" to withhold IDFA from the App.
• Ad personalization: visit Google Ads Settings to manage personalized advertising across Google services.
• iOS Apple Advertising: open Settings → Privacy & Security → Apple Advertising and turn off "Personalized Ads".
• Android (future): open Settings → Google → Ads to reset or opt out of Ads Personalization.

We do not "sell" personal information for money. To the extent that the use of advertising SDKs is considered "sharing" of personal information for cross-context behavioral advertising under the CCPA/CPRA, you may opt out by disabling tracking and personalized advertising using the controls above. If you wish to make a formal rights request, please contact us through the App settings.

8. International Users

NumSum is offered globally through the Apple App Store. Data collected via Google Analytics for Firebase and Google AdMob may be processed by Google LLC and its affiliates in the United States and other countries, in accordance with Google's privacy policy and applicable cross-border transfer mechanisms.

You are responsible for compliance with local laws to the extent that they are applicable to your use of the App.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App, our practices, or applicable law. When we make a material change, we will update the "Last Updated" date at the top of this Policy. If a change materially affects how we treat any information, we will use reasonable means to notify users in advance, for example through an in-app notice or an update on the App Store listing. Your continued use of the App after the effective date of a revised Policy constitutes your acceptance of the revised Policy.

10. Contact Us

If you have any questions, comments, or concerns about this Privacy Policy or our privacy practices, contact information is available within the App settings.

11. Effective Date

This Privacy Policy is effective as of May 29, 2026.