Daily PathPrivacy Policy
The short version
- There is no account, no email and no password. A random install ID keeps your progress together.
- We do not use your location, contacts, camera, microphone or photos.
- We do not ask to track you across other companies’ apps and websites, and there are no ads or analytics in the app today.
- Your name is only shown to other players if you choose a nickname.
- You can delete your data from the app (Settings, then Delete my data) or by email.
Who we are
Daily Path (“the app”) is published by Pivot & Anchor Private Limited (“Pivot & Anchor”, “we”, “us”), a company registered in India. You can reach us at tech@pivotandanchor.com.
What we collect and why
An install ID
The first time you open the app, it makes a random ID and keeps it on your phone. It is not linked to your name, email or phone number. We use it to keep your scores, progress and purchases together and to place you on leaderboards.
Game data on our server
Our game server stores, against your install ID:
- your Daily results: the day, which of the five puzzles, your time and your mistakes;
- Journey progress and the levels you solved (stars, mistakes, rewinds and how long each took), events and postcards;
- your coin balance and a history of every coin earned, spent, bought or refunded;
- boosters, the cosmetics you own and have equipped, and offers you were shown;
- Climb Pass progress, and your league and its results;
- records of store purchases (the product, the store’s transaction ID and the date), and the purchase messages RevenueCat sends us about them (product, price, currency, store country and store).
We use this to run the Daily, the leaderboards, leagues, events and your coins, and to spot cheating. When you solve a puzzle, the app sends the moves so our server can check the solution; we keep only the totals (such as your time, mistakes and rewinds), not a log of your moves.
A nickname, if you choose one
If you set a nickname (3 to 16 letters, digits, spaces, _ or -), it is stored with your install ID and shown on leaderboards and in your league. Please pick one that doesn’t identify you. Without a nickname, you don’t appear by name.
Technical data
Our server reads your IP address to limit how often requests can be made, and keeps it only in memory for that purpose; we do not write IP addresses to our database. One kind of server warning does include an IP address: a call to our purchase-message endpoint with the wrong password, which normally does not come from a player’s phone. Server warnings about suspicious activity (for example an impossibly fast solve) include the install ID. These lines go to our host’s logs. Our host may also keep its own request logs.
What stays on your phone
Your settings (sound, vibration, animations and reminders), streaks, saved copies of puzzles and progress, and your install ID are kept on your phone.
Removing the app removes them, except the install ID and its key. Those are kept in the iPhone Keychain, so reinstalling the app on the same iPhone keeps your coins and progress. The Keychain copy is also part of encrypted and iCloud backups of your iPhone, so restoring one onto another iPhone brings back the same player. It is never synced through iCloud Keychain. Delete my data removes all of it.
Who processes data for us
| Who | What they do | Status |
|---|---|---|
| Railway | Hosts our game server and its database, in the Singapore region. | In use |
| Expo (650 Industries, Inc.) | Delivers app updates (EAS Update). When the app checks for an update, Expo receives standard request data such as your IP address, the device platform and the app version. | In use |
| Apple | Takes payments and handles subscriptions and refunds through the App Store. We never see your card details. | In use |
| RevenueCat | Manages purchases and subscriptions. It receives your install ID (as its customer ID), your purchase history and store receipts. In versions of the app that sell purchases, the app also asks RevenueCat what you own when it opens. | When you buy something |
| PostHog (analytics) | Not used. The app sends no analytics today. | Not used today |
| AppLovin (ads) | Not used. The app shows no ads today. | Not used today |
We will update this policy, with a new effective date, before turning on analytics or ads.
Notifications
Reminders are local notifications, scheduled by your phone and only if you allow them. We do not send push notifications and do not collect a push token. You can turn reminders off in the app’s Settings or in iOS Settings.
Sharing your result
When you share a result, the app makes an image or text (the puzzle number, how many you solved, your mistakes, your time and how you ranked) and hands it to the iOS share sheet. You choose where it goes. It does not include your install ID, your nickname or the puzzle board.
We do not sell your personal information, and we do not share it for advertising.
How long we keep data
- Game data is kept while you use the app. It is deleted when you ask: with Delete my data in the app, or by email.
- Backups: our server makes a backup every night and keeps at most the last 14, so deleted data rolls off within 14 days. If we ever restore a backup, our server first erases again the data of everyone who asked for deletion, before it serves anyone.
- Purchase records are kept, pseudonymised, for as long as tax and accounting law requires (see What we keep after deletion).
- Server logs are kept for as long as our host, Railway, keeps them. They can include your install ID, for example in a warning about suspicious activity. Delete my data does not remove them; they expire on the host’s schedule.
Your rights, and deleting your data
You may ask us to access, correct, delete or export the data tied to your install ID, and to object to or restrict how we use it. These rights come from laws such as the GDPR (EU), the UK GDPR, the CCPA/CPRA (California) and India’s Digital Personal Data Protection Act, 2023.
In the app
In the latest version of the app, open Settings, then Delete my data. The app says what will be erased and asks you to confirm. It then erases, at once and for good:
- on our server: your Daily results and scores, Journey progress, events and postcards, leagues, Climb Pass progress, your nickname, the cosmetics you own and have equipped, and the offers you were shown;
- on your phone: your install ID and its key (in the Keychain), settings, streaks, saved data and scheduled reminders. The app then starts again as a new player.
If you have restored a backup onto a second iPhone, both phones are the same player, and Delete my data on either one erases it for both.
What we keep after deletion, and why
Tax and accounting law requires us to keep records of sales, so these stay:
- records of store purchases (product, store transaction ID, date and any refund), and our records of checking them;
- the full history of coins earned, spent, bought or refunded, with times and what each was for;
- the boosters and Climb Pass seasons that purchases gave, and the status of a Plus subscription;
- the purchase messages RevenueCat sent us.
These records are pseudonymised: we remove your install ID from all of them and file them under a new random ID. To keep your deletion in force if we ever restore a backup, we also keep a one-way hash of your old install ID and one of the phone’s key next to that random ID, and use them for nothing else. A hash can’t be turned back into your install ID, but someone who already had your install ID could use it to find the random ID, so the law still treats these records as personal data, and we protect them as such.
Plus is not cancelled by deleting your data: Apple bills it until you cancel it. The app reminds you before you delete. To cancel, open iOS Settings, tap your name, then Subscriptions.
By email
If the app can’t delete your data (for example, an older version without the option, no connection, or the app can’t confirm the phone is yours), or if you want a copy of your data, email tech@pivotandanchor.com from any address. Include the code from Settings if the app shows one, or your nickname and roughly when you played. Because there is no account, we may need you to show that you have the phone. If you made purchases, you can also ask us to delete your customer record at RevenueCat.
Deleting the app removes most of the data on your phone (not the install ID in the Keychain) and none of the data on our server, so use Delete my data first.
Grievance Officer (India)
Grievance Officer, Pivot & Anchor Private Limited, tech@pivotandanchor.com.
Children
Daily Path is a game for a general audience. It is not directed at children under 13. We do not collect names, emails, contacts or location from anyone. A parent can delete a child’s data in the app (Settings, then Delete my data) or by emailing tech@pivotandanchor.com.
Where data is processed
Our game server runs in Singapore, and the services above may process data in the United States and other countries. Your data may therefore be processed outside the country where you live.
Security
Data between the app and our server travels over HTTPS. Our server stores only what this policy describes. No system is perfectly secure.
This website
This website uses no cookies, analytics or tracking. Our host, Vercel, may process standard server logs (such as IP addresses) to deliver the pages and keep them secure.
Changes
When this policy changes, the new version will be posted on this page with a new effective date.
Contact
Pivot & Anchor Private Limited, India · tech@pivotandanchor.com
See also: Your data and deletion · Terms of Use