Privacy Policy

1. The short version

We ask for a username, an email address and a password so your progress and your leaderboard place can follow you between devices, and we store the results of the games you play. That is the whole of it.

We do not sell or rent your personal data to data brokers. You can delete your account from inside the app at any time; after a 15-day grace period, it and its data are erased. This summary is for orientation only — the sections below are what actually applies.

2. Who we are

Logikoo is made and operated by DevHaven Apps ("we", "us"), the controller of the personal data described here. You can reach us at support@devhavenapps.com.

This policy covers the Logikoo mobile app for Android and iOS, the Logikoo backend at api.devhavenapps.com, and this website at logikoo.devhavenapps.com.

3. What we collect

Category	What it is	Where it comes from
Account	Username, email address, password stored only as a cryptographic hash, and the date the account was created.	You, when you register.
Social sign-in	If you choose Sign in with Google or Sign in with Apple, the stable identifier that provider gives us for you, so a returning player can skip the login form. Accounts are matched by that identifier, never by email address.	Google or Apple, with your consent, at the moment you use the button.
Profile	The avatar, frame and banner you have chosen, and your level and experience.	You, inside the app.
Gameplay	Which game you played, at which difficulty, the result (moves, mistakes, elapsed time, whether you won) and when, plus the derived leaderboard entries and records.	The app, when you finish a game.
Progression	Energy, coins, daily task progress, chests, inventory items, collections and in-app inbox messages.	The app, as you play.
Support & account closure	Any message you send us, and the reason plus optional feedback you give when deleting your account.	You.
Invites	Your personal invite code, how many friends have signed up with it and the rewards that paid. If you sign up with a friend's code, which account invited you. When someone opens an invite link on this website, a keyed hash of their network address (never the address itself), the time and the kind of device, so a new install can be matched to the link it came from; on Android, the invite code is also passed through the Google Play install.	The app, the invite page on this website, and Google Play.
Technical logs	Our servers record requests to the API and to this website, which includes an IP address, a timestamp, the requested address and a user-agent string. We use these to keep the service running and to detect abuse.	Automatically, on every request.
On your device	A sign-in token and your local preferences are stored in the app's own storage on your phone. They never leave the device except to authenticate you against our API, and they are removed when you sign out or uninstall.	The app.

We do not ask for and do not collect your real name, date of birth, phone number, contacts, photos or precise location.

4. How we use it

To create your account, sign you in and keep you signed in.
To save your progress and sync it to whatever device you sign in on.
To calculate and display leaderboards, records and seasons.
To run the energy, task, chest, level and shop systems, and deliver what you earn.
To send you a password reset code when you ask for one.
To keep results honest — validating submitted scores and detecting cheating or automated play.
To keep the service secure and available, and to investigate abuse or technical faults.
To answer you when you contact support.

We make no automated decisions with legal effects about you.

5. Legal bases

For players in the EEA and the UK, we rely on:

Performance of a contract — running your account, saving progress and operating leaderboards is the service you signed up for.
Legitimate interests — keeping the service secure, preventing cheating and abuse, and maintaining short-lived server logs.
Consent — where you choose to use Google or Apple sign-in, and for any optional feedback you send us. You can withdraw consent at any time.
Legal obligation — where we must keep or disclose data to comply with the law.

6. What others can see

Leaderboards are public inside the app. Other players can see your username, your chosen avatar, frame and banner, your level, and your results on a board. Your email address is never shown to other players.

Any signed-in player can also open your profile, which shows those same things plus your coin balance, your lifetime fires and how many friends you have — never who your friends are, never your invites, and never your email address. Your avatar, frame and banner also appear next to your name in your friends' lists and in the matches you play with them.

If you sign up with a friend's invite code, that friend sees your username in their in-app inbox, next to the reward your sign-up earned them. Opening someone's invite link shows you their username.

Pick a username you are comfortable being seen. You can change it in the app at any time.

We do not sell, rent or trade personal data. We share it only with:

Our hosting provider, which runs the server the app and database live on.
Our email provider, which delivers transactional mail such as password reset codes. It receives your email address and the contents of that message, and nothing else.
Google or Apple, but only if you use their sign-in button — and only to verify the identity you present.
The app stores, Google Play and the Apple App Store, which handle distribution under their own privacy policies. We receive no personal data from them beyond aggregate, anonymous install statistics and, on Android, the invite code from the link the app was installed through, if there was one.
Authorities, where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.

Each provider acts on our instructions and may only use the data to deliver its service to us.

8. What the app connects to

The network calls the app makes today go to our own API at api.devhavenapps.com, plus Google's or Apple's sign-in services if you use those buttons.

If we later add a third-party service to the app — advertising, analytics, crash reporting or payments — we will describe it here, update the date at the top of this page, and tell you inside the app before it starts, together with any choice you have about it.

9. How long we keep it

Account and progression data — for as long as your account exists.
Leaderboard entries — for the season they belong to and its published history; entries are removed with your account.
Server logs — a short period, normally no longer than 30 days, unless a specific security investigation requires longer.
Invite-link visits — the hashed network address recorded when an invite link is opened is deleted after 48 hours.
Support email — for as long as needed to resolve your request and a reasonable period afterwards.
Deletion feedback — the reason you gave for closing your account is kept in aggregate, unlinked from you, to help us improve the app.

10. Deleting your account

You can delete your account yourself: Profile → Settings → Delete account inside the app. When you do:

The account is immediately deactivated and stops appearing to other players.
A 15-day grace period begins, during which signing back in lets you restore the account exactly as it was.
After the grace period, the account and the personal data attached to it are permanently erased by an automated job. This cannot be undone.

If you cannot reach the app, write to support@devhavenapps.com from the address on the account and we will do it for you. The steps, and the full list of what is erased and what is kept, are on the account deletion page.

11. Your rights

Depending on where you live, you have the right to access the data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, to receive it in a portable form, and to withdraw any consent you have given.

Much of this is available in the app itself — you can view and edit your profile, change your email or password, and delete your account. For anything else, email us and we will respond within 30 days.

If you are in the EEA or the UK and believe we have handled your data badly, you may complain to your national data protection authority.

12. Security

Passwords are stored only as salted cryptographic hashes — we cannot read them, and neither can anyone who obtains the database. All traffic between the app and our servers runs over HTTPS. Access to production systems is restricted to the people who maintain them.

No system is perfectly secure. If a breach ever affects your data, we will notify you and the relevant authority as the law requires.

13. Children

Logikoo is not directed at children under 13, and we do not knowingly collect data from them. Where local law sets a higher age for consenting to online services on your own — 16 in parts of the EEA — that age applies instead, and a parent or guardian must consent for younger players.

If you believe a child has created an account, write to us and we will delete it.

14. International transfers

Our servers and service providers may be located outside your country, including outside the EEA. Where data is transferred out of the EEA or the UK, we rely on an adequacy decision or on the European Commission's Standard Contractual Clauses with the provider concerned.

15. This website

logikoo.devhavenapps.com is a set of static pages that serve their fonts and images from this domain. The only record of your visit is the ordinary web server log described in section 3 — with one exception: the invite page that a friend's invite link opens tells our API that the link was opened, as described under "Invites" in section 3. If we later add anything that stores data in your browser, we will say so here first.

16. Changes

If we change this policy we will update the date at the top of the page, and for anything material we will also tell you inside the app before the change takes effect. Continuing to use Logikoo after that means the new policy applies to you.

17. Contact

Questions, requests or complaints about privacy go to support@devhavenapps.com. Write in English or Serbian — both are fine.