Lumath

Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains what information the Lumath puzzle game (“Lumath”, “the app”, “we”, “us”) collects, how we use it, and the choices you have. Lumath is published by MJK APPS SRL. If you have any questions, contact us at contact@fluttech.com.

1. Information we process

On your device only

Your puzzle progress, best times, streaks and app settings are stored locally on your device. This information stays on your device and is not sent to us unless you sign in and use cloud sync (below).

Account & cloud sync

Lumath uses Firebase Authentication. By default an anonymous account (a random identifier with no personal details) is created so your progress can be saved to the cloud and you can appear on leaderboards. If you choose to sign in with Google or Apple, we receive your name and email address from that provider. With Apple you may choose “Hide My Email”, in which case we only ever receive a private relay address.

When you are signed in, the following is stored in Cloud Firestore and linked to your account:

• puzzle progress and best times;
• daily-challenge and weekly-reveal results;
• streak / activity history;
• a display name you choose;
• leaderboard entries.

Your display name and your scores (solve time and number of puzzles solved) are visible to other players on the public leaderboards.

Notifications

Lumath can send you two kinds of optional notifications:

• Reminders — a daily nudge to play the puzzle and a streak-protection alert — are scheduled and shown by your device locally. They do not involve any server, and we do not collect any information to send them.
• Push notifications come from our servers through Firebase Cloud Messaging: when someone you follow passes you on the weekly or all-time leaderboard (at most once a day per player), when someone you follow has solved today’s puzzle and you haven’t yet (at most once a day), and when a new weekly picture goes live. The ones about players you follow show that player’s display name.

When you allow notifications, we store your device’s push token together with its language, its platform (iOS or Android) and your Friend activity choice, linked to your account, so our servers can send push notifications in your language. The token is removed when you sign out or delete your account.

You can turn each kind on or off at any time from Settings → Notifications: Daily puzzle reminder covers the daily reminder and the new-picture notification, Friend activity the notifications about players you follow, and Streak protection alert the streak alert. You can also disable notifications in your device’s system settings. Your device asks for your permission before Lumath can show any notification (on Android, from Android 13).

Sharing a challenge & co-op

When you share a solved puzzle, the app creates a link that contains only the puzzle and your solve time — no personal information. The link is sent through your device’s own share sheet to whomever you choose. If someone opens that link in a web browser, our website receives the standard request information any website does (such as an IP address); we do not use it to identify you. To solve a weekly picture together, you share an invite link the same way; it contains only the room’s join code and which week’s picture it is. Everyone in the room sees each member’s display name and avatar colour, the pieces each member is working on and the pieces they have solved, synced in real time through Firebase (Cloud Firestore). When the group finishes the picture, the team’s time appears on that week’s team leaderboard, with each member’s display name and how many pieces they solved.

Usage analytics

We use Firebase Analytics (provided by Google LLC / Google Ireland Ltd) to understand how the game is used so we can improve it. We record anonymous, aggregate events about how the app is used — for example opening a screen, starting or completing a puzzle, using a hint, signing in, unlocking a pack, opening the leaderboard or sharing a puzzle — together with basic technical context such as your app version, device model, operating-system version and coarse region. These events are tied to a Firebase-generated app-instance identifier and, when you are signed in, to your account identifier, so we can measure things like how many players return. We use this information only in aggregate to understand and improve the game; we do not use it to advertise to you, and we never sell it.

Advertising

Lumath is free and supported by banner ads served through Google AdMob (provided by Google LLC / Google Ireland Ltd). To serve these ads, AdMob processes technical and device information — such as your device type and operating-system version, coarse location derived from your IP address, and an advertising identifier (the Android Advertising ID, or on iOS the IDFA when you allow it) — to deliver and measure ads and to limit how often you see the same one.

You control how ads are targeted:

• Personalized ads can be turned off at any time in Settings → Privacy. When off, you still see ads, but they are non-personalized (contextual only — not based on an advertising profile).
• EU / EEA / UK: when you first open the app we ask, through Google’s consent dialog, whether you agree to personalized ads. You can change or withdraw that choice anytime via Settings → Privacy → Manage consent.
• iOS: we also ask, through Apple’s App Tracking Transparency prompt, before the advertising identifier (IDFA) is used. If you decline, ads are non-personalized. You can change this anytime in your device’s Settings → Privacy & Security → Tracking.

We do not combine ad data with your puzzle progress, and we do not use Firebase Analytics events to target ads. See how Google uses ad data and the Google partner policy.

Feedback

If you send feedback from within the app, we store the message you write together with your app version, platform, language setting, account identifier and display name — and your email address if you signed in with Google or Apple — so we can understand the issue and reply to you. A copy of each message is posted to our team's internal Slack channel so we see it promptly.

2. How we use your information

• To run the game and save your progress.
• To sync your progress across your devices when you sign in.
• To show daily-challenge and leaderboard standings.
• To send the optional reminders you can enable.
• To understand, in aggregate, how the game is used so we can improve it.
• To show ads that keep the app free, and — only with your consent where required — to personalize and measure them.
• To respond to feedback you send us.

3. Service providers

We rely on the following providers to run these features:

• Google Firebase — Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging and Analytics (provided by Google LLC / Google Ireland Ltd). See Firebase privacy and the Google Privacy Policy.
• Sign in with Apple and Google Sign-In — used only if you choose to sign in. See the Apple and Google privacy policies.
• Google AdMob — serves the in-app banner ads and, where you consent, personalizes and measures them (provided by Google LLC / Google Ireland Ltd). See the Google Privacy Policy.
• Slack — our team's internal messaging tool, where each feedback message is posted for us to read (provided by Slack Technologies). See the Slack Privacy Policy.

Other than the providers listed above, we do not share your data with third parties for their own purposes.

4. Sharing and selling

We do not sell your personal data. We share the limited device and ad-interaction data described under Advertising with Google AdMob solely to serve and measure ads — and to personalize them only where you have consented. The only information visible to other people is the display name and scores you publish to the leaderboards, and anything you choose to share via a challenge link or co-op room.

5. Keeping and deleting your data

• Local data is removed when you uninstall the app.
• You can permanently delete your account at any time from Settings → Account → Delete account. This erases your profile, progress and stats, every leaderboard entry you have (daily, weekly and all-time, from every period) and your reactions, and removes your name from co-op rooms and team results, from other players' follow lists and from the invites you sent. Feedback you sent is kept without your name, email address or account identifier; copies already posted to our Slack channel are deleted on request. See Delete your account for the details.
• You can also request deletion by emailing contact@fluttech.com.

6. Your rights (EU/EEA — GDPR)

You have the right to access, correct, export and erase your personal data, to restrict or object to processing, and to lodge a complaint with your local data-protection authority. The quickest way to erase your data is the in-app Delete account option; otherwise contact us.

Our legal bases for processing are: providing the features you request (account, sync, leaderboards) under contract; our legitimate interest in understanding, in aggregate, how the game is used so we can improve it and in showing non-personalized ads to keep the app free; and your consent for personalized ads and the use of the advertising identifier, which you give through the in-app consent dialog and can withdraw anytime via Settings → Privacy.

7. Children

Lumath is a general-audience puzzle game and is not directed at children below the age of consent in their country. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

8. Security

Data is transmitted over encrypted connections (HTTPS/TLS). Cloud data is protected by Firebase security rules so that each account can only write its own records.

9. Changes to this policy

We may update this policy from time to time. We will update the date at the top and, for significant changes, note it in the app.

10. Contact

MJK APPS SRL
contact@fluttech.com