Lumath
Privacy Policy
Last updated: 24 June 2026
This Privacy Policy explains what information the Lumath puzzle game (“Lumath”, “the app”, “we”, “us”) collects, how we use it, and the choices you have. Lumath is published by MJK APPS SRL. If you have any questions, contact us at contact@fluttech.com.
In short:
- Lumath is free and shows banner ads (Google AdMob). There are no in-app purchases.
- Your progress, stats and settings stay on your device unless you sign in to sync.
- We use Firebase Analytics to understand how the game is played, in aggregate, so we can improve it.
- You can turn off usage analytics and switch to non-personalized ads anytime in Settings → Privacy.
- In the EU/EEA/UK we ask for your consent before any personalized ads, and on iOS we ask before using the advertising identifier.
- We never sell your data.
- Optional daily reminders and streak alerts are scheduled on your device — turn them off anytime.
- You can delete your account and all cloud data from inside the app.
1. Information we process
On your device only
Your puzzle progress, best times, streaks and app settings are stored locally on your device. This information stays on your device and is not sent to us unless you sign in and use cloud sync (below).
Account & cloud sync
Lumath uses Firebase Authentication. By default an anonymous account (a random identifier with no personal details) is created so your progress can be saved to the cloud and you can appear on leaderboards. If you choose to sign in with Google or Apple, we receive your name and email address from that provider. With Apple you may choose “Hide My Email”, in which case we only ever receive a private relay address.
When you are signed in, the following is stored in Cloud Firestore and linked to your account:
- puzzle progress and best times;
- daily-challenge and weekly-reveal results;
- streak / activity history;
- a display name you choose;
- leaderboard entries.
Your display name and your scores (solve time and number of puzzles solved) are visible to other players on the public leaderboards.
Notifications
Lumath can send you optional reminders — a daily nudge to play the puzzle and a streak-protection alert. These reminders are scheduled and shown by your device locally — they do not involve any server, and we do not collect any information to send them. You can turn each one on or off at any time from Settings → Notifications, and you can also disable them in your device’s system settings. On Android 13 and later, the device asks for notification permission first.
Sharing a challenge & co-op
When you share a solved puzzle, the app creates a link that contains only the puzzle and your solve time — no personal information. The link is sent through your device’s own share sheet to whomever you choose. If someone opens that link in a web browser, our website receives the standard request information any website does (such as an IP address); we do not use it to identify you. Co-op rooms are joined by scanning a QR code that contains a room code; the limited game state needed to play together (such as your display name and your moves) is synced in real time through Firebase (Cloud Firestore).
Usage analytics
We use Firebase Analytics (provided by Google LLC / Google Ireland Ltd) to understand how the game is used so we can improve it. We record anonymous, aggregate events about how the app is used — for example opening a screen, starting or completing a puzzle, using a hint, signing in, unlocking a pack, opening the leaderboard or sharing a puzzle — together with basic technical context such as your app version, device model, operating-system version and coarse region. These events are tied to a Firebase-generated app-instance identifier and, when you are signed in, to your account identifier, so we can measure things like how many players return. We use this information only in aggregate to understand and improve the game; we do not use it to advertise to you, and we never sell it.
Advertising
Lumath is free and supported by banner ads served through Google AdMob (provided by Google LLC / Google Ireland Ltd). To serve these ads, AdMob processes technical and device information — such as your device type and operating-system version, coarse location derived from your IP address, and an advertising identifier (the Android Advertising ID, or on iOS the IDFA when you allow it) — to deliver and measure ads and to limit how often you see the same one.
You control how ads are targeted:
- Personalized ads can be turned off at any time in Settings → Privacy. When off, you still see ads, but they are non-personalized (contextual only — not based on an advertising profile).
- EU / EEA / UK: when you first open the app we ask, through Google’s consent dialog, whether you agree to personalized ads. You can change or withdraw that choice anytime via Settings → Privacy → Manage consent.
- iOS: we also ask, through Apple’s App Tracking Transparency prompt, before the advertising identifier (IDFA) is used. If you decline, ads are non-personalized. You can change this anytime in your device’s Settings → Privacy & Security → Tracking.
We do not combine ad data with your puzzle progress, and we do not use Firebase Analytics events to target ads. See how Google uses ad data and the Google partner policy.
Feedback
If you send feedback from within the app, we store the message you write together with your app version and your account identifier so we can understand and follow up on the issue.
2. How we use your information
- To run the game and save your progress.
- To sync your progress across your devices when you sign in.
- To show daily-challenge and leaderboard standings.
- To send the optional reminders you can enable.
- To understand, in aggregate, how the game is used so we can improve it.
- To show ads that keep the app free, and — only with your consent where required — to personalize and measure them.
- To respond to feedback you send us.
3. Service providers
We rely on the following providers to run these features:
- Google Firebase — Authentication, Cloud Firestore, Cloud Storage and Analytics (provided by Google LLC / Google Ireland Ltd). See Firebase privacy and the Google Privacy Policy.
- Sign in with Apple and Google Sign-In — used only if you choose to sign in. See the Apple and Google privacy policies.
- Google AdMob — serves the in-app banner ads and, where you consent, personalizes and measures them (provided by Google LLC / Google Ireland Ltd). See the Google Privacy Policy.
Other than the providers listed above, we do not share your data with third parties for their own purposes.
4. Sharing and selling
We do not sell your personal data. We share the limited device and ad-interaction data described under Advertising with Google AdMob solely to serve and measure ads — and to personalize them only where you have consented. The only information visible to other people is the display name and scores you publish to the leaderboards, and anything you choose to share via a challenge link or co-op room.
5. Keeping and deleting your data
- Local data is removed when you uninstall the app.
- You can permanently delete your account and all associated cloud data at any time from Settings → Account → Delete account. This removes your progress, stats and identity records (your profile and all-time leaderboard entry). Some leaderboard entries from earlier daily or weekly periods may persist briefly and then age out automatically.
- You can also request deletion by emailing contact@fluttech.com.
6. Your rights (EU/EEA — GDPR)
You have the right to access, correct, export and erase your personal data, to restrict or object to processing, and to lodge a complaint with your local data-protection authority. The quickest way to erase your data is the in-app Delete account option; otherwise contact us.
Our legal bases for processing are: providing the features you request (account, sync, leaderboards) under contract; our legitimate interest in understanding, in aggregate, how the game is used so we can improve it and in showing non-personalized ads to keep the app free; and your consent for personalized ads and the use of the advertising identifier, which you give through the in-app consent dialog and can withdraw anytime via Settings → Privacy.
7. Children
Lumath is a general-audience puzzle game and is not directed at children below the age of consent in their country. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
8. Security
Data is transmitted over encrypted connections (HTTPS/TLS). Cloud data is protected by Firebase security rules so that each account can only write its own records.
9. Changes to this policy
We may update this policy from time to time. We will update the date at the top and, for significant changes, note it in the app.
10. Contact
MJK APPS SRL
contact@fluttech.com