Privacy Policy

SHIFT uses anonymous sign-in and a chosen username so you can play without an email or password. You may optionally add and verify an email address to protect your progress, then use a six-digit one-time code to recover it on another device. SHIFT does not ask for your real name, password, phone number, contacts, precise location, or full photo library access.

SHIFT uses Supabase to run accounts, storage, and backend validation, and Apple StoreKit to handle SHIFT+ purchases. This version of SHIFT does not include third-party monetization SDKs, cross-app measurement identifiers, consent prompts for monetized placements, or monetized display placements.

SHIFT collects and stores the information needed to operate the app:

• —Your chosen username.
• —A private player ID created through anonymous sign-in.
• —An optional recovery email address and its verification status, only if you choose to protect your progress. Supabase sends and verifies the six-digit verification and sign-in codes used for this feature.
• —Daily puzzle start records and attempts, Puzzle Vault progress, and Daily Archive progress.
• —League membership, league rankings, and league-related activity.
• —Champion badge and trophy records, including award period, rank, score, moves, time, and whether an award has been seen or shared.
• —Gameplay records such as puzzle date, puzzle number, start and last-activity times, submitted path, result status, moves, time, score, submission time, rejected guess count, guess timing metadata, app platform, and app version.
• —Fair-play security records for official attempts. When an official attempt is submitted, SHIFT briefly processes the standard network address supplied with the request and converts it into a protected, date-scoped identifier. SHIFT does not retain the raw network address in its application database. SHIFT also records when a completed, failed, or abandoned player account receives that day's best path, so potentially coordinated submissions can be identified for manual review.
• —Optional missing-word suggestions, including the suggested word, puzzle context, your anonymous player ID, and your username if available.
• —Support or privacy communications you send to Rovira Labs, including your sender email address and message contents.
• —Notification choices stored on your device. If remote leaderboard alerts are enabled, SHIFT also stores an Apple Push Notification service device token, its environment, registration timestamps, and app version against your player account.
• —Account and purchase-entitlement status needed to know whether you have unlocked SHIFT+.

SHIFT does not ask for or store your real name, password, phone number, contacts, precise location, health data, financial account details, or full photo library contents. Email is optional and is stored only when you choose progress protection or recovery.

SHIFT+ purchases are handled by Apple through StoreKit. SHIFT receives purchase entitlement information, such as whether SHIFT+ is active, but does not receive or store your payment card number or Apple ID credentials.

SHIFT uses information to:

• —Create and maintain your anonymous player profile.
• —Keep your player ID stable across app sessions.
• —Send verification and sign-in codes, and restore your player profile on another device when you use optional email recovery.
• —Fetch puzzles and restore completed results.
• —Validate daily attempts and enforce one official daily attempt.
• —Calculate official scores.
• —Detect and manually review potentially coordinated attempts that could unfairly affect leaderboards or champion trophies.
• —Show global and league leaderboards.
• —Save Puzzle Vault, Daily Archive, league, badge, and trophy progress.
• —Deliver optional daily reminder, leaderboard, and champion-badge notifications.
• —Process missing-word suggestions.
• —Respond to support, privacy, and data-rights requests.
• —Produce restricted internal operational reports and review alerts for service monitoring, support, word-list review, and leaderboard integrity.
• —Support account deletion and troubleshooting.
• —Determine whether to show SHIFT+ features and the SHIFT+ paywall.

Your username, score-related stats, and champion-badge counts may appear on global leaderboards. If you join a league, your username, score stats, league rank, badge counts, and league membership may be visible to other members of that league.

Your private player ID is not shown publicly. Your submitted path is stored for validation, review, and result display, but it is not shown on public leaderboards.

This version of SHIFT does not show paid third-party placements and does not include third-party monetization SDKs or consent flows for monetized placements.

SHIFT does not sell your personal information, does not use your data to track you across apps or websites owned by other companies, and does not request Apple's cross-app tracking permission.

SHIFT+ is a one-time, non-consumable in-app purchase handled by Apple StoreKit. Apple processes the purchase, payment, refund, and restore flow. SHIFT uses StoreKit transaction and entitlement status to unlock SHIFT+ features for the Apple ID that purchased SHIFT+.

SHIFT does not receive or store payment card numbers, bank details, or Apple ID passwords.

SHIFT stores small amounts of data on your device, including your anonymous session, username cache, tutorial and one-time prompt state, notification and haptic preferences, Puzzle Vault position, locally scheduled notification identifiers, and pending daily submissions. If you enable remote leaderboard alerts, SHIFT also stores an Apple Push Notification service device token against your player account so alerts can reach your device while the app is not open.

Pending submissions help ensure a completed result is not lost if your connection drops, and are retried when the app reconnects.

When you create a share image, SHIFT generates it on your device and hands it to the native iOS share sheet. The apps or services you choose in the share sheet are controlled by Apple and those third parties. SHIFT does not track where you share the image.

If you save a generated share image to Photos, iOS may ask for permission to add that image to your photo library. SHIFT only uses this permission to save the image you requested. SHIFT does not read or upload your photo library.

Daily puzzle reminders and champion-badge alerts are optional local notifications scheduled on your device. Optional leaderboard alerts use Apple Push Notification service so iOS can show them while SHIFT is open, in the background, or not running. Enabling remote alerts associates an APNs device token and notification preference with your player ID. You can control each category in SHIFT Settings or disable all notifications in iOS Settings.

SHIFT uses the following service providers:

• —Supabase for anonymous authentication, optional email-code recovery, database storage, and secure backend functions.
• —Resend for restricted operational emails sent to SHIFT administrators, including daily puzzle reports, missing-word summaries, and flagged-attempt review alerts. Depending on the report, these emails may contain usernames, player IDs, word suggestions, and relevant gameplay details.
• —Apple StoreKit for SHIFT+ purchases and purchase restoration.
• —Apple Push Notification service and Apple iOS systems for remote alerts, the share sheet, local notifications, Photos permission, and other operating system features you choose to use.

These providers may process information according to their own terms and privacy policies. Like other hosted network services, they may receive standard request information such as IP addresses and technical logs. SHIFT uses these providers only to operate, protect, monetize, and improve the app.

Your account and gameplay data are kept while your account is active and as needed to provide history, leaderboards, and support. Protected network identifiers and best-path delivery records used for fair-play monitoring are normally deleted after 30 days. Attempts elevated for manual integrity review are normally retained for up to 90 days so Rovira Labs can investigate repeated patterns, resolve a review, or handle a dispute. Restricted operational reports are kept only as long as reasonably needed for those purposes and legal obligations. You can delete your account in Settings.

Deletion removes your active authentication account, optional recovery email, username, player ID, attempts, scores, leaderboard entries, notification-device registration, badge records, league memberships, owned leagues, Puzzle Vault progress, word suggestions tied to your player ID, and other active SHIFT database records associated with that player ID.

Deletion may not immediately remove information from encrypted provider backups, security logs, or restricted operational emails that were generated before deletion. Those records may be retained where reasonably necessary for security, integrity review, dispute handling, or legal obligations. Images or posts you shared outside SHIFT are outside SHIFT's control. Apple purchase history and App Store records are controlled by Apple and may remain available through your Apple ID according to Apple's policies.

You can play without adding an email, change your username in Settings, control notification categories in SHIFT and iOS Settings, and delete your account in SHIFT Settings. You may also contact shift@roviralabs.com to ask about access, correction, or deletion of your information. Additional rights may apply depending on where you live.

Where applicable, SHIFT processes information to provide the service you request, based on your choices or consent for optional features, for legitimate interests such as security and leaderboard integrity, and to meet legal obligations.

SHIFT uses Supabase row-level security and backend functions to limit direct database access. Official daily puzzle results are validated server-side before they are saved. Offline or pending submissions are also revalidated by the backend before any score appears on a leaderboard. Fair-play monitoring is restricted to authorized SHIFT administrators. Network matches, fast results, rankings, or best-path use do not automatically exclude an attempt or remove a trophy; any action requires manual review.

No method of transmission or storage is perfectly secure, but SHIFT uses reasonable technical and organizational measures to protect app data.

Players must not use another account, device, or person to obtain the solution or advance knowledge of the best path before submitting an official attempt. Coordinated attempts may be excluded from leaderboard and trophy eligibility after manual review. No action is taken solely because players share a network.

When reviewing a flag, Rovira Labs considers multiple signals and plausible innocent explanations. An initial action is limited to the affected attempt or trophy unless there is evidence of repeated abuse. Players may contact shift@roviralabs.com to request an explanation or appeal a fair-play decision.

SHIFT and its service providers may process information in countries other than the country where you live. Where required, these transfers are handled according to the safeguards and terms provided by the relevant service providers.

SHIFT is not directed to children under 13 or the equivalent minimum age in your region. SHIFT uses anonymous sign-in and a chosen username, and players should avoid using a real name or other personal information as their username.

Apple requires developers to disclose data collected by the app and by integrated third-party SDKs. SHIFT's App Store privacy information reflects the practices described in this policy, including User ID; Device ID; Gameplay Content; Product Interaction such as puzzle starts, attempts, best-path delivery, timing, and saved progress; and protected technical security identifiers used for fair-play review. Relevant data is linked to the player account for app functionality, fraud prevention, and security, but is not used for cross-app tracking.

SHIFT may update this Privacy Policy when the app, service providers, legal requirements, or data practices change. The "Last updated" date will be revised when the policy changes.

Questions about privacy, data deletion, or this policy can be sent to shift@roviralabs.com.