Privacy Policy

This is an automatic translation of the original text in Brazilian Portuguese; if they differ, the original prevails. Read the original

Version 1.5 · Effective October 15, 2026

This policy explains how we handle information about you in the Tablewit game for iPhone, iPad, Apple Watch and its widgets and for Android (the "app") and on the website tablewit.app. It applies to players everywhere the app is offered, and section 11 adds what the laws of specific countries and states require.

Contents

1. Who we are
2. What information is involved
3. What we don't collect
4. How it's used and why
5. Videos, ads and tracking
6. Service providers
7. International transfers
8. Retention and deletion
9. Security
10. Your rights
11. Regional information
12. Children
13. This website
14. Changes
15. Contact

1. Who we are

Tablewit is published by Gabriel Rigon Tecnologia Ltda (GBRLRG) ("we", "us"), a company registered in Brazil. We are the "controller" (or "business") responsible for the personal information described here. You can reach us at hello@tablewit.app.

2. What information is involved

Stored only on your devices and in your personal cloud

• Game progress: puzzles solved (past dailies included), times, levels, streaks, hearts and treats, how many hints you asked for, achievements, your chosen mascot and the name you give it, and your settings, such as your color theme.
• Sync: if iCloud is on, this progress syncs through Apple's iCloud key-value storage in your personal Apple Account, so it follows you to your other devices. It is stored by Apple under your account, and we have no access to it.
• Android backup: if Android backup is on, the system keeps a copy of this progress in your Google Account and brings it back when you set up a new device or transfer your data to it. That copy is stored by Google under your account, and we have no access to it.
• Apple Watch and widgets: progress is passed directly between your iPhone, your watch and the widgets on your device.
• Reminders: with notifications allowed and the daily reminder on, it is scheduled locally on your device, and you can turn it off in Profile. We don't use push notification servers.
• Age range: Apple's or Google Play's answer about your age range (section 5) is kept only on your device.

Handled by Apple, on iPhone, iPad and Apple Watch

• Game Center (optional): if you're signed in, your daily puzzle scores, challenge points, best streak and achievements are sent to Apple, and rankings show your Game Center nickname and avatar to other players. Apple handles this under its own privacy policy.
• Purchases: the Full Set is sold through the App Store, where heart and treat packs were also sold until version 1.6 of the app (the ones you bought keep counting in the game). Apple processes payment, and the app only receives confirmation of the purchase.
• Diagnostics: if you've chosen to share analytics with app developers in iOS settings, Apple may give us anonymous crash reports and usage statistics. We use them only to fix bugs.

Handled by Google, on Android

• Google Play Games (optional): if you're signed in to Play Games, the app receives your player name and player ID from Google, and sends Google your daily puzzle scores, your challenge points, your best streak and your achievements. Rankings show your Play Games name and avatar to other players, and the Friends tab shows your Play Games friends if you allow Google to share that list. The app uses the ID only to find your row in the ranking and keeps none of this. Google handles this under its own privacy policy.
• Purchases: the Full Set is sold through Google Play, where heart and treat packs were also sold until version 1.6 of the app (the ones you bought keep counting in the game). Google processes payment, and the app only receives confirmation of the purchase, with a code it keeps on your device so a purchase is never credited twice.
• Diagnostics: if you've chosen to share usage and diagnostics data with Google in Android settings, Google Play may give us crash and freeze reports and technical statistics that don't identify you. We use them only to fix bugs.

Handled by Google, only when you watch a video

• When you choose to watch a rewarded video, Google AdMob may process your IP address, device model and operating system, app version, general location derived from the IP address, ad interactions, an app-specific device identifier that isn't the advertising one (on Android, the app set ID) and technical diagnostics about how the ad software performs (such as crashes and load times). This applies on iPhone, iPad and Android. The advertising identifier (Apple's IDFA or Google's advertising ID) is never used. See section 5.

When you write to us

• If you email us, we receive your email address, your message and anything you attach (such as a screenshot), and we use them only to answer you.

3. What we don't collect

We don't collect your name, email (unless you write to us), phone number, contacts, photos, precise location, health or financial data, or any other sensitive data. The app has no analytics, tracking or crash reporting tools of our own, and we don't run servers that receive your game data.

4. How it's used and why

We don't use your information for automated decisions that have legal or similarly significant effects on you.

5. Videos, ads and tracking

The daily puzzles never show ads, and no video ever plays by itself. You may choose to watch a short video to earn a heart for your streak or to open the next level after level 20. There are no ads between levels. Buying the Full Set removes the videos entirely.

The videos are served by Google AdMob (Google LLC). Children play Tablewit too, so every video request is marked as coming from someone under the age of consent and as directed to children, and is limited to content rated for general audiences. In practice:

• the first time a reward is offered, the app asks Apple (on iOS 26 and later) or Google Play (on Android, through Play Age Signals, which may first ask you or your parent whether to share it) for your age range; if you are under 13, no video is ever offered;
• the videos are never personalized, and nothing about you is used to build an advertising profile;
• the advertising identifier is never used: on iPhone and iPad, Tablewit never asks to track you, and on Android the app has no permission to read Google's advertising ID or the Privacy Sandbox advertising identifiers;
• where the law requires it, Google's consent message appears the first time a reward is offered, and only then.

Google may still process the device and ad data in section 2 to show the video, measure it, limit how often it repeats and prevent fraud. To change your choices in Google's consent message, write to us and we'll help you, or reinstall the app to be asked again.

Google acts under its own privacy policy for this data: policies.google.com/privacy and how Google uses information from apps that use its services.

6. Service providers

We don't sell or rent your personal information. Information reaches only these companies, for the purposes above:

• Apple Inc. (iCloud, Game Center, App Store, Apple Watch): apple.com/legal/privacy
• Google LLC (AdMob and its consent tool in the app; on Android, also Google Play, Google Play Games, Play Age Signals and Android backup): policies.google.com/privacy
• Cloudflare, Inc. (hosts this website, measures visits without cookies and receives emails sent to our address): cloudflare.com/privacypolicy
• Our email provider, which stores the messages you send us.

We may also disclose information when required by law, court order or a competent authority, limited to what is required, or to a successor if the app is ever sold, under this same policy.

7. International transfers

We are based in Brazil, and Apple, Google and Cloudflare process data in the United States and other countries. When information crosses borders, it is protected by those companies' contractual commitments, such as standard contractual clauses, and by the safeguards required by the laws that apply to you, including article 33 of Brazil's LGPD.

8. Retention and deletion

• Game progress stays on your device until you delete the app, and in your iCloud until you delete it there (Settings → your name → iCloud → Manage Account Storage → Tablewit). On Android, it stays on your device until you uninstall the app or clear its data, and the backup copy stays in your Google Account until you delete it in Android's backup settings. Since we never have a copy, we can't restore it after that.
• Game Center data is kept by Apple, and you can manage it in your Apple Account. Play Games data is kept by Google, and you can manage or delete it in Play Games settings.
• Ad data is kept by Google according to its policies.
• Support emails are kept for up to 24 months after the conversation ends, unless you ask us to delete them sooner.

9. Security

Your game progress stays on your devices and in your Apple Account or Google Account, so Tablewit keeps no central database of players that could be breached. Apple encrypts iCloud data and Google encrypts Android backups, in transit and at rest, and all connections the app makes use encryption (TLS). Access to our support mailbox is protected with strong authentication. If an incident ever affects your personal information, we will notify you and the authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to:

• know whether we process your information and access a copy of it;
• correct it;
• delete it;
• receive it in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• object to processing or opt out of targeted advertising, "sale" or "sharing";
• appeal a decision we make about your request, and complain to a data protection authority;
• not be treated differently for exercising these rights.

To use any of them, write to hello@tablewit.app. We answer within 15 days, or sooner when your local law sets a shorter deadline. Because we don't hold accounts, most of your information is under your control on your device, and we'll explain how to manage it. For information held by Apple or Google, we'll point you to the right place. We may ask for details to confirm a request comes from you. You can also use an authorized agent where your law allows it.

11. Regional information

United States

This section applies to residents of California (CCPA as amended by the CPRA) and of other states with consumer privacy laws, such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others.

In the past 12 months, the categories of personal information involved in the app were:

We don't collect sensitive personal information, we don't sell personal information, and we don't share it for cross-context behavioral advertising or use it for targeted advertising: the videos are never personalized (section 5). We don't knowingly sell or share the information of consumers under 16.

If we deny your request, you can appeal by replying to our answer with the word "appeal". We'll respond within 45 days (60 days in some states), and if you're still not satisfied, you may contact your state's Attorney General.

Canada

We follow PIPEDA and, for residents of Quebec, the Act respecting the protection of personal information in the private sector (Law 25). The person in charge of the protection of personal information is Gabriel Rigon, reachable at hello@tablewit.app. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

Brazil

We follow the General Data Protection Law (LGPD, Law 13,709/2018), and you have the rights in its article 18. As a small data processing agent under ANPD Resolution CD/ANPD No. 2/2022, we have not appointed a data protection officer. Instead we keep a communication channel for data subjects: hello@tablewit.app. You may also complain to the Autoridade Nacional de Proteção de Dados (ANPD).

Mexico

Under the Federal Law on the Protection of Personal Data Held by Private Parties, you have the rights of access, rectification, cancellation and opposition (ARCO) and may withdraw consent by writing to us. You may also go to the competent federal data protection authority.

Other countries in Latin America

If you live in Argentina (Law 25,326), Chile (Law 19,628 and Law 21,719), Colombia (Law 1581 of 2012), Peru (Law 29,733) or another country with a data protection law, you have the rights that law grants, which you can exercise as described in section 10. You may also complain to your country's authority, such as Argentina's Agencia de Acceso a la Información Pública, Colombia's Superintendencia de Industria y Comercio or Peru's Autoridad Nacional de Protección de Datos Personales.

European Economic Area, United Kingdom and Switzerland

If you live in the European Economic Area, the United Kingdom or Switzerland, the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection applies. We process your information on the legal bases in section 4, and you have the rights in section 10, including the right to object to processing based on our legitimate interest and to withdraw consent at any time. The videos are never personalized (section 5), and transfers outside your region are protected as described in section 7. You may also complain to the data protection authority where you live or work, such as the AEPD in Spain, the CNIL in France, the Garante per la protezione dei dati personali in Italy or the ICO in the United Kingdom.

12. Children

Tablewit is a game for all ages, and children play it too. That's why the videos are never personalized and only show content rated for general audiences, Tablewit never asks to track anyone or uses the advertising identifier, and there is no chat and no way to share personal content with other players. Beyond the technical data Google processes to show a video someone chooses to watch (section 5), we don't knowingly collect personal information from children. When Apple (on iOS 26 and later) or Google Play (on Android) tells the app that someone is under 13, the app offers no videos at all; the age range stays on the device and is used for nothing else. If you believe a child has sent us personal information, for example in an email, write to us and we'll delete it.

13. This website

tablewit.app is hosted by Cloudflare, which processes technical data such as IP addresses to deliver the site and protect it from attacks. The site keeps the language you pick in your browser's local storage.

To count visits, the site uses Cloudflare Web Analytics, which uses no cookies, stores nothing in your browser and doesn't identify you: it only shows aggregate numbers, such as how many people viewed each page and from which country. That's why the site doesn't ask for cookie consent. The legal basis is our legitimate interest in keeping the site online, secure and useful. The website doesn't use any other cookies or trackers.

14. Changes

If we change this policy, we'll publish the new version here with a new date. If a change significantly affects how we handle your information, we'll also give clear notice, in the app or on this page, before it takes effect.

15. Contact

Gabriel Rigon Tecnologia Ltda (GBRLRG)
CNPJ 33.908.632/0001-07
Headquarters: Mogi Mirim/SP, Brazil
hello@tablewit.app

This policy was written in Brazilian Portuguese and is available in automatic translations into English, Spanish, French and Italian. If the versions differ, the Portuguese version prevails, except where local law requires otherwise.