Privacy,
without the fog.

1. Data controller and contact

Anvicit operates CrowdMind and is responsible for the account and gameplay data processed by the service. Privacy questions and rights requests can be sent to pj@anvicit.cloud.

2. Data we process

• Account: the stable identifier supplied by Apple or Google, your chosen handle, preferred language, time zone, and notification preferences. CrowdMind never receives or stores your identity-provider password.
• Gameplay: answers, crowd-split predictions, scores, streaks, history, and leaderboard position.
• Notifications: an Apple Push Notification token when you grant permission, plus the notification categories you enable.
• Purchases: StoreKit tells the app whether CrowdMind Supporter is active. Verification remains on-device; CrowdMind does not receive payment-card details.
• Feedback: text deliberately submitted through Send Feedback or Report an ad, together with app-version context.
• Advertising SDK data: when ads are enabled and consent permits a request, Google Mobile Ads/UMP may process IP-derived coarse location, device identifiers, advertising and product interactions, performance data, crash data, and diagnostics.

3. Why we use it

We use account and gameplay data to provide the game, calculate results and streaks, show leaderboards, localize questions, deliver notifications you enabled, prevent abuse, answer support requests, and improve reliability. Advertising data is processed to request, deliver, limit, measure, and report ads. CrowdMind does not sell personal data.

4. Legal bases

Core account and gameplay processing is necessary to provide the service you request. Optional notifications rely on your device permission and settings. Advertising and regional privacy choices are handled through Google’s User Messaging Platform where required. Legitimate interests may apply to security, abuse prevention, diagnostics, and service improvement, subject to your rights.

5. Service providers

We use Apple and Google for sign-in, Apple for push delivery and in-app purchases, OVH-hosted infrastructure in Europe for the API and database, and Google AdMob/UMP for advertising and consent management. Each provider processes data under its own terms and privacy documentation.

6. Advertising and tracking choices

CrowdMind requests non-personalized ads, disables Google’s publisher first-party identifier, and does not request App Tracking Transparency permission. Google’s SDK may still use IP-derived location and app- or developer-bounded device identifiers for ad delivery, frequency control, analytics, and measurement. Where required, you can revisit consent through Profile → Settings → Ad privacy choices. Buying CrowdMind Supporter removes all ads.

7. Retention and deletion

Gameplay data remains while your account exists. Feedback remains linked to the account for support and triage. Delete the account at Profile → Settings → Delete account; the live account, gameplay history, push token, and feedback are deleted together. Encrypted operational backups rotate after 14 days, so deleted data may remain inaccessible in backups until expiry.

8. Your rights and choices

Depending on where you live, you may request access, correction, deletion, restriction, objection, or portability, and may complain to your local data-protection authority. You can also change language and notification categories, deny system permissions, revisit ad privacy choices, restore or buy the ad-removal purchase, sign out, or delete the account in-app. Contact pj@anvicit.cloud to exercise a privacy right.

9. Photos and sharing

CrowdMind does not read or upload your photo library. Add-only Photos permission is requested only when you explicitly save a share card. Sharing through another app is controlled by the destination you choose.

10. Security and children

Traffic uses HTTPS, authentication tokens are stored in the iOS Keychain, and production secrets are not bundled in the app. Access is limited to what is needed to operate the service. CrowdMind is not directed to children under 13.

11. International processing and changes

Service providers may process data outside your country under their contractual and legal safeguards. Material policy changes will be posted here with a new effective date; where law requires it, we will provide additional notice or seek consent.