Jigsawonder Privacy Policy

Jigsawonder stores puzzle attempts, progress and completion history, favorites, puzzle choices, access and subscription status, downloaded or cached content, and settings on your device. This information lets you play, resume puzzles, and use available content offline. You do not need to create a Jigsawonder account. Your device or Apple account backup settings may include app data in a backup. Deleting the app generally removes its local data, but it does not remove images you saved to Photos or shared elsewhere.

If you enable reminders, iOS manages notification permission and scheduled local reminders. If you choose Save, the app requests add-only Photos access and writes the completed image to your Photos library. If you choose Share, the app creates a temporary image for the iOS share flow. The service or person you choose may keep what you share. Jigsawonder does not automatically upload your finished images.

The app uses a Sfumato Studios LLC Supabase project hosted in East US (North Virginia) to deliver its public catalog, Daily program, and puzzle images over HTTPS. Supabase and its infrastructure providers can receive information needed to serve and secure those requests, including your IP address, request time, requested file, and connection information. We do not include your puzzle progress, completion history, or finished image in these content requests. Server logs are kept according to the provider's applicable retention settings and as needed for security, troubleshooting, and legal obligations.

Jigsawonder uses PostHog US Cloud for analytics, and analytics is on by default in the release app. You can turn it off in Settings → Privacy → Analytics.

The app sends events about app opens; the first time a new anonymous identifier is seen with the app in the foreground ("first seen"); foreground sessions and how long they were observed to last; puzzle starts, resumes and completions, including which catalog puzzle it was, its piece count and rotation setting, how it was accessed, and measured active play time; paywall views; purchase and restore attempts and their outcomes; subscription changes and status checks; and recoverable errors, such as a failed save or download, and whether the same operation later succeeded. A completion event may include the number of completed attempts and the number of distinct puzzles completed on that device. These are local counts, not an account total.

Each event also includes its exact time; a random event ID; random session, puzzle-attempt, paywall-view or operation IDs where relevant; your device type (iPhone or iPad) and hardware model identifier; the app version and build; whether it is a development build or a simulator, and which App Store environment signed the install; your subscription status as subscriber, non-subscriber or unknown; and the date and month, in UTC, when the current anonymous identifier was first seen. First seen is when analytics first observed this identifier, not an install date. All of these events are joined by one random, app-scoped anonymous identifier, so they are linked to one another, although not to your name or Apple Account. The puzzle-attempt ID is derived from the saved puzzle with a random value that is deleted when analytics is turned off. The app never sends your name, email address, receipts or transaction IDs, text you enter, or image or photo data in these events, and it asks PostHog not to create a person profile.

PostHog receives the network connection, including its source IP address, and processes analytics information for us. When it receives an event, PostHog estimates an approximate country and city from that IP address and stores them with the event; a city may be missing or inaccurate. The app does not use GPS or Location Services and does not send an IP address as an event property. Our PostHog project is configured to discard client IP addresses from stored events.

Unsent events wait only in memory, at most 64 at a time, and a failed send is retried at most twice, about 2 and 10 seconds later; events are never written to disk and are lost if the app closes first. While analytics is on, the app keeps a small amount of analytics information on the device: the anonymous identifier, the last day the app was opened, the first-seen date and month, and active play totals for up to 32 recent puzzle attempts. Our current PostHog Free plan keeps analytics events queryable for one year. Turning analytics off stops new analytics requests, clears queued, retrying and in-progress requests, ends the current session without reporting it, and removes the local anonymous identifier and everything saved with it. Turning analytics on again starts a new identifier that is not linked to the old one. Data already transmitted cannot be recalled by turning the switch off. For a request concerning analytics data already held by us or PostHog, email us.

Jigsawonder includes Meta’s SDK to measure installations and app activations resulting from our advertising. When this measurement is enabled, the app requests Apple’s App Tracking Transparency permission before initializing the SDK. If you authorize tracking, Meta may receive installation and activation events and their timestamps, an app-scoped identifier, your device’s advertising identifier when advertising-ID collection is enabled, tracking-permission information, and device, app, and connection information. This can include your IP address, app and operating-system versions, device model, language, time zone, carrier, and screen information. Meta may link this information with information from other apps and services for advertising measurement.

Automatic app-event and purchase logging are disabled for this integration. We do not configure Meta measurement to receive puzzle activity, purchase events, email addresses, or completed images. You can decline tracking and still use Jigsawonder; the app does not initialize this measurement SDK unless tracking is authorized. You can change permission in iOS Settings. When the app observes that authorization has been withdrawn, it stops further app-owned measurement calls. This does not recall information already transmitted or guarantee cancellation of SDK work already queued. The in-app Analytics switch controls PostHog analytics separately from Apple’s tracking permission for Meta measurement.

Meta handles information it receives under its Privacy Policy and applicable business-tool terms. Contact info@sfumatostudios.org for privacy requests concerning this integration.

Jigsawonder offers optional weekly and annual auto-renewing subscriptions. Apple processes purchases and provides transaction and entitlement information so the app can determine access. The app also configures RevenueCat in observer mode to support subscription information. RevenueCat may receive an anonymous app user identifier and purchase or subscription information from the app and Apple, as well as ordinary service and diagnostic information. Apple and RevenueCat process information they receive under their own privacy policies. A purchase or restore requires your action; ordinary status checks do not start a purchase.

The Support link opens https://sfumatostudios.org/jigsawonder/support. If you choose to email info@sfumatostudios.org, we receive your email address, message, any attachment you add, and ordinary email delivery information. We use this to answer and resolve your request. Please do not include payment details or other unnecessary sensitive information. We keep support messages as long as needed to respond, resolve follow-up issues, maintain necessary records, and comply with law, then delete them when no longer needed.

We use local data to provide app features, content request data to deliver and protect content, analytics to understand and improve the app, purchase information to provide subscription access, advertising measurement information to understand the performance of our advertising, and support information to answer you. We share information with the service providers named above for those purposes and may disclose information when required by law. We do not sell your puzzle activity or completed images. Jigsawonder does not display third-party ads. Optional measurement of our advertising through Meta is described above.

Local progress remains until you delete the app or a relevant record is removed. Cached files and temporary share files may be cleared by the app or iOS. Provider records are kept for the periods needed to provide their services, meet security and legal obligations, and handle requests. If you ask us to delete information we control, we will assess the request and the deletion available through the relevant provider; some records may need to be retained by law or for legitimate security and accounting reasons.

You can turn analytics off in the app, decline or change tracking permission in iOS Settings, decline or change notification and Photos permission in iOS Settings, and choose whether to Save or Share an image. To ask for access, correction, deletion, or another privacy right available where you live, email info@sfumatostudios.org with “Jigsawonder privacy request” in the subject. We will respond within the period required by applicable law. We may need information to verify a request before acting on it.

Depending on where you live, applicable law may provide additional rights, including objection to or restriction of some processing and a right to complain to a data protection authority. Where a legal basis is required, we rely on providing the service you request, our legitimate interests in operating and securing it, your consent where required, and legal obligations, as applicable.

Sfumato Studios LLC operates from the United States. Our service providers may process information in the United States and other countries where they or their subprocessors operate. We use HTTPS for app network requests and take reasonable steps to protect information we control. No system is completely secure.

Jigsawonder is a general-audience app and is not directed to children. If you believe a child has sent us personal information through support, contact us so we can review and address it. We may update this policy as the app changes. The effective date above identifies the version in force; we will provide additional notice where law requires it.

Sfumato Studios LLC
info@sfumatostudios.org

For app help, visit Jigsawonder Support. See also the Jigsawonder Terms of Use.