Cluenomy Privacy Policy
Effective date: 30 October 2026
Who we are: Cluenomy is made by Vickneswaran A/L Eliathamby, trading as Cluenomy, 23-05, Residensi Berlian Setapak, No. 8 Jalan Semarak Api 4, Off Jalan Gombak, 53000 Kuala Lumpur, Malaysia ("we", "us"). Contact: [email protected].
The short version
- You don't need an account, and we don't ask for your email, phone number, real name, photos, contacts or location.
- Your progress stays on your phone. Your detective name, case files and settings are stored on your device, not on our servers.
- Anonymous case stats are your choice. When this feature is switched on, if you're 13 or over, we ask once whether you'd like to share anonymous totals (how long cases take, how they end, and whether you enjoyed them). Say no and nothing is sent. You can change your mind in Settings.
- No ads and no tracking. We don't sell, rent or share your information for advertising, and we don't include other companies' tracking or advertising code.
- Purchases go through Apple or Google. They handle payment. We never see your card details.
- Cluenomy is for everyone, including children, with extra protections for anyone under 13 (see section 6).
1. What information is involved, and why
| Information | Where it is kept | Why | Who can see it |
|---|---|---|---|
| Your progress and settings: cases played, your calls, skills, detective name, age range (junior, teen or adult) | On your device only. If you use iCloud or Android backup, it may be included in your device backup, which Apple or Google holds for you. | To run the game and remember where you are | You. We cannot see it. |
| Your birth month and year, if we ask for it | Used on your device for a moment to work out your age range, then discarded. Only the age range is kept. | To switch on the right settings for your age | No one |
| Age range from Apple or Google, where available | Received on your device | Same as above, without asking you | No one |
| Basic connection details when the app downloads new cases: IP address, app version, device type and time | Our hosting provider's (Cloudflare's) standard server logs, kept for a short time under its own policy. We don't keep request logs of our own. | To deliver cases, keep the service secure and fix problems | Us and our hosting provider |
| Purchase details when you buy Case Pass: which plan, when, the store's transaction ID, your country's store, and a random ID the app creates (not linked to your name or contact details) | Apple or Google; RevenueCat, our purchase-management provider; and your device | To confirm purchases, unlock Case Pass, handle renewals and refunds, and see (in summary) how Case Pass is doing | Apple or Google, RevenueCat, and us |
| The same random ID, when a Case Pass member's app downloads bonus cases | Sent with that download to our case server, which asks RevenueCat whether Case Pass is on. Our server doesn't log or store the ID; it remembers RevenueCat's yes or no for up to 5 minutes, filed under a scrambled (hashed) form of the ID. | So that bonus cases only go to members | Our case server and RevenueCat, for the check only |
| Anonymous case stats, only if you say yes (13 and over; never for under-13s): for the first time you play each case, which case it was, how it ended, about how long it took (rounded, at most an hour), how many clues you opened, and, if you choose, a thumbs up or down | Sent to our stats service, which only keeps weekly totals per case. No device ID, name, age or exact time is sent, and our service doesn't keep IP addresses. | To make cases fairer, clearer and more fun | Us, as totals only |
| Crash reports and app statistics | Apple and Google collect these only if you allowed sharing with app developers in your phone's settings. We see them in summarised form. | To find and fix bugs and improve the app | Us, in summarised form |
| Messages you send us, if you email support | Our email system, deleted 12 months after your issue is resolved | To answer you | Us |
Daily reminders, if you turn them on, are scheduled by your phone itself. Nothing about them is sent to us.
We do not collect: your name, email, phone number, address, photos, voice, contacts, precise location, advertising ID, or any information about your health, religion, politics or other sensitive matters. We never ask about gender.
Sharing a case or rank card: if you share your result or your rank, your phone's own share menu sends it where you choose. The card shows the detective name you picked in the app (children pick a made-up one), never your real name unless you typed it as your detective name. We don't receive or keep it. For children, sharing needs a grown-up first.
2. Our legal reasons (for people in the EU, UK and similar countries)
To provide the app you asked for (contract): running the game, delivering cases, unlocking purchases.
Our legitimate interests: keeping the service secure and reliable (server logs, crash reports). We have checked that these interests don't override your rights, especially children's.
Legal obligations: keeping purchase and tax records where the law requires.
Your choice (consent): anonymous case stats are only sent if you say yes, and you can turn them off at any time in Settings.
We do not use personal information for advertising or profiling.
3. Who we share information with
Only service providers who help run Cluenomy, under contracts that limit what they can do:
- Apple and Google: app distribution, payments, age signals, crash reports.
- RevenueCat, Inc.: checks and manages Case Pass purchases. It receives purchase records, a random app ID and basic connection details such as your IP address, never your name, email or payment card.
- Cloudflare, Inc.: delivers cases (and checks Case Pass with RevenueCat before sending bonus cases), keeping its standard server logs; and runs our anonymous case stats service (only if you said yes), where our service keeps no logs and stores only totals.
- Google LLC (Google Workspace): our email, including support emails.
We may also share information if the law requires it, to protect people's safety, or if the business is sold (the new owner would have to follow this policy).
We do not sell or "share" personal information as those words are used in California law, and we never use it for targeted advertising.
4. Where information is processed
Our providers may process information in the United States and the other countries where Cloudflare, Google, Apple and RevenueCat operate. Where the law requires, we use approved safeguards such as standard contractual clauses.
5. How long we keep it
- On your device: until you erase it (see section 7) or delete the app.
- Server logs: we keep none of our own; Cloudflare keeps its standard logs for a short time under its own policy.
- Anonymous case stats: kept as weekly totals per case, which can't be linked back to anyone, for as long as they're useful for improving cases.
- Support emails: 12 months after your issue is resolved.
- Purchase records: as long as tax and accounting law requires, up to 7 years. You can ask us to delete the copy held by RevenueCat (see section 7).
6. Children
Cluenomy is made for all ages. For players under 13 (or a higher age where local law sets one):
- We don't collect personal information from them. No account, no real name (they choose a made-up detective name, which stays on the device), no contact details, no location.
- A grown-up check comes before sharing, buying Case Pass, or leaving the app through a link.
- Purchases also need a parent's approval through Apple's Ask to Buy or Google Family Link, if set up.
- No ads, no tracking, no chat and no contact with other players.
- The app is designed to be safe by default, with no pressure to play or pay.
Teens (13 to 17) also get protective settings: nothing pre-selected on purchase screens, and no pushy design.
There is a plain-language version for children: Privacy, explained for kids.
Parents and guardians can contact us at [email protected] with any question. Because we don't hold children's data on our servers, erasing the data on the device (section 7) removes it.
7. Your choices and rights
- Erase my data: in the app, go to Settings → Erase my data. This deletes your progress, name and settings from the device. Deleting the app does the same.
- Anonymous case stats: turn them on or off in Settings → Privacy. Totals already sent can't be traced back to you, so there is nothing of yours to delete.
- Ask us: depending on where you live, you may have the right to ask what information we hold about you, to correct it, delete it, restrict or object to its use, or get a copy. Email [email protected]. We hold very little: usually only server logs, support emails and, if you bought Case Pass, a purchase record. To find your purchase record, send us the support code shown in Settings (it's a random code, not your name). We answer within the time the law sets (usually 30 days).
- Complain: you can complain to your local data protection authority. In Malaysia this is the Personal Data Protection Commissioner. In the EU or UK, it's your national supervisory authority or the Information Commissioner's Office.
8. Security
- Data in transit: all connections are encrypted.
- No passwords: there are no accounts, so there are none to steal.
- Tamper-proof cases: the app checks every case pack is genuine before using it.
- How we work: we follow a written security programme, keep our software up to date and limit who can access our systems.
No system is perfectly secure. If a breach affects you, we'll tell you and the authorities as the law requires.
9. Changes to this policy
If we change this policy, we'll update the date at the top. If the change is important, for example when we add optional sign-in and case clubs, we'll tell you in the app before it takes effect.
10. Region-specific information
- Malaysia: your rights under the Personal Data Protection Act are as listed in section 7. You can complain to the Personal Data Protection Commissioner. A Bahasa Melayu version of this notice is being prepared and will be published here.
- Singapore: your rights under the Personal Data Protection Act are as listed in section 7. You can complain to the Personal Data Protection Commission.
- United States, including California: we don't sell or share personal information, or use it for targeted advertising. We don't knowingly collect personal information from children under 13 or, beyond server logs, from teens.
- Canada: you can complain to the Office of the Privacy Commissioner of Canada.
- Australia: you can complain to the Office of the Australian Information Commissioner.
- New Zealand: you can complain to the Office of the Privacy Commissioner.
11. Contact
Vickneswaran A/L Eliathamby, trading as Cluenomy, 23-05, Residensi Berlian Setapak, No. 8 Jalan Semarak Api 4, Off Jalan Gombak, 53000 Kuala Lumpur, Malaysia. Email: [email protected]