Privacy Policy

Summary

Mosaic Atelier does not require you to create an account, does not show third-party ads, and does not use your data for cross-company advertising tracking. The app uses a pseudonymous Firebase identifier in the background to operate Light Elixirs (ELX), purchase delivery, and abuse prevention. Gameplay progress is stored on your device and may sync through your Apple iCloud account when iCloud is available.

Information handled by the app

• Gameplay and settings: completed puzzles, current progress, pane count, refill timing, ELX-related state, streaks, tutorial state, and preferences such as audio and haptics.
• Pseudonymous identifiers: Firebase assigns an anonymous user identifier. RevenueCat uses that identifier to associate purchase entitlements and ELX balances. PostHog receives a one-way hashed version of it rather than the raw Firebase identifier.
• ELX operations: reward and spend identifiers, operation status, ELX balance, relevant world or level identifiers, streak eligibility, and timestamps needed to grant or spend ELX exactly once.
• Product analytics: app opens, screen views, onboarding progress, puzzle interactions and counts, pane usage, permission outcomes, paywall views, purchase and restore events, app version, build, locale, device family, and access type.
• Purchase information: product identifiers, localized product information, transaction or receipt status, entitlement state, purchase environment, storefront country, and refund or revocation events. We do not receive your payment-card details.
• Support information you choose to send by email, such as your email address, screenshots, device details, app version, and the content of your message.
• Technical data: IP address, user agent, device and operating-system information, network response information, app integrity signals, and crash or exception diagnostics processed by our service providers when applicable.

The app does not ask for location, contacts, photos, camera, or microphone access. It may present Apple's tracking-permission prompt before enabling optional PostHog analytics; declining does not prevent gameplay or purchases.

Online services and anonymous identity

We use Google Firebase Authentication, Cloud Functions, and Cloud Firestore to create a pseudonymous app identity, validate requests, prevent duplicate ELX operations, and keep a server-side operation ledger. Supported releases may also use Firebase App Check to verify that backend requests come from the genuine app. No email address, name, password, or social login is requested for this identity.

This anonymous identity is not a portable user account. Premium Lifetime can be restored through Apple, but an unused ELX balance may not be recoverable after deleting the app, reinstalling it, clearing app data, or moving to another device.

Google explains Firebase data processing and security at firebase.google.com/support/privacy.

Analytics and diagnostics

Mosaic Atelier uses PostHog to understand product usage, diagnose errors, and improve the app. PostHog may process the analytics fields described above, exception information, IP-derived approximate country or region, and a pseudonymous hashed identifier that lets us connect purchase-delivery events without receiving your name or email.

Session replay is disabled. We do not use this information for third-party advertising or to track you across other companies' apps or websites. Where the app asks for Apple's tracking permission, declining it disables optional PostHog capture. Apple may separately provide aggregated crash and diagnostic information according to your device settings.

PostHog's privacy policy is available at posthog.com/privacy.

Purchases, ELX, and Premium Lifetime

Payments are processed by Apple. Mosaic Atelier uses RevenueCat to retrieve products, validate transactions, maintain the ELX virtual-currency balance, deliver Premium Lifetime, preserve access for legacy subscribers, and process restoration, refund, or revocation events. RevenueCat may process pseudonymous app user identifiers, device and operating-system information, receipt data, product identifiers, transaction status, storefront information, and entitlement or virtual-currency activity.

Apple's privacy practices apply to App Store purchases. RevenueCat's privacy policy is available at revenuecat.com/privacy.

Storage and retention

• On-device gameplay data remains until you reset it, clear app data, or delete the app.
• Gameplay data synchronized through iCloud remains subject to your iCloud settings and Apple's retention controls.
• Firebase authentication and ELX ledger records are kept while needed to operate ELX, prevent duplicate grants or spends, investigate errors or abuse, meet legal obligations, and resolve support requests.
• Purchase and entitlement records are retained by Apple and RevenueCat according to their policies and legal obligations.
• Analytics, diagnostics, and support correspondence are retained only as reasonably necessary for the purposes described in this policy, security, legal compliance, and dispute resolution.

Sharing

We do not sell personal information. Information is shared only with service providers needed to operate Mosaic Atelier: Apple for distribution, iCloud, payments, and platform diagnostics; Google Firebase for anonymous identity and ELX backend operations; RevenueCat for purchases, entitlements, and ELX; PostHog for analytics and diagnostics; and email providers when you contact support. We may also disclose information when required by law or reasonably necessary to protect users, the app, or our rights.

These providers may process data in countries outside your own, including the United States, under their applicable contractual and legal safeguards.

Your choices and privacy requests

You can control iCloud synchronization and Apple analytics in your device settings. Where presented, you can decline Apple's tracking permission to disable optional PostHog analytics capture. Deleting the app removes local data from that device but does not necessarily delete iCloud, App Store, Firebase, RevenueCat, or support records.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability, and to complain to a data-protection authority. Email contact@mosaicatelier.app to make a request. Because the app has no named account, we may need technical information that reasonably verifies which pseudonymous records relate to your installation, and in some cases we may be unable to reconnect a deleted installation to its former anonymous identifier.

Children

Mosaic Atelier does not ask players to provide a name, email address, or date of birth in the app. The support email is not intended for children to submit personal information. If you believe a child has provided personal information, contact us and we will take reasonable steps to review and delete it where appropriate.

Changes and contact

We may update this policy when the app, our providers, or legal requirements change. The date at the top identifies the latest revision.

For privacy questions or requests, email contact@mosaicatelier.app.