Privacy Policy

1. Scope

This Privacy Policy applies to the Hicya, Inc. websites and online services, including hicya.org and vexling.com, as well as the Vexling and Habits mobile applications. Products with different data practices have a specific policy. Darts is covered by the Darts Privacy Policy.

2. Information We Collect

We believe in minimal data collection. We only gather information that is necessary to provide and improve our services:

• OAuth Sign-In Data (Optional): If you choose to sign in using a third-party provider (such as Apple or Google), we receive basic profile information (such as your name and email address) from that provider. Signing in is entirely optional and is not required to use our services.
• Puzzle Progress and Statistics: We store your puzzle completion data, scores, streaks, and related statistics so that you can track your progress across sessions and devices.
• Basic Analytics: We collect pseudonymous product-usage data, such as page or screen views, sessions, app version, general device information, and approximate region, to understand how our services are used and where we can improve. Mobile analytics does not include Hicya account identifiers, user-created content, scores, habits, puzzle answers, or record IDs.

3. How We Use Your Information

The information we collect is used to:

• Provide, maintain, and improve our services
• Sync your puzzle progress and statistics across sessions and devices
• Understand aggregate usage patterns to guide product decisions
• Respond to support requests or inquiries

4. Data Sharing and Selling

We do not sell, rent, or trade your personal information to third parties. We do not share your data with advertisers. Your information is only disclosed when required by law or when necessary to protect our rights.

5. Third-Party Services

We use a limited number of third-party services to operate and improve our products:

• Analytics Providers: We use Google Analytics on the web and Google Analytics for Firebase in production mobile apps. Google may process cookies, an app instance or device identifier, and network information under its own terms. We disable advertising-identifier support and do not use analytics for advertising or tracking across other companies' apps and websites.
• OAuth Providers: If you choose to sign in using a third-party account (such as Sign in with Apple or Google), the authentication process is handled by that provider. We only receive the basic profile information you authorize, and we do not have access to your credentials.

6. Children’s Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hi@hicya.org and we will promptly delete it.

7. Data Retention

We retain your data only for as long as necessary to provide our services and fulfill the purposes described in this policy. If you stop using our services and have no account, analytics data is kept separate from your Hicya account identity. If you have an account, account data is retained until you request deletion.

8. Your Rights and Data Deletion

You have the right to request access to, correction of, or deletion of your personal data at any time. To exercise any of these rights, please contact us at hi@hicya.org. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. We encourage you to review this page periodically for the latest information on our privacy practices.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to us at hi@hicya.org.

Hicya, Inc.
New York, NY