Privacy Policy

Privacy Policy

How PsychVerse collects, uses, and protects your information.

Effective date: August 3, 2026  ·  Last updated: August 3, 2026

This Privacy Policy explains how PsychVerse ("the App", "we", "us", or "our") handles information when you use the App. PsychVerse is a mobile learning application offering lessons, practice games, progress tracking, and an optional premium subscription.

We have designed PsychVerse to collect as little personal information as possible. You can use the core learning experience without creating an account.

1. Who we are

PsychVerse is operated by its publisher ("the Provider"). For any privacy question, you can reach us at hewhoios@gmail.com. The Provider is the data controller responsible for your information under this Policy.

2. Information we collect

We collect information in three ways: information you provide, information created as you use the App, and information collected automatically by the services that power the App.

2.1 Information you provide

DataWhenWhy
Email addressOnly if you create an account with email & passwordTo authenticate you and sync your progress across devices
Apple account identifierOnly if you choose "Sign in with Apple"To authenticate you; Apple may relay a private, app-specific email address
Support messagesWhen you email us or use "Report a problem"To respond to and resolve your request

Creating an account is optional. If you never sign in, we do not hold your email or name.

2.2 Learning & usage data

2.3 Device & technical data (analytics)

Through Firebase Analytics we may collect standard mobile analytics such as app events, screens viewed, session length, device model, operating-system version, language, region, crash diagnostics, and app version. Analytics can be disabled remotely by us and, where required, is subject to your consent. Optional "tap heatmap" diagnostics (coarse tap coordinates) are off by default.

2.4 Device identifier for free-play limits

To fairly enforce the number of free practice plays, the App generates a random UUID on your device. This identifier is not derived from your hardware, phone number, or Apple ID. For each device we store only: first-seen date, last-seen date, an install count, and a per-game free-play count. We do not store your progress, your answers, your email, your name, or your device model against this identifier.

2.5 Purchase data

If you buy a subscription, the transaction is processed by Apple. We do not receive or store your full payment-card details. Our subscription provider (RevenueCat) receives purchase receipts and a subscriber identifier so we can unlock premium features and let you restore purchases.

2.6 Push notification data

If you allow notifications, our notification provider (OneSignal) assigns a push token/device identifier so we can deliver reminders and updates. You can turn notifications off at any time in your device settings.

3. How we use information

Where the GDPR or similar laws apply, we rely on: performance of a contract (to provide the App and your subscription), legitimate interests (to secure, maintain, and improve the App and prevent abuse), consent (for optional analytics and push notifications, where required), and legal obligation (to comply with applicable law).

5. Third-party services we use

The App relies on the following processors. Each handles only the data needed for its function and under its own privacy terms.

ServicePurposeData involved
Apple (App Store, Sign in with Apple, iCloud)Payments, optional login, cross-device progress syncPurchase receipts, Apple identifier, iCloud key-value progress
Google Firebase (Analytics, Remote Config, Cloud Functions, Firestore)Analytics, feature configuration, free-play enforcementUsage events, device/technical data, random device UUID and counters
RevenueCatSubscription managementPurchase receipts, subscriber identifier, entitlement status
OneSignalPush notificationsPush token / device identifier

We encourage you to review these providers' privacy policies for details on their independent practices.

6. How information is shared

We do not sell your personal information. We share information only with the service providers listed above (acting on our instructions), when required by law or valid legal process, to protect the rights, safety, and security of users or the public, or in connection with a business transfer (e.g., merger or acquisition), in which case we will notify you of any material change.

7. Data retention

We keep information only as long as needed for the purposes above. Account data is retained while your account is active and deleted (or anonymized) on request or within a reasonable period after account closure. Device free-play records are retained only as long as needed to enforce limits. Analytics data is retained according to our provider's configured retention window.

8. Security

We use reasonable technical and organizational measures to protect information, including encryption in transit, scoped access controls, and backend rules that block direct client access to device records. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children's privacy

PsychVerse is not directed to children under the age of 13 (or the minimum age required in your country, such as 16 in parts of the EU). We do not knowingly collect personal information from children below that age. If you believe a child has provided us personal information, contact us and we will delete it.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your data; to object to or restrict certain processing; and to withdraw consent. You can exercise most of these directly in the App (for example, by editing your profile or deleting your account) or by emailing hewhoios@gmail.com. We will respond within the timeframe required by applicable law.

11. EU / UK residents (GDPR & UK GDPR)

If you are in the European Economic Area or the United Kingdom, you have the rights described in Section 10, plus the right to lodge a complaint with your local supervisory authority. The data controller is PsychVerse, reachable at hewhoios@gmail.com. Where we rely on consent, you may withdraw it at any time without affecting prior processing.

12. California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction, and to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law. We will not discriminate against you for exercising your rights. To make a request, email hewhoios@gmail.com.

13. India residents (DPDP Act, 2023)

If you are in India, you may access and correct your personal data, request erasure, nominate another person to exercise your rights, and grieve to us about how your data is handled. We process your data based on your consent or other legitimate uses permitted by the Digital Personal Data Protection Act, 2023. Contact our grievance point at hewhoios@gmail.com.

14. International data transfers

Our providers may process and store information in countries other than yours, including the United States. Where required, such transfers are covered by appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice within the App. Your continued use after changes take effect constitutes acceptance of the updated Policy.

16. Contact us

Questions, requests, or complaints about this Privacy Policy or your data:

PsychVerse
Email: hewhoios@gmail.com