Privacy Policy.

1. Who we are

Letivo ("Letivo," "we," "us," or "our") operates the Letivo mobile game, website, and supporting online services. This policy applies to those services.

Questions or privacy requests can be sent to privacy@letivo.app.

2. Information we collect

Account and profile information

You can begin with a guest identity. If you register or upgrade an account, we collect your email address and authentication information. Passwords are stored only as one-way password hashes. Your profile may include a display name, username, avatar, language, country, onboarding status, and game progress.

Gameplay and social information

We process room membership and codes, match settings, answers you submit, scores, placements, validation results, rank, rating, XP, streaks, and related game history. Other players in a match may see your display name, username, avatar, answers when results are revealed, score, and placement. Public leaderboards may show your player identity, country, and competitive results.

Device, session, and technical information

We collect an app-generated device identifier, device platform, app version, session records, login and last-seen times, and network or request information needed for security and operation, which may include IP address, user agent, timestamps, and diagnostic logs. Authentication tokens are protected in platform secure storage on your device, and refresh tokens are hashed on our servers.

Fair-play information

During active online rounds, we may record whether the app became inactive, entered the background, returned to the foreground, disconnected, or detected a paste action. Paste telemetry is limited to facts such as occurrence, destination field, and character count. We do not read or store your clipboard contents, and we do not identify other apps you use. We use these signals to calculate a risk profile, issue warnings, review suspicious activity, or apply disclosed score penalties. Ranked play may use stricter thresholds.

Analytics and preferences

We collect limited product events such as match starts and completions, linked where necessary to a user, device, game, round, session, platform, and app version. Our analytics controls reject properties containing answers, passwords, tokens, secrets, email addresses, usernames, or clipboard text. We also store settings such as app and game language, theme, sound, music, haptics, and notification choices.

Notifications, reports, and communications

If you enable push notifications, we collect a push token, provider, device association, and locale, plus delivery status. If you report another player or contact us, we process the report category, description, related player or match, and the information in your message.

Website information

The website stores your selected language in your browser's local storage. If a waitlist form is made available and you choose to join, we collect your email address, selected language, signup source, and consent record.

3. How we use information

• Provide guest and registered accounts, authenticate sessions, and preserve progress across devices.
• Create rooms, match players, operate real-time games, validate answers, calculate scores, and maintain rankings and leaderboards.
• Protect players and the service, prevent abuse and cheating, investigate reports, moderate accounts and content, and enforce our rules.
• Remember preferences, deliver enabled notifications, provide support, and respond to privacy requests.
• Measure feature performance, diagnose failures, balance gameplay, and improve the service using bounded analytics.
• Comply with legal obligations, resolve disputes, and protect our rights and the rights of others.

4. Legal bases

Where data-protection law requires a legal basis, we rely on performance of our contract with you to provide the game; our legitimate interests in operating, securing, improving, and moderating the service; your consent where requested, including for device notifications; and compliance with legal obligations. You can withdraw consent through device or in-app settings, without affecting earlier processing.

5. How we share information

We do not sell your personal information. We may share information in these circumstances:

• With other players: as described above for rooms, match results, and leaderboards.
• With service providers: hosting, database, cache, monitoring, security, and infrastructure providers that process data for us.
• For push delivery: Firebase Cloud Messaging and the applicable mobile platform process device and delivery information when notifications are enabled.
• For answer review: when automated AI validation is enabled, an answer and the minimum structured game context needed to assess it may be sent to the configured validation provider. We do not send your email, username, or authentication credentials for this purpose.
• For legal and safety reasons: when required by law or reasonably necessary to protect the service, players, or others.
• During a business transaction: as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

Some providers may process information in countries other than yours. Where required, we use appropriate safeguards for international transfers.

6. Retention

We keep information only for as long as reasonably needed for the purposes described in this policy, including providing the service, preserving competitive integrity and game records, meeting security and audit requirements, resolving disputes, and complying with law. Retention periods vary by record type.

When you delete your account, we revoke active device sessions, remove your login credential and identifying profile fields, deactivate the account, and replace your public identity with a deleted-player label. We may retain de-identified or minimally necessary game, moderation, security, transaction, and audit records where deletion would affect other players' records, platform integrity, or legal obligations.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, receive a portable copy, or withdraw consent. You may also have the right to complain to your local data-protection authority.

• Update available profile and preference information in the app.
• Disable notifications in Letivo settings or your device settings.
• Review and revoke active device sessions.
• Delete your account from Settings. Registered players may be asked to confirm their password.
• Email privacy@letivo.app for other requests.

We may need to verify your identity before completing a request. Certain rights can be limited where an exception applies.

8. Security

We use administrative, technical, and organizational measures designed to protect information. These include encrypted network transport in production, password hashing, short-lived access tokens, hashed and rotating refresh tokens, secure on-device token storage, access controls, rate limiting, logging safeguards, and audited administrator actions. No system can guarantee absolute security.

9. Children

Letivo is not directed to children under 13, or the minimum age required to consent to online services in their country. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

10. Changes to this policy

We may update this policy as the service or law changes. We will post the revised policy here, update the date above, and provide additional notice when required. Your continued use after an update is subject to the revised policy.

11. Contact us

For privacy questions or requests, email privacy@letivo.app.