Digit Place Privacy Policy

Last updated: 9 October 2026

Digit Place ("the app") is made by Tribe Solutions LLC ("we", "us"). Contact: [email protected]. This policy explains what the app does with your data. The short version: the app works without an account and keeps your data on your phone. If you sign in, we store your progress so it can sync. We do not sell data, show ads or track you across other apps and sites.

Nothing is sent to us. Your progress, images, palaces, settings and My numbers stay on your device. The only network use is the daily challenge page, which needs an account to be ranked, and optional anonymous usage (see section 5).

You can sign in with Apple (iOS) or Google. We receive from the provider a stable account id and the email address on that account (it can be a private relay address from Apple). We also store:

the display name you choose (shown on leaderboards unless you hide yourself in Settings) and, optionally, the country you choose;
your synced progress: lessons, review history, your edited images and words, your palaces and studios (without photos), settings, streak days, quests and challenge attempts;
challenge attempts with their scores, times and the rows you got right, to rank the leaderboard and to check scores are plausible;
session data: hashed refresh tokens and an app-generated device id, so you stay signed in and we can end a session.

We use this only to run the app: sign you in, sync your devices, show leaderboards and prevent cheating. Our server runs on Cloudflare (Workers and D1 database), so Cloudflare processes it for us.

3. What never leaves your phone

My numbers. The digits of numbers you save (phone numbers, dates, codes) are encrypted on your device with a key kept in the iOS Keychain or Android Keystore. They are never synced, never sent to analytics and never included in crash reports. They are only in an export file if you tick that option yourself.
Your own photos used for palaces and images stay on your device.
Please do not save card numbers or PINs in the app; it is a memory tool, not a vault.

4. Notifications and permissions

Notifications: one optional daily reminder, scheduled on your device. We do not use push notifications. The permission is requested only after you tap "Allow reminders".
Photos: only through the system picker, only when you add your own palace photo.
Android: a foreground service notification shows the countdown of a timed run you started. It contains no digits.

5. Analytics

Anonymous usage statistics (for example "a lesson was completed", with no digits, no typed words and no names) are sent to PostHog only if you turn on "Share anonymous usage" in the app. It is off until you choose. We use no advertising identifiers and no advertising or tracking SDKs. [If crash reporting is added before release, this section will name the provider and say that crash reports contain no digits.]

6. Purchases and subscriptions

Digit Place is free to start. An optional subscription or one-time purchase, Digit Place Plus, is sold through the Apple App Store or Google Play. Apple or Google takes the payment and we never see your card number or billing details. We use RevenueCat (RevenueCat, Inc.) to check which purchases are active: it receives your purchase receipt and an app user id (a random id, linked to your account if you are signed in). We keep your subscription status (active or not, plan, expiry date) on our server so Plus works on all your devices. Purchases belong to your Apple or Google account, not to your Digit Place account, so Restore purchases works even if you never sign in. Deleting your Digit Place account does not cancel a subscription: cancel it in your App Store or Google Play subscriptions.

Every provider below is bound by its own terms or a data processing agreement to protect the data at the same level as this policy. We do not sell or rent data. We do not share it with advertisers. Providers that handle data for us: Cloudflare (hosting and database), Apple and Google (sign-in and payments), RevenueCat (subscription status), and PostHog (anonymous usage, only if you opt in). Leaderboards show your display name, country if you chose one, and score to other players, unless you hide yourself.

8. Your choices and rights

Withdraw consent: turn off "Share anonymous usage" in Settings at any time; it stops immediately.
See and take your data: Settings > Export my data (a JSON file) and, if signed in, the server export.
Delete: Settings > Delete account removes your account and everything we hold about it, immediately and permanently (Sign in with Apple access is revoked as well). You choose whether to keep or wipe the data on your device. You can also email [email protected] with the subject "Delete my data" from the address on your account.
Hide from leaderboards, change or remove your country: in Settings.
If you live in the EU, UK or similar regions you also have the rights of access, correction, erasure, restriction, portability and objection, and the right to complain to your data protection authority. Contact us at [email protected].

9. Retention

Account data is kept while the account exists and removed when you delete it. Challenge leaderboard entries are removed with the account. Backups of the database expire within 30 days. [Confirm the backup period before publishing.]

10. Children

The app is not directed to children under 13 and we do not knowingly collect their data. If you think a child has signed in, email us and we will delete the account.

11. Security

Data is encrypted in transit (HTTPS). Tokens are stored on your device in the Keychain or Keystore. No system is perfectly secure, but we limit what we collect so there is little to lose.

12. Changes

If we change this policy we will update the date above and, for material changes, tell you in the app.

13. Contact

Tribe Solutions LLC, [registered address to be added], [email protected].

How to delete your data

In the app: Me > Settings > Delete account. Or email [email protected], subject "Delete my data". We delete the account within 30 days of a verified email request.