Privacy Policy

WiDi is operated by Imara Ani FZ-LLC ("WiDi", "we", "our", "us"). This policy explains what we collect when you use the WiDi mobile app and the widi.app website, how we use it, who can see it, and how you can control or delete it.

The short version:

• You play under a username. We never ask for your real name or a password.
• Your username, avatar, phrases, drawings and scores are shown to the other players in your games.
• You appear on community leaderboards only if you say yes. Until you do, you are not on them.
• Linking a phone number, email, Google account or Apple ID is optional. It lets you recover your account on a new device.
• We do not sell your personal information and we do not show ads.
• You can delete your account from inside the app at any time.

1. What we collect

Your account

• The username you choose, and a history of any usernames you have changed from.
• Your avatar, if you set one. If you upload a photo, only the image you pick or take is uploaded. The app asks for photo library or camera access only when you choose to do this.
• A short tagline, if you write one.
• Settings such as whether notifications are on, whether you appear on leaderboards, and which app theme you picked.

Signing up needs only a username. Your device keeps a sign-in token in its secure keychain so you stay signed in.

Contact details you choose to verify

You can link any of these to your account. All are optional.

• A phone number, verified with a code sent by text message.
• An email address, verified with a code sent by email.
• A Google account. We keep the email address of that account.
• An Apple ID through Sign in with Apple. We keep Apple's identifier for your account and the email Apple shares with us, which may be a private relay address.

We use these only to let you recover your account and to make sure one contact belongs to one player. We do not use them to market to you and we do not show them to other players.

What you create and do in games

• The phrases you write and the drawings you make, plus any starting phrase or invite message when you create a game.
• Your votes and ratings on other players' turns.
• Your scores, final ranks, game stats (games played, games won, points), badges, streaks and turn history.
• Leagues you create or join, and games or players you mark as favourites.
• Your coin balance, the history of coins earned and spent, and items you own.

Safety and moderation

• Reports you make or that others make about you or your content, including the reason, any details written, and a copy of the reported content as it looked at the time.
• Players you block.
• Moderation notices sent to you, your replies to them, and an internal standing score that helps us handle reports fairly.

Purchases

Coin bundles and other in-app purchases are processed by Apple (App Store) or Google (Google Play) and managed through RevenueCat. We receive the product you bought, a transaction ID and the purchase status, linked to your WiDi account ID. We never receive your card number or other payment details.

Waitlist

When sign-ups are capped for the day, we may place you on a waitlist. We record your place on the list and which offers the app showed you and whether you chose one.

Device and usage information

• A push notification token and your device platform (iOS or Android), if you allow notifications.
• A random ID created when the app is installed. It identifies that install only and is used to hold your place during sign-up.
• How you use the app, such as screens viewed, buttons tapped, games created and joined, and turns taken, along with app version, platform and error logs. See "Analytics" below.
• Your IP address, which our service providers receive when your device connects to them. Our analytics provider uses it to estimate your approximate location (country, region and city). See "Analytics" below.

What we do not collect

We do not collect your precise location (such as GPS), your address book, audio from your microphone, or your device's advertising identifier. We do not record your screen.

2. How we use it

• To run the game: create your account, match you into games, pass turns between players, count votes, work out scores and show results.
• To send notifications you allowed, such as when it is your turn, a game has started, or voting has opened.
• To let you recover your account with a contact you verified.
• To handle purchases and keep your coin balance correct, including refunds.
• To keep WiDi safe: review reports, hide content that breaks the rules, pause accounts that abuse other players, limit spam and prevent fraud.
• To understand how the app is used and fix problems, so we can make it better.
• To meet legal obligations, such as keeping records of purchases.

We do not use your information for advertising, and we do not sell or rent it to anyone.

3. What other players can see

Players in your games

WiDi is a game you play with other people, so the players in each game you join can see your username, avatar and tagline, the phrases and drawings you add to that game, and the scores and rank you earn in it. You cannot play a game without this.

Your profile

Other players can view your profile, which shows your username, avatar, tagline, game stats and badges. Your verified phone number, email address and Apple or Google details are never shown.

Leagues

Leagues are private groups. The League tab opens after you finish your first game, or earlier if someone adds you to a league. A league owner can add any player by username, and the owner can invite the league's members to games. Everyone in a league can see who the other members are and each member's games won and games played. This happens whatever your leaderboard setting is, because it is part of being in the league. You can leave a league you were added to at any time.

Shared game links

When a game is finished, its phrases and drawings, with each player's username, can be viewed on the widi.app website by anyone who has that game's link. We do not publish a list of games, but anyone a player shares the link with can see the finished game. Games removed by moderation cannot be viewed.

Blocking

If you block a player, neither of you can join a game the other is already in, and they cannot open your profile. They are not told that you blocked them. You can manage blocked players under Profile, Safety.

4. Leaderboards and your choices

WiDi has three community leaderboards: Best in WIDI, Best Newcomer and Best in Your Groups. You appear on them only if you choose to. Nothing is switched on for you: you are off the leaderboards until you tap Yes or turn on the "Show me on leaderboards" switch.

• We do not ask when you sign up.
• We ask on the results screen after your first finished game, with two answers of equal size: "Yes, show me" and "Not now". Closing the question counts as Not now.
• If you have won a game, the question can show where you would rank. That rank is worked out only from players who already chose to appear, and showing it does not put you on any leaderboard.
• If you say Not now, we ask one more time, on the results screen three finished games later, and then never again.
• Once you make a choice in the Privacy section of the Profile tab, or on the League tab, we stop asking.
• You can change it at any time in the Privacy section of the Profile tab, or on the League tab.

• When it is on, other signed-in players can see your username, games won and games played on all three leaderboards.
• When it is off, you are left out of all three leaderboards. Your results still count toward your own stats and badges, and players in your games still see your scores for those games.
• Turning it off removes you from the leaderboards from then on.

Your other choices

• Notifications: turn them off in the app or in your device settings.
• Photos and camera: the app asks only when you choose to set an avatar photo. You can change this in your device settings.
• Linked contacts: linking is optional, and you can disconnect Google from your profile.
• Username, avatar and tagline: change them in your profile.

5. Service providers

We use these companies to run WiDi. They process information for us under their own privacy and security terms, and only for the purposes described here.

• Convex hosts our backend, database and stored files, including avatars and game share images. Almost everything in section 1 is stored there.
• Clerk verifies phone numbers, email addresses, Google accounts and Apple IDs, and sends the verification codes. To do this it keeps a record of your verified contacts together with your WiDi account ID and username. We do not use Clerk to hold your WiDi session.
• Apple provides Sign in with Apple, App Store purchases and push notification delivery on iOS.
• Google provides sign-in with a Google account, Google Play purchases and push notification delivery on Android.
• RevenueCat manages in-app purchases. It receives your WiDi account ID and the purchase details from the store. It never receives your card details.
• Expo relays push notifications to Apple and Google. It receives your push token and the notification text.
• PostHog provides our product analytics and app logs. See "Analytics" below.
• Vercel hosts the widi.app website and protects it from abuse. It processes standard web request data such as IP address and browser type.

We may also share information if the law requires it, to protect the safety of our players or the public, or as part of a merger or sale of WiDi, in which case this policy would continue to apply to your information.

Analytics

The app sends usage events and error logs to PostHog. They are linked to your WiDi account ID and username so we can follow a problem through the app and our servers, and they include app version, platform and an approximate location (country, region and city) that PostHog derives from your IP address. We use them only to understand and improve WiDi. We do not use session recording, and we do not use analytics for advertising or share it with advertisers. The widi.app website does not use analytics or advertising cookies.

International transfers

Our service providers may process your information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards such as the European Commission's standard contractual clauses and the UK equivalents.

6. How long we keep it, and deleting your account

We keep your account information for as long as your account exists. You can delete your account in the app:

1. Open your Profile and choose the Profile tab.
2. Scroll to the bottom and tap Delete account.
3. Read what will be removed, then type your username to confirm.
4. If you linked Apple on an iPhone or iPad, confirm the Sign in with Apple sheet so we can disconnect your Apple ID.

Deletion happens straight away and cannot be undone. It removes:

• Your profile, avatar, tagline, stats, streaks, badges and standing score.
• Your sign-in sessions and push tokens.
• Your coins, coin history and items. Unspent coins are lost and cannot be refunded.
• Your favourites, blocks, league memberships and waitlist entry. A league you own passes to its longest-standing member, or is deleted if empty.
• Your linked phone number, email, Google and Apple details, including the record held by Clerk. We also ask Apple to revoke WiDi's access to your Apple ID.

Some information is kept after deletion:

• Phrases, drawings, votes and scores in games you played stay, so other players keep their results. They are shown as "A former player" with no link to you.
• Your username is held for 90 days so nobody can take it straight away, then released.
• Reports made by you or about you, with the reported content, are kept as part of our moderation record.
• A record that the account was deleted, including the username, is kept so we can confirm the deletion and fix anything that did not complete.
• RevenueCat and the app stores keep their own purchase records for accounting.
• Analytics events already sent to PostHog are kept under our analytics retention settings.

If you cannot open the app, email support@widi.app from the phone number or email address you linked and we will delete the account for you.

7. Security

Information travels between the app, our website and our servers over encrypted connections. Your sign-in token is stored in your device's secure keychain and is not included in device backups. Access to our admin tools is limited to staff who need it, and admin actions are logged.

No system is perfectly secure. If you lose the only device you play on and you have not linked a contact, we cannot recover your account.

8. Your rights

Wherever you live, you can see and change most of your information in the app, and delete your account from the app. You can also email privacy@widi.app to ask us to:

• Give you a copy of the personal information we hold about you.
• Correct information that is wrong.
• Delete your information.
• Stop or limit a particular use of your information.

We will not treat you differently for using any of these rights.

European Economic Area and United Kingdom

If the GDPR or UK GDPR applies to you, we rely on these legal bases: performing our contract with you (running your account and games, and processing purchases), your consent (leaderboards, notifications, and linking a contact, which you can withdraw at any time in the app), our legitimate interests (keeping WiDi safe, preventing abuse and fraud, and improving the app through analytics), and legal obligations (such as keeping purchase records). You also have the right to data portability, to object to processing based on legitimate interests, and to complain to your local data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).

California

If you live in California, you have the right to know what personal information we collect, use and disclose, to ask us to delete or correct it, and not to be discriminated against for making these requests. The categories we collect are listed in section 1: identifiers (username, account ID, device and push tokens, and contact details you verify), purchase records, content you create, usage and device information, and inferences limited to your in-game standing. We do not sell your personal information and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer anything about you.

9. Children

WiDi is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, email privacy@widi.app and we will delete it.

10. Changes to this policy

We will update this policy when what we collect or how we use it changes, and change the date below.

11. Contact us

WiDi is operated by Imara Ani FZ-LLC. For privacy questions or requests, email privacy@widi.app. For help with the app, email support@widi.app or visit the help page.