Privacy Policy
Last updated: April 2, 2026
This Privacy Policy describes how Bridgeful ("Bridgeful," "we," "us," or "our") collects, uses, and shares information when you use Sudokitty and our related website and services (together, the "Services"). By using the Services, you agree to this policy alongside our Terms of Use.
1. Data controller
The data controller responsible for your personal information is Bridgeful, with its principal address at 26 Botanical Vista Dr, Tomball TX 77375. For privacy-related requests, contact us at hello@sudokitty.com.
2. Information we collect
Depending on how you use the Services, we may process:
- Identifiers and device data: such as device identifiers, app instance identifiers, and IP address;
- Account and gameplay data: such as progress, scores, streaks, preferences, and in-game economy information when synced with our backend;
- Commercial information: such as in-app purchase or subscription records as reported by Apple and our subscription tooling (for example, RevenueCat);
- Support and feedback: information you send when you contact support or submit feedback;
- Diagnostics: crash or performance data if collected by our tools or platform providers;
- Approximate location: derived from IP address or device settings (for example, country or region), not precise GPS unless you later enable features that require it.
We do not use our own analytics SDK to track you across other companies' apps for advertising today; we may introduce analytics or measurement tools in the future. If we do, we will update this policy and, where required, obtain consent.
3. How we use information
We use information to:
- Provide, operate, and improve the Services;
- Process purchases and manage subscriptions and entitlements;
- Sync game data and features that rely on our servers (for example, via Supabase);
- Respond to support requests and communicate about the Services;
- Monitor security, prevent fraud, and debug technical issues;
- Comply with legal obligations and enforce our Terms.
4. Legal bases (EEA, UK, and similar regions)
Where GDPR or similar laws apply, we rely on appropriate legal bases such as: performance of a contract (providing the Services); legitimate interests (security, improvement, and analytics compatible with those interests); consent where required (for example, certain cookies or marketing); and legal obligations.
5. How we share information
We may share information with:
- Service providers who host data, run our backend, send communications, or help us operate the Services under contractual safeguards;
- Apple and RevenueCat (and similar tools) for purchase validation, subscription status, and customer management;
- Supabase (or successor infrastructure) for database, authentication-related features, serverless functions, and related cloud processing;
- Authorities when required by law or to protect rights, safety, and security.
We do not sell your personal information for money. Where "sale" or "sharing" is defined broadly under U.S. state laws, we describe opt-out choices below where applicable.
6. International transfers
We may process information in countries other than where you live, including the United States. Where required, we use appropriate safeguards such as standard contractual clauses approved by regulators.
7. Retention
We retain information only as long as needed for the purposes above, unless a longer period is required by law. When data is no longer needed, we delete or anonymize it in line with our practices and technical constraints.
8. Security
We implement reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
9. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, to withdraw consent where processing is based on consent, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at hello@sudokitty.com. You may also adjust permissions in your device settings (for example, tracking or advertising controls on iOS).
10. Children
The Services are not directed at children under the age required by applicable law in your region. We do not knowingly collect personal information from children below that age. If you believe we have done so, contact us and we will take appropriate steps.
11. Website and cookies
Our marketing website may use a small number of technical cookies or similar technologies needed for basic operation. If we add analytics or advertising cookies, we will update this policy and, where required, display a consent mechanism.
12. Third-party links
The Services may link to third-party sites or services (for example, social networks). Their practices are governed by their own policies; we are not responsible for them.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will post the new version on our website and adjust the "Last updated" date. Material changes may be communicated through the Services or other appropriate means.
14. Contact
Questions about this Privacy Policy: hello@sudokitty.com
Bridgeful, 26 Botanical Vista Dr, Tomball TX 77375
This Privacy Policy is a general template and may not cover every obligation in your jurisdiction. Have a qualified attorney review it before publication or reliance.