Privacy Policy

1. Who We Are

Cretiq is a communication intelligence application designed to help users develop advanced vocabulary, articulation, rhetoric, and strategic thinking skills. Our Services are operated by Cretiq and are available on iOS and Android platforms.

Contact: For privacy-related inquiries, please contact us at [email protected].

2. Information We Collect

We collect the following categories of personal information:

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in via Apple Sign-In or Google Sign-In, we receive a unique identifier and, where permitted, your name and email address from those providers.
• Profile Information: Display name, profile photo (optional), and communication goals or preferences you set within the app.
• Subscription and Payment Information: Subscription tier, billing period, and transaction identifiers. We do not store full payment card details. Payments are processed by Apple App Store or Google Play Store; we receive only transaction confirmation data.
• Support Communications: Messages, emails, or other communications you send to our support team.
• Waitlist and Marketing: Email address and any information you voluntarily submit through our waitlist or contact forms.

2.2 Information Collected Automatically

• Usage Data: Features accessed, lessons completed, practice sessions initiated, words studied, streaks, scores, time spent per module, and navigation patterns within the app.
• Progress and Performance Data: Your quiz scores, practice mode results, articulation phase progress, vocabulary retention rates, and habit completion records.
• Device Information: Device type, operating system version, unique device identifiers (IDFV on iOS, Android ID on Android), screen resolution, language settings, and time zone.
• Log Data: IP address, app version, crash reports, error logs, and timestamps of interactions.
• Notification Data: Whether you have enabled push notifications and your interaction with notifications (opened, dismissed).

2.3 Analytics and Crash Reporting

We use third-party analytics and crash reporting services to improve app stability and user experience. These services may collect device identifiers, usage events, and crash logs. See Section 6 for details on third-party service providers.

2.4 Attribution Data

We may use mobile attribution services to understand how users discover our app (e.g., from an advertisement, organic search, or referral). Attribution data may include your device's advertising identifier (IDFA on iOS, GAID on Android), where you have granted permission, and the source of your app install.

2.5 Information We Do Not Collect

We do not collect audio recordings of your voice, biometric data, precise real-time location data, or the content of your private communications outside of support requests.

3. How We Use Your Information

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Service Providers

We share data with trusted third-party vendors who process data on our behalf under strict data processing agreements. These include analytics providers, crash reporting tools, cloud infrastructure providers, email delivery services, and customer support platforms.

4.2 Apple and Google

When you make in-app purchases, your transaction is processed by Apple (App Store) or Google (Google Play). Their respective privacy policies govern the data they collect in connection with those transactions.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Cretiq, our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.

4.5 Aggregated or De-identified Data

We may share aggregated or de-identified data that cannot reasonably be used to identify you for research, analytics, or business purposes.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our Services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes (typically up to 7 years for financial records).

Crash logs and anonymous analytics data may be retained for up to 24 months. Support communications are retained for up to 3 years.

6. Third-Party Service Providers

We currently use or may use the following categories of third-party services:

We will update this section with specific provider names as the app launches. All providers are contractually bound to process data only as instructed and in compliance with applicable privacy laws.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). You may also delete your account directly within the app under Settings → Account → Delete Account.
• Portability: Request your data in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Push Notifications: Disable push notifications at any time through your device settings or within the app under Settings → Notifications.
• Marketing Emails: Unsubscribe from marketing emails using the unsubscribe link in any email or by contacting [email protected].
• Advertising Identifier: On iOS, you can limit ad tracking via Settings → Privacy → Tracking. On Android, you can opt out of personalized ads via Settings → Google → Ads.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. Children's Privacy

Cretiq is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If we become aware that we have collected personal information from a child under the applicable age, we will take steps to delete that information promptly. If you believe we may have collected information from a child, please contact us at [email protected].

9. Data Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS 1.2 or higher
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt or equivalent)
• Access controls and role-based permissions for internal systems
• Regular security reviews and vulnerability assessments

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable authorities as required by law.

10. International Data Transfers

Cretiq is operated from the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using our Services, you consent to such transfers. Where required by law (e.g., GDPR), we ensure appropriate safeguards are in place for international transfers, such as Standard Contractual Clauses.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: The categories and specific pieces of personal information we have collected about you.
• Right to Delete: Request deletion of personal information we have collected.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a California privacy request, email [email protected] with the subject line "California Privacy Request."

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation. Our legal bases for processing your personal data include:

• Contract Performance: Processing necessary to provide the Services you have requested.
• Legitimate Interests: Analytics, security, and fraud prevention, where our interests do not override your rights.
• Consent: Marketing communications and advertising identifiers, where you have given explicit consent.
• Legal Obligation: Compliance with applicable laws.

You may lodge a complaint with your local data protection authority if you believe we have not handled your data lawfully.

13. Apple App Store Requirements

In compliance with Apple App Store guidelines and App Privacy requirements, the following data types are collected by Cretiq:

* Device ID may be used for attribution only with your explicit consent via the App Tracking Transparency (ATT) prompt on iOS 14.5+.

14. Push Notifications

With your permission, we send push notifications to remind you of daily practice sessions, streak milestones, new content releases, and important account updates. You may opt out of push notifications at any time through your device settings (iOS: Settings → Notifications → Cretiq; Android: Settings → Apps → Cretiq → Notifications) or within the app.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this policy and, where appropriate, by sending you an in-app notification or email. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.

16. Contact Us