Privacy Policy — Thunk: Shape Fit Puzzle

Last updated: 8 September 2026

This policy applies to Thunk: Shape Fit Puzzle (com.innovizea.thunk), published by Innovizea LLC ("we", "us"). Our other apps have separate policies — Card Shark games · Choptick.

Summary

Thunk needs no account and no sign-up. Your puzzle progress lives on your device. Ads are shown by Google AdMob. One optional feature — playing alongside friends — stores data for us: if you choose to connect with someone, the display name you pick and your level times are saved to our database so your friends can see them. Nothing is published until you add a friend.

Data stored on your device

Your level progress, best times, stars, streaks, settings and any ad-free purchase state are stored on your device. Settings has a reset that clears your progress without uninstalling.

Uninstalling may not erase it. If you have Android's automatic backup switched on, Google keeps a copy of the app's data in your Google Drive and restores it when you reinstall — so your progress, and the anonymous identifier below, can come back by themselves. That backup belongs to your Google account and we cannot read it or delete it; you can manage or remove it in Google Drive under Backups, or turn it off in Android's system settings. The reset in Settings is the route we control.

The friends feature — what we store, and when

Thunk's friends feature is opt-in and off by default. Nothing about you is written to our database until you either accept an invite or invite someone who accepts. If you do:

A display name you choose. It is free text you type — it does not have to be your real name, and we recommend it isn't.
An anonymous account identifier. Google Firebase issues your install a random anonymous ID. It is not linked to a Google account, an email address or a phone number, and we never ask you for any of those.
A short player code. Four characters, generated on your device, shown on your own friends page and published alongside your display name so that two people using the same name can be told apart. It is not derived from anything about you.
Your puzzle results — which levels you have finished, your times and your streak — so the friends you connected with can see them next to their own.
Puzzles you send and the results that come back. If you send a friend a board, the puzzle settings and your own time on it are stored so they can play it and compare; when they finish, their time is stored for you. Cosmetic items you buy as a gift for a friend are stored the same way until they collect them.
Pending invitations between you and the person you are connecting with, so an invite works in both directions.

This is held in Google Firebase Realtime Database on our behalf. It is visible to the people you have connected with. We do not sell it, we do not use it for advertising, and we do not combine it with anything else.

Thunk is free and shows ads through Google AdMob: videos you choose to watch in exchange for something — a hint, doubling the coins a level paid, or sending a board to a friend — and an occasional ad between levels. AdMob may collect a device advertising identifier (AD_ID) and related data to serve and measure those ads, under Google's privacy policy.

Where the law requires it — the EEA, the UK and certain US states — you are shown a consent screen, and ads are personalized only if you consent; otherwise non-personalized ads are served. You can reset or limit your advertising ID in your device settings at any time.

Purchases

If you buy the optional one-time ad-free upgrade or a coin pack, the transaction is handled by Google Play Billing (or the App Store on iOS). We never receive your card or payment details.

We use RevenueCat to check what you have bought, so that a purchase you have already made is still yours on a new phone without you having to do anything. Their software runs inside the app and receives an anonymous identifier for your install and the fact that a purchase was made and is valid. It is not given your name, your email address or your payment details, and it is used for nothing but restoring purchases.

What we do not collect

Thunk does not ask for or collect your name, email address, phone number, contacts, photos, files, microphone, camera or location. There is no account to create and no password to lose.

Children

Thunk is a puzzle game suitable for all ages, but it is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with a display name through the friends feature, email us and we will delete it.

Deleting your data

On-device data: use the reset in Settings. Uninstalling alone may not be enough — see the note above about Android's automatic backup, which is held in your own Google account.
Friends data: email support@innovizea.com from the device, tell us the display name you used, and we will delete your record and any pending invitations. If you have not used the friends feature, there is nothing on our side to delete.

Data security & retention

Data sent to Firebase and AdMob is encrypted in transit. Friends data is kept while you are using the feature and is deleted on request. We hold no other server-side record of you.

Changes

We may update this policy; the "Last updated" date above reflects the latest revision.

Contact

Questions: support@innovizea.com · Innovizea LLC