Appearance
Status: Draft for review by a qualified adviser before publication.
Effective date: [Insert date when published]
Last updated: June 2026
This policy describes how Moving Picture Puzzle (“the app”, “we”, “us”) handles information when you use our puzzle game on iOS or Android. The app is built to keep gameplay and personal content on your device unless we clearly say otherwise below.
Related: Caregiver guide
Summary
- We do not run user accounts, cloud saves, or analytics that identify you in the current app.
- Puzzles, scores, settings, and photos you choose for play are handled locally on your device.
- We do not upload your gallery photos or custom puzzles to our servers.
- Optional local leaderboards store a display name and score only in app storage on your device.
- The app does not include third-party advertising or tracking SDKs in the current release.
Who we are
Data controller: Random Exception
Privacy contact: privacy@hushworks.studio
App support: support@hushworks.studio (general help, not privacy-specific)
Website: mpp.hushworks.studio
App identifier: studio.hushworks.mpp (iOS and Android store listing)
If you have questions about this policy, contact privacy@hushworks.studio. For general app help (purchases, gameplay), use support@hushworks.studio.
What the app does (and does not do)
Moving Picture Puzzle lets you play tile puzzles over animated scenes, bundled images, or photos you select. Core play works offline after the app is installed from the App Store or Google Play.
| Activity | Where it happens |
|---|---|
| Playing puzzles | On your device |
| Saving accessibility settings (Celebrations, Reduce motion, Zen mode, Vision options) | App storage on your device |
| Saving local leaderboard entries | App storage on your device |
| Choosing a photo from your device | Your device only; read via the system file picker / gallery |
| Bundled puzzle images and animations | Packaged with the app |
We do not currently operate a backend that receives your photos, puzzle progress, or gameplay telemetry.
Information we do not collect
In the current version of the app, we do not:
- Require you to create an account or sign in
- Collect your email, phone number, or postal address through the app
- Upload your personal photos or custom puzzles to our servers
- Use third-party analytics (e.g. Firebase Analytics, Mixpanel) or advertising networks
- Sell personal information
- Use cross-site tracking in the app
Information stored on your device
The app stores the following only on your device. This data is not synced to our servers.
Accessibility and gameplay preferences
- Whether Celebrations, Reduce motion, and Zen mode are enabled
- Whether Vision options are enabled (high contrast, bold tile borders, large reference, color-safe palette, tile texture cues, shape selection marks)
These preferences stay on the device until you change them or clear the app’s data.
Local leaderboards (optional)
For some animated puzzles, you may choose to save a score with a display name you type (up to 16 characters). We store:
- Display name (as you entered it)
- Puzzle identifier
- Time and move statistics for that solve
- Timestamp of the entry
Leaderboards are per device — other devices do not see your entries. Photo puzzles, geometric photo puzzles, and custom “Create” puzzles are not ranked on the leaderboard.
You can remove this data by clearing the app’s storage (see Your choices) or uninstalling the app. Leaderboard data is stored under mpp-leaderboard-v1.
Photos and images you select
When you use Your photo, Create, or similar flows:
- You may pick an image from the bundled library (included in the app) or from your device (gallery / file picker).
- Device images are read into memory using a local blob URL for preview and puzzle play. They are not transmitted to us.
- We enforce a 12 MB maximum file size for device imports.
- When you leave a flow or select a different image, blob URLs are released where the app controls them.
Platform note: On iOS and Android, accessing your photo library requires permission from the operating system. We only receive the image you explicitly select through the picker — not your entire library.
Information that stays in memory during a session
While you use the app, temporary data may exist in memory, for example:
- Current puzzle state (tile order, timer, hints used)
- A selected image URL passed between screens during a play session
This session data is ordinarily not written to our servers. If you close the app, unsaved session state may be lost.
Network use
The app is designed for local play. Limited network use may occur in these cases:
| Use | Purpose |
|---|---|
| Installing or updating the app | App Store or Google Play |
| Bundled photo library manifest | Loading a list of built-in sample images packaged with the app (not an upload of your data) |
| Future features | If we add online features (e.g. cloud backup, multiplayer), we will update this policy before they apply |
We do not use network access to send your personal photos or custom puzzle content to our servers in the current version.
Audio
Celebration sounds are generated on the device. We do not stream background music from the internet for core play, and we do not upload audio recordings.
Children’s privacy
The app may appeal to children and families, but it is a general-audience puzzle game, not a social network.
- We do not knowingly collect personal information from children through account registration (there is no account system).
- Local leaderboard names are user-entered and stored only on device — parents and guardians can avoid using real names and can clear storage at any time.
- If you believe a child has provided personal information to us through a support email or other channel outside the app, contact us and we will take appropriate steps to delete it.
Parents and caregivers: see the Caregiver guide for settings that reduce stimulation and pressure.
Third parties
App stores
Apple App Store and Google Play may collect information according to their own policies when you download, update, or purchase the app. We do not control that processing.
No third-party SDKs in current build
The app is built with standard open-source libraries for mobile apps. We do not embed third-party advertising, crash reporting, or analytics SDKs in the shipped app at the time of this draft.
If we add third-party services later, we will list them here and update store “Data safety” / “App Privacy” disclosures.
Legal bases (EEA / UK — if applicable)
If data protection law in your region applies to us, we rely on:
- Contract / service delivery — providing the app you request
- Legitimate interests — maintaining and improving the app, responding to support requests
- Consent — where required for optional features we may add in future
Because most processing is on-device and not sent to us, many requests will be satisfied by actions you take on your device (see below).
Your choices
You can limit or remove locally stored data as follows:
| Goal | Action |
|---|---|
| Remove leaderboard scores and settings | Clear app data for Moving Picture Puzzle, or uninstall the app |
| Stop using a device photo | Deselect or leave the photo / create flow; blob URLs are revoked when replaced |
| Decline gallery access | Deny photo permission in iOS/Android settings (device import will not be available) |
| Reduce motion / celebrations | Use in-app toggles on the menu and play screens |
Uninstalling the app from your device generally removes app-local storage on mobile platforms.
Data retention
- On your device: Data remains until you clear storage or uninstall the app.
- On our systems: We do not retain your photos or gameplay from the app itself in the current version. Support emails, if you contact us, are retained only as long as needed to respond and operate our business.
Security
We use a local-first design so your puzzle content does not need to travel to our servers. No method of storage or transmission is 100% secure; you are responsible for securing your device and who has physical access to it.
International users
If you use the app outside [your country of establishment], you understand that device-local processing still occurs on your device. If we later process data on servers in other countries, we will update this policy.
Changes to this policy
We may update this policy when the app changes (for example, if we add accounts, cloud save, analytics, or ads). We will post the new version with an updated Effective date and, where required, notify you in the app or through the store listing.
Material changes that involve sending personal data off the device will not apply retroactively without notice.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal information we hold about you.
Because the current app keeps photos and scores on your device and does not send them to us, you can often exercise rights directly by clearing app data or uninstalling. For information we hold from support correspondence, contact support@hushworks.studio or privacy@hushworks.studio for privacy-specific requests.
We will not discriminate against you for exercising privacy rights where applicable law prohibits that.
California (CCPA / CPRA) — summary
If you are a California resident and we receive personal information from you outside the app (e.g. email), you may have rights to know, delete, and correct that information. We do not sell or share personal information for cross-context behavioural advertising in the current app version.
Categories in the current app: no sale; on-device storage only for gameplay preferences and optional leaderboard names.
Contact
Privacy: privacy@hushworks.studio
App support: support@hushworks.studio
Website: mpp.hushworks.studio
Document history
| Version | Date | Notes |
|---|---|---|
| Draft 1 | June 2026 | Initial draft aligned with local-only MPP implementation |
This document is a product draft, not legal advice. Have it reviewed before linking from App Store Connect, Google Play Console, or the caregiver guide.