Privacy Policy for Inqo

Last updated: December 8, 2025

Introduction

Welcome to Inqo, a game developed and operated by RUNEWORKS LLC (“we”, “us”, “our”). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Inqo app, website, or related services.

This Policy does not apply to companies we do not own or control or to individuals we do not employ.

Information We Collect

We only collect the minimum information required to operate the game, sync your progress, and improve gameplay.

1. Account Information (optional)

If you create an account using:

• Email + password
• Sign in with Apple
• Sign in with Google

We may collect:

• Email address
• Auth provider identifiers (Apple/Google IDs)
• Account creation timestamp

These are stored in our GameUsers database.

2. Gameplay Data

To operate the game and maintain your progress, we store:

• Daily game sessions
• Questions you asked
• The AI-generated responses
• Whether you used a hint
• Whether you won or completed the puzzle
• Stats (streaks, wins, play history)
• InqoProfile information:
  • Game preferences
  • Themes, unlocks, coins, and cosmetic items

This data allows multi-device syncing and personalized features.

3. Question/Answer Logs (QABank)

To improve quality and reduce unnecessary model calls, Inqo stores:

• A normalized version of questions asked by users
• A reusable AI-generated answer

This does not include personal information. It exists solely to improve response consistency.

4. Feedback Data (optional)

If you submit feedback, we may collect:

• Rating
• Comments
• Device info
• App version

This helps us improve the game.

5. Automatically Collected Diagnostic Data

For stability and security, we may collect:

• Error logs
• Crash reports
• Basic device metadata
• Anonymous usage analytics

We do not collect precise location.

Use of AI Services (OpenAI)

Inqo uses AI to generate:

• Answers to user-submitted questions
• Daily puzzle flavor text
• Hint explanations

To do this, certain text (such as your question) is sent to OpenAI’s API.

We do not send:

• Your name
• Your email
• Any account identifiers
• Personal profile information

We do not allow OpenAI to use your data for model training.

How We Use Your Information

We use collected data to:

• Authenticate users
• Sync progress across devices
• Provide daily puzzles and game content
• Improve answer accuracy and reduce repeated AI calls
• Track game stats (streaks, wins, usage)
• Run personalization features (themes, coins)
• Respond to feedback
• Detect abuse or cheating
• Maintain app reliability and security

We never sell your data.

When We Share Your Data

We only share data with trusted service providers necessary to run the game:

1. Cloud Hosting Providers

We use AWS (Amazon Web Services) for:

• Auth
• Storage
• Game logic
• Databases

All data is encrypted at rest and in transit.

2. AI Provider

OpenAI receives only the text of your questions to generate answers. No personal account identifiers are shared.

3. Apple / Google Authentication

If you choose those login methods, your device communicates with Apple/Google to verify the login token.

We do not share gameplay data with Apple or Google.

Data Retention

• Session data is stored indefinitely to support stats and history.
• Feedback is stored indefinitely for quality improvement.
• You may request account deletion at any time (see below).
• If you delete your account, your gameplay data, profile, and identities are permanently removed.

QABank entries remain because they contain no personal data.

Your Rights

You may request:

• Access to the data we have about you
• Correction of inaccurate information
• Account deletion (“right to be forgotten”)

To request deletion, open the in-app Support link or contact us directly.

Children’s Privacy

Inqo is designed for a general audience but is not intended for children under 13.

We do not knowingly collect personal information from children.

If we discover that a child has created an account, we will delete it.

Data Security

We use industry-standard security measures, including:

• Encryption in transit (HTTPS)
• Encryption at rest (AWS KMS)
• Strict access controls
• Minimal data collection
• No plaintext passwords (we use hashed passwords)
• Provider-level authentication (Apple / Google)

We continuously monitor for unauthorized access, misuse, and vulnerabilities.

Changes to This Policy

We may update this Privacy Policy as needed.

When changes occur, we will update the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy or wish to request account deletion, please contact: