Privacy

This notice covers the invitation-only NonaTrace beta connected to our development service. It does not describe the separate unlimited development app or a production service.

Data and purposes

Firebase Authentication handles account authentication, including guest accounts and Google or Apple sign-in. NonaTrace uses the account identifier and provider-supplied profile information, such as a name or email address when available, for account access and display. App Check and platform attestation help verify access from the app.

Our service processes online game, input, evaluation and resume information, purchased and free hint balances, purchase verification, hint consumption and acquired disclosures to provide and restore these features and prevent duplicate or unauthorized processing. Practice boards, lesson progress and settings also use storage on your device. Network requests carry an IP address and connection information for delivery and temporary abuse prevention. We do not ask you to send us your Google or Apple password or authentication codes.

Google provides Firebase Authentication and App Check services. Google and Apple process their respective sign-in and Store transactions; platform attestation also uses the respective platform. For Store verification, we use a random purchase binding rather than putting your email address or raw account identifier into that binding. These providers manage their own records under their policies. Deleting a NonaTrace account does not delete Store purchase history or guarantee a refund.

Retention and deletion

• Account-linked balances, ordinary purchase verification, consumption and disclosure records are used while the account is active and removed by NonaTrace account deletion. Remaining hint credits and account-linked acquired records then become unavailable. Independent local Practice history, lesson progress and device settings may remain on your device.
• Encrypted references used to recheck ordinary Store transactions expire at the deadline set when the purchase was prepared, no later than 14 days after preparation. This does not mean the entire balance or ordinary purchase ledger is deleted after 14 days.
• If a purchase still needs resolution after account deletion, only the minimum recovery record is kept separately. It is removed by the earlier of its original deadline, at most 14 days, and 7 days after resolution. It is not used to recreate your account or hint balance.
• A minimal hash of a deleted account identifier prevents old requests from recreating that account. It remains while this beta environment operates. We remove it within 7 days after retirement is completed: new requests, Store notifications, workers and old authentication paths have stopped, unresolved cases have been checked, and old backups cannot restore deleted accounts. It is not described as anonymous data.
• At the NonaTrace API, persistent diagnostic output excludes account and request identifiers, IP addresses, purchase references, individual request URLs and stack traces. Monitoring retains fixed operational categories and numbers. The selected NonaTrace gateway site and its dedicated database disable new diagnostic logs. Shared Web gateway records created before a service is selected are retained for at most 7 days. Previous shared Web access and error logs were removed before this beta distribution. Google, Apple and the email service also manage independent records.
• We currently do not create or keep database backups for this limited beta. Retired test snapshots are not used to restore data. If backups are introduced, this notice will be updated beforehand; retention must be at most 7 days and deleted-account state must be applied before restored data can accept writes.
• Support uses the email address, message and other information you choose to send, to respond to your request. Support records are retained for no more than 14 days from receipt and removed earlier when 7 days have passed after resolution. Moving a request to another owner or case does not extend its original deadline. Email delivery is handled by our email provider.

Our operator handles support and unresolved purchase cases; Codex may assist the operator with investigation during beta tests. Do not send passwords, authentication codes or raw purchase receipts. Any separate legally required company or provider record needs its own stated purpose, scope and retention period; account deletion is not presented as deleting those independent records.