Quarko Privacy Policy

Effective date: 27 October 2026 · App: Quarko (com.iocodo.quarko) · Publisher: IOCODO LLC

日本語：外部送信について · 한국어: 개인정보 처리방침 · México: aviso de privacidad · Türkiye: KVKK Aydınlatma Metni

1. Data the app sends

Quarko has no account system and no server of ours. It uses Google Firebase to see how the games are played, to report crashes, to adjust settings remotely, to check that requests come from the real app, and to deliver reminders. Firebase receives the following:

• Identifiers. A random app-instance identifier and a Firebase installation identifier, both generated for this installation. They are tied to this installation, not to your name. Deleting the app, or clearing its storage, removes them from your device.
• Usage data. Which screens and games you open; when a level starts and finishes, with the game, the mode, the level and the stars earned; when you use a hint, solve the Daily Observation, share a result or change a setting; and whether the Quarko Complete panel was shown and a purchase or restore was attempted and succeeded. With these go the app's language and version, whether Quarko Complete is unlocked, and whether reminders can reach the device. This is what tells us a puzzle is too hard or a button is not working.
• Diagnostics. Crash reports and error traces, including the device model, operating system version, app version, and the state of the app when it crashed.
• Approximate location. Firebase derives a coarse region, typically country level, from the network address the request arrives on. We use it only to know which languages and regions to support. Quarko never asks for and never receives your device location.
• Remote settings. Quarko fetches a small settings file from Firebase Remote Config, so we can fix a broken feature, post a notice or ask you to update without waiting for a store update. The request carries an installation identifier, the app and operating system versions, and your device's language, country setting and time zone.
• Genuine-app check. Firebase App Check asks Google Play Integrity on Android, or Apple's DeviceCheck on iPhone and iPad, to confirm that requests come from a genuine copy of Quarko. Firebase then receives a short-lived token with the app's requests.
• Reminders. Quarko can remind you when a new Daily Observation is up. To deliver reminders, Firebase Cloud Messaging gives your installation a notification token and adds it to the one list that every Quarko reminder is sent to. We keep no list of these tokens and cannot send a message to one person. On iPhone and iPad this happens only after you allow notifications. On Android it happens when the app starts, and reminders appear only if notifications are allowed for Quarko on your device. In Austria, Belgium, Croatia, Czechia, Denmark, Finland (with Åland), France (with its overseas regions and Saint-Martin), Germany, Greece, Hungary, Ireland, Liechtenstein, Luxembourg, Malta, Norway, Portugal, Slovenia and Sweden, an Android phone gets its token only once you ask for reminders, with Remind me or the Notifications switch in Settings. If the App Store or Google Play tells the app that you are under 13, Quarko offers no reminders and creates no token, and a token made earlier is deleted. Turning off Notifications in the app's Settings takes your installation off that list.

None of this includes your name or contact details. Google processes it on our behalf under the Firebase privacy terms. We do not sell it, and in the current version of Quarko we do not use or share it for targeted advertising.

2. Data stored on your device

Your gameplay lives only on your device, saved through the operating system's standard local storage:

• Level progress and stars for each of the games.
• Settings such as sound, vibration, language and notifications.
• Your Quanta balance, daily streak, and unlocked achievements.
• Whether you have unlocked Quarko Complete.

We never receive this gameplay data, and it is removed when you delete the app. If you back up your device with iCloud or Google, the backup can include a copy of it, under Apple's or Google's terms. It is separate from the measurement described in section 1.

3. In-app purchase

Quarko offers one optional one-time purchase, Quarko Complete. The purchase, and the "Restore purchase" action, are handled entirely by the App Store (Apple) or Google Play (Google) under their own privacy policies. Quarko receives only a signed confirmation from the store that the purchase is valid, which it stores on your device as an unlock flag. We never receive or store your name, email, or payment information.

• Apple: apple.com/legal/privacy
• Google: policies.google.com/privacy

4. Sharing

Some screens offer a "share" button that opens your device's native share sheet. The text you share is composed on your device; nothing is sent to us.

5. When you write to us

If you email us, from Help and feedback in the app's Settings or directly, we receive your email address, your message and any attachments. A message started in the app already contains, below a line, the app version and build, your platform and operating system version, the app's language, the last game you played and whether Quarko Complete is unlocked. You can delete any of it before you send.

6. Children

Quarko is suitable for all ages. It never asks for personal information and does not knowingly gather it from anyone, including children. The measurement described in section 1 is not used to build a profile of anyone, and in the current version of Quarko it is not used for advertising.

7. Your choices

• Reminders. Turn them off at any time in the app's Settings, under Notifications, or in your device settings.
• Usage statistics and crash reports. In Canada, Brazil, Turkey and the United Kingdom both stay off until you turn them on in the app's Settings, under Privacy choices. In Brazil a switch you turn on counts only if your store account shows that you are 18 or older. How to turn them off where they are on: your right to object.
• Starting over. To reset your progress, delete the app and install it again. This removes everything the app saved on your device, including the identifiers described in section 1. On Android, if your phone backs up app data to your Google account, installing again can bring that backup back; to start fresh there, clear Quarko's storage in your phone's settings instead.
• Your purchase. You can restore it at any time with "Restore purchase", using the same Apple or Google account.
• Your data. To ask what data we hold about you, or to have it corrected or deleted, write to support@iocodo.com. Because Quarko has no account, we cannot single out one person's usage statistics or crash reports: the app knows an installation only by a random identifier. They are deleted on their own after the periods in section 10.

8. Changes

If this policy changes, the updated version will be posted at this URL with a new effective date.

9. Contact

Quarko is published by IOCODO LLC, a company registered in Wyoming, United States. Questions about privacy: support@iocodo.com

10. If you are in the European Economic Area

European data protection law (the GDPR) asks us to tell you the following. IOCODO LLC decides why and how the data described in this policy is used, so it is the controller. You can reach our privacy contact at support@iocodo.com.

What we use data for, and on what legal basis

• Running the app: remote settings, the genuine-app check and the delivery of reminders (section 1). Legal basis: performance of our contract with you, that is, providing the app you chose to use (GDPR art. 6(1)(b)).
• Usage statistics (Google Analytics for Firebase), to learn which puzzles are too hard and which features people use, so that we can improve the app. Legal basis: your consent (GDPR art. 6(1)(a)); in Iceland, our legitimate interests in that purpose (GDPR art. 6(1)(f)).
• Crash reports (Firebase Crashlytics), to find and fix the crashes you run into. Legal basis: your consent (GDPR art. 6(1)(a)); in Iceland, our legitimate interests in that purpose (GDPR art. 6(1)(f)).
• Answering you when you write to us (section 5). Legal basis: our legitimate interests (GDPR art. 6(1)(f)), which are answering your request and keeping a record of how we handled it.

In the European Union, Norway and Liechtenstein the app asks for your consent once, on a page before the home screen, and you can allow each purpose on its own. Nothing is sent until you allow it, and you can withdraw your consent at any time in Privacy choices, in the app's Settings.

No law requires you to provide this data.

Who receives data

• Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, United States: Google Analytics for Firebase, Firebase Crashlytics, Firebase Remote Config, Firebase Installations, Firebase App Check and Firebase Cloud Messaging, for the uses above. Google processes this data on our behalf, under its data processing terms.
• GoDaddy Operating Company, LLC, United States: hosts our support mailbox and keeps, on our behalf, the emails you send us and our replies.
• IT service providers, United States: they receive the text of an email when we use their tools to read it or to draft our reply.
• Apple and Google, as the App Store and Google Play: your download and any purchase, and the genuine-app check and, on iPhone and iPad, the delivery of reminders, under their own privacy policies.

We do not sell your personal data. We give it to an authority only when the law requires it.

Where data is processed

IOCODO LLC is registered in the United States. Google and GoDaddy process data in the United States and in other countries where they or their subcontractors have facilities. For sending personal data to the United States, we rely on the EU-U.S. Data Privacy Framework for providers certified under it, and on the Standard Contractual Clauses that are part of our providers' data processing terms. The IT service providers listed in Who receives data are in the United States and are not covered by these safeguards, by an adequacy decision or by UK adequacy regulations. You can ask us for a copy of these safeguards at support@iocodo.com.

How long data is kept

• Usage statistics in Google Analytics: up to 14 months.
• Crash reports: 90 days, then Firebase starts deleting them.
• Installation identifiers, which Remote Config and Cloud Messaging use: until we delete them through Firebase, which the app does not do on its own; Firebase then removes them within 180 days.
• App Check tokens: valid for 7 days at most.
• Emails you send us, and our replies: until you ask us to delete them. We set no fixed end date: we keep them as the record of our support, to answer you if you write again and to show how we handled your request. If a law or a legal claim requires us to keep an email, we keep it until that ends.
• Emails we read or answer with an IT service provider's tools: in that tool's history until we delete them there; the provider keeps them under its own terms.
• What the app keeps on your device: until you delete the app or clear its storage.

Your rights

You can ask us to tell you what personal data we have about you and give you a copy, to send that copy to you or to another company in a machine-readable format, to correct it, to delete it, and to limit how we use it. To ask, write to support@iocodo.com. It is free, and we reply within one month. Section 7 explains what we can find and delete in an app without accounts.

You can also complain to the data protection authority of the country where you live or work (list of authorities).

11. Notices for some countries and US states

Texas

If you live in Texas, the Texas Data Privacy and Security Act gives you these rights over your personal data:

• to confirm whether we process it, and to access it
• to correct it
• to delete it
• to get a copy of it in a format you can move to another service
• to opt out of the sale of your personal data, of targeted advertising and of profiling that has legal or similarly significant effects
• to appeal if we turn down your request

The personal data we process are the identifiers, usage data, diagnostics, approximate location and device settings in section 1, and the emails you send us (section 5). We use them to run the app, to understand how it is played, to fix crashes and to answer you. None of it is sensitive data. We share it only with these providers: Google, which runs Firebase, our email host, GoDaddy, and IT service providers whose tools we use to read emails and draft replies. We do not sell personal data, and in the current version of Quarko we do not process it for targeted advertising.

You can send a request in two ways, and neither needs an account: write to support@iocodo.com, or open Help and feedback in the app's Settings, which starts an email to us. We answer within 45 days. If a request is complex we may take up to 45 days more, and we tell you why. Section 7 explains what we can find and delete.

If we turn a request down, you can appeal by replying to our answer with the word "Appeal". We answer an appeal in writing within 60 days, and if we turn it down again you can complain to the Texas Attorney General.

Canada

Google, which runs Firebase for us, and the other companies named in this policy process and keep data outside Canada, mainly in the United States. While it is there, it may be accessed by the courts, law enforcement and national security authorities of that country under its laws.

Vietnam

If you use Quarko in Vietnam, your personal data is transferred abroad. Google LLC, in the United States, receives it to run the services in section 1 for us: usage statistics, crash reports, remote settings, the genuine-app check and reminders. If you email us, your email is received by GoDaddy Operating Company, LLC, which hosts our mailbox in the United States.

You have the right to know how your data is processed, to see it and get a copy, to have it corrected or deleted, to restrict or object to its processing, to withdraw a consent you gave, and to complain. To use any of these rights, write to support@iocodo.com and tell us which right you want to use and for which data. We may ask you to confirm that the data is yours, and we answer by email.

If you email us from Vietnam, the paragraphs below, in Vietnamese, explain how we may handle your email.

Japan

What the app sends to other companies is described in Japanese on 外部送信について.

Korea

This policy in Korean, written for Korean law, is on 개인정보 처리방침.