Privacy Policy
Last updated: November 11, 2026
Moon Horizon Studio (“we”) publishes the Puzzoh mobile app (the “Service”). This policy explains what personal data we process when you use Puzzoh, why, with which service providers, for how long, and how to exercise your rights. It follows the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
- Your progress (XP, streak, badges, answers) is saved on our servers so you don’t lose it. Creating an account is optional.
- Payments go through Apple: we never see your banking details.
- Puzzoh shows no ads and doesn’t track you across other companies’ apps and websites.
- You can delete your account and your progress from within the app.
1. Data controller
- Company
- Moon Horizon Studio, a French simplified joint-stock company with a sole shareholder (SASU), registered with the Paris Trade and Companies Register (RCS), SIREN 102 723 756
- Registered office
- 61 rue de Lyon, 75012 Paris, France
- contact@puzzoh.app
2. Data we process and why
2.1 Account and progress backup
The first time you open it, Puzzoh creates an anonymous account (a random technical identifier) to back up your progress. Then, if you want, you can create an account with Apple, Google or your email address so you can get your progress back on another device.
- Identifier: your Puzzoh account identifier.
- If you create an account: your email address (with “Sign in with Apple”, this may be a relay address that hides your real one) and, if Apple or Google share it with us, your name.
- Progress: subjects you chose, self-reported level, daily goal, lessons completed, answers to exercises, XP, levels, streak, badges, lives, and your settings (reminder time, sound).
This data is hosted by Google (Firebase Authentication and Cloud Firestore). It is used only to make Puzzoh work: saving, restoring and syncing your progress.
2.2 Purchases and subscription
When you buy Puzzoh+, the payment is processed by Apple (App Store). Through RevenueCat, we receive the status of your purchase, linked to your account identifier: product purchased, dates, free trial, renewal, cancellation, country and currency. This data is used to unlock Puzzoh+, restore your purchases and keep our accounting records. We never have access to your banking details.
2.3 Usage analytics
To understand how Puzzoh is used and to improve it, we measure usage events with Amplitude:
- screens viewed and actions taken (lesson started or completed, offer shown, purchase, etc.);
- your answers to the welcome questionnaire (motivation, level, goal, “How did you hear about Puzzoh?” (Comment as-tu connu Puzzoh ?));
- your account identifier, an app-specific identifier on your device (IDFV), the device model, the iOS and app versions, the language, and an approximate country inferred from the IP address.
This data is not used to show you advertising.
2.4 Crash reports
If the app crashes or runs into an error, Sentry sends us a technical report: device model, iOS and app versions, the error’s stack trace and the most recent actions in the app. These reports contain neither your email address nor your account identifier.
2.5 Remote configuration
At launch, the app downloads its settings (texts, offers, lesson parameters) with Firebase Remote Config, which uses a technical installation identifier. No profile data is sent when this happens.
2.6 Daily reminder
The daily reminder is a notification scheduled on your device, at the time you choose, and only if you allow it. You can turn it off at any time in Settings › Notifications › Puzzoh.
2.7 Support
If you write to us, we use your email address and the content of your message to reply to you.
2.8 What we don’t do
- We don’t show ads and don’t read your device’s advertising identifier (IDFA).
- We don’t ask for your precise location, your contacts, your photos or your microphone.
- We don’t make any automated decision that produces legal effects concerning you.
3. Legal bases
| Processing | Legal basis |
|---|---|
| Account, progress backup, remote configuration, support | Performance of the contract (the Terms of Use) |
| Purchases and subscription | Performance of the contract; legal accounting obligations |
| Usage analytics (Amplitude) | Legitimate interest: understanding usage and improving Puzzoh |
| Crash reports (Sentry) | Legitimate interest: keeping the app stable |
When processing is based on our legitimate interest, you can object to it (see section 8).
4. Service providers and recipients
Your data can be accessed by the Moon Horizon Studio team, only to the extent they need it, and by our service providers, who are bound by contract and may use it only to provide their services to us:
| Provider | Role |
|---|---|
| Google Ireland Limited / Google LLC (Firebase: Authentication, Cloud Firestore, Remote Config) | Account, backup, remote configuration |
| RevenueCat, Inc. | Purchase and subscription management |
| Amplitude, Inc. | Usage analytics |
| Functional Software, Inc. (Sentry) | Crash reports |
Apple (App Store, payments, “Sign in with Apple”) and Google (“Sign in with Google”) also process data on their own behalf, under their own policies.
We don’t sell your data, and we only disclose it to other third parties when the law requires us to (for example, in response to an official request from an authority).
5. Transfers outside the European Union
Some service providers are located in the United States. These transfers are covered by the provider’s certification under the EU–US Data Privacy Framework and, failing that, by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards at the contact address.
6. Retention periods
| Data | Period |
|---|---|
| Account and progress | As long as your account exists. |
| Purchases and subscription | As long as your account exists, then 10 years for accounting records (Article L. 123-22 of the French Commercial Code) |
| Usage analytics (Amplitude) | 24 months at most |
| Crash reports (Sentry) | 90 days |
| Conversations with support | 3 years after our last exchange |
Data kept by Apple and Google on their own behalf is subject to their own policies.
7. Deleting your account
You can delete your account at any time, right from the app or by writing to us.
- Your account and progress are erased from our servers, and we request the deletion of the data linked to your account at RevenueCat and Amplitude.
- Accounting records related to your purchases are kept for the period required by law.
- Deletion is permanent: your streak and badges can’t be recovered.
- Deleting your account or the app does not cancel your subscription: do that in Settings › [your name] › Subscriptions.
8. Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to object (in particular to processing based on our legitimate interest) and to data portability. In France, you can also set instructions on what happens to your data after your death.
To exercise these rights, write to us at contact@puzzoh.app, ideally from the address linked to your account. We may ask you to confirm your identity. We reply within one month.
If you believe your rights are not being respected, you can file a complaint with the Commission nationale de l’informatique et des libertés (CNIL), the French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or at cnil.fr.
9. Minors
Puzzoh is not intended for children under 13, and we do not knowingly collect their data. If you think a child under 13 has given us data, write to us: we will delete it.
10. Security
Communications between the app and our servers are encrypted (TLS). Access to your progress is limited to your account, and our team’s access to our providers’ tools is protected and restricted to the people who need it.
11. Changes
We may update this policy, for example if we add a service. The date at the top of the page shows the latest version. If there is a significant change, we will let you know in the app.
12. Contact
For any question about your data: contact@puzzoh.app. See also the Support page and the legal notice.