TwentyQuestions Privacy Policy

Last updated: October 7, 2026

TwentyQuestions (“Twenty Questions: Emoji”, the “app”) is an iPhone and iPad game published by Alexandru Struta, an individual developer (the “developer”, “we”, “us”). This policy explains what information the app handles, where it goes and what choices you have. It describes the app as it works today.

1. Short version

2. Information we collect and why

Account information

Gameplay information

We use this information to run the game, keep your progress, show leaderboards, award prizes, prevent cheating and unfair play, and give support.

Purchases

Credits are bought through Apple's in-app purchase system. Apple processes the payment; we never receive your payment-card details. To grant your credits, the purchase is handled by RevenueCat, which receives your purchase information and your app user ID (the same random user ID as above), and which our server then uses to add the credits to your account. RevenueCat also receives technical information such as device and app details and your IP address, as described in its privacy policy.

Technical information

Like any online service, our server provider and the services in section 5 may process technical data such as your IP address and request logs when your device connects. We do not use this to track you and we do not add analytics of our own.

3. Information we do not collect

The app does not request or use your precise or approximate location, contacts, photos, camera, microphone, health data, or advertising identifier, and it does not send push notifications. It does not contain advertising or third-party analytics, and it does not track you across other companies' apps and websites. We do not sell your personal information.

4. Information stored on your device

Your games, credits and name live on our server, not only on your phone. If you delete the app, that server data stays until you delete your account (see section 8). If you sign out as a guest, your anonymous account and its games are deleted, because a guest cannot sign back in to it.

5. Third-party services

The app uses these services. Each processes information under its own privacy policy:

Some of these providers may process data outside your country, including in the United States. We do not otherwise share your information with third parties, except where the law requires it or to protect the rights and safety of players and the service.

6. What other players can see

Other players can see your display name and, in competitions you take part in, your rank, moves, hints taken, time and results. They cannot see your email address, sign-in provider, credit balance or purchases.

7. Data retention

We keep your account and gameplay data for as long as your account exists. Deleting your account removes it (section 8). Anonymous guest accounts that have not been used for 90 days are deleted automatically, together with their games. Accounts you signed in to with Apple or Google are kept until you delete them. Information held by Apple, Google, RevenueCat and Supabase for their own purposes follows their own retention rules.

8. Deleting your data and your rights

In the app, open Profile → Delete account. This permanently deletes your account, display name, games, credit balance and history, leaderboard entries, and the competitions you created. If you signed in with Apple, the app also revokes its access to your Apple ID. Remaining credits are lost and cannot be refunded or transferred. You can also sign out at any time; signing out keeps a signed-in account's data on the server so you can sign back in to it.

Depending on where you live (for example in the European Economic Area or the UK), you may have rights to access, correct, export, restrict or erase your personal information and to object to its processing, and to complain to your data-protection authority. Most of these you can exercise directly in the app; for anything else, email alexandrustruta@gmail.com. If we cannot identify an anonymous account without your help, we may ask you for details that let us find it.

9. Children's privacy

TwentyQuestions is a word-and-emoji guessing game suitable for all ages, and young children who can read may play it as a guest. Guest play collects only a random anonymous ID and the gameplay information described above: no name, email address or other contact detail. The app has no advertising, no analytics and no tracking, and it does not let players talk to each other. Sign-in with an Apple or Google account, buying credits, and competitions and prizes are meant for people aged 13 or over, and children should use the app with a parent's or guardian's permission. We do not knowingly collect personal information from children under 13 beyond this anonymous gameplay data. If you believe a child under 13 has given us personal information, contact us (see section 12) and we will delete it.

10. Security

Game rules and secret answers are kept on our server, and the app talks to it over encrypted connections (HTTPS). Access to the data is limited by account-based security rules. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy when the app or the law changes. The current version is always published on this page with a new “Last updated” date. If a change is significant, we will say so in the app.

12. Contact

For privacy questions or requests, email alexandrustruta@gmail.com or use the TwentyQuestions support page. The controller of the personal information described here is Alexandru Struta.