EGOHEAD WORKSINDEPENDENT APPS

Privacy Policy.

Updated: October 23, 2026

This policy describes the ZEST app and its product pages within EGOHEAD WORKS.

1. Controller and contact

Karsten Schwarzkopf
Brodauer Weg 33
04129 Leipzig, Germany
support@egoheadworks.com

2. Local app data

ZEST stores game progress, scores, recipe selections, favorites, settings, and user-created puzzle data on your device. A chosen profile name and content you create may be included in exported cards, puzzles, or challenges. No separate ZEST account is required.

3. Apple services

Supported app data uses Apple iCloud key-value synchronization when iCloud is available. Apple processes this data under your Apple Account and iCloud settings. The app does not use a separate developer-operated account system for this synchronization. Synchronization is not an independent backup; changes and deletions may affect synchronized data.

App Store purchases and restoration are processed by Apple using StoreKit. ZEST checks verified transactions to determine full access and eligible earlier purchases. Payment credentials are handled by Apple. Game Center features, when used, are provided through Apple and may associate achievements or scores with your Game Center profile. See Apple’s privacy information.

4. Optional permissions and sharing

Manage optional permissions in your device settings. Review exports before sharing them: recipients and services you choose can receive the included content. A shared puzzle can contain your text or images.

5. App usage analytics

Only with your consent, ZEST uses Google Analytics for Firebase to understand feature usage and improve the app. The app asks once with two equal choices, “Allow” and “Don’t Allow”; without your consent nothing is collected or stored for this purpose. Events include viewed screens, puzzle starts and outcomes, duration, moves, scores, recipe identifiers, favorites, purchases, settings changes, and sharing actions. User properties include app language, rank, puzzle count, onboarding status, and full-access status. Events concerning user-created puzzles may include the puzzle identifier and title.

Firebase may process installation-related identifiers, technical device and app information, and approximate geographic information. Such data is not necessarily anonymous. Data may be processed outside the European Economic Area. Provider information is available in Firebase’s privacy documentation and Google’s privacy policy.

Purpose: understanding which features are used and improving the app. Legal basis: your consent (§ 25(1) TDDDG and Art. 6(1)(a) GDPR). Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA) process the data as our processor; data may be processed in the USA, and Google LLC is certified under the EU-US Data Privacy Framework. Event data is kept for the retention period set in Google Analytics (2 or 14 months). No advertising identifier is used and advertising consent stays denied.

You can withdraw your consent at any time in Settings → Share usage statistics. Withdrawing stops further collection and resets the analytics identifier on your device; it does not delete data already sent and does not affect the lawfulness of earlier processing. Contact support regarding analytics and deletion requests. Disabling iCloud or uninstalling the app does not delete information already sent to Google.

6. Feedback and support

If you send feedback through the app, the message and technical metadata, including app version, build number, device model, operating-system version, and locale, are sent to GitHub as an issue for support and product improvement. GitHub may process information in the United States or other locations. See the GitHub privacy statement. Include only information you intend to share.

If you email support, the message, email address, and attachments are processed to answer your request. Feedback and correspondence are retained for as long as needed to resolve the issue, maintain relevant product records, or comply with applicable legal requirements.

7. Product website

These EGOHEAD WORKS product pages do not embed the old website’s Umami tracking script or the app’s Firebase SDK. The hosting provider processes technical requests needed to deliver and secure the website. Following an App Store or other external link takes you to that provider’s service and privacy terms.

8. Processing purposes and legal bases

App functionality, access verification, and purchase-related support involve processing needed to provide the requested service under Article 6(1)(b) GDPR. Optional content and feature permissions are used when you choose the respective function; where consent is the required legal basis, Article 6(1)(a) applies. Support, security, and product maintenance may rely on legitimate interests under Article 6(1)(f), subject to applicable law and your rights. Legal obligations may require processing under Article 6(1)(c). Usage analytics relies on your consent given in the app (Article 6(1)(a) GDPR, § 25(1) TDDDG); publication of this policy does not create consent.

9. Storage and your rights

Local app data, Apple iCloud data, analytics, feedback, and support correspondence are separate storage areas. Deleting the app does not automatically remove synchronized or previously transmitted information. Manage Apple services through your Apple Account and device settings, and contact support about data processed for ZEST.

Subject to applicable law, you may request access, correction, deletion, restriction, or portability, object to processing based on legitimate interests, and withdraw consent where processing relies on consent. You may lodge a complaint with a competent data-protection supervisory authority. Contact support@egoheadworks.com to exercise your rights. Provider retention settings and statutory requirements can affect deletion and retention.