Skip to main content

Privacy Policy

epTogether Mobile Game

Effective date: TBD (set on launch)

What epTogether never does

  • We never sell, rent, or share player data with third parties for their own marketing.
  • We never use player data to train AI models.
  • We never show behavioural / personalised advertising to players we know or suspect are under 13.
  • We never include voice chat, open chat, or social features that connect players directly.

epTogether is free to play and shows ads between sessions. Subscribing to Supporter removes ads entirely. See section 7 for how ads work.

EnrichPoint (“we,” “us,” or “our”) operates the epTogether mobile game (the “App”). epTogether is a calm hex puzzle game in which every level you solve adds a piece to a single collective figure that thousands of players are quietly building together. This Privacy Policy explains how we collect, use, store, and protect your information when you or someone in your care plays the App.

For the EnrichPoint corporate-level legal terms (account auth, billing, dispute resolution) that apply across every EnrichPoint app, see our site-wide Privacy Policy. This document is the epTogether-specific addendum and takes precedence for matters specific to this app.

1. Who plays epTogether

epTogether is designed for all ages, with these constraints:

  • Adult players — can play, contribute to the shared figure, purchase add-ons, and subscribe to Supporter on their own account.
  • End users under a caregiver — younger players (including children) play through a profile their caregiver sets up. End users do not need their own EnrichPoint account; the caregiver is the data controller for that profile.
  • Caregivers — typically a parent or family member. Caregivers have an EnrichPoint account, manage end-user profiles, control whether ads or purchases are allowed, and can pay for Supporter on their family's behalf.

2. Information We Collect

From players and caregivers

  • Email address and display name (provided at sign-up if you create an account).
  • Authentication identifier from Google or Apple if you sign in with those providers.
  • Payment processor identifier from Stripe, Apple, or Google if you purchase an add-on or subscribe to Supporter. Card details are handled by the payment processor and never reach our servers.
  • For caregiver-managed profiles: the display name and optional avatar the caregiver provides for the end user.

Gameplay data

  • Puzzles started, completed, and the rough time spent — so the game can resume where you left off and pace the difficulty curve.
  • Personal-structure progress (how close you are to the next gold piece for the shared figure).
  • Anonymous contribution to the shared figure: when your personal structure completes, a hex is added to the community figure. The contribution itself is associated only with a randomised round-specific identifier — the public figure view does not name you.
  • Preferences (sound on/off, motion-reduction, palette choices).
  • Coarse device info (model, OS version, language, app version) for crash diagnostics.

What we do NOT collect

  • Audio recordings, video, or photos.
  • Precise location (GPS). We may infer country from your IP solely for region-required ad rules and pricing.
  • Contacts, calendar, or other device data outside the App.
  • Biometric data.
  • Anything you would type to another player — there is no chat in epTogether.

3. Children's Privacy (COPPA)

epTogether can be played by children under the supervision of a caregiver. We comply with the Children's Online Privacy Protection Act (COPPA) in the United States.

  • We do not knowingly collect personal information directly from children under 13. End-user profiles are created and managed exclusively by an authenticated adult caregiver.
  • When a caregiver designates a profile as a child profile, we apply child-safe defaults: contextual (non-behavioural) ads only, no SDK-level personalisation, and no third-party tracking. See section 7 for ad details.
  • In-app purchases and the Supporter subscription are restricted on child profiles and require the caregiver to authenticate.
  • A caregiver can review, edit, or delete an end-user profile at any time via the in-app settings or by visiting enrichpoint.com/eptogether/delete-data.
  • We do not sell or share children's data, and we do not use it for profiling or behavioural advertising.

If you are a parent or guardian and believe a child has provided information to us without your consent, please contact support@enrichpoint.com and we will delete the data promptly.

4. How We Use Information

  • Run the game: save your progress, pace difficulty, deliver Supporter perks to the right account, contribute your completed structures to the shared figure.
  • Improve the product: aggregated, non-identifying analytics about which puzzles are too hard, where crashes happen, how long sessions last. We do not look at individual player data for product decisions.
  • Bill purchases: hand the transaction off to Stripe, Apple, or Google; record the resulting license to unlock the purchased add-on or activate Supporter.
  • Serve ads to free players, subject to the rules in section 7.
  • Support requests: when a caregiver or player contacts support, we look at their account data only as needed to resolve the issue.
  • Security and abuse: we may log auth events (sign-in, sign-out) and unusual contribution patterns to detect fraud, cheating, or compromised accounts.

5. How We Store and Protect Information

  • Data is stored on Google Firebase (Firestore, Authentication, Storage) within Google Cloud's US infrastructure.
  • Data in transit uses TLS 1.2+ between the App, our servers, and Firebase.
  • Data at rest is encrypted by Firebase using industry-standard AES-256.
  • Access to production data is restricted to a small number of EnrichPoint engineers, with audit logging on administrative actions.
  • We never copy production data to engineer laptops.

6. Third-Party Services

epTogether uses a small set of third-party services purely for app function:

  • Firebase (Google): authentication, database, storage, and push notifications.
  • Stripe / Apple / Google: processing in-app purchases and the Supporter subscription. They receive only what is needed to complete a transaction.
  • Apple / Google sign-in: if you sign in with Apple or Google, your name, email, and provider identifier are shared with us per their respective terms.
  • Ad network (free, adult players only): see section 7.

We do not include third-party social-media tracking libraries (Facebook pixel, TikTok pixel, etc.) in the App.

7. Advertising

epTogether is free to play, with ads shown between play sessions to free, adult players. Ads never appear during a puzzle and never interrupt the contemplative core of the game.

What we show, and to whom

  • Adult free players, ads-personalisation allowed: we may show interest-based (behavioural) ads via a reputable mobile ad network. You can opt out of personalised ads in the App settings or at the OS level (iOS “Limit Ad Tracking” / Android “Reset advertising ID”).
  • Adult free players, ads-personalisation off: we serve only contextual ads, with no behavioural targeting, profile-building, or cross-app tracking.
  • Child profiles and players under 13: we serve only contextual ads, with no behavioural targeting, no advertising ID passed to the network, and no SDK-level personalisation. This is enforced at the SDK request level — not as a user setting.
  • Supporter subscribers: no ads at all, on any profile under the subscribing caregiver's account.

We do not knowingly use children's data to target ads, and we do not allow our ad partners to either.

8. Data Retention

  • Account and profile data: retained while the account is active.
  • Gameplay telemetry: retained for 90 days in identified form, then aggregated into anonymous rollups.
  • Contribution-to-shared-figure records: retained as anonymous, round-scoped entries indefinitely as part of the game's collective history.
  • Payment history: retained per tax and audit requirements (typically 7 years).
  • Deleted account / data: removed from production systems within 30 days; backup copies are purged on the next backup rotation cycle (up to 90 days).

9. Your Rights

You may at any time:

10. International Users

epTogether is operated from the United States. If you play the App from outside the US, you consent to processing your data in the US. We apply the same privacy protections to all players regardless of location. EU and UK users have additional rights under GDPR and UK GDPR — contact us at support@enrichpoint.com to exercise them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in the App and on this page. The “Effective date” at the top reflects the most recent version. Continued use of the App after the effective date constitutes acceptance.

12. Contact

Privacy questions, data requests, or COPPA concerns: support@enrichpoint.com.