Privacy policy
Last updated: 2 October 2026
This page says what the Bigs app knows about you, why, and what you can do about it. It is written to be read, not to be scrolled past.
Who is responsible
Bigs is the "we" on this page, and the data controller under the GDPR.
Contact for anything on this page: privacy@bigsapp.com
What we store about you
| What | Why |
|---|---|
| Your email address and a protected form of your password | So you can sign in. Your password itself is never stored and we cannot read it. |
| Your year of birth | To check that you are 13 or older. You enter a date of birth once. Only the year is kept. |
| A display name and a country, if you give them | To show you on the weekly rankings. |
| The language of the app, your time zone and your daily goal | To show the app in your language, start your day at your midnight and track your goal. |
| What you do in the app: lessons and reviews, the answers you give, scores, your streak, hearts, coins, chests, items and game results | This is the app itself: it remembers where you are, brings words back for review, and runs the rankings. |
| Your internet address (IP address), for a short time | To keep the service safe: to limit how fast one device can send requests, and to look into attacks. |
We do not ask for your real name, your phone number, your contacts, your location or your photos. The app reads text aloud with the voice built into your device. It does not record you.
What other players can see
The weekly rankings show your display name, your country and your score. Nothing else is shown to other users: not your email, not your year of birth. If you set no display name, you appear without one.
Advertising
Bigs is free to use and shows advertising from Google AdMob: an ad after a review session, and ads you can choose to watch for a reward. Premium users see no ad after a review.
To show ads, Google's software in the app collects data on its own, such as your device's advertising identifier, your IP address and how you interact with ads. Google is responsible for that data together with us. See how Google uses information from apps that use its services.
In the European Economic Area, the United Kingdom and Switzerland you are asked for your choice before any ad is loaded, and you can refuse personalised ads. In some US states you can opt out of the sale or sharing of your data for advertising. You can change your choice at any time in the app.
When you watch an ad for a reward, we send Google the internal number of your account so that Google can confirm to us that the ad was watched. That number is not your email and says nothing about you by itself.
Who else handles your data
| Who | What for | Where |
|---|---|---|
| Supabase | Sign-in: stores your email and the protected password | European Union |
| Cloudflare | Carries the traffic between the app and our server and protects it against attacks | Worldwide network |
| Google (AdMob) | Advertising, as described above | European Union and United States |
Our own server, which holds your learning data, is in the European Economic Area. Where data goes to a country outside the European Economic Area, it is covered by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.
We do not sell your data, and we do not give it to anyone else except where the law requires it.
Why we are allowed to
- To provide the app to you (a contract): your account, your profile and what you do in the app.
- Our legitimate interest in a safe and fair service: IP addresses for security, and checks against cheating in the rankings.
- Your consent: personalised advertising. You can withdraw it at any time.
- A legal obligation: the age check.
How long we keep it
We keep your account and your learning data for as long as you have an account. When you delete your account, we delete them within 30 days. Security logs are kept for at most 30 days. Backups are overwritten within 30 days.
Children
Bigs is for people aged 13 and older. If the date of birth shows that someone is under 13, the account is closed and the sign-in is deleted. If you are under 16, your country's law may require that a parent agrees before you use the app. If you are a parent and believe your child has an account they should not have, write to us and we will delete it.
Your rights
You can ask us to:
- show you the data we hold about you, and give you a copy
- correct what is wrong
- delete your account and your data
- stop or limit a use of your data that you object to
Write to privacy@bigsapp.com from the email address of your account. We answer within 30 days, and it costs nothing.
If you think we handle your data wrongly, you can complain to the data protection authority in your country.
Security
The app talks to our server only over an encrypted connection. Passwords are stored in a protected form by a specialised sign-in service, never by us in readable form. The server checks every answer and every reward itself, and only the people who run Bigs can reach the database.
Changes
When this policy changes, the date at the top changes with it. If a change matters for you, for example a new use of your data, the app tells you before it takes effect.