Effective Date: September 25, 2026
This Privacy Policy explains what information Kickgrid collects, why, and how you can reach us about it.
The Kickgrid application (the “App”), available on the Apple App Store, Google Play, and at playkickgrid.com, is owned and operated by Kickgrid (“Kickgrid,” “we,” “us,” or “our”). This Privacy Policy applies to everyone who uses the App.
Kickgrid is built to need as little of your data as possible. You can play every grid without an account. Signing in is optional and only needed if you want to appear on the global leaderboard and keep your results across devices.
When you first open the App, it creates a random identifier for your installation (generated by our payments provider, RevenueCat). We use this identifier to keep track of your Coin balance, purchases, and whether you have claimed the day’s reward. On its own it is not linked to your name, email address, or any other identifying information.
If you choose to sign in, you do so through Sign in with Apple (iOS only) or Sign in with Google. We never see your Apple or Google password. From the provider we receive:
We store this in an account record on our servers together with a session token so you stay signed in. If the provider does not share a name, we generate a random football-themed display name for you (for example “Swift Striker”). You can change your display name at any time in the App under Settings, then Profile.
When you sign in, we also link your anonymous installation ID (Section 1.1) to your account so your Coin balance and purchases follow you if you reinstall the App or switch devices.
If you buy Coins, purchase records (product purchased, price, and date) are processed by RevenueCat and by Apple or Google Play, depending on where you bought them. We do not receive or store your payment card details.
Your grid progress, streaks, and history are stored locally on your device.
Without an account, this data stays on your device, except for the minimal facts needed to grant daily rewards and prevent duplicate claims (your installation ID, the date, and which grid you completed), and the players you placed correctly, which we count anonymously to show how common each answer is.
If you are signed in, the App also sends each grid you finish to our servers: which grid it was, the players you placed in each cell, and when you finished. Our servers check the answers and store the result against your account. This is what powers the leaderboard and lets your results survive a reinstall.
If you are signed in, your display name, profile picture (if you signed in with Google and have one), and the number of grids you solved perfectly are shown on the global leaderboard, which is visible to every user of the App. Anyone using the App can see this information. Your email address is never shown.
You can change how you appear by editing your display name. If you no longer want to appear, sign out (your results stay stored but new ones are not sent) or delete your account in the App (Section 6).
Signing in gives your account a username (a short, unique name). We generate one for you, and you can change it in the App under Settings, then Profile.
Other signed-in players can find your account by searching for your username, and can then send you a friend request. Only your username is searchable: your display name and email address are not, so nobody can find you by your real name.
A friendship only exists once both sides agree. Someone sends a request and the other accepts it. Once you are friends, each of you can see the other’s display name, profile picture (if any), number of grids solved perfectly, current streak, and whether that day’s grid has been finished. This is more than the global leaderboard shows, and it is visible only to the people you accepted.
To support this we store who sent each request, who received it, whether it was accepted, and when. Either of you can end a friendship at any time in the App, which deletes that record. You can also decline a request you received or withdraw one you sent.
If you share an invite link, that link contains your username so the App knows whom to add. Anyone you send it to, or anyone they forward it to, can see that username.
Like most apps, our backend logs standard request data when your device talks to it: device and app version, IP address, and timestamps. We use this only to operate the service, debug issues, and prevent abuse.
To understand how the App is used, where players get stuck, and when something breaks, we collect product analytics and error reports through PostHog. When you first open the App, PostHog creates a random analytics identifier for your installation. It is separate from the identifier in Section 1.1 and is not linked to your name or email address.
We record events describing what you do in the App: which onboarding step you reached, when you open and finish a grid, whether each cell you filled was correct, when you use a hint, when you share a result, when you add a friend, and when you open the shop. PostHog also records when you open or background the App and which screens you visit, and receives your app version and build number, your device model, and your operating system version.
These events describe your actions, not their content. We do not send the names of players you searched for or placed, your display name, your username, your email address, or the text of anything you type. Screens are recorded as route patterns, so viewing a friend’s profile is recorded as “friend/[username]” rather than as their username.
If the App hits an unexpected error, we send the error message and a stack trace so we can find and fix it. We do not record your screen, and session replay is switched off.
PostHog receives the IP address your device connects from and uses it to derive an approximate location (country, region, and city). Our PostHog data is stored in the European Union.
We also give RevenueCat your PostHog analytics identifier so purchase and subscription events can be matched to the same installation. We do not give PostHog your Kickgrid account ID, email address, or name.
This applies only to the iOS version. If you installed the App after tapping a Kickgrid advert in the App Store, Apple gives us a token telling us which campaign, ad group, and keyword led to the install, and we pass it to RevenueCat.
This tells us where an install came from. It does not identify you, it does not use Apple’s advertising identifier (IDFA), and it does not follow you across other apps or websites, which is why the App never asks for tracking permission. If you did not arrive from an advert, there is nothing to report and nothing is sent. The Android version does not collect advertising attribution and does not use the Android advertising ID.
If you enable daily or streak reminders, they are scheduled entirely on your device using your operating system’s notification tools. We do not receive any data from this and do not send push notifications from a server.
We use the information above to:
We do not sell your information, and we do not use it to target advertising at you or to build advertising profiles. We do measure which of our own App Store adverts led to an install, as described in Section 1.9.
Where the GDPR or UK GDPR applies, we process the data described above under:
Signing in is entirely optional. Everything in Sections 1.2, 1.5, and 1.6 only happens once you choose to sign in.
Handles purchases, subscriptions, and your Coin balance, and generates your anonymous installation ID. When you sign in, we tell RevenueCat your Kickgrid account ID so your purchases can be restored on other devices. We also give it your PostHog analytics identifier (Section 1.8) and, if you arrived from an App Store advert, your attribution token (Section 1.9). Data processed: installation ID, account ID once signed in, purchase and entitlement data, PostHog analytics identifier, advert attribution token where available. Privacy Policy: https://www.revenuecat.com/privacy
Processes in-app payments made through the App Store, and provides Sign in with Apple if you choose it. Apple tells us your Apple account identifier, your email or a private relay address, and your name on first sign-in. If you installed the App from an App Store advert, Apple also provides the attribution token described in Section 1.9. Privacy Policy: https://www.apple.com/privacy
Processes in-app payments made through Google Play on Android, and provides Sign in with Google if you choose it. Google tells us your Google account identifier, email address, name, and profile picture. Privacy Policy: https://policies.google.com/privacy
Hosts this website, our backend, and the databases that store accounts, sessions, reward claims, and synced grid results. Data processed: request logs, including IP address, and the stored data described in Section 1. Privacy Policy: https://www.cloudflare.com/privacypolicy
Provides the product analytics and error reporting described in Section 1.8. We use PostHog’s European Union hosting, so this data is stored in the EU. Data processed: analytics identifier, the in-app events and screen names listed in Section 1.8, app version and build, device model and operating system version, IP address and the approximate location derived from it, and error messages with stack traces. Privacy Policy: https://posthog.com/privacy
We source match, club, and player statistics from third-party football data providers (such as API-SPORTS) to build each day’s grid. This is public football data and does not involve your personal information.
Connections between the App and our backend use TLS. Your session token is stored in your device’s secure storage (the iOS Keychain or Android Keystore). Account data lives in a separate database from game data, and access is limited to what the Service needs to operate. We do not store payment card details or provider passwords.
Without an account, there is little tied to you: reinstalling the App resets your anonymous installation ID. Purchase records are retained by RevenueCat and the App Store or Google Play under their own retention rules, including any period required for tax and accounting purposes.
If you have an account, we keep your account record, sessions, and synced grid results until you delete the account. Signing out ends your sessions on that device but does not delete the account. To delete your account, open the App and go to Settings, then Profile, then “Delete account”. This immediately removes your account, sessions, synced results, leaderboard entry, and every friendship and pending friend request involving you from our servers; grids saved on your device stay there. Purchase records held by Apple, Google, and RevenueCat are unaffected and follow their own retention rules.
Analytics events and error reports are held by PostHog under its own retention rules. They are tied to your analytics identifier rather than to your account, and reinstalling the App creates a new one.
You can also revoke Kickgrid’s access at the provider: in your Apple ID settings under “Sign in with Apple”, or in your Google Account under “Third-party apps & services”.
Our backend runs on Cloudflare’s global network, and RevenueCat processes data in the United States. Our PostHog analytics data is stored in the European Union. Apple and Google process sign-in data under their own policies. Where personal data is transferred outside the EU/EEA/UK, we rely on our providers’ Standard Contractual Clauses and other appropriate safeguards.
Depending on your location, you may have the right to access, correct, or request deletion of personal data we hold about you, object to or restrict its processing, request a copy of it, or lodge a complaint with your local data protection authority.
You can delete your account and all data tied to it directly in the App (Section 6). Everything we hold about a signed-in user is visible in the App under Settings, then Profile, and on the leaderboard. For any other request, contact us at support@playkickgrid.com; without an account we can generally only act on requests tied to a specific installation ID, analytics identifier, or purchase.
The App does not use advertising trackers, does not belong to an advertising network, and does not follow you across other apps or websites, which is why it never asks for tracking permission. It does use first-party product analytics and error reporting, described in Section 1.8, to understand how the App is used and to fix problems.
The App stores game data locally on your device using standard local storage, and, if you sign in, a session token in secure storage. Neither is shared with us except as described in Section 1.
This website does not set advertising or analytics cookies.
Kickgrid is not directed at children under 13, and we do not knowingly collect personal data from them. If a child has created an account without parental consent, delete it from within the App under Settings, then Profile. For purchases made without consent, request a refund through Apple or Google Play, depending on where the purchase was made.
We may update this Privacy Policy from time to time. When we do, we will post the updated policy here with a revised effective date. We encourage you to review this page periodically.
If you have any questions about this Privacy Policy, contact us:
Kickgrid Email: support@playkickgrid.com