PRIVACY POLICY
This Privacy Statement describes what data we collect and process for this app for Android (“Service”). The Service includes a software application users download to a device and a service that processes data on our servers.
Data We Process.
We don’t use your email credentials for any purpose.
Children’s Privacy.
We do not collect personal information from users. We only collect data about your playing in order to improve our game.
Security
1. User Data Security
1.1 Transport Security
Our system enforces TLS for all communication channels over public network. The mobile app uses certificate pinning to establish trust with the server. To further ensure data safety of all our users we only support certificates signed by well-known CAs when communicating with any external servers such as Exchange servers.
1.2 At Rest Security
100% of the user data is encrypted at rest using hardware-accelerated strong cryptography.
1.3 User data isolation
Each individual user’s data set is isolated with multi-level permission checks. Every API call for data access within the system requires proprietary auth tokens with tamperproof design.
2. User Credential Security
User credentials are required to access users’ data. Credentials come in the form of passwords for some server types such as Exchange, or limited-scope OAuth tokens for others such as Gmail. Each user’s credentials are double-encrypted using a server per-account unique key and then using a client device unique key, therefore the credentials can only be unlocked by the collaboration of both the server and the app at runtime.
3. User data retention
Some user data are retained in the system during the lifetime of a user account, always encrypted at rest.A user can choose to completely purge his/her account from the mobile app, in which case all user data will be wiped clean throughout the system, from both the mobile device and the server. Exchange accounts also support end-to-end data purge can also be initiated from the Exchange server via mobile policy “remote wipe” either by the user or by an IT administrator.
Disclosure of Data.
We are not in the business of selling or renting user data.
Security.
The Service was designed and built from the ground up with data security as a top priority. We are committed to protecting your data. We use a variety of security technologies and procedures to help protect data from unauthorized access, use or disclosure. For example, we store the personal information you provide on computer systems that have limited access and are in controlled facilities.
Changes to this Privacy Statement.
We may occasionally modify and revise our Privacy Statement from time to time.
How to Contact Us.
If you need more information, please contact us at thexord2020@gmail.com
Data We Process.
We don’t use your email credentials for any purpose.
Children’s Privacy.
We do not collect personal information from users. We only collect data about your playing in order to improve our game.
Security
1. User Data Security
1.1 Transport Security
Our system enforces TLS for all communication channels over public network. The mobile app uses certificate pinning to establish trust with the server. To further ensure data safety of all our users we only support certificates signed by well-known CAs when communicating with any external servers such as Exchange servers.
1.2 At Rest Security
100% of the user data is encrypted at rest using hardware-accelerated strong cryptography.
1.3 User data isolation
Each individual user’s data set is isolated with multi-level permission checks. Every API call for data access within the system requires proprietary auth tokens with tamperproof design.
2. User Credential Security
User credentials are required to access users’ data. Credentials come in the form of passwords for some server types such as Exchange, or limited-scope OAuth tokens for others such as Gmail. Each user’s credentials are double-encrypted using a server per-account unique key and then using a client device unique key, therefore the credentials can only be unlocked by the collaboration of both the server and the app at runtime.
3. User data retention
Some user data are retained in the system during the lifetime of a user account, always encrypted at rest.A user can choose to completely purge his/her account from the mobile app, in which case all user data will be wiped clean throughout the system, from both the mobile device and the server. Exchange accounts also support end-to-end data purge can also be initiated from the Exchange server via mobile policy “remote wipe” either by the user or by an IT administrator.
Disclosure of Data.
We are not in the business of selling or renting user data.
Security.
The Service was designed and built from the ground up with data security as a top priority. We are committed to protecting your data. We use a variety of security technologies and procedures to help protect data from unauthorized access, use or disclosure. For example, we store the personal information you provide on computer systems that have limited access and are in controlled facilities.
Changes to this Privacy Statement.
We may occasionally modify and revise our Privacy Statement from time to time.
How to Contact Us.
If you need more information, please contact us at thexord2020@gmail.com