Privacy
MIDPOINT privacy notice
MIDPOINT is made by GRADIENTS LABS LTD. This notice explains what stays on your iPhone, what is sent only if you choose “Share Limited Data,” and how to change your mind.
Who controls your data
GRADIENTS LABS LTD is the data controller for MIDPOINT. It is a private limited company registered in England and Wales under company number 16914900. Its registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
Contact privacy@playmidpoint.com for privacy matters, support@playmidpoint.com for support, or security@playmidpoint.com for security reports.
What stays on your device
MIDPOINT includes 80 entirely free Campaign levels across eight packs, a local Daily challenge and personal History.
Campaign progress, settings, Daily results, personal History, reminder preferences, and compatible progress from earlier builds are stored on your device to run the game and preserve your choices. MIDPOINT does not receive this local record.
Hidden progress for Campaign levels 11-25 remains local for compatibility. It is not displayed, counted, or included in optional analytics. Deleting the app removes MIDPOINT's local data, subject to Apple backup and device behaviour outside the app's control.
Optional analytics
The app offers two equal choices: “Share Limited Data” and “Not Now.” Before you choose to share, MIDPOINT does not request analytics configuration, build an analytics summary, queue one, or send one. Choosing Not Now changes no feature.
This private TestFlight beta is distributed with MIDPOINT analytics transport disabled, so choosing either option changes no feature and sends no MIDPOINT analytics summary. If analytics is enabled in a later approved build and you consent, MIDPOINT may send one small summary for a day of play. It can include the app build and broad operating-system version; Campaign progress milestones; Daily opens, starts and completions; whether History was opened from Daily or Home; review, share and support actions; and limited reliability counts.
Each summary uses a random key that changes daily. It does not contain your name, email, advertising ID, precise location, History entries, board layouts, tap coordinates, free text, or hidden Campaign levels 11–25. The summary is pseudonymous, not guaranteed anonymous. We do not use it for advertising, profiles, pricing, ranking, personalisation, eligibility decisions or sale.
Why we process data
- Optional analytics: your consent, to understand how consenting players use the game and to identify reliability problems.
- Website and service security: our legitimate interests in securely delivering and protecting the privacy, support, and measurement services.
- Support and security email: our legitimate interests in answering requests, operating MIDPOINT, and investigating problems; legal obligation where needed to handle a rights request or comply with law.
- Local game functions: providing the app and features you request. This local information is not received by GRADIENTS LABS LTD.
MIDPOINT does not use your data for solely automated decisions that produce legal or similarly significant effects.
Service providers and transfers
Cloudflare hosts the website and analytics service, stores MIDPOINT's analytics database in its EU jurisdiction, and protects the private owner console. Like any network provider, Cloudflare processes the IP address and ordinary request, security and operational data needed to deliver these services. A request may be handled outside the UK or EEA even though the MIDPOINT database is restricted to the EU.
Google Workspace processes messages sent to MIDPOINT email addresses. Apple processes TestFlight, App Store, notification, review, and player-initiated system-sharing activity under Apple's own terms and choices.
Where personal data is transferred outside the UK or EEA, we use an applicable adequacy decision or contractual safeguards. Cloudflare's Data Processing Addendum includes the EU Standard Contractual Clauses and UK transfer addendum; Google Workspace offers corresponding data processing terms and Standard Contractual Clauses. Contact the privacy address above to ask about these safeguards.
Retention and deletion
We aim to delete accepted raw analytics summaries after eight days, deletion lookup material after nine days, and sanitized operational logs after seven days. Small, key-free aggregate totals may be kept for up to 24 months. Cloudflare D1 Time Travel can retain recoverable database history for up to seven further days.
You can set Analytics to None in Settings. MIDPOINT then stops new analytics, removes summaries waiting on the phone, replaces its local day key, and asks the service to delete recent summaries that can still be found from those keys. If the phone is offline, the request remains visibly pending until it can be sent; Settings shows “Pending.” Completed aggregate totals no longer contain the day key.
We retain support, privacy and security correspondence only for as long as reasonably necessary to respond to enquiries, manage security, handle rights requests and meet legal obligations. We review this correspondence periodically and delete it when it is no longer needed. Some messages may be retained longer where necessary for an active rights request, dispute, security investigation or legal obligation.
Website and provider security records follow the relevant provider settings and contractual terms.
Your choices and rights
You can withdraw analytics consent at any time in Settings without affecting any game feature or the lawfulness of processing that occurred before withdrawal.
Depending on where you live and the applicable law, you may have rights to access, correct, erase, restrict, or receive personal data, and to object to processing based on legitimate interests. You may also complain to the UK Information Commissioner's Office at ico.org.uk. If you are in the EEA, you may complain to the supervisory authority where you live or work.
MIDPOINT has no player account. Rotating keys deliberately limit our ability to identify an individual summary, so we may need information from you to determine whether responsive records can be found. This does not limit any right that applies to you.
To exercise a right, email privacy@playmidpoint.com. We may need to verify the request and normally respond within the period required by applicable law.
Adults-only beta and future changes
The initial private TestFlight beta is limited to adults in the United Kingdom and United States invited by email. We are not inviting testers in the European Union at this stage. MIDPOINT does not collect age or date of birth and is not submitted to Apple's Kids Category. We will review the age and territory position before any wider release.
If MIDPOINT changes what it collects or adds an online feature, this notice and the in-app explanation will be updated before the new processing begins.
Effective date
Effective 2026-08-24.