Legal

Privacy Policy - Word Ward

Effective Date: September 2026

Home/Privacy Policy/Word Ward

Last updated: 26 September 2026

Xibalba Software is the trade name used by Haldun Akkoyunlu. This trade name is used throughout this Policy.

This Policy is drafted in Turkish and constitutes the authentic text. Translations into other languages are provided for information only; in the event of any conflict, the Turkish text prevails.

This Policy has been prepared based on the highest common standard of data-protection laws in all countries where the products are offered. Even where local law provides a lower level of protection, Xibalba Software continues to apply the standards in this Policy.

1. Scope

This Privacy Policy applies to the website at xibalbasoftware.com and to the following mobile applications, games, and web services published by Xibalba Software (together, the "Products"):

  • Baby Grow Sense
  • Flash Weaver
  • Word Ward
  • Husky Rush
  • Block Grid X
  • LGSNet (currently offered in Turkish only)
  • Support correspondence, the contact form, and newsletter services

    • Elements excluded from scope: tools developed exclusively for internal use and not made available to the public. Where a separate privacy notice has been published for a specific Product, that notice applies with priority for that Product; this Policy remains complementary in all other respects.

    2. Product Categories

    Products are assessed in three categories with respect to personal-data processing:

  • Account-required applications - LGSNet, Baby Grow Sense, Flash Weaver - Users sign in with an account; progress and purchase data are linked to that account.
  • Optional-account products - Word Ward, Husky Rush, Block Grid X - Users who wish to use leaderboards or cloud backup may create an account; these Products also work with full functionality without an account.
  • On-device services - Block Grid X - Pic Grid Mode - Processing occurs only on the user's device; no data or files are transmitted to servers.

    • 3. Personal Data Processed

    Depending on the Product used and the features chosen, personal data in the following categories may be processed:

  • Account data: Email address, display name, authentication identifier, email verification status.
  • Usage and progress data: Solved questions, spaced-repetition intervals, level, score, achievements, app settings.
  • Device data: Device model, operating-system version, language and region preference, app version, app-instance identifier.
  • Diagnostics data: Crash logs, performance metrics.
  • Analytics data: Aggregated statistics relating to screen use and feature preferences.
  • Purchase data: Store transaction information, subscription status. Payment-card details are never transmitted to Xibalba Software.
  • Advertising identifiers: On ad-supported Products, Google Advertising ID (GAID) or Identifier for Advertisers (IDFA).
  • Website data: IP address, browser information, cookies and similar technologies.
  • Correspondence data: Content sent via the contact form or direct email.
  • Newsletter data: Email address, language preference, subscription date.
  • Baby data (Baby Grow Sense only): Date of birth, sex, height and weight records, notes, photos.

    • Data not processed in any Product: National identity number or equivalent, payment-card details, continuous location tracking, contacts-list content, microphone or camera recording.

    4. Purposes of Processing

    Personal data are processed for the following purposes:

  • Operating the Products and delivering content to users
  • Creating, verifying, and securing user accounts
  • Processing purchases and subscriptions; restoring acquired rights after a device change
  • Detecting errors, resolving crashes, and measuring performance
  • Providing advertising on free versions
  • Responding to support requests promptly and completely
  • Sending newsletters at the user's request
  • Detecting and preventing fraud, abuse, and cheating
  • Complying with applicable legal obligations

    • Xibalba Software does not sell personal data to third parties and does not transfer personal data to advertising networks for commercial purposes.

    5. Legal Bases

    Under the GDPR and UK GDPR:

  • Performance of a contract - Account management, purchase transactions, game progress.
  • Consent - Newsletter, personalized advertising, and non-essential cookies. Consent may be withdrawn by the user at any time with effect for the future.
  • Legitimate interests - Security measures, debugging, basic analytics, prevention of abuse.
  • Legal obligation - Tax, accounting, and requests from competent authorities.

    • Under Türkiye's Personal Data Protection Law No. 6698 (KVKK):

    Processing is based on performance of a contract, legal obligation, and legitimate interests under Article 5 of the Law; where those conditions are not met, processing is based on explicit consent.

    Where other jurisdictions impose additional bases or notice obligations, those requirements are observed.

    6. Data Kept on the Device

    Certain functions run exclusively on the user's device and no data is transmitted to Xibalba Software servers:

  • Block Grid X - Pic Grid Mode: Photos and images selected by the user are processed only on the device.
  • Offline use: In Products such as LGSNet, downloaded content and progress data may be stored locally on the device.

    • 7. Artificial Intelligence

    Two matters must be distinguished:

  • Generative content: Text, questions, visuals, and music in certain Products were created at the production stage using AI tools. No user data is transmitted to those tools in that process.
  • Accuracy limitations: AI-generated content may contain errors. Questions and explanations in LGSNet do not replace official legislation, announcements by competent bodies, or exam guides. Developmental information in Baby Grow Sense is general information and does not constitute medical advice.

    • 8. Cookies, Ads, and Permission Preferences

    In addition to technically necessary cookies, the website may use analytics and advertising cookies. For non-essential cookies, users in the European Economic Area (EEA), the United Kingdom, and Switzerland are shown a consent screen; preferences can always be changed.

  • Google AdMob: Provides advertising on certain mobile Products. Baby Grow Sense does not use interstitial or rewarded-video ads; only non-personalized banner ads are allowed.
  • Apple ATT (App Tracking Transparency): On iOS, user permission is requested before personalized advertising. If permission is not granted, only non-personalized content is shown; Product functionality is not affected.
  • Device-level controls: On Android, the advertising ID can be reset or deleted; on iOS, ad tracking can be disabled.

    • 9. Third-Party Processors

    Xibalba Software works with the following providers to operate the services. These providers may process relevant data under their own privacy policies:

  • Google Firebase: Authentication, database, storage, analytics, crash reporting, notifications, remote configuration, and hosting.
  • Google AdMob and AdSense: Advertising services.
  • RevenueCat: Subscription management and in-app purchase entitlement management.
  • App stores (Google Play, App Store, Galaxy Store): Payment collection.
  • Email service provider: Account verification, support correspondence, and newsletter delivery.
  • YouTube: Embedded video content in restricted mode in Baby Grow Sense.

    • Personal data are not shared, sold, or rented to third parties other than those listed above. Disclosure to competent authorities occurs only where legally required and only to the extent necessary.

    10. Children's Privacy

    Products directed at a general audience are not directed at individuals under 13. In jurisdictions where the digital age of consent is higher (in the European Union this age may be up to 16), that higher age limit applies.

    Xibalba Software does not knowingly collect personal data from individuals under 13. If such data are found to have been obtained inadvertently, they are destroyed immediately. If you believe your child has left data through any Product, contact info@xibalbasoftware.com; the necessary steps will be taken promptly.

    Baby Grow Sense is directed exclusively at parents. The account holder is an adult; the child is not a direct user of the product. By entering baby information, the account holder is deemed to declare that they are authorized with respect to that data. Under this Product, baby data are not transferred to advertising networks and are not used for personalized advertising. Interstitial and rewarded-video ads are not used; embedded YouTube videos run in restricted mode.

    Frameworks observed: COPPA, GDPR children's provisions, Google Play Families Policy, and app-store child-safety standards.

    11. Retention Periods

    Personal data are retained for the periods below; after those periods they are permanently deleted or irreversibly anonymized:

  • Account and progress data: For as long as the account remains active.
  • Purchase records: For the period required by tax and accounting law (as a general rule in Türkiye, 10 years).
  • Crash and diagnostics data: Up to 90 days.
  • Analytics data: In aggregated form, up to 14 months.
  • Support correspondence: Up to 2 years after the request is closed.
  • Newsletter: Until cancellation of the subscription; after cancellation, only the minimum record needed to prevent further sends.

    • 12. International Data Transfers

    Service providers' servers may be located outside Türkiye, including in the European Union and the United States. Such transfers are carried out under European Commission Standard Contractual Clauses, adequacy decisions, or equivalent legal safeguards, and in compliance with obligations under Article 9 of Law No. 6698.

    13. Security

    Xibalba Software applies encryption in transit and at rest, access restrictions, server-side authorization mechanisms, and regular security updates to protect personal data. Payment-card details are never transmitted to Xibalba Software.

    Nevertheless, no information-security system can provide absolute protection. If a security vulnerability is identified, please report it via info@xibalbasoftware.com. In the event of a personal-data breach that triggers a notification duty, the competent supervisory authority and affected users will be notified within the periods required by law.

    14. User Rights

    The following rights may be exercised by written request to info@xibalbasoftware.com. Verification of the request's origin may be required. Exercising any right does not adversely affect the quality of the service provided or the pricing applied.

  • Learning whether personal data are processed and requesting a copy
  • Requesting rectification of inaccurate or incomplete data
  • Requesting erasure of data
  • Requesting restriction of processing
  • Objecting to processing
  • Receiving data in a portable format
  • Withdrawing consent with effect for the future
  • Objecting to a decision based solely on automated processing

    • Region-specific authorities (examples):

  • GDPR / UK GDPR: The competent data-protection authority in the country of residence
  • Türkiye: Personal Data Protection Board under Article 11 of Law No. 6698
  • United States: State law (CCPA/CPRA and equivalent rules)
  • Brazil: Autoridade Nacional de Proteção de Dados (ANPD), under the LGPD
  • Japan: Personal Information Protection Commission (PPC), under the APPI
  • South Korea: Personal Information Protection Commission, under the PIPA
  • Canada: Office of the Privacy Commissioner, under PIPEDA / Bill C-27
  • Australia: Office of the Australian Information Commissioner (OAIC), under the Privacy Act

    • This list is illustrative. All rights and remedies in the country of residence remain available in any event.

    15. Account and Data Deletion

    A deletion request may be made by writing to info@xibalbasoftware.com from the email address registered to the account and specifying the Product concerned. Data not subject to a legal retention obligation are deleted or anonymized within the applicable period; the user is informed when the process is complete. Store purchase records cannot be deleted because of retention duties under tax law.

    16. Changes to this Policy

    This Policy may be updated when new Products are added or applicable law changes. The current version always appears on this page; the date in the page heading is refreshed with each update. Material changes are announced via the website or the app before they take effect; where law requires consent, consent is obtained again.

    17. Contact

    For all privacy-related requests and questions:

    info@xibalbasoftware.com

    Back to home