Privacy policy

Last updated 27 October 2026

Twogram is a puzzle game for iPhone and Android made by Devinity (devinity.gr), Greece. This page explains what we keep about you, why, and what you can do about it. Questions: support@twogram.gr.

What we keep

• Your profile: the username and avatar you pick. Your partners see them.
• Your game: pairs, turns, streaks, Journey results, coins, hints and other items in your wallet.
• Sign-in, only if you save your progress: your Apple or Google account id and the email address they share with us, or the email address you sign in with. We never see your Apple or Google password.
• Purchases: what you bought and the store’s transaction id. Payment details stay with Apple or Google; we never see them.
• Technical data: a sign-in token for each device and, for a short time, server logs with IP addresses, to keep the game running and stop abuse.

Why

To run the game you asked for: match you with your partner, save your progress, sync it between your devices and give you what you bought (GDPR article 6(1)(b), a contract). Server logs and abuse checks rest on our legitimate interest in keeping the game safe (article 6(1)(f)).

Who else handles it

• Our server host in the EU (Hetzner, Germany/Finland).
• Apple and Google, when you sign in with them or buy something in their stores.
• The email service that sends sign-in links.

We don’t sell your data. If we add ads or analytics, this page will say which service, what it collects, and ask for your consent where the law requires it.

How long

As long as you have an account. When you delete it, your profile, game history and sign-in details are deleted within 30 days. Purchase records are kept as long as tax law requires, without your profile.

Your rights

You can ask to see, correct, export or delete your data, or object to how we use it: email support@twogram.gr. You can also complain to the Hellenic Data Protection Authority (dpa.gr). To delete your account, see Delete account.

Children

Twogram is for players aged 13 and over. If you think a child under 13 gave us their data, write to us and we’ll delete it.