Privacy policy
Your progress belongs to you. This policy explains what PALABIMO collects, why we need it and how you stay in control. Valde AS is responsible for the personal data described here.
1. Who is responsible
PALABIMO is operated by Valde AS, organisation number 913 305 892, Hafellveien 25, 7125 Vanvikan, Norway. Valde AS is the data controller. For questions or requests about your information, email contact@palabimo.com.
2. Your account and learning
When you sign in with Google, we receive your account identifier, email address and basic profile details, such as your name and profile picture. We use these to identify your account, manage access and connect you with your progress. These details are needed to provide an account. We do not receive your Google password or access your emails, files or contacts. As you learn, we save your answers, learned words, hints, tests, practice time, daily activity, streaks and preferences. This lets us choose your next words, show your achievements and keep your progress across devices.
3. What other players can see
The world leaderboard is optional. If you choose to join, other players can see your chosen username, number of three-star words and ranking. We do not display your email address or Google profile name. Choose a username you are comfortable making public. You can leave the leaderboard in Settings without losing your progress.
4. Invitations and support
If you use a referral link, we process its code, the account connection you choose to save and the relevant dates. An invitation can be remembered on your device for up to 30 days and can be dismissed. The referrer sees totals, not your identity or learning history. When you contact us, we use your email address, message and relevant account information to help you and resolve the matter. We do not collect payment-card details.
5. Why we are allowed to use your data
We use account details, learning activity, preferences and requested support to deliver our service to you (GDPR Article 6(1)(b)). Optional leaderboard participation relies on your consent (Article 6(1)(a)). Access checks, security logs, fraud prevention, backups and handling general enquiries rely on our legitimate interests in running a reliable and secure service (Article 6(1)(f)). We also process information when necessary to meet a legal obligation, such as responding to a valid legal request (Article 6(1)(c)). Practice recommendations are based on your answers. We do not make automated decisions about you with legal or similarly significant effects.
6. Service providers and sharing
We share information needed to operate PALABIMO with our service providers: Google for sign-in, Supabase for account authentication, OpenAI Sites and Cloudflare for hosting and storing learning data, and Domeneshop for our contact email service. Technical providers process connection information, such as IP addresses and request logs, to deliver and protect these services. Access is limited to authorised people and providers who need it for their work. Providers acting on our behalf are subject to data-processing obligations. We do not sell your personal data or use it for advertising. Information may also be disclosed where legally required or necessary to establish, exercise or defend legal claims. Google’s own handling of your Google account is governed by its privacy policy.
7. International transfers
Some providers operate internationally, including in the United States, so information can be processed outside the European Economic Area. Transfers requiring protection under the GDPR must have a valid legal basis, such as an applicable adequacy decision or the European Commission’s standard contractual clauses with appropriate safeguards. Contact us for details of the safeguards applicable to your information or a copy of the relevant contractual safeguards.
8. Cookies and information on your device
We use necessary sign-in cookies and local storage to keep you signed in, remember language and sound settings, and retain an invitation you choose to use. PALABIMO has no advertising trackers. Blocking necessary cookies or clearing device storage can sign you out or reset local preferences. It does not by itself delete progress saved to your account.
9. How long we keep information
Account and learning records remain while your account is open. You can download your information and delete your account in Settings. Account deletion removes active learning records and PALABIMO sign-in, but does not delete your Google account. Encrypted routine backups are normally retained for up to 31 days and removed as they are replaced. Other restricted security copies are kept only for the period needed to verify recovery and are then removed. A minimal record of the account identifier and deletion date prevents deleted accounts from reappearing from a backup. Support correspondence and records needed for a complaint, security incident or legal duty are retained until that matter and any applicable legal retention or claim period have ended. Access to these retained records is restricted.
10. Your choices and rights
You can request access, correction or deletion of your information. Where the GDPR conditions apply, you can also request restricted processing or a portable copy. You have the right to object to processing based on our legitimate interests; we will assess the objection and stop unless a lawful reason to continue applies. You may ask us to explain that assessment. You can withdraw leaderboard consent at any time in Settings. Withdrawal does not affect processing already carried out lawfully. Email contact@palabimo.com to exercise your rights; we may need to verify your identity. We normally respond within one month and will explain any lawful extension. You can complain to Datatilsynet (datatilsynet.no) or the relevant data protection authority where you live or work.
11. Changes to this policy
The date above shows the latest revision. We will tell you about material changes through the app or another appropriate channel before they take effect, where required. If a new use of information requires consent, we will ask for it.
Contact
PALABIMO is developed and operated by Valde AS, organisation number 913 305 892, Hafellveien 25, 7125 Vanvikan, Norway. For support or privacy requests, write to us below.