01 / Who is responsible
Miguel Zabala Figueroa, based in Colombia, operates Miucan Games and is responsible for the processing described here. This policy covers Sukto and this website. Contact us using the privacy address below with questions or rights requests.
Miguel Zabala Figueroa also personally handles data-protection inquiries, requests and complaints through the privacy email listed below. Miucan Games is the studio name; the individual identified here is the controller.
Domicile: Barranquilla, Colombia.
Correspondence address: Calle 177 #42B.
Contact telephone: +57 3157707744.
02 / Gameplay stays on your device
The current core game does not require registration and does not send your puzzle moves, saved boards, preferences or personal game statistics to a studio server. These records are stored locally to continue games, remember settings and calculate your statistics. We cannot retrieve those local records through support.
The current app has no advertising SDK or third-party gameplay analytics integration. It does not request location, contacts or access to read your photo library. Device or App Store services may separately process information under Apple’s policies; operating-system backups, if enabled by you, are controlled through your device settings.
03 / Photos and sharing
Sukto creates a result image only when you choose to save or share a completed game. The image can contain the solved board, difficulty, playing time and movement count. Review it before choosing a destination.
Save to Photos requests add-only permission at the time of saving. Sukto does not browse your existing photos. You can decline or revoke permission in system settings without losing core gameplay. A destination selected in the system share sheet processes the image under its own policy.
04 / Purchase information
Sukto uses Apple and RevenueCat to verify purchases and enable or restore Pro. RevenueCat processes transaction history, receipts, product identifiers, purchase dates and access status, together with an automatically generated app user identifier. Technical context includes app and operating-system versions, locale and currency. These records support purchase validation, fraud prevention, restoration and purchase analytics.
The app connects to RevenueCat to check access and load purchase options, including before a purchase. Sukto does not require an account and does not send your name, email, puzzle history or advertising identifier to RevenueCat. Apple processes payment; neither Sukto nor RevenueCat receives your full payment-card details through this integration. We do not use these records for advertising tracking across apps.
RevenueCat and its service providers may process purchase information outside your country, including in the United States. Applicable contractual and legal safeguards govern such processing. We require service providers handling personal data on our behalf to protect it consistently with our commitments and applicable law.
05 / Website and support
When configured, this website offers optional Google Analytics 4 measurement to understand visits and improve the site. The Google tag only loads after you accept. Google processes usage information such as pages visited and browser/device information. Advertising storage and personalization are disabled. You can reject or withdraw permission using Analytics preferences at the bottom of any page. Fonts, graphics and animations are served with the website.
When the site is hosted, the hosting service processes network information needed to deliver pages and protect the service, such as IP address, requested URL, browser information and request time. The hosting provider and its log-retention settings must be identified before public launch.
If you email support, we receive your address and the information you choose to include. We use it to respond, investigate the issue and keep necessary support records. Avoid sending passwords, full card numbers or unrelated sensitive information.
The support mailbox uses Gmail, provided by Google. Messages, attachments and delivery information are processed by that email service and may be stored outside Colombia, including in the United States. Google describes its processing locations and safeguards in its privacy policy. Contacting support is optional and is not required to play.
We do not sell support data or use it to build advertising profiles. Necessary information may be disclosed to comply with a lawful request from a competent authority or to exercise or defend legal rights. Providers only receive information needed for the relevant service; any processing on our behalf must meet applicable confidentiality and data-protection requirements.
Where Colombian law requires authorization, we will obtain prior, informed permission that can be evidenced, except where a legal exception applies. This policy and mere silence are not authorization. Optional marketing or a different purpose requires its own legal basis and, where required, separate authorization. You do not need to provide sensitive information to request general help.
06 / Retention, deletion and your choices
Local gameplay data remains on your device until you use the confirmed reset control, remove the app, or manage the data through your device. To reset in Sukto, open Settings, find Start fresh, then choose Reset my data and confirm. System backups and images already exported are managed separately in their respective apps or services.
Support messages are retained only as long as needed to resolve requests, maintain necessary service records and meet applicable obligations. Purchase records are retained as needed to verify and restore your Pro access, prevent fraud and meet accounting or legal obligations. Resetting gameplay does not erase RevenueCat or Apple purchase records or request a refund. Contact the privacy address below to request deletion of purchase data we control; we may need a transaction reference to locate it.
The support file remains active while a request is open and for any applicable obligation or claim period requiring relevant evidence. Once those purposes end, we delete or anonymize information under our control; there is no indefinite retention for marketing. If a legal duty prevents full deletion, we will explain the reason and limit further use to that duty.
There is no Sukto account to close. Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability or objection for personal information we actually hold, and withdraw consent where processing depends on it. You may also contact your local data-protection authority. We may request proportionate information to verify a rights request.
07 / Children, security and policy updates
Core play does not ask children or adults to create a profile or provide contact information. Parents or guardians should supervise optional purchases and external sharing where appropriate. If you believe a child has sent us personal information through support, contact us so we can assess and remove it where required.
We do not request sensitive data or children’s personal details as a condition of gameplay. If processing a child’s information becomes necessary, we will assess their best interests and fundamental rights and obtain their representative’s authorization where required, taking the child’s views into account according to their maturity.
We take reasonable measures to protect information under our control and limit access to those who need it for the stated purposes. No storage or transmission method is guaranteed perfectly secure. Material policy changes will be published here with an updated date and additional notice where required.
08 / Data rights in Colombia
Under Law 1581 of 2012, you can access your personal information free of charge, update or correct it, request evidence of authorization where required, ask how it has been used, and seek withdrawal of authorization or deletion when legally appropriate. Deletion or withdrawal may be restricted by a legal or contractual duty to retain the data.
Send your request to the privacy email below, identifying yourself, the information concerned, your requested action and a reply address. A representative should provide evidence of authority. For a complaint, describe the facts and include relevant supporting documents. We only request proportionate verification information, never your Apple password.
Access inquiries receive a response within 10 Colombian business days of receipt. If more time is needed, we explain why before that deadline and specify a response date no more than 5 additional business days later.
Correction, deletion and other data-protection complaints receive a response within 15 business days counted from the day after receipt. If an extension is necessary, we explain the delay and the response date before the original deadline; the extension cannot exceed 8 business days.
For an incomplete complaint, we request missing information within 5 days of receipt. It is considered withdrawn if you do not provide it within 2 months of that request. We mark a complete complaint as pending in the relevant record within 2 business days and keep that status until resolved. If we are not competent to handle it, we forward it to the appropriate party within 2 business days and notify you.
After completing the inquiry or complaint process with us, you may submit a complaint to Colombia’s Superintendence of Industry and Commerce (SIC). This does not limit rights or remedies granted by another applicable law.
09 / Privacy contact
For privacy requests concerning Miguel Zabala Figueroa, use the address below. Include “Sukto privacy” and describe the request; do not include your Apple Account password.