Privacy Policy - Search Me!

Last updated: August 21, 2026

This policy explains what information Search Me! ("the app", "we", "us") collects and how it is handled. The short answer is that Search Me! collects anonymized usage statistics — nothing personal. No accounts, no ads, no tracking, and nothing a child types ever leaves the device. The long answer is below.

What Search Me! does

Search Me! generates word-search puzzles from a topic a child types in, and lets them print or share the result as a PDF. There is no account to create, no sign-in, and no profile.

Word list generation is on-device

Themes a child types are processed by Apple's Foundation Models framework, entirely on-device. Prompts and generated words never leave the device — and are never included in analytics events.

What we collect automatically

The app sends small anonymized usage counts to TelemetryDeck, a privacy-focused analytics service, so we can see which features get used — for example, "a puzzle was completed on medium difficulty".

What this looks like in practice:

• Small event counts describing app usage, such as puzzle completions and the difficulty chosen.
• A user identifier that is double-hashed, so neither we nor TelemetryDeck can trace it back to a person.

Just as importantly, what it does not include:

• Nothing you type. Themes, generated words, and any free text never leave the device or appear in analytics.
• No names, no location, and no advertising identifiers.
• No tracking. TelemetryDeck cannot follow you across apps or websites, and is GDPR-compliant.
• No crash or performance reporting. No Crashlytics or equivalent.
• No advertising of any kind.
• No access to contacts, photos, calendar, camera, or microphone.

When the app uses the network

The app's word-search generation works fully on-device. The only outbound connections are:

1. TelemetryDeck, for the anonymized usage counts described above.
2. Purchases. Payment is handled entirely by Apple's StoreKit; the app never sees your payment details. Purchases sit behind a parental gate (typed arithmetic with a cooldown after repeated wrong answers).
3. The system share sheet. If you choose to share or print a puzzle PDF, the operating system hands the file off to whichever app or printer you select. We are not told that you shared, or with whom.

Local preferences

The app stores a handful of values in UserDefaults on the device: your chosen color theme, the daily free-play counter, and the lifetime puzzle-completion count (used to time rating prompts). None of it identifies you and none of it is transmitted.

PDFs are local

Teacher's Corner worksheets are written to the app's temporary storage and only leave the device via the system share sheet, at your direction.

Children's privacy

Search Me! is designed to be used by children with a parent or guardian's supervision. The on-device model is instructed to restrict output to child-appropriate single words, and a friendly message appears if a topic can't be used. Commerce is gated behind a parental gate, and there are no external links inside the kid-facing experience.

Analytics events are feature counts only — never a child's typed theme, generated words, or any identifying detail. We do not knowingly collect personal information from children, and because nothing typed ever leaves the device, there is no route by which it could reach us.

Third-party services

Search Me! integrates exactly one third-party service:

• TelemetryDeck (TelemetryDeck GmbH, Germany) receives the anonymized usage counts described above. It is built so that the data it receives cannot identify individual users, and its handling of that data is governed by TelemetryDeck's privacy policy.

The only other third party involved is Apple, for StoreKit purchases and the system share sheet, governed by Apple's privacy policy.

Purchases

Billing is handled entirely by the App Store, which stores your payment method under its own policies. We receive no payment information about you — not your card details, not your billing address, not your name.

Deleting your data

There is no account to delete, because there is no account. Deleting the app removes its local preferences and any local PDFs, and destroys the double-hashed analytics identifier described above — because that identifier never pointed at you, the counts already collected under it identify no one.

Changes to this policy

If this policy changes, the updated version will be posted at the same URL with a new "last updated" date at the top.

Contact

Questions about this policy? Email [email protected], or use the contact form at digitalsandbox.net/contact.

— Digital Sandbox LLC