Privacy Policy
How Wings & Prayers handles your data. Plain English, no surprises.
App Name: Wings & Prayers
Developer: WPAgency.xyz
Producer: Micostuff
Contact Email: support@wpagency.xyz
Effective Date: May 5, 2026
Last Updated: May 5, 2026
The short version
Wings & Prayers is anonymous by default. We don't ask for your email, name, phone number, contacts, location, photos, or social-media accounts in order to play. On first launch we silently create an anonymous Firebase user ID so a global leaderboard can attribute scores to the same callsign across sessions. If you choose to sign in with Google or Apple (so your progress survives reinstalls and follows you across devices), we receive whatever the chosen provider sends us — typically your provider account ID and an email address. That's the entire personal-data footprint at v12.1.
What we collect
1. Anonymous Firebase user ID
On first launch, the app silently signs you in to Firebase Anonymous Auth. This generates a random user ID (UID) that's stored locally on your device. We never receive your email, name, or any identifying personal information through this process. You can play indefinitely on the anonymous UID — no sign-in is required.
2. Optional sign-in with Google or Apple
From Settings → Account, you can choose to sign in with Google or (on iOS) Apple. Linking a provider upgrades your anonymous UID to a permanent identity so your callsign, avatar, and lifetime score survive reinstalls and follow you across devices. When you sign in:
- Google sign-in — Google sends us a stable Google account ID, your email address, and (on Android) your basic profile info. We store the email and provider ID against your Firebase user record. We do not receive your password, contacts, calendar, or any other Google data.
- Apple sign-in (iOS only) — Apple sends us a stable Apple user ID and an email address.
You can choose "Hide My Email" at the Apple sign-in sheet, in which case Apple gives us a
private-relay address (e.g.,
abc123@privaterelay.appleid.com) instead of your real one. The relay still works as the identity Apple sends us — sign-in continues to function — but we never see your real address. We do not receive your password.
You can sign out at any time via Settings → Account. Signing out keeps your cloud profile intact; signing in again on the same provider restores it.
3. User profile (Cloud Firestore)
While you play, the app mirrors a minimal user profile to our Firestore database at
/users/{your-uid}. The document contains:
- callsign — auto-generated handle like "Maverick-4172", or whatever custom name you set in Settings → Pilot
- avatarId — the id of the built-in pilot avatar you've selected
- lifetimeScore — your career score total across all runs
- updatedAt — server timestamp of the last write
This document is private — only your own UID can read or write it. It exists so that signing in on a new device restores your callsign, avatar, and lifetime score.
4. Public leaderboard summary (Cloud Firestore)
When you finish a run that beats your previous best, the app writes a small public summary at
/leaderboard/{your-uid} so the in-app Leaderboard tab can render the global top-100. The
document contains:
- playerName — your callsign (your handle, not your real name)
- score — best run score
- questionsAnswered · correctAnswers · bestStreak — run summary stats for the best run
- rank — your in-app pilot rank (Cadet / Pilot / Captain / Ace / Legend)
- updatedAt — server timestamp of the last write
Leaderboard documents are publicly readable so any player can see the global rankings. Server-side rules cap the values that can be written to keep the table honest. The document contains no personal information beyond your chosen callsign.
5. Crash diagnostics (Firebase Crashlytics)
Wings & Prayers v12.1 ships with Firebase Crashlytics enabled. If the app crashes or hits a non-fatal error path (e.g., a sign-in failure, a sync timeout), Crashlytics sends Google a stack trace, device model, OS version, app version, and a randomly-generated installation ID. Crashlytics does not collect your email, callsign, location, contacts, or any content from the trivia questions you answered. The installation ID is not linked to your Firebase Auth UID. We use Crashlytics solely to find and fix bugs faster.
6. Local-only data (never leaves your device)
The following game data is stored on your device via SharedPreferences and never transmitted to us:
- Theme preference (cockpit / sky), haptics + audio toggles
- Career score, lifetime stats, logbook achievement progress
- Question history (for cross-game dedup)
- Daily challenge streak + dates
- Run history and last-run summary
Tapping Settings → About → Reset progress wipes all of this from your device and signs you out of any linked Google or Apple account, so the cloud copy stops being used to restore your progress. (Your Firestore documents are not server-deleted by Reset progress — see Delete account & data for permanent deletion.)
What we do NOT collect
- Your contacts, calendar, photos, or messages
- Your precise or approximate location
- IP-address geolocation
- Behavioural advertising identifiers (IDFA, AAID)
- Any third-party advertising or analytics events
- Push-notification tokens — Wings & Prayers v12.1 does not use Firebase Cloud Messaging or send push notifications
Wings & Prayers v12.1 ships without Firebase Analytics, Google Analytics, Meta SDK, or any third-party advertising/tracking SDK.
Third-party services
Wings & Prayers uses these third-party services:
| Service | Provider | Purpose |
|---|---|---|
| Firebase Anonymous Auth | Google LLC | Generates an anonymous UID at first launch for leaderboard attribution |
| Firebase Auth — Google sign-in | Google LLC | Optional sign-in so progress survives reinstalls / follows you across devices |
| Firebase Auth — Apple sign-in | Apple Inc. (via Firebase) | Optional sign-in on iOS, supports Apple's "Hide My Email" private relay |
| Cloud Firestore | Google LLC | Stores your private user profile and the public leaderboard summary |
| Firebase Crashlytics | Google LLC | Collects stack traces and non-fatal error reports to fix bugs |
Each of these services operates under its own privacy policy. We encourage you to review Google's Privacy Policy and Apple's Privacy Policy.
Data retention
Your user profile and leaderboard summary in Firestore are retained as long as you continue to play. If you uninstall the app and never come back, the documents remain by default; you can ask us to delete them at any time via the Delete account & data page or by emailing support@wpagency.xyz. We honour deletion requests within 30 days; most close inside a week.
Crashlytics retention is governed by Google's Crashlytics policy — typically up to 90 days for unresolved crash reports.
Data security
All traffic between the app and Firebase services is encrypted in transit via HTTPS/TLS. Firestore writes are validated server-side against shape rules (callsign length, score ceilings, strict-increase semantics on lifetime score) so anonymous writes can't be spammed with junk data or used to inflate the leaderboard. No method of electronic storage is 100% secure, and we cannot guarantee absolute security — but the dataset we hold is intentionally minimal.
Your rights
You have the right to:
- Access the data we hold about you (your user profile + leaderboard summary)
- Correct your callsign or avatar from Settings → Pilot inside the app
- Delete your Firestore documents and local data permanently
- Withdraw consent by signing out, uninstalling the app, and requesting deletion
Visit our Account & Data Deletion page or email support@wpagency.xyz with the subject "Data Deletion Request".
Children's privacy
Wings & Prayers is rated for ages 13+. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has used the app, please contact us at support@wpagency.xyz and we will promptly delete any associated data.
Changes to this policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via the app's release notes. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.
Contact us
If you have any questions about this Privacy Policy:
- Email: support@wpagency.xyz
- Support page: Wings & Prayers Support