Privacy Policy

Effective and last updated: 27 October 2026

Developer brand: Plantation Lab
Operator: LAM, Ka Lok (Eric Lam)
Privacy contact: ericlamdev@gmail.com

This policy applies to mobile apps, websites and related services published by LAM, Ka Lok under Plantation Lab that link to this policy (the “Services”), including Services published with different package identifiers or earlier branding.

1. Information processed and its purposes

2. The Book of Answers 3.0

答案之書：神諭與心情手札 / The Book of Answers (earlier listing names include The Book Of Answers 答案之書), app identifier com.outlawshk.answersbook. The following applies to version 3.0 and later:

• No account is required. Questions, journals, moods, practice and interactive-feature progress stay on your device; the app does not upload them to our servers or RevenueCat.
• There are no ads, AdMob, Firebase Analytics or Firebase Crashlytics integrations. The corresponding advertising and Firebase analytics sections do not apply to this version.
• Daily reminders are scheduled locally, without cloud push notifications.
• From 3.0.1, the app uses PostHog to collect anonymous usage data, so we can see how features are used and improve the app: for example which features are opened, whether the introduction was completed, whether the membership page loaded properly, the outcome of the subscription flow, and the app version, operating system and device language and region settings. From 3.1, the answers tapped from the choices in the introduction (what has been on your mind, the weather that describes how you feel, what you hope to find, how you like to be accompanied and the preferred time of day) are also recorded as option codes, to learn which content helps which readers. The data is labelled with an identifier generated at random for each install. It never includes anything typed (questions, journals or practice content), and moods noted in the journal are not uploaded; it is not linked to your identity, advertising identifiers or data from other apps, and is not used for advertising or cross-app tracking. PostHog does not keep IP addresses. You can turn it off at any time in Settings → Share anonymous usage data.
• Moonlight membership payments are handled by the App Store or Google Play. RevenueCat processes an anonymous app-user identifier, purchase history, subscription status and necessary technical information for membership validation, restoration and subscription analytics.
• Exporting backups or sharing sends information to the destination or recipient you choose. Settings → Erase all data removes local records; it does not cancel subscriptions or automatically erase store or RevenueCat purchase records. Contact us as described below to request deletion of server-side information.

Earlier app versions may still use their integrated advertising, analytics, diagnostics and cloud-push services. The description of 3.0 does not retrospectively change how earlier versions operate.

musicinkloop: this app has a dedicated privacy policy. Its current on-device creative features and direct store purchasing do not start using Firebase, AdMob or RevenueCat merely because those providers appear on this shared page.

3. WordBlade Text Spinner

激鬥文字陀螺 / WordBlade Text Spinner (listing names include WordBlade 激鬥文字陀螺 and WordBlade 文字ゴマバトル), app identifier com.plantationlab.textspinner on both iOS and Android. The following applies to version 1.1.0 and later:

Anonymous account and server-side information

• No sign-up or sign-in is required, and the app never asks for your name, email address or phone number. When you first make progress, the app automatically creates an anonymous account: a randomly generated player ID and a secret key kept on your device. Our server stores only a hash of the key.
• The account is used for online battles, rankings and progress backup. Our server stores your name and number, combined by the system from a word list; your rank, number of matches, wins and wins per character; your best Tower floor; the character and typeface you last played and the cosmetics and title you have equipped; match results; reports and blocks you make; when the account was created and last connected; and your progress backup (coins, cosmetics earned through play, Season pass and Tower progress, match record and chosen character).
• In-app purchases are not part of the progress backup. The App Store or Google Play manages them, and each device restores them separately. To grant the coins included with the Starter Pack only once per purchase, our server records such purchases and stores the purchase identifier only as a hash.
• A transfer code lets you move to a new phone: a 10-character code plus a password you choose. Our server stores only a salted hash of the password. A code works once, and five wrong attempts lock it for one hour.
• Besides the app’s own storage, your anonymous identity is kept in the iOS Keychain (not synced through iCloud) and in Android Block Store (requires Google backup to be on), so your progress returns automatically after you reinstall.
• Cloudflare operates the game server, and the database is located in the Asia-Pacific region. Cloudflare processes connection information such as IP addresses to deliver data, limit abuse and investigate errors. We do not store IP addresses in the game database.

What other players can see

Online opponents and the rankings show your name and number, the character and typeface you play, your equipped cosmetics and title, your rank and your Tower record. Names can only be built from the system word list; there is no free text entry and no chat. You can report an offensive character or block an opponent from the online battle screen.

Ads, purchases and highlight videos

• Google AdMob provides interstitial ads and rewarded ads that you choose to watch; see “Advertising: Google AdMob” above for the information processed. The app shows an ad consent message where required, and “Ad privacy settings” appears in Settings when applicable. On iOS you are asked whether to allow tracking, and you can play normally either way. Removing ads through a purchase stops interstitial ads.
• The app does not integrate Firebase Analytics, Firebase Crashlytics or RevenueCat, so those sections do not apply to it. The App Store or Google Play handles in-app purchases directly.
• Highlight videos are made on your device and go only to the app or recipient you choose when you share them. On iOS, permission to add to your photo library is requested only when you choose to save a video there.

Deleting your account and data

1. In the app (immediate): open Settings from the top-right corner of the home screen, tap “Delete online data” and confirm.
2. Without the app: email ericlamdev@gmail.com with the subject “WordBlade account deletion” and your name and number (shown in Settings and the rankings, in the form “Name #1234”). To prevent impersonation, we may ask for the approximate date of your last match or a character you played. Once verified, we delete the account within 30 days and reply to you.

• Deleted immediately: the account, name and number, rank and match record, wins per character, Tower record, progress backup, unused transfer code, block list and reports you made. Deleting in the app also removes the anonymous identity from your device, including the copies in the Keychain and Block Store.
• Kept without any link to you: match records are anonymized and kept for statistics and game balance, so your opponents’ records stay intact; reports other players made about the account are kept to prevent abuse; Starter Pack records keep only the purchase hash so the same purchase cannot receive coins twice. Once the account is deleted, these records can no longer be linked to you.
• Not affected: coins and cosmetics on your device stay until you remove the app. In-app purchases are managed by the App Store or Google Play; deleting online data does not cancel them, and you can still restore them. If you later enter online battles or issue a transfer code, you start again with a new anonymous account.
• Removing the app alone does not delete server-side information; it is restored automatically when you reinstall. To delete it, use one of the methods above.

Versions before 1.1.0 have no online features, accounts or in-app purchases, and only show ads as described in “Advertising: Google AdMob” above.

4. CRE Use of Chinese and English

CRE 中英文運用｜綜合招聘考試 / CRE Use of Chinese and English, app identifier com.plantationlab.cre on both iOS and Android. The following applies to version 1.2.0 and later:

• No account is required, and the app never asks for your name, phone number or email address. Results, per-question records, the wrong-answer list, bookmarks, flash-card familiarity, explanation allowance and settings are stored on your device and are removed when you delete the app.
• The question bank and study content are downloaded over the network. Questions, options, answers and explanations are held in memory only while the app runs and are never written to device storage.
• To protect the question bank, the app creates a random key pair on your device, registers its public part with our content service, and uses Apple App Attest or Google Play Integrity to confirm the app’s integrity. The content service is hosted by Cloudflare and Neon and keeps only the public key, the registration record and the technical information needed for verification, with no personal identity information.
• Instead of Google Analytics for Firebase, this app uses PostHog for usage analytics: starting and finishing a practice round or mock test; each question’s identifier and whether it was answered correctly, incorrectly or not at all; answer time; study guides opened; upgrade-screen views and purchase results; rewarded-ad results; and taps on share, rate, about and promotional items. Each event carries a random identifier created by the app, plus app version, device model, operating-system version, language and network type. It contains no question, option, answer or explanation text, and no name, contact details, IP address or location.
• Instead of Firebase Crashlytics, this app uses Sentry for crash reports: the error type, where in the code it occurred, app version, device model and operating-system version, with no error-message text, screenshots, question content, IP address or location. Usage data and crash reports cannot be linked to your identity, are not deleted when you delete the app, and are kept according to PostHog’s and Sentry’s retention periods.
• When you report a question, we receive the reason you choose, any description you type (up to 500 characters), the question identifier, the app version and the device registration identifier, used only to correct the question. Please do not include personal information in the description.
• The free version offers Google AdMob rewarded ads, played only when you choose to watch one. The app does not request tracking permission and requests only non-personalized ads. Upgraded users see no ads.
• The upgrade is six months of access, paid through the App Store or Google Play, and does not renew automatically. RevenueCat uses an anonymous purchaser identifier to confirm purchase status, unlock and restore paid content.

This app is not provided or endorsed by the Government of the Hong Kong SAR or the Civil Service Bureau.

5. Word Gets Around

一傳十 / Word Gets Around, app identifier com.plantationlab.wordgetsaround on iOS. The following applies to version 1.0.0 and later:

• No account is required, and the app never asks for your name, phone number or email address. Game progress, saved games, Source Cards, records and settings are stored on your device and are removed when you delete the app.
• There are no ads, and the app does not request tracking permission. It does not integrate AdMob, Firebase Analytics, Firebase Crashlytics, RevenueCat or any other usage-analytics or crash-reporting service, so those sections do not apply to it.
• Leaderboards and achievements use Apple’s Game Center. After you sign in to Game Center, the game gives Game Center your score for each game and the achievements you earn, and other players can see your Game Center nickname and scores on leaderboards. Apple handles this information under its privacy policy; we do not receive your Apple account information. You can sign out in Settings › Game Center on your device, or change your nickname and who can see you.
• Challenge codes, share cards and timelapse videos are created on your device and go only to the app or recipient you choose when you share them. Permission to add to your photo library is requested only when you choose to save there; the app does not read your photo library.
• Daily Game reminders are scheduled locally, without cloud push notifications. Notification permission is requested only when you turn reminders on.
• Unlocking the full game or individual chapters is paid through the App Store, which handles purchases and restoring purchases directly.

6. Recipients and sharing

We use providers to process information necessary for the purposes above, including Google/Firebase/AdMob, Apple (including Game Center), RevenueCat and the hosting, database or AI providers used by a feature. Content you choose to share or export goes to your selected service or recipient. We may disclose necessary information to authorities or professional advisers when required by law or to address fraud, security incidents or legitimate legal interests.

We do not earn revenue by selling personal information. Ad-supported versions transmit information to advertising providers as described above; in some jurisdictions, particular advertising practices may fall within legal definitions of “sale,” “sharing” or targeted advertising, with applicable consent and opt-out choices. Reading this policy is not consent to all optional processing.

Providers may process information outside your country. Their processing and retention practices are described in the Google Privacy Policy, Firebase privacy information, Google advertising information, and the policies of RevenueCat, Apple, Cloudflare, Vercel, OpenRouter, PostHog, Sentry and Neon.

7. Retention and security

We retain information for the periods needed to provide the relevant features, support users, maintain security, validate purchases and meet legal obligations:

• Local content: until you clear it in the app, delete the files or remove the relevant app data. Exported files, system backups and synced copies must be managed separately.
• Analytics and diagnostics: deleted or aggregated according to the enabled service’s retention settings and provider lifecycle. Contact us for the settings applicable to a particular app.
• Accounts and cloud content: retained as needed by the feature and handled according to valid deletion requests. Temporary storage and exceptions for cloud AI are described by the feature; this policy does not claim that all providers retain no data.
• Purchases and subscriptions: retained as needed for restoration, entitlements, refunds, fraud prevention and necessary accounting or legal obligations. Uninstalling an app does not automatically delete these records.
• Support and security records: retained for resolving the issue and necessary follow-up, with longer retention where required by law or a dispute.

We use safeguards appropriate to the information, including HTTPS transmission, access controls and limiting unnecessary processing. No network transmission or storage method can guarantee absolute security.

8. Choices, information requests and deletion

• Manage camera, microphone, photo and notification permissions in your operating-system settings, along with available advertising-identifier, tracking and ad-personalization controls. Use any consent or privacy controls provided by the app.
• Use the app’s clearing or deletion features to manage local content. Cancel subscriptions separately through App Store or Google Play subscription management; deleting data or uninstalling an app does not cancel a subscription.
• To ask about, access, correct or request deletion of personal information handled by us or on our behalf, email ericlamdev@gmail.com with the app name, platform, request and an account or app identifier if available. Do not send passwords or full payment-card details.
• We verify requests only as needed, handle identifiable information under our control and respond within applicable legal deadlines. If some records must be retained, we explain why. Payment information independently retained by a store must be handled through Apple’s or Google’s own channels.
• Your local law may provide rights to portability, restriction or objection, withdrawal of consent, or a complaint to a regulator. Contact us to exercise applicable rights.

9. Children and policy changes

Unless an app expressly states otherwise, our Services are not directed to children under 13 or a higher local age of consent. We do not knowingly collect children’s personal information without required authorization. Parents or guardians who believe a child has provided information that should not have been collected can contact us so we can investigate and act.

We update this policy when features, providers or applicable requirements change, and revise the date above. Material changes requiring notice or renewed consent will be handled through appropriate means. Contact: ericlamdev@gmail.com.