Last Updated: July 2026
Zuzu Lab (“we,” “our,” or “us”) respects your privacy. Baited is a game that trains you to recognize phishing messages. We built it to work entirely on your device. This Privacy Policy explains our data practices.
Your game statistics — games played, best score, current and best streak, per-category accuracy, and which cards you have recently seen — are stored entirely locally on your device using Apple’s native data framework (UserDefaults). We have no access to this data, and it is never transmitted to us or to any third party.
This data never leaves your device, and deleting the app permanently removes it.
Baited lets you share your round results using Apple’s standard share sheet. This is always started by you, and the shared content is a short text summary of your score, for example:
Baited — 8/10 🎣
✅✅🎣✅✅❌✅✅✅✅
We never see what you share or who you share it with. Once you send it to another app or service, that app’s own privacy policy applies.
Baited contains no in-app purchases, no advertising, and no subscriptions. Web addresses shown on the game cards are simulated examples used as gameplay; they are displayed as text only and cannot be tapped or opened.
Baited is suitable for general audiences. Because we collect no personal information from anyone, we collect none from children.
The messages, emails, websites, and links shown in Baited are fictional examples created for training purposes. Company and brand names appear only as they would in real-world phishing attempts, so players can learn to recognize genuine threats. We use no logos or trademarked imagery, and we are not affiliated with, endorsed by, or sponsored by any company named in the game. All addresses, phone numbers, and web links shown in the game are fabricated for illustration.
If we change this policy, we will update the “Last Updated” date above and post the revised version at this address.
If you have any questions or concerns about this Privacy Policy or our practices, please contact us.