Last Updated: October 2026
Zuzu Lab (“we,” “our,” or “us”) respects your privacy. We created Tainted as an offline practice game that helps developers get better at spotting security vulnerabilities in code. This Privacy Policy explains our data practices.
To remember your progress, the app saves the following on your device only: the programming languages you have selected, the rounds you have completed, your scores and streaks, which examples you have already seen, and your accuracy for each vulnerability category. This data is stored using Apple’s native frameworks (UserDefaults). We have no access to it, and it is never transmitted to us or to any third party. A round that is still in progress is kept in memory only and does not resume after the app is closed.
If your device is backed up to iCloud or a computer, this data is included in that backup like other app data; backups are handled by Apple under your own device settings.
Deleting the app permanently removes everything it saved. Offloading the app keeps its data until you reinstall or delete it.
Sharing is always your choice. If you tap “Share result,” the app opens Apple’s standard share sheet with your round number, your number of correct answers, and a grid of results. You decide whether to share and which app or person receives it, and that service handles the shared text under its own privacy policy. The app never shares anything automatically.
Tainted contains no in-app purchases, no advertising, and no subscriptions. The code examples shown in the app are displayed as text only. The app never runs them.
Tainted is a practice tool for software developers and is not directed to children. Because we collect no personal information from anyone, we collect none from children.
If we change this policy, we will update the “Last Updated” date above and post the revised version at this address.
If you have any questions or concerns about this Privacy Policy or our practices, please contact us.