Privacy Policy Template - Android Apps with Analytics + Ads

1. Information We Collect

1.1 Information you provide directly

We do not require you to create an account or provide personal information to play the Game.

1.2 Information collected automatically

• Game progress data: levels completed, high scores, booster inventory, in-game currency, hearts. Stored locally on your device (PlayerPrefs / file storage). Not transmitted to our servers.
• Device identifiers: platform, OS version, app version, device model, and a pseudonymous app-instance identifier. On Android these are collected by Firebase Analytics and GameAnalytics for product analytics.
• App interactions: gameplay events (level start/complete/fail, scores, booster usage, sessions) sent to Firebase Analytics and GameAnalytics.
• Crash reports: anonymized stack traces when the Game crashes, collected by Firebase Crashlytics.
• Advertising data (Android): the Google AdMob SDK may access the advertising identifier and ad interactions to serve ads. Ads are disabled at launch and only enabled remotely; where ads run, Google's UMP consent flow applies.

1.3 Information collected by third parties

The following third parties may collect information governed by their own privacy policies:

We do not sell your personal information. Where ads are enabled, our advertising partner (Google AdMob) may use the advertising identifier and IP-derived approximate location to serve and measure ads, subject to your consent.

2. How We Use Information

• To operate and maintain the Game.
• To improve gameplay balance, difficulty, and content.
• To prevent fraud, cheating, and abuse.
• To comply with legal obligations.

We do not build our own advertising profiles. Where ads are enabled and consented to, Google may personalize the ads you see.

3. Legal Basis (GDPR)

For users in the European Economic Area, United Kingdom, and Switzerland:

• Legitimate interests (Art. 6(1)(f) GDPR): game operation, fraud prevention.
• Consent (Art. 6(1)(a) GDPR): advertising data (personalized ads) via the Google UMP consent flow where required.
• Contract (Art. 6(1)(b) GDPR): processing necessary to deliver the Game and IAP.

You have the right to access, rectify, erase, restrict, port, or object to processing. To exercise these rights, email hello@kientaoso.com.

4. Data Retention

• Local game progress is retained until you uninstall the Game.
• Analytics data is retained for 14 months, then aggregated and deleted.
• Crash reports are retained for 90 days.

5. Children's Privacy

The Game is rated Everyone / 4+ and does not knowingly collect personal information from children under 13 (COPPA) or under 16 (GDPR). If you believe we have collected such information, contact us and we will delete it.

6. Your Rights

• Access the personal data we hold about you.
• Request correction or deletion.
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time.

To exercise any right, email hello@kientaoso.com. We respond within 30 days.

7. International Transfers

Your information may be processed in Vietnam, the United States, or the European Union, depending on the third-party services used. We rely on Standard Contractual Clauses (SCCs) for lawful transfers out of the EEA/UK.

8. Security

We use industry-standard measures (TLS in transit, encrypted storage at rest) to protect your information. No method of transmission or storage is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact

For privacy inquiries, include "Privacy" in the subject line.

11. Permissions Requested by the Game

The Game does NOT request: camera, microphone, contacts, location, photos, SMS, calendar, call logs, or biometric data.