Privacy Policy - Jelly Merge
(formerly "Fruit Merge: Drop & Merge")
(formerly "Fruit Merge: Drop & Merge")
Last updated: 2026-09-29
Effective date: 2026-09-29
Version: v1.1
App-specific addendum to the KTS Laboon corporate Privacy Policy.
Public URL (App Store submission): https://kientaoso.com/privacy/jelly-merge
Corporate Privacy Policy owner: CÔNG TY TNHH CÔNG NGHỆ KIẾN TẠO SỐ LABOON
This game-specific Privacy Policy supplements the KTS Laboon corporate Privacy Policy at https://kientaoso.com/legal/privacy. It describes how KTS Laboon ("we", "us", "our") handles information when you play Jelly Merge (the "Game") on Android (Google Play), iOS (App Store), or as a TikTok Mini Game (WebGL).
1. Information We Collect
1.1 Information you provide directly
We do not require you to create an account or provide personal information to play the Game.
1.2 Information collected automatically
- Game progress data: levels completed, high scores, booster inventory, gold count, hearts. Stored locally on your device (PlayerPrefs / file storage). Not transmitted to our servers.
- Device identifiers: platform (Android/iOS/WebGL), OS version, app version, device model, and a pseudonymous app-instance identifier. On Android these are collected by Firebase Analytics and GameAnalytics for product analytics; on WebGL only when the player consents.
- App interactions: gameplay events (level start/complete/fail, scores, booster usage, sessions) sent to Firebase Analytics and GameAnalytics on Android, and to GameAnalytics on WebGL.
- Crash reports: anonymized stack traces when the Game crashes, collected by Firebase Crashlytics on Android and by our analytics provider on WebGL.
- Advertising data (Android): the Google AdMob SDK may access the advertising identifier and ad interactions to serve ads. Ads are disabled at launch and only enabled remotely; where ads run, Google's UMP consent flow applies.
1.3 Information collected by third parties
Depending on the platform, the following third parties may collect information governed by their own privacy policies:
| Platform | Third party | Purpose | Data | Policy |
|---|---|---|---|---|
| WebGL (TikTok) | TikTok Mini Games | Login, IAP, rewarded ads | TikTok user ID, payment tokens | https://www.tiktok.com/legal/privacy-policy |
| WebGL (TikTok) | GameAnalytics | Gameplay analytics | Device fingerprint, events | https://gameanalytics.com/privacy |
| Android (Google Play) | Firebase Analytics | Product analytics | App-instance ID, device model/OS, app interactions | https://firebase.google.com/support/privacy |
| Android (Google Play) | Firebase Crashlytics | Crash diagnostics | Crash logs, device model/OS | https://firebase.google.com/support/privacy |
| Android (Google Play) | Google AdMob (ads disabled at launch) | Advertising | Advertising ID, ad interactions, IP-derived approximate location | https://policies.google.com/technologies/ads |
| Android (Google Play) | GameAnalytics | Gameplay analytics | Device data, gameplay events | https://gameanalytics.com/privacy |
| Android (Google Play) | Google Play Billing | In-app purchases | Purchase tokens | https://policies.google.com/privacy |
| iOS (App Store) | Apple StoreKit | In-app purchases | Purchase tokens | https://www.apple.com/legal/privacy/en/ |
| iOS (App Store) | Apple App Tracking Transparency | Ad tracking opt-in | ATT consent status | (same as above) |
We do not sell your personal information. Where ads are enabled, our advertising partner (Google AdMob) may use the advertising identifier and IP-derived approximate location to serve and measure ads, subject to your consent.
2. How We Use Information
- To operate and maintain the Game.
- To improve gameplay balance, difficulty, and content.
- To prevent fraud, cheating, and abuse.
- To comply with legal obligations.
We do not build our own advertising profiles. Where ads are enabled and consented to, Google may personalize the ads you see.
3. Legal Basis (GDPR)
For users in the European Economic Area, United Kingdom, and Switzerland:
- Legitimate interests (Art. 6(1)(f) GDPR): game operation, fraud prevention.
- Consent (Art. 6(1)(a) GDPR): analytics on WebGL, and advertising data (personalized ads) via the Google UMP consent flow where required.
- Contract (Art. 6(1)(b) GDPR): processing necessary to deliver the Game.
You have the right to access, rectify, erase, restrict, port, or object to processing. To exercise these rights, email hello@kientaoso.com.
4. Data Retention
- Local game progress is retained until you uninstall the Game.
- Analytics data is retained for 14 months, then aggregated and deleted.
- Crash reports are retained for 90 days.
5. Children's Privacy
The Game is rated Everyone / 4+ and does not knowingly collect personal information from children under 13 (COPPA) or under 16 (GDPR). If you believe we have collected such information, contact us and we will delete it.
6. Your Rights
- Access the personal data we hold about you.
- Request correction or deletion.
- Object to or restrict processing.
- Data portability.
- Withdraw consent at any time (without affecting processing already carried out).
To exercise any right, email hello@kientaoso.com. We respond within 30 days.
7. International Transfers
Your information may be processed in Vietnam, the United States, or the European Union, depending on the third-party services used. We rely on Standard Contractual Clauses (SCCs) for lawful transfers out of the EEA/UK.
8. Security
We use industry-standard measures (TLS in transit, encrypted storage at rest) to protect your information. No method of transmission or storage is 100% secure.
9. Changes to This Policy
We may update this Privacy Policy. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. A version history of material changes is below.
9.1 Material Changes
| Version | Date | Changes |
|---|---|---|
| v1.1 | 2026-09-29 | Current version. Restructured: moved the public URL from https://kientaoso.com/privacy to https://kientaoso.com/privacy/jelly-merge (the /privacy path is now a directory hub listing all per-app policies). Updated the in-body Public URL field and the corporate-supplement link to /legal/privacy to match. Added this version number and material-changes log. No change to data-handling practices. |
| v1.0 | 2026-09-29 | Initial publication at https://kientaoso.com/privacy. Added section 1.3 (third-party SDK table) and section 11 (runtime permissions table) to address the Google Play Console v18 rejection for kts.laboon.fruitmerge ("Device or other IDs not declared"). Third parties declared: Firebase Analytics, Firebase Crashlytics, Google AdMob (ads disabled at launch), GameAnalytics, Google Play Billing, Apple StoreKit, Apple App Tracking Transparency, and TikTok Mini Games. |
10. Contact
CÔNG TY TNHH CÔNG NGHỆ KIẾN TẠO SỐ LABOON (KTS Laboon)
For privacy inquiries, include "Privacy" in the subject line.
11. Permissions Requested by the Game
| Permission | Platform | Reason |
|---|---|---|
| Internet access | Android, iOS, WebGL | Load Game, send crash reports |
| In-app purchases | Android, iOS | Buy boosters, gold, hearts |
| Storage (local) | Android, iOS | Save game progress |
| Notifications | Android | Daily reward reminders (opt-in) |
| Tracking (ATT) | iOS | Required only if ad SDK is integrated |
The Game does NOT request: camera, microphone, contacts, location, photos, SMS, calendar, call logs, or biometric data.