Privacy Policy

1Overview & scope

This Privacy Policy explains what information MindBlume, developed by VuelvaTech ("we," "us," or "our"), collects, how it's used, and who it's shared with. It covers the MindBlume Android app (the "App") available on Google Play.

The short version: there's no account system and no server of ours storing your gameplay. Your progress lives on your own device. Information that leaves your device goes to Google services: AdMob for ads, Firebase Analytics for usage statistics, Google Play for purchases, and, if you choose to sign in, Play Games for Leaderboards. Where the law requires it (for example in the European Economic Area and the UK), the App asks for your consent before ads are personalised or analytics are stored. Each flow is detailed below.

2Information we collect

2.1 Information stored on your device

The App saves the following in its private storage on your device. It is never transmitted to us. We have no server, and no way to see it:

• Stage progress, stars, and completion history for all four games;
• Coins, experience level, and shop items you've bought or equipped (garden decorations, music, card backs, hint tokens);
• Preferences: sound and music settings, text size, colour-blind mode, and similar options;
• Daily Gauntlet streak, Garden Festival and daily gift progress;
• Whether you've seen each game's tutorial, and your daily reminder preference.

If you have Android's device backup turned on, Android may include this data in your device's backup to your own Google account, so your progress can be restored after a reinstall or on a new phone. That backup is managed by Google under your account; we can't access it. Uninstalling the App or clearing its storage deletes the copy on your device.

2.2 Google Play Games Services (Leaderboards)

If you open Leaderboards, the App asks you to sign in with Google Play Games Services. If you do, Google provides the App your Play Games player ID, display name, and avatar so your scores can be shown and ranked. The App submits your highest level, daily streak, and each game's stages cleared and total stars to Google's leaderboards, where other players can see them. If you never sign in, none of this happens.

This sign-in and the data behind it are governed by Google's Privacy Policy and the Play Games Services terms, not just ours.

2.3 Advertising (Google AdMob)

The App shows rewarded ads (which you choose to watch in exchange for an in-game benefit, such as a hint or repairing a streak) and occasional full-screen ads between stages. These are supplied by Google AdMob. Google's SDK inside the App collects device- and advertising-related information, such as your advertising ID, general device and app information, and approximate location derived from your IP address, to select, show, and measure ads, and to prevent fraud. We don't receive or store this information ourselves; Google processes it under its own policies.

In the European Economic Area, the UK, and Switzerland, the App shows Google's consent form before any ad is requested. If you don't consent, you may still see ads, but they won't be personalised. You can change your choice at any time (see Section 8).

2.4 Analytics (Google Firebase Analytics)

The App uses Firebase Analytics to understand how the App is used, so we can balance difficulty and fix what isn't working. It records events such as finishing the tutorial, clearing or failing a stage, completing a daily challenge, levelling up, watching a rewarded ad, or making a purchase, together with standard device information (model, OS version, country, app version) and an app-instance identifier generated by Firebase. It does not include your name, email address, or Play Games identity, and analytics data is never used for advertising.

Where consent is required, analytics data is only stored if you agree in the consent form, and it follows your choice if you change it later.

2.5 Purchases (Google Play Billing)

If you buy something in the App, such as Remove Ads, the payment is handled entirely by Google Play. We never see your payment card or billing details. The App receives only a confirmation of what you bought, so it can unlock it and restore it automatically if you reinstall.

2.6 Internet time check

To keep daily challenges fair, the App checks the current date with a public time service (Cloudflare or timeapi.io) before starting the Daily Gauntlet, the weekly Garden Festival, or the daily gift. This request contains no personal information. Like any web request, it reveals your IP address to that service, which we don't receive.

2.7 Notifications & reviews

If you turn on the optional daily reminder, the App schedules a local notification on your device; nothing is sent to us. The App may also ask Google Play to show its standard "rate this app" prompt; any review you leave is handled by Google Play.

2.8 Automatically collected technical data

Google's SDKs bundled with the App (Google Play services, AdMob, Firebase, Play Games Services, Play Billing, and Play In-App Review) can independently collect standard technical data (device model, OS version, crash and diagnostic data, IP address) under Google's own privacy policy.

3How we use information

Because your gameplay data stays on your device, there's very little for us to "use" in the traditional sense. Where information does leave your device, it's used only to:

• Show and rank Leaderboards, if you choose to sign in;
• Serve and measure the ads that keep the App free;
• Process purchases and restore them on reinstall;
• Understand, in aggregate, how the App is played so we can improve it (Firebase Analytics);
• Confirm the current date for daily challenges.

We do not sell your information, and we do not use it for any purpose beyond operating the features described in this Policy.

4How information is shared

We share information only with the service providers needed to run the features above: Google (AdMob, Firebase Analytics, Play Billing, Play Games Services) and the time services named in Section 2.6. We don't sell data or share it with anyone else, except where required to comply with law, protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case this Policy would continue to apply to your information under the new ownership).

5Third-party services

These providers operate independently of us. We encourage you to review each one's own privacy practices if you want detail beyond what's summarized here.

6Data retention

Data stored on your device (Section 2.1) stays until you uninstall the App or clear its storage; a device backup in your Google account follows Google's backup rules. Data handled by Google's services (Sections 2.2 to 2.5 and 2.8) is retained according to Google's own retention practices; Firebase Analytics event data is kept for a limited period set in our Firebase settings and then deleted automatically.

7Children's privacy

MindBlume is intended for adults and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the App, contact us at mark@vuelvatech.com and we will take appropriate steps to address it.

8Your choices & rights

• Privacy choices: if you're in a region where consent is required, open Settings → Privacy choices in the App at any time to review or change your consent for ads and analytics.
• Ad personalization: you can opt out of personalized advertising, or reset or delete your advertising ID, from your device's Google settings (Settings → Google → Ads, or Security & privacy → Ads on newer phones).
• Remove ads: the optional Remove Ads purchase stops full-screen ads; rewarded ads are only ever shown when you choose to watch one.
• Sign out of Leaderboards: Google Play Games sign-in can be managed or revoked from your device's Google account settings or the Google Play Games app.
• Notifications: the optional daily reminder can be turned off from the App's Settings screen, or from your device's notification settings, at any time.
• Clear local data: uninstall the App, or clear its storage from your device's App settings, to erase your progress and preferences from the device.

9Data security

Because your gameplay data stays on your device, its security largely depends on your device's own protections (lock screen, OS updates, account security). Information sent to Google or the time services travels over encrypted connections to those providers, who maintain their own security programs. No method of transmission or storage is 100% secure, and we can't guarantee absolute security for information handled by third parties.

10International transfers

Google and the other providers in Section 5 may process information in countries other than your own. Such transfers are handled under those providers' own compliance mechanisms (such as Standard Contractual Clauses, where applicable) as described in their privacy policies.

11Region-specific rights

If you're in the European Economic Area, UK, or Switzerland (GDPR)

We rely on your consent for personalised advertising and for analytics, which you can withdraw at any time in Settings → Privacy choices. Showing non-personalised ads, processing purchases, and running Leaderboards you sign in to rely on providing the service you asked for and our legitimate interest in keeping the App free and fair. You have the right to request access to, correction of, or deletion of your personal information, to object to or restrict certain processing, and to data portability, to the extent that information is held by us. Because we hold none of your gameplay data ourselves, most requests will concern data held by Google, and we're happy to help direct you at the contact below. You also have the right to complain to your local data protection authority.

If you're a California resident (CCPA/CPRA)

You have the right to know what personal information is collected, to request deletion, and to opt out of the "sale" or "sharing" of personal information (as those terms are defined under California law). We do not sell personal information. Advertising delivered through AdMob may be considered "sharing" for cross-context behavioral advertising under CPRA. See Section 8 for how to opt out of ad personalization on your device.

12Changes to this policy

We may update this Privacy Policy from time to time, for example when we add a feature that changes what data the App handles. When we make material changes, we'll update the "Effective" date above and, where appropriate, note the change inside the App.

13Contact us

Questions about this Policy, or a request regarding your information? Reach us at mark@vuelvatech.com.