Privacy Policy

1. Scope

2. Information we collect

Information you provide

We may collect information that you choose to provide, including:

• your email address and the contents of messages sent to support or privacy contacts;
• feedback-form responses, ratings, optional email address, device and browser descriptions, and consent confirmation;
• information supplied when making a privacy, deletion, purchase-support or customer-support request.

Please do not send sensitive personal information through free-text feedback or support fields.

Gameplay and app activity

When you play Balled Up, we may collect gameplay and usage information such as:

• game starts, sessions, attempts and game-over events;
• scores, high scores, combinations, progress and unlocked content;
• use of worlds, ball skins, virtual currency and other game features;
• advertising views, rewards and interactions; and
• timestamps and general interaction events used to understand performance and improve the Game.

Some settings and progress may be stored locally on your device. Locally stored data is generally removed when you clear the Game's data or uninstall it, although Android or iOS backup and restore features may preserve some information.

Device, technical and location information

The Game and its service providers may automatically process:

• app version, operating system, device model, language, time zone and screen or viewport information;
• network information, IP address and general region derived from the IP address;
• Android advertising ID used by the advertising SDK, Firebase app-instance ID, Mixpanel anonymous identifier, RevenueCat App User ID, Play Games Player ID and other installation, app or service-specific identifiers;
• app launches, taps, ad views and related product interactions; and
• diagnostic information such as loading time, errors, hangs, energy usage and SDK performance.

We do not use GPS to collect precise location for Balled Up. General location may be inferred from an IP address for analytics, advertising, security or fraud prevention. In the current Android configuration, Firebase Analytics advertising-ID collection and advertising-personalisation signals are disabled. The planned iOS Firebase integration excludes AdSupport. These settings do not prevent AdMob from processing the Android advertising ID where permitted for advertising purposes.

Purchases and virtual items

If you make an in-app purchase, the store through which you obtained the Game, such as Google Play or Apple's App Store, processes the payment. We do not receive your full payment-card details.

The relevant app store and our purchase-management provider, RevenueCat, may receive or store:

• the product purchased, purchase status and purchase history;
• transaction, receipt and entitlement identifiers;
• price, currency, store, refund, cancellation and chargeback information;
• an anonymous or account-linked App User ID; and
• records needed to grant, restore or remove virtual currency, ball skins, worlds or other entitlements.

The relevant app store knows that a purchase occurred, but it does not manage how earned or purchased virtual currency is later spent inside the Game. We may therefore keep virtual-currency balances, unlocks and entitlement changes on your device and use store or RevenueCat purchase records so that purchases can be restored and support requests can be handled. Google Analytics for Firebase may also automatically record an in-app-purchase event, including the product identifier, product name and price. Neither Appydos, RevenueCat nor Firebase Analytics receives your full payment-card number from the Game.

Google Play Games

On supported Android devices, the Game initialises Google Play Games Services and may attempt silent platform authentication when the main menu loads. If authentication succeeds, the Play Games integration obtains the player's Play Games Player ID and display name and submits personal-best and per-world scores to the configured leaderboards. Players may also open the Google Play Games leaderboard interface from the Game.

Your visibility choices are controlled through your Google Play Games profile. Balled Up does not use Play Games as an Appydos account, does not receive your Google account password or Google account email address through the leaderboard service, and does not use your Play Games identity for advertising.

Website and attribution information

When you use the official Balled Up website, we may process:

• the referring page, landing path and campaign parameters in the URL;
• browser and device strings, viewport dimensions and general technical information;
• page, preview, form and button interactions; and
• information submitted through the feedback form.

This information helps us understand how visitors find and use Balled Up, operate the browser preview and improve launch communications. The website and browser version may use the Google tag for Google Analytics and the Meta Pixel for page-view and campaign attribution. Those web marketing tags are removed from the packaged Android WebView and are intended to remain excluded from any future packaged iOS WebView.

3. How we use information

We use information to:

• provide, operate and maintain the Game and website;
• save progress, manage scores, grant rewards and deliver requested features;
• process, verify, restore and support purchases and virtual entitlements;
• authenticate with Google Play Games and operate leaderboards;
• provide rewarded, personalised, non-personalised or limited advertising as permitted by the user's choices and applicable law;
• measure usage, troubleshoot faults, prevent fraud and protect the Services;
• analyse performance and improve gameplay, balancing, retention and usability using Mixpanel and, in native builds, Google Analytics for Firebase;
• answer support, feedback, privacy and deletion requests; and
• comply with legal obligations and enforce our rights.

Where applicable law requires a legal basis, we process information as necessary to provide the Services, with your consent, to meet legal obligations, and for legitimate interests such as security, fraud prevention, support, analytics and improving Balled Up. We do not rely on legitimate interests where your rights override those interests.

4. Advertising and consent

5. Analytics

6. Crash reporting and diagnostics

7. When we disclose information

We may disclose information to:

• Google - for Google Play distribution and billing, AdMob advertising, Google Analytics for Firebase, fraud prevention and Google Play Games authentication and leaderboards;
• Apple - for App Store distribution, billing and platform services if and when an iOS version is released;
• AppLovin - to mediate and deliver advertising and provide ad measurement, security and fraud prevention in the planned future iOS version; AppLovin is not included in the current Android build;
• RevenueCat - to validate purchases, manage purchase history and entitlements, and support refunds or restorations;
• Mixpanel - to provide product and gameplay analytics;
• Meta - to provide website page-view and campaign attribution through the Meta Pixel; the Pixel is removed from the packaged native WebView;
• Supabase and hosting or infrastructure providers - to host the website, feedback and data deletion forms, database and related backend services;
• Sentry - to provide error reporting and technical diagnostics for the website, browser preview and Android WebView;
• professional advisers and authorities - when reasonably necessary to comply with law, protect users, investigate fraud or defend legal rights; and
• a successor or transaction party - if the Services or relevant business assets are reorganised, financed, sold or transferred, subject to appropriate confidentiality and notice requirements.

8. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including:

• local game data until it is cleared, overwritten or the Game is uninstalled, subject to device backups;
• purchase, entitlement, fraud-prevention and transaction records while needed to provide purchases, restore content, resolve disputes and prevent abuse; payment, tax and accounting records may be retained for up to seven years, or longer only when applicable law requires it;
• leaderboard and Play Games information according to the player's Google settings and Google's retention controls;
• feedback and support records while they remain useful for resolving the request and improving the Game;
• a minimal record of a verified deletion request and its outcome for up to three years, so we can demonstrate that the request was handled;
• analytics and attribution data held through Mixpanel, Google Analytics for Firebase, the website Google tag or the Meta Pixel for the applicable configured retention period, after which it is deleted or aggregated where reasonably possible; and
• crash and diagnostic records for the configured error-retention period or until they are no longer reasonably needed to diagnose the relevant fault.

We may retain information for longer if required by law, needed to establish or defend legal claims, or necessary to prevent fraud. Aggregated or de-identified information that can no longer reasonably identify a person may be retained for research and service improvement. Information deleted from active systems may remain in encrypted backups for up to 90 additional days before those backups are overwritten in the ordinary cycle.

9. Deletion and privacy rights

10. Security

We use reasonable technical and organisational safeguards designed to protect information, including HTTPS or other encrypted network transmission, access controls and restricted access to raw form submissions. The Android app disables cleartext network traffic and loads its packaged web content from a restricted local origin. No system is completely secure, and we cannot guarantee absolute security.

11. Children

12. Changes to this Policy

We may update this Policy when the Services, SDKs, legal requirements or data practices change. The updated version will be posted at the same public URL with a revised "Last updated" date. If a change materially affects how we use personal information, we will provide additional notice or request consent where required.

13. Contact