Privacy Policy

1. Information We Collect

Information you provide directly

• Display name — chosen by you and shown on leaderboards and to friends.
• Email address — only if you choose to link an email account or sign in with Google. Used solely for account recovery and authentication.
• Referral codes — if you enter or share an invite code.

Information collected automatically

• Game progress data — coins, streak count, scores, levels completed, achievements, daily login history, season pass progress, themes owned.
• Device identifiers — Google Advertising ID for delivering rewarded ads. You can reset or opt out of this in your device settings.
• Push notification token — only if you grant permission for streak and challenge reminder notifications. You can revoke this at any time in your device settings.
• Anonymous usage analytics — screen views, taps, in-app events, and crash diagnostics, used to improve the App.

Information we do NOT collect

• We do not collect your real name, phone number, address, or precise location.
• We do not access your contacts, photos, or device storage outside of the App's own data.
• We do not sell your personal information to anyone, ever.

2. How We Use Your Information

• To run the game (save your progress, sync between devices, calculate leaderboards).
• To deliver rewarded ads through Google AdMob (only when you opt in by tapping a “watch ad” button).
• To process in-app purchases (Season Pass) through RevenueCat and Google Play Billing.
• To send optional push notifications (streak reminders, daily challenges, re-engagement) — only with your permission.
• To detect crashes, diagnose performance issues, and improve gameplay.
• To prevent fraud and abuse (e.g., leaderboard manipulation).

3. Third-Party Services

We use trusted third-party providers to operate the App. Each service has its own privacy policy.

• Supabase — secure backend hosting for your account and game data. supabase.com/privacy
• Google AdMob — rewarded video ad delivery. policies.google.com/privacy
• RevenueCat — subscription management for the Season Pass. revenuecat.com/privacy
• PostHog — anonymous product analytics. posthog.com/privacy
• Google Play Billing — in-app purchase processing. Governed by Google Play's policies.
• Expo Notifications — delivery of push notifications. Tokens are managed via Apple Push Notification Service and Google Firebase Cloud Messaging.

4. Data Sharing

We do not sell or rent your personal information. We share data only with the third-party processors listed above, and only as necessary to operate the App.

Your display name, game scores, and cosmetic equipment are visible to other players on the public leaderboard. Your email address, account ID, and personal account details are never shown to other players.

5. Children's Privacy

Bloxify is rated for ages 13 and up and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us information, please contact us so we can remove it.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data — change your display name in Settings, or contact us.
• Delete your account and all associated data — request via the contact below. Account deletion is permanent and removes your data from our backend within 30 days.
• Opt out of analytics — disable advertising ID tracking via your device's privacy settings.
• Withdraw consent for push notifications at any time via your device's notification settings.

Residents of the EU/UK have additional rights under GDPR; residents of California have additional rights under CCPA. Contact us to exercise any of these rights.

7. Data Security

All data transmitted between the App and our servers is encrypted using HTTPS/TLS. Your data is stored on Supabase's secure infrastructure with access controls and at-rest encryption. No transmission over the internet can be guaranteed 100% secure, but we work to protect your information using industry-standard practices.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is removed within 30 days, except where retention is required by law (e.g., financial records of in-app purchases, retained by Google Play and RevenueCat per their policies).

Anonymous analytics events are retained for up to 24 months for aggregate trend analysis, then automatically purged.

9. International Users

Our servers are operated by Supabase and may be located in the United States or other countries. By using the App, you consent to the transfer and processing of your information in countries that may have data protection laws different from those in your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects when the policy was last changed. Material changes will be communicated in-app before they take effect.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: support@bloxify.app