Gamefinity Privacy Policy

01Introduction

This Privacy Policy applies to the Gamefinity mobile application ("Gamefinity," "the app," "we," "us," or "our"), available on Google Play under package name com.appfinity.gamefinity. It describes what information the app collects, how it is used and shared, how long it is kept, and the choices and rights you have regarding your information.

This policy is written to reflect what Gamefinity's code and configuration actually do. Where something could not be confirmed from the app's source code, it is marked below as requiring developer confirmation rather than assumed.

02Who we are

Gamefinity is developed and operated under the name Appfinity Technologies (referred to in this policy as "we," "us," or "our"). Appfinity Technologies is not currently a registered company; it is an individual/unregistered developer operating under this trade name. This section will be updated with the registered legal entity name if and when the business is formally incorporated.

Business address: Surat, Gujarat, India

Privacy contact: appfinitytechnologies@gmail.com

03Scope of this policy

This policy covers the Gamefinity Android application only. It does not cover third-party websites, apps, or services that Gamefinity may link to or that process data independently, such as Google, Meta, or your device manufacturer — those parties' own privacy policies govern their handling of your information.

Gamefinity is currently offered in the following countries/regions: Worldwide. The applicability of laws referenced in this policy (for example, the EU GDPR or India's DPDP Act) depends on where the app is actually offered and used.

04Information we collect

The tables below describe each category of information Gamefinity processes, based on the app's current implementation.

4.1 Account & authentication data

When you sign in with Google, we process:

4.2 Guest account data

If you use Gamefinity without signing in, we generate a random guest identifier (UUID) and a display name such as "Guest-XXXXXX." No email or other personal information is collected for guest sessions. This identifier is stored locally (encrypted) and is not transmitted to any third party.

4.3 Game & local data

Gameplay data — game state, scores, difficulty level, and preferences such as sound, music, vibration, notifications, and hints — is stored only on your device and is not transmitted to us or any third party.

4.4 Analytics data

We use Firebase Analytics to understand how Gamefinity is used. Events we track include sign-in and sign-out activity, ad-related events, consent-dialog interactions, and general engagement events. Every event automatically includes the app version. Firebase Analytics data is retained by Google for up to 14 months and is not automatically deleted when you delete your account.

4.5 Crash & diagnostic data

We use Firebase Crashlytics to diagnose app crashes and authentication errors. This includes crash stack traces, exception details, device model, OS version, app version, your Firebase UID, and — specifically — your account email address, which is sent to Crashlytics as a custom key to help us correlate crash reports. On authentication failures, we may also transmit the app's package name and signing-certificate fingerprints for debugging. Crashlytics data is retained by Firebase for 90 days. Your UID and email are reset when you delete your account, but crash reports already logged during that 90-day window may persist without being linked back to you.

4.6 Performance data

Firebase Performance Monitoring is included in the app and automatically collects network-request and app-startup performance metrics. This does not include personal content, but is disclosed here for transparency.

4.7 Advertising data

Gamefinity shows ads using Google Mobile Ads (AdMob), with Meta Audience Network as a mediation partner. When you consent to ads personalization (see Section 11), these providers may use your Advertising ID (GAID), device and technical information, and ad interaction data to serve, measure, and personalize ads. Ad SDKs are not initialized until our consent gate confirms it is permitted to request ads.

4.8 Push notification data

Gamefinity uses Firebase Cloud Messaging (FCM) to deliver notifications. A device registration token is generated by Firebase on startup. On Android 13 and above, we request the notification permission at runtime.

4.9 Remote Config

We use Firebase Remote Config to control which ad formats are shown and how frequently. This does not involve personal data.

4.10 CDN / backend data

Some in-app images are loaded from a remote address at app startup. Loading these images involves standard network request metadata (such as your IP address) being received by the hosting provider.

4.11 Device & technical data

Firebase SDKs automatically collect device model, manufacturer, operating system version, and app version. Gamefinity also performs local root-detection and emulator-detection checks for security purposes; the results of these checks are not transmitted anywhere except as part of crash-debugging data described in Section 4.5.

4.12 Network / IP information

Like virtually all internet-connected apps, your IP address is inherently visible to Firebase, Google, Meta, and any CDN/backend provider we use whenever the app makes a network request. We do not separately log or store IP addresses ourselves.

05Permissions we request

Gamefinity does not request access to your location, camera, microphone, contacts, storage, Bluetooth, SMS, or biometric data.

06How and why we use information

• To provide the app's core functionality — authenticating you, saving game progress, and applying your preferences.
• To maintain and improve the app — analytics on feature usage and engagement.
• To diagnose and fix problems — crash reporting and performance monitoring.
• To deliver and measure advertising — where you have provided the required consent.
• To send notifications — where permitted by your device settings.
• To protect the app and its users — root/emulator detection, signature verification.

07Legal bases (EU/EEA users)

If you are located in the European Economic Area or the UK, we rely on the following legal bases under the GDPR, to the extent this section is confirmed as applicable to Gamefinity's actual distribution:

• Consent — for ads personalization and any processing gated by our consent (UMP) tool.
• Performance of a contract — for account creation, authentication, and delivering core app functionality you request.
• Legitimate interests — for analytics, crash diagnostics, and security measures such as root/emulator detection, balanced against your rights and interests.

08Firebase services

Gamefinity uses the following Firebase (Google) services:

• Firebase Authentication — account sign-in.
• Firebase Analytics — usage analytics (Section 4.4).
• Firebase Crashlytics — crash reporting (Section 4.5).
• Firebase Remote Config — ad-display configuration.
• Firebase Cloud Messaging — push notifications.
• Firebase Performance Monitoring — app performance metrics.

Learn more about how Firebase handles data at Google's official Firebase privacy and security documentation.

09Google services

In addition to Firebase, Gamefinity uses:

• Google Sign-In / Android Credential Manager — for authentication.
• Google Mobile Ads SDK (AdMob) — for advertising.
• Google User Messaging Platform (UMP) — to collect and manage your consent choices.
• Google Play Integrity API SDK — included for app-integrity checks; token-based verification with Google's servers is not confirmed as active in the current build.

See Google's Privacy Policy and how Google uses information from sites or apps that use its services.

10Meta / Facebook Audience Network

Gamefinity uses Meta Audience Network as a mediation partner for advertising. When ads personalization consent is granted, Meta Platforms, Inc. may independently collect device and advertising identifiers to serve and measure ads, in accordance with its own privacy practices. Meta is a separate data controller for this processing, not a party we directly control.

See Meta's Privacy Policy for details.

11Advertising & your choices

Gamefinity shows App Open, Interstitial, Native, and Banner ads. Before requesting any ad, we check your consent status through Google's User Messaging Platform (UMP). Ad SDKs are only initialized if that check confirms we are permitted to request ads.

You can manage your advertising choices at any time by:

• Reopening the in-app privacy/consent form to change your ads-personalization choice.
• Resetting or opting out of your device's Advertising ID in your Android system settings.

Gamefinity does not use child-directed advertising settings (setTagForUnderAgeOfConsent(false)) — see Section 18, Children's Privacy.

12Who we share data with

We do not sell your personal information.

13International data transfers

Google/Firebase and Meta process data on servers located primarily in the United States and other countries where they operate infrastructure. If you are located outside these countries, your information may be transferred internationally, subject to each provider's own safeguards.

14Data retention

15Data deletion

You can request deletion of your Gamefinity account and locally stored data at any time. Deleting your account does not automatically erase historical analytics or crash-report entries already logged with Google, which follow the retention periods in Section 14 independent of account deletion.

16Account deletion

Deleting your account through the app (for Google-authenticated users) will:

• Delete your Firebase Authentication record.
• Clear locally stored game state and best scores.
• Clear locally stored session data.
• Reset your Crashlytics user ID and email custom key.

It will not automatically:

• Erase historical Firebase Analytics data (per the retention period in Section 14).
• Unregister your FCM push-notification token from Firebase's servers.
• Remove historical Crashlytics crash reports already logged.

You can also request account deletion, or ask questions about it, via our dedicated deletion page: Gamefinity Account Deletion, or by emailing appfinitytechnologies@gmail.com.

17Security measures

• HTTPS is enforced; cleartext network traffic is blocked.
• Local session data is encrypted with AES-GCM via the Android Keystore.
• Automatic device backup of app data is disabled.
• The app is obfuscated with R8 in full mode, and debug logging is stripped from release builds.
• App signature verification and root/emulator detection are used to help protect app integrity.

Certificate pinning is not currently implemented. No security measure can guarantee absolute protection, and we encourage you to keep your device and app up to date.

18Children's privacy

Gamefinity is listed as a general-audience game. We do not use Google's child-directed advertising tag, and the app does not implement an age gate.

19Your privacy rights

All users

Universal

• Request deletion of your account (Section 16).
• Withdraw ads-personalization consent at any time (Section 20).
• Turn off notifications through your device's system settings.
• Reset or opt out of your Advertising ID through your device's system settings.

If you are in the EU/EEA/UK

GDPR

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten"), subject to Section 16's limitations.
• Right to restrict or object to certain processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with your local data protection supervisory authority.

If you are in India

India DPDP Act

Under India's Digital Personal Data Protection Act, 2023 and its 2025 Rules, applicable rights (including access, correction, and erasure of personal data, and grievance redressal) are being phased in, with core provisions in force from 13 November 2025 and most substantive compliance obligations taking effect from 13 May 2027. We will update this section as our obligations and the app's India availability are confirmed.

US state privacy laws

US states (where applicable)

If you are a resident of a US state with an applicable comprehensive privacy law, you may have rights similar to those listed above. Contact us to make a request.

20Withdrawing consent

You can change or withdraw your ads-personalization consent at any time by reopening the in-app privacy choices form (accessible from the app's settings/privacy options), which is powered by Google's User Messaging Platform.

21Third-party links

• Firebase Privacy & Security
• Google Privacy Policy
• How Google Uses Information
• Meta Privacy Policy

22Automated decision-making

The only automated processing involving your data is ad personalization, which selects ads based on interest and behavioral signals when you have provided consent. This does not produce legal or similarly significant effects on you, and Gamefinity does not use any other automated decision-making or profiling.

23Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the app, our practices, or legal requirements. We will update the effective date at the top of this page when changes are made. Material changes may also be communicated within the app.

24Contact & complaints

If you have questions about this Privacy Policy or how your information is handled, or if you'd like to exercise any of the rights described above, contact us at:

Email appfinitytechnologies@gmail.com

If you are in the EU/EEA/UK, you also have the right to lodge a complaint with your local data protection supervisory authority. If you are in India, complaints may in future be directed to the Data Protection Board of India once the relevant DPDP Act provisions are in force, or to any grievance officer designated by us as required under the DPDP Rules.