Privacy Policy

1. Introduction

Welcome to Sudoku Zen ("the App"), developed and published by The Mighty Midgets ("we", "us", or "our"). The App is available on the Google Play Store under the package identifier com.themightymidgets.sudoku.

This Privacy Policy explains what information is collected when you use the App, how that information is used, with whom it may be shared, and what rights you have with respect to your data. By downloading, installing, or using Sudoku Zen, you agree to the practices described in this policy.

We are committed to protecting your privacy. We collect only the minimum data necessary to operate the App, improve your experience, and deliver the services described herein. We do not sell your personal information.

If you do not agree with this Privacy Policy, please do not use the App.

2. Information We Collect

2.1 Information Collected Automatically

When you use the App, certain information is collected automatically by our integrated third-party services. We do not directly collect or store this information on our own servers.

a) Usage and Analytics Data (Firebase Analytics)

• Screen views and in-app navigation events
• In-game events (e.g., puzzle started, puzzle completed, hint used, difficulty selected)
• Session duration and session frequency
• App version and build number
• General device information (device model, operating system version, language/locale)
• Country or region (derived from IP address at request time; IP address itself is not retained by Firebase after derivation)

This data is collected in an anonymized and aggregated form to help us understand how the App is used and to improve the user experience. No data collected by Firebase Analytics is linked to your name, email address, or any other directly identifying information.

b) Crash and Diagnostics Data (Firebase Crashlytics)

When the App encounters an unexpected error or crash, the following information is automatically sent to Firebase Crashlytics:

• Device model and manufacturer
• Android OS version
• App version and build number
• Stack traces and error logs at the time of the crash
• Date and time of the crash event
• Whether the session was crash-free

No personally identifiable information (PII) such as your name, email, or location is collected by Crashlytics.

c) Push Notification Token (Firebase Cloud Messaging)

If you grant the App permission to send push notifications (for example, daily puzzle reminders or streak alerts), Firebase Cloud Messaging assigns your device a pseudonymous device registration token. This token:

• Is used solely to route push notifications to your device
• Is not linked to your name, email address, or any other personal identifier
• Can be reset at any time by revoking notification permissions or clearing the App's data

You may opt out of push notifications at any time via your device's system notification settings or within the App's Settings screen.

d) Advertising Identifier and Ad-Related Data (Google AdMob)

The App is supported by advertising provided by Google AdMob. To serve and measure advertisements, AdMob may collect:

• Google Advertising ID (GAID) — a resettable, pseudonymous identifier provided by the Android platform
• Device information (model, OS version, screen size)
• IP address (used to determine approximate geographic location for ad targeting)
• Ad interaction data (impressions, clicks, ad engagement)
• Behavioral and interest-based data for personalized advertising (subject to your consent and applicable law)

AdMob's data collection and use are governed by Google's Privacy Policy (see Section 4). You can opt out of personalized advertising by resetting your Advertising ID in your device's Google Settings, or by using the ad controls available at adssettings.google.com.

e) Remote Configuration Data (Firebase Remote Config)

The App fetches configuration values from Firebase Remote Config to enable or adjust features without requiring an app update. This service does not collect any user data or transmit any personal information to our servers.

f) Google Play Games Services (Sign-In, Achievements, Leaderboards)

If you sign in to Google Play Games inside the App's Settings screen, Google Play Games Services collects:

• Your Play Games player ID (a pseudonymous identifier)
• Your Play Games display name and avatar (as shown to you in the Play Games app)
• Achievement unlock events and leaderboard score submissions you generate by playing the game

This data is sent directly from your device to Google's servers and is governed by Google's Privacy Policy (see Section 4). Sign-in is opt-in — the App does not request or transmit this data unless you tap "Sign in with Play Games" in the Settings screen. You can sign out at any time from the same screen, after which no further Play Games data is transmitted from the App.

2.2 Information You Provide (In-App Purchases)

If you choose to unlock premium features via an in-app purchase (Monthly subscription, Yearly subscription, or Lifetime purchase), the transaction is processed entirely by Google Play Billing. We do not receive, handle, or store your payment card details, billing address, or any financial information. Google Play provides us only with a confirmation of the purchase and an associated purchase token to validate your entitlement within the App.

2.3 Data Stored Locally On Your Device

The following data is stored exclusively on your device using Android's DataStore and is never transmitted to our servers or any third party:

3. How We Use Your Information

We use the information described above for the following purposes:

We do not use your data for:

• Building individual user profiles that are sold to third parties
• Tracking your activity across other apps or websites (beyond what AdMob does under Google's own policies)
• Making automated decisions with legal or similarly significant effects on you

4. Third-Party Services

The App integrates the following third-party services, each governed by their own privacy policies. We encourage you to review these policies to understand how they handle your data.

5. Data Storage and Security

5.1 On-Device Storage

All game progress, settings, and statistics are stored locally on your device using Android's DataStore. This data is sandboxed within the App's private storage, is not accessible to other apps, and is deleted permanently if you uninstall the App.

5.2 Third-Party Server Storage

Data collected by Firebase (Analytics, Crashlytics, FCM) is stored on Google's secure infrastructure. Data collected by AdMob is stored on Google's advertising infrastructure. For users who sign in, Play Games player profile data and achievement / leaderboard events are stored on Google's Play Games Services infrastructure. We do not operate our own servers for the App.

5.3 Security Measures

We take reasonable technical and organizational measures to protect your data, including:

• Relying on Google's enterprise-grade security infrastructure for all cloud-based data
• Collecting only the minimum data necessary for the App to function
• Not transmitting local on-device data to external servers
• Using Android's sandboxed storage for all locally persisted data

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

5.4 International Data Transfers

Because we use Firebase, AdMob, and Play Games Services (all operated by Google LLC, a US-based company), data processed by these services may be transferred to and stored in the United States or other countries outside your jurisdiction. Google implements appropriate safeguards for such transfers, including Standard Contractual Clauses approved by the European Commission, in compliance with GDPR Article 46.

6. Data Retention

We do not retain raw analytics, crash data, or Play Games event data beyond the periods managed by Google's platforms.

7. Children's Privacy

Sudoku Zen is not directed at children under the age of 13 (or under 16 in the European Economic Area, where applicable). We do not knowingly collect personal information from children. The App is designed for general audiences and is rated accordingly on the Google Play Store.

If you are a parent or guardian and you believe your child has provided personal information through the App, please contact us at themightymidgets7@gmail.com. We will take prompt steps to delete such information from our records and instruct our third-party service providers to do the same.

Because AdMob is integrated in this App, we have configured AdMob to not serve personalized ads in contexts where child audiences are identified. However, as noted above, this App is not directed at children.

8. Your Rights

8.1 GDPR Rights (EEA, United Kingdom, and Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and applicable local law:

• Right of Access — Request a copy of the personal data we hold about you.
• Right to Rectification — Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten") — Request deletion of your personal data, subject to certain legal exceptions.
• Right to Restriction of Processing — Request that we limit how we use your data in certain circumstances.
• Right to Data Portability — Request your data in a structured, commonly used, machine-readable format.
• Right to Object — Object to processing based on our legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent — Where processing is based on consent (e.g., push notifications, personalized ads, Play Games sign-in), withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint — Lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority in the EU).

To exercise your GDPR rights, please contact us at: themightymidgets7@gmail.com

Note: Because most data is processed by Google (via Firebase, AdMob, and Play Games Services), you may also need to submit requests directly to Google for data held in their systems. We will assist you in directing your request appropriately. We will respond to verified requests within 30 days, in accordance with GDPR timelines.

8.2 CCPA Rights (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you the following rights:

• Right to Know — Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months, including the purposes for collection, sources, and categories of third parties.
• Right to Delete — Request deletion of personal information we have collected from you, subject to certain exceptions.
• Right to Correct — Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing — We do not sell your personal information. We do share data with Google (Firebase, AdMob, Play Games Services) for analytics, advertising, and player-progress purposes. You may opt out of ad personalization via your Android device's advertising settings and sign out of Play Games via the App's Settings screen.
• Right to Limit Use of Sensitive Personal Information — We do not collect sensitive personal information as defined under CCPA.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, please contact us at: themightymidgets7@gmail.com

We do not have actual knowledge that we sell or share personal information of consumers under 16 years of age.

8.3 Controls Available to All Users

Regardless of your location, you can:

• Opt out of push notifications at any time via Android system settings or the App's Settings screen
• Reset or delete your Advertising ID via Android's Google Settings
• Sign out of Google Play Games at any time via the App's Settings screen, which immediately stops Play Games data transmission from the App
• Delete all local App data by uninstalling the App or clearing App data via Android system settings

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the App's features, or applicable laws. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Display an in-app notice or prompt informing you of the updated policy

The updated policy will be effective as of the date indicated. Your continued use of Sudoku Zen after the effective date of any update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

If we make changes that require your explicit consent under applicable law (e.g., changes to how we use data for advertising), we will seek that consent before the changes take effect.

Previous versions of this Privacy Policy are available upon request by contacting us at the address below.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

The Mighty Midgets
Email: themightymidgets7@gmail.com

We aim to respond to all privacy inquiries within 30 days of receipt. If you are not satisfied with our response, you have the right to contact your local data protection authority.