Privacy Policy

1. Scope

This Privacy Policy explains what data Chimeloop ("the Game") collects, why, and who it is shared with. Chimeloop is published by Appelux, Inc. ("we", "us"). It applies to the Android and iOS versions of the Game, package identifier com.appelux.chimeloop.

Chimeloop has no accounts, no sign-in, and no way to send us a message from inside the Game. We never ask you for your name, email address, phone number, or payment details.

2. Data Stored Only on Your Device

Your game progress is written to a file in the Game's private storage on your device and is never uploaded to us. It contains your high score, coin balance, which items you have unlocked and equipped, your daily mission progress, the date you last played, and a checksum used to detect tampering.

Deleting the Game deletes this file. We cannot restore it, and we hold no copy of it.

3. Data Collected Automatically

Gameplay analytics, collected through Google Firebase Analytics. The Game records the following events: game_start, game_over (with score, duration, direction changes, longest streak, and whether the run set a record), coin_earned, item_purchased, item_equipped, collection_completed, mission_completed, all_missions_completed, shop_opened, ad_shown, and ad_reward_earned. These describe what happens in the Game. They contain no personal identifiers you have given us, because you have not given us any.

Device and app information, collected by Firebase Analytics as part of every event: device model, operating system version, app version, language, time zone, and a randomly generated app instance identifier.

Approximate location. Firebase Analytics derives a coarse location (typically country or region) from the IP address your device connects with. We do not collect GPS or precise location, and the Game does not request location permission.

Advertising identifiers, collected by Google AdMob when an ad is served: your device's advertising identifier (Advertising ID on Android, Identifier for Advertisers on iOS), IP address, device information, and how you interacted with the ad.

Remote configuration. When the Game starts it asks Firebase Remote Config whether any of its settings have been changed. This request carries the app instance identifier and basic device information so that a setting can be targeted at, for example, a single app version.

4. Advertising

Chimeloop shows two kinds of ad, both served by Google AdMob. Interstitial ads appear occasionally between runs. Rewarded ads are optional: you choose to watch one to revive a run or to double the coins you earned, and nothing is taken from you if you decline or close it.

AdMob may use your advertising identifier to personalise the ads you see and to measure whether an ad worked. You can limit this at any time from your device settings: on Android, Settings › Privacy › Ads lets you delete or reset the Advertising ID and opt out of personalisation; on iOS, Settings › Privacy & Security › Tracking controls whether apps may request the Identifier for Advertisers.

How Google uses data from apps that use its services is described at https://policies.google.com/technologies/partner-sites

5. How We Use This Data

To understand how the Game is played in aggregate, so that difficulty, pacing and the shop can be tuned. For example, the distribution of scores tells us whether the ring becomes unfair too quickly.

To fix problems, by seeing where and how often runs end unexpectedly.

To change gameplay values remotely without shipping a new build, through Firebase Remote Config.

To show ads and to be paid for them, which is how the Game is funded.

We do not sell your data. We do not build advertising profiles ourselves, and we do not combine analytics data with any other source.

6. Who We Share Data With

Google LLC, as the provider of Firebase Analytics and Firebase Remote Config. Their terms are at https://firebase.google.com/support/privacy

Google LLC, as the provider of AdMob advertising. Their privacy policy is at https://policies.google.com/privacy

We may also disclose data where we are legally required to, or to protect our rights, safety, or property.

There are no other recipients. Chimeloop contains no other analytics, attribution, or advertising software.

7. Legal Basis and Consent

Where the EU General Data Protection Regulation applies, we rely on your consent for personalised advertising and analytics, and on our legitimate interest in keeping the Game working and free from abuse. Where the Turkish Personal Data Protection Law (KVKK) applies, the same processing is carried out on the basis of your explicit consent and our legitimate interests.

Where required, a consent form is shown before any personalised ad is served, and you may change your choice at any time from your device's advertising settings.

8. Retention

Firebase Analytics event data is retained for the period configured in our Firebase project and is then deleted automatically by Google.

Advertising data is retained by Google according to its own policies; we have no access to it beyond aggregate revenue reporting.

Progress stored on your device is retained until you delete the Game or clear its data.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its processing, and to withdraw consent.

Because Chimeloop has no accounts, the data we hold cannot be linked back to you by name. To exercise a right, or to ask us to delete data associated with a particular app instance, write to us at support@appelux.com and include your device's advertising identifier. You may also reset that identifier at any time, which disconnects future data from past data.

You may also complain to your local data protection authority.

10. Children

Chimeloop is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us with data, contact us at support@appelux.com and we will delete it.

11. International Transfers

Google processes the data described above on servers that may be located outside your country, including in the United States. Google relies on Standard Contractual Clauses and equivalent safeguards for these transfers.

12. Security

Data sent to Google's services travels over encrypted connections. Your progress file is stored in the Game's private, sandboxed storage, which other apps cannot read.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes

If this policy changes materially, we will update the date at the top of this page and, where the change affects how data is collected, describe it in the Game's release notes.

14. Contact

Appelux, Inc., Turkey. Questions about this policy: support@appelux.com