Privacy Policy for Flappy AI

Information processed

Account and cloud-save data

The App uses Firebase Authentication. A new installation may receive an anonymous player identifier. If you choose to link Google or Apple, Firebase may process your provider identifier, email address, display name, and authentication tokens. The App may synchronize scores, run history, campaign and mission progress, settings, equipped cosmetics, protected purchase grants, and related timestamps through Firebase Cloud Firestore. Earned Compute and gameplay upgrades currently remain on your device; uninstalling or clearing App data may remove them.

Analytics and diagnostics

When Share analytics is enabled in Settings, Firebase Analytics processes coarse product and gameplay events such as app launches, tutorial and mode selection, run results, progression actions, advertising outcomes, and experiment assignment. Event parameters are truncated and do not intentionally contain message content or precise location. Disabling the setting stops new App-originated Analytics events; it does not delete events already processed.

Firebase Crashlytics processes crash reports, stack traces, app state, device and operating-system information, installation identifiers, and diagnostics needed to investigate reliability. The App also calculates aggregate frame-time percentiles for performance monitoring.

The App does not currently collect detailed flap-timing or behavioral input replays. Prize-bearing leaderboard play is disabled unless a separately reviewed verification design is introduced.

Advertising and consent

Free versions use Google Mobile Ads. Depending on your region, choices, device settings, and Google's configuration, the advertising service may process advertising identifiers, IP-derived approximate location, device information, consent signals, ad impressions, clicks, and fraud-prevention signals.

The App uses Google's User Messaging Platform where required and does not request an ad until the SDK reports that an ad request is permitted. On iOS, App Tracking Transparency authorization is requested before tracking-dependent advertising. You can revisit available regional ad-privacy choices from Settings. Buying the Enterprise bundle removes forced ad placements but does not retroactively erase previously processed advertising events.

Purchases

Apple App Store or Google Play processes payment credentials and billing. RevenueCat processes an App user identifier, store transaction metadata, products, entitlement status, and restoration information. We do not receive your full payment-card number. Store purchase history remains subject to Apple or Google's retention and account controls.

Challenges and leaderboards

For ranked weekly or monthly benchmarks, the App may submit the challenge and content version, deterministic seed, score, gates cleared, duration, flap count, route totals, and a one-use server-issued run ticket. A public leaderboard may display your chosen or provider-derived display name with score and gate totals. Do not use a display name containing personal information you do not want displayed publicly.

Security and remote configuration

Firebase App Check processes device or app-attestation signals to help reject unauthorized backend calls. Firebase Remote Config fetches versioned gameplay and experiment configuration. Backend security logs may process IP address, request time, authentication identifier, App Check status, and error information for abuse prevention and service reliability.

Data stored on your device

The App stores game progress, settings, experiment assignment, queued benchmark results, and purchase-recovery state locally using platform application storage. Clearing application data or uninstalling may remove local data. Linked cloud data and store entitlements can remain until separately deleted or expired.

Why we process information

We process information to provide and synchronize gameplay; authenticate accounts; grant and restore purchases; operate challenges; show and measure advertising where permitted; prevent fraud and abuse; diagnose failures; improve balance and usability; comply with law; and respond to support, privacy, and deletion requests.

Depending on where you live, the legal basis may be performance of a contract, consent, legitimate interests in operating and securing the App, or compliance with legal obligations. You may withdraw advertising consent through the available privacy-options interface, though withdrawal does not affect processing already performed lawfully.

Sharing and service providers

Information is shared only as needed with service providers that operate the App, including Google Firebase services, Google Mobile Ads and UMP, RevenueCat, Apple App Store, and Google Play. These providers process information under their own terms and privacy policies. We may also disclose information when required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate safeguards.

We do not sell payment-card details. Whether advertising-related processing is legally considered a "sale" or "sharing" depends on local law and production advertising configuration; the store disclosures and consent message must match the final configuration.

Retention and deletion

We keep information only as long as reasonably necessary to provide the App, maintain security and fraud records, resolve purchases and disputes, satisfy legal obligations, and enforce agreements. Retention periods vary by record and provider.

Use Settings → Account & cloud save → Delete account & cloud data to request deletion for either a guest or linked identity. Linked providers may require recent reauthentication. Deletion is processed through Firebase for the identity and App-controlled cloud records. Wait for the App to confirm completion before closing it. After successful deletion, the App starts an empty guest save. If deletion fails or is interrupted, retry or contact support. A minimal deletion-status record may remain to prevent stale sign-in tokens from recreating deleted data. Apple, Google, RevenueCat, legal, fraud-prevention, backup, and transaction records may be retained where independently controlled or legally required. You can also request deletion at https://flappyai.agentiumlabs.com/delete-account or contact care@agentiumlabs.com. We may need to verify that you control the account before processing a web or email request. Do not send passwords, sign-in tokens, or payment-card details.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a copy of personal information, and to appeal or complain to a regulator. Contact us to exercise these rights. You can also:

• play with an anonymous account;
• link or disconnect Google or Apple from the account screen;
• review available advertising privacy choices in Settings;
• disable new Firebase Analytics event sharing in Settings;
• manage tracking permission in iOS Settings;
• manage or restore purchases through Apple, Google, and the in-App restore control;
• avoid ranked leaderboard submission by not starting a ranked benchmark; and
• clear local App data through your operating-system controls.

Children

The App is not directed to children under 13 or the applicable minimum digital-consent age in their location. We do not knowingly collect personal information from children in that group. If you believe a child provided information, contact us so we can investigate and delete it where required.

International processing and security

Service providers may process information outside your country. Where required, transfers rely on recognized safeguards. We use authentication, App Check, access rules, encrypted network transport, server-owned purchase operations, and least-data design; however, no system can guarantee absolute security.

Changes

We may update this policy when features, providers, or legal requirements change. We will update the date above and provide additional notice when required.

Contact

Agentium Labs (OPC) Private Limited Privacy and support: care@agentiumlabs.com