Privacy Policy — Truth or Dare

1. Data Controller

The data controller responsible for your personal data is:

Mugen Software SIA
Registration No. 40203547797
Matisa iela 61A - 19, Riga, LV-1009, Latvia
Email: support@mugenapps.io

Mugen Software SIA ("we," "our," or "us") publishes the Truth or Dare party game for iOS (the "App") on the Apple App Store. This Privacy Policy explains what personal data is processed when you use the App, why, and what choices you have. It follows the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.

This Privacy Policy applies only to the iOS version of the App published by Mugen Software SIA.

2. The Short Version

The App has no accounts and no sign-in. We never ask for your name, email address or phone number.
Player names, genders, avatars and your custom challenges are stored only on your device. They are never sent to us or to anyone else.
We use Google Firebase to understand how the App is used, to fix crashes and to configure features. We use Google AdMob to show ads in the free version and RevenueCat to manage Premium purchases.
Personalized ads and tracking happen only if you allow them, through Google's consent form (where required by law) and Apple's "Allow to track" prompt.
We do not sell your personal data.

3. Data That Stays on Your Device

The following is stored locally on your device and is never uploaded to our systems or shared with third parties:

Players you add: name, gender, partner preference used to match challenges, and chosen avatar
Custom challenges you create
Your settings (such as theme, language, haptic feedback, text-to-speech and challenge mode) and game state

Text-to-speech uses your device's built-in speech engine, so read-aloud challenges are processed on your device.

This data is deleted when you delete the App. Players and custom challenges can also be deleted in the App at any time.

4. Data Processed When You Use the App

Usage and analytics data (Google Analytics for Firebase). We collect information about how the App is used, including:

screens viewed, packs played, challenges shown and completed (by internal ID, never the challenge text or player names), and settings changed
purchase events (product, price and currency)
app version, device model, operating system version, language, and a randomly generated app instance ID
approximate location (country, region or city), derived from your IP address; Google Analytics does not store the IP address itself

We also record a few general attributes: selected theme, app language, whether you have Premium, and the number of players (not their names).

Crash and diagnostic data (Firebase Crashlytics). If the App crashes or hits an error, we receive a crash report. It contains the technical details of the error, your device model and OS version, the app version, and a random installation identifier.

App configuration and experiments (Firebase Remote Config, Firebase A/B Testing). The App downloads its configuration from Firebase, which lets us adjust features without an update. We sometimes test different versions of a feature, such as a screen layout. This uses a random Firebase installation ID, the app version, the language and the country.

Push notifications (Firebase Cloud Messaging). If you allow notifications, your device receives a push token that lets us send you notifications, such as news about new content, updates or offers. You can turn notifications off at any time in the App's Settings or in iOS Settings → Notifications.

In-app messages (Firebase In-App Messaging). The App may show messages inside the App, such as announcements. Firebase uses the installation ID and usage events to decide when to show them.

Advertising (Google AdMob). The free version of the App shows ads. Premium users do not see ads. To show, measure and protect ads, Google AdMob processes:

your IP address and the approximate location derived from it
device and app information
your interactions with ads
your consent choices

AdMob uses your device's advertising identifier (IDFA) only if you allow tracking in Apple's prompt. See section 5 for your choices.

Purchases (RevenueCat and Apple).

Apple processes all payments. We never receive your payment card or billing details.
RevenueCat helps us check and restore your purchases. It processes a random app user ID, your purchase and subscription history (product, price, currency, transaction dates and receipt data), and basic device information.
RevenueCat may also report subscription events, such as renewals and cancellations, to Firebase Analytics so that we can measure revenue.

Data Apple shares with us. If you have agreed to share analytics with app developers in your iOS settings, Apple may provide us with aggregated usage and crash statistics.

Support requests. If you contact us, we receive your email address and whatever you include in your message. The email that opens from the App's "Contact us" button contains your app version and iOS version to help us troubleshoot. You can remove them before sending.

We do not use the camera, microphone, photos, contacts or precise location, and the App does not ask for these permissions.

5. Advertising, Consent and Tracking

Google's consent form. In the European Economic Area, the United Kingdom and Switzerland, and in other regions where the law requires it, the App shows Google's consent form before any personalized ads. You choose whether Google and its advertising partners may use your data for personalized ads and ad measurement.

Apple's tracking prompt (App Tracking Transparency). The App asks for permission to track only after you have agreed in Google's form (where the form is required), or directly in other regions. If you do not allow tracking, the advertising identifier is not shared.

Ads still appear if you refuse, but they are less relevant to you. Your choices are also passed to Google Analytics for Firebase ("consent mode"), which limits advertising-related use of your analytics data.

Changing your choices.

In the App: Settings → Ad Privacy Options (shown where required by law).
In iOS: Settings → Privacy & Security → Tracking.

When personalized ads are enabled, Google may act as an independent controller for some of its own advertising purposes. You can learn more at https://policies.google.com/technologies/partner-sites.

6. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 of the GDPR:

Performance of a contract (Art. 6(1)(b)). Providing the App and its configuration, and processing and restoring Premium purchases.
Legitimate interests (Art. 6(1)(f)). Analytics, crash reporting, feature experiments and in-app messages, used to keep the App stable and improve it. Also showing non-personalized ads to fund the free version, and preventing fraud. Our interests are balanced against your rights, and you can object at any time (section 10).
Consent (Art. 6(1)(a)). Personalized advertising and ad measurement where the law requires consent, tracking under Apple's App Tracking Transparency, and push notifications. You can withdraw consent at any time as described in section 5 and section 4 (push notifications).
Legal obligation (Art. 6(1)(c)). Keeping records required by accounting and tax laws, and responding to lawful requests from authorities.

7. How We Share Your Information

We do not sell your personal data. We share data only with the following service providers, which process it on our behalf to operate the App:

Google (Firebase and AdMob): analytics, crash reporting, configuration, experiments, push and in-app messaging, and advertising. Google's privacy policy: https://policies.google.com/privacy. Firebase privacy information: https://firebase.google.com/support/privacy
RevenueCat: purchase and subscription management. https://www.revenuecat.com/privacy
Apple: App Store distribution and payment processing. https://www.apple.com/legal/privacy/

We may also disclose information if the law, a court order or a legal process requires it. We may also disclose it to protect the rights, property or safety of Mugen Software SIA, our users or others. If the App is transferred to another company, for example in a sale or merger, the related data may be transferred as part of that transaction, subject to this Privacy Policy.

US state privacy laws. We do not sell personal information for money. Showing personalized ads through AdMob may count as "sharing" for targeted advertising under some US state laws, such as California's. You can opt out through Ad Privacy Options in the App (where available), by not allowing tracking in iOS, or by emailing us.

8. International Data Transfers

Our service providers (Google, RevenueCat and Apple) may process your data in the United States and other countries outside the European Economic Area (EEA). Where data is transferred outside the EEA, appropriate safeguards are in place, such as:

European Commission adequacy decisions
Standard Contractual Clauses approved by the European Commission
the EU-U.S. Data Privacy Framework, where applicable

You may request more information about these safeguards by contacting us.

9. Data Retention

On your device: players, custom challenges and settings stay until you delete them or delete the App.
Analytics data: kept for up to 14 months, after which Google Analytics deletes it automatically. Aggregated reports that cannot identify you may be kept longer.
Crash reports: kept for 90 days.
Push tokens: kept until they expire or you delete the App.
Purchase records: kept for as long as needed to provide Premium and as required by accounting and tax laws.
Support emails: kept for as long as needed to resolve your request and for a reasonable period afterwards.
Advertising data: Google processes and retains it under its own policies.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access (Art. 15): request a copy of the personal data we hold about you.
Right to Rectification (Art. 16): request correction of inaccurate data.
Right to Erasure (Art. 17): request deletion of your personal data.
Right to Restriction (Art. 18): request that we limit the processing of your data in certain circumstances.
Right to Data Portability (Art. 20): receive your data in a structured, machine-readable format.
Right to Object (Art. 21): object to processing based on legitimate interests.
Right to Withdraw Consent: withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal.

Because the App has no accounts, the data our providers hold is linked to random identifiers, not to your name. We may therefore not be able to identify which data is yours from an email alone. We will explain what information we need to find it. The simplest ways to act on your rights directly:

delete the App, which removes all on-device data and starts new identifiers on reinstall
change your ad choices (section 5)
turn off notifications

To exercise any of these rights, contact us at support@mugenapps.io. We will respond within 30 days.

Right to Lodge a Complaint. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, Latvia, www.dvi.gov.lv, or with your local supervisory authority.

11. Children's Privacy

The App is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used the App and data about them has been collected, contact us and we will delete what we can.

12. Data Security

Data sent between the App and our service providers is encrypted in transit.
On-device data is protected by iOS app sandboxing and your device's security settings.
Our service providers apply industry-standard security measures.

No method of transmission or storage is completely secure, but we work to protect your information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, in the App. The "Effective Date" at the top shows when it was last revised.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Mugen Software SIA
Matisa iela 61A - 19, Riga, LV-1009, Latvia
Email: support@mugenapps.io