APPYAPP
  • Home
  • Games
  • About
  • Contact
  • Company
  • Careers
  • RU

Privacy Policy

Last updated: 5 November 2026

Additional privacy information for the Android game Ditch Drop

Updated: 6 November 2026.

This section applies only to this Android app:

  • Ditch Drop: Ragdoll Fall: org.appyapp.ditchdrop

For this app, this section takes priority over general statements elsewhere on this page about analytics, attribution, advertising, notifications, purchases and related choices. The sections on the data controller, your rights, data deletion and contact continue to apply. Features and controls depend on the installed app version. The app is intended for players aged 13 and older and is not directed at children.

Services in this app

Version 1.0.0 includes these SDKs and Google services:

  • Advertising: AppLovin MAX with the Google Mobile Ads adapter (Google bidding); see also the Google privacy policy
  • Consent messages: Google User Messaging Platform
  • Analytics and crash reports: Google Analytics for Firebase, Firebase Crashlytics and Firebase Installations (Firebase privacy information), and AppMetrica (Yandex Privacy Policy)
  • Google Play: Google Play Games Services, Google Play Billing, In-App Updates, In-App Review and the Install Referrer library

The app does not include Tenjin or Adjust and does not use Firebase Cloud Messaging.

Data and purposes

The app and its SDKs process installation and device identifiers (such as the Android advertising ID where your device allows it, the App Set ID and installation IDs created by Firebase and AppMetrica), device and app information, language, IP address and approximate location inferred from it. The app does not ask for device location permission. Depending on the feature and your privacy choices, they also process session and gameplay events, progress, advertising events, purchase events and error or crash information.

The game's own events include tutorial progress, runs (distance, flips, bonks, coins and duration), upgrades and outfits bought with coins, unlocked locations, whether ads and rewards were offered, shown or granted, advertising revenue from each impression (ad network, format, ad unit and amount), purchase steps (product ID and Google Play transaction ID), start-up timing, the language, and use of the reminder, launcher shortcut, share, rating and update features. On the first launch the app also reads the Google Play Install Referrer campaign fields (source, medium and campaign name) if the install came from a tagged link. These records use a fixed list of fields and do not include your email address, phone number, Play Games name or player ID, purchase tokens or receipts.

We use this information to understand how the game is used, improve gameplay and reliability, measure advertising revenue, understand which campaigns lead to installs and provide features such as cloud save and purchases. Advertising providers also process data to deliver and measure ads, personalize ads when permitted, and help detect invalid traffic.

Installation IDs, the advertising ID and measurement identifiers do not, by themselves, create an account in the game. They can still distinguish an installation or device and should not be treated as anonymous information.

Consent, analytics and cloud analysis

Each time the app starts, it keeps our Firebase and AppMetrica analytics, Firebase crash reporting and advertising turned off until it has checked consent with Google User Messaging Platform. If that check cannot be completed, for example because the device is offline, they stay off for that session.

In the EEA, the United Kingdom and Switzerland, Google’s consent form is shown when required. Our Firebase and AppMetrica analytics and Firebase crash reporting operate only with your consent, which is their legal basis in these locations. The legitimate interests basis described in Section 11 of this page does not apply to them there. If you refuse personalization, ads may still be shown without personalization where Google permits ad requests.

Outside those locations, our Firebase and AppMetrica analytics and Firebase crash reporting can operate without a separate opt-in in the game. Advertising still follows the applicable privacy choices. In supported US states, the Privacy settings entry in Settings opens Google’s form for choices such as “Don’t sell or share my data”. We read the recorded US privacy signals on every start. An opt-out restricts personalized advertising and optional sharing of advertising data; it does not turn off the analytics and crash reporting described above. A status saying that no startup message is required does not cancel a saved US opt-out.

Google Analytics for Firebase and AppMetrica process usage and advertising revenue data under these rules. Crash reports use Firebase Crashlytics. AppMetrica is configured without its own crash reporting, device location tracking or advertising identifier tracking.

Analytics and crash records may be exported once a day to Google BigQuery, in a United States region, for our analysis. The analytics export is configured without advertising identifiers. Exports can contain pseudonymous identifiers, event times, device and app details, event parameters and crash details. These are event records, not only anonymous totals. Disabling new collection does not automatically remove records already held in an export.

Advertising networks in version 1.0.1

Starting with version 1.0.1, the app includes AppLovin MAX and advertising SDKs from Google Mobile Ads, Unity Ads, InMobi, Liftoff Monetize (Vungle), Pangle, Yandex Mobile Ads, Chartboost, BIGO Ads and DT Exchange (Digital Turbine). Which networks can deliver ads depends on their availability, app approval and configuration. An included SDK does not mean that its network is already delivering ads.

These advertising SDKs can process device and installation identifiers, pseudonymous user identifiers, device and app information, IP-derived approximate location, advertising interactions, purchase history and SDK crash or performance information. They use data to operate and improve their advertising services, measure ads and prevent fraud. Before initializing advertising, the app passes your consent and opt-out choices to AppLovin MAX. You can change applicable choices through the privacy controls described above. Technical data used by an advertising SDK to provide ads or diagnose its own operation is separate from our Firebase and AppMetrica analytics and Firebase crash reports; refusing those optional analytics does not necessarily stop this technical processing. The app does not request device location permission.

Provider privacy information: AppLovin, Google, Unity Ads, InMobi, Liftoff Monetize, Pangle regional privacy policies, Yandex, Chartboost, BIGO Ads and DT Exchange data handling (Digital Turbine privacy policy).

Advertising in version 1.0.0

The app shows interstitial ads between runs and rewarded video ads that you can choose to watch. Ads are requested through AppLovin MAX with Google bidding, and AppLovin's own demand is built into MAX. Other advertising networks are not connected in this version. The provider selected for an ad can vary. These providers can collect or receive identifiers, IP-derived approximate location, ad interactions and device or performance information for advertising, measurement and fraud prevention. You can limit ad personalization in your device settings (on Android, Settings > Google > Ads).

Google Play Games

Signing in to Google Play Games is optional, and the game works as a guest. At launch the game checks whether Google Play Games has already signed you in on this device and, if so, uses that sign-in. The Google sign-in screen appears only after you tap Sign in, Records or Achievements. While you are signed in, Google gives the game your player ID and display name; the game does not use your profile picture. The game uses Google Play Games to save your progress in the cloud (Saved Games), unlock achievements and submit your best result to the leaderboard. As a guest, the game does not save your progress to Google Play Games. The achievement and leaderboard screens are provided by Google, which processes this data under its own privacy policy.

Purchases

Purchases (one-time items such as removing interstitial ads, coin packs and boosters) are made only through Google Play Billing. Google Play processes payments and payment details, and the app does not collect them. The game receives purchase confirmations from Google Play to grant items and to restore the purchase that removes interstitial ads. The app does not use any payment service other than Google Play.

Reminders

Ditch Drop does not use Firebase Cloud Messaging or other remote push notifications. The optional daily bonus reminder is a local notification scheduled on your device. It is off by default and turns on only when you choose it in the game, with the Daily bonus reminders switch in Settings or the reminder button in the daily bonus window. Where Android requires it (Android 13 and later), turning reminders on asks for notification permission. A reminder comes at most once a day. You can turn reminders off in the game or in Android settings. When analytics is allowed, the game can record that a reminder was scheduled, what happened when it fired and whether you opened it, without the message text.

Choices in the game

  • Privacy policy: Settings has a Privacy policy button that opens this page in your browser.
  • Privacy settings: where Google's consent system requires it, Settings also has a Privacy settings button that reopens Google's consent form. The button is not shown where no form applies.
  • Analytics: there is no separate analytics switch in the game. Analytics and crash reports follow the consent check described above.
  • Reminders and vibration: Settings has a separate switch for Daily bonus reminders (off by default) and, on devices with a vibration motor, a switch for Vibration.
  • Google Play Games: sign-in is optional, as described above.

Analytics choices, advertising choices, notification permission and Google Play Games sign-in serve different purposes. Changing one does not change the others. Advertising SDKs can still use the Android advertising ID according to your device settings and the consent available.

Changes to choices and existing records

Changing a privacy choice affects future processing through that control. It does not automatically erase data already received by Google, AppMetrica, advertising providers or BigQuery, or recall a request already sent. The retention arrangements that apply to existing records continue to apply. Resetting progress, turning off reminders or uninstalling the app does not guarantee deletion of server-side history. To request deletion, see Data Deletion.

Privacy contact for this app

  • Ditch Drop: maxdev@appyapp.org

Send privacy questions or requests to this contact and include the app name. Website: https://appyapp.org.

Additional privacy information for three Android games

Updated: 28 October 2026.

This section applies only to updates of these Android apps:

  • Capi Bar: app.maxdev.fruittycoon
  • Fruit Merge: Watermelon Game: app.maxdev.watermelon.ofline.games
  • Brainy: org.appyapp.trivia

For these apps, this section takes priority over general statements elsewhere on this page about the analytics, advertising, notifications and related choices described below. Features and controls depend on the installed app version.

Data and purposes

The apps and their SDKs process installation and app-instance identifiers, device and app information, language, IP address and approximate location inferred from it. Depending on the feature and privacy settings, they also process session and gameplay events, progress, advertising impressions and error or crash information. Ad-impression records can include the ad network, placement and revenue earned by the game from that impression.

We use this information to understand how games are used, improve gameplay and reliability, measure advertising revenue and understand which campaigns lead to installs. Advertising providers also process data to deliver and measure ads, personalize ads when permitted, and help detect invalid traffic.

SDK installation IDs, notification tokens and measurement user IDs do not, by themselves, create a new app account. They can still distinguish an installation or user and should not be treated as anonymous information.

Analytics, attribution and cloud analysis

The updated apps use Tenjin Android SDK 2.0.2 for install attribution and measurement of selected gameplay events and ad impressions. Tenjin can receive installation and device parameters, session events and impression-level advertising revenue, subject to the app's collection and identifier settings.

Google Analytics for Firebase and AppMetrica process usage and advertising measurement data under the applicable app settings. Error and crash reporting can also use AppMetrica; Brainy uses Firebase Crashlytics according to its diagnostics settings.

Analytics event records may be exported to Google BigQuery for our analysis. Exports can contain pseudonymous identifiers, event times, device and app details and event parameters. These are event records, not only anonymous totals. Disabling new collection does not automatically remove records already held in an export.

Provider information: Firebase privacy information and Yandex Privacy Policy.

Advertising providers

These updates use AppLovin MAX with Google Mobile Ads, Unity Ads, InMobi, Liftoff Monetize and Yandex Mobile Ads. Capi Bar and Brainy also include Pangle. The provider selected for an ad can vary. These providers can collect or receive identifiers, IP-derived approximate location, ad interactions and device or performance information for advertising, measurement and fraud prevention.

The Unity Ads SDK disclosure lists user identifiers as data the SDK collects and shares for app functionality, and purchase history as data it collects and shares for advertising and analytics. The game's analytics setting does not control all collection by advertising SDKs.

Privacy information: AppLovin and Google. The app-specific provider list above identifies the advertising SDKs included in these updates.

Notifications

Firebase Cloud Messaging and Firebase Installations use a registration token, installation identifier and app or device information to support remote notifications. The app can subscribe to a language topic, such as Russian or English, to send reminders and game-related messages you enable. An opened-notification event can be recorded when analytics is allowed.

Remote reminders have an in-app choice and use Android notification permission where required. Registration also depends on the app's current privacy settings. You can turn reminders off in the game and change notification permission in Android settings. Turning reminders off asks FCM to delete its registration token and limits future delivery through that registration. It does not delete the Firebase Installations ID or historical analytics records. Messages already sent or displayed may remain.

Choices in each app

  • Capi Bar: analytics follows the privacy-message outcome. When the consent system reports that GDPR does not apply, analytics is enabled after a successful privacy check without a separate analytics opt-in. Where GDPR applies, it follows the recorded consent choices. There is no separate analytics switch available to every region. Use Privacy options for the available consent controls; when the form is unavailable, this button opens privacy information. The app tells Tenjin to omit the Android Advertising ID from its data parameters. AppMetrica and advertising SDKs can still use advertising identifiers under their settings and the available app and device choices. The Diagnostics switch controls additional game error reports; it does not switch off AppMetrica's built-in crash reporting.
  • Watermelon: Settings offers separate Game analytics, Crash reports and Reminders choices, plus Ad privacy. The analytics choice controls usage analytics. Changes to Crash reports take effect after restarting the app. Tenjin's advertising-identifier permission is checked separately against advertising-purpose and provider choices.
  • Brainy: outside the app's GDPR consent-message branch, analytics and diagnostics may be enabled after the privacy check, with saved in-app opt-outs respected. In the GDPR consent-message branch, analytics follows the recorded choices and Crashlytics collection is disabled. Use Privacy options to change the choices available in your region. Tenjin also has a separate advertising-identifier gate. When configured, a pseudonymous measurement user ID can be passed to Tenjin. Verified purchase events can include product, amount, currency and transaction or receipt data for purchase validation and measurement; this existing purchase processing is separate from automatic SDK purchase tracking.

Analytics choices, advertising choices and notification permission serve different purposes. A restriction in Tenjin does not turn off advertising identifiers across the whole app or every other SDK.

Changes to choices and existing records

Changing a privacy choice affects future processing through that control. It does not automatically erase data already received by Tenjin, Google, AppMetrica, advertising providers or BigQuery, or recall a request already sent. The retention arrangements that apply to existing records continue to apply. Local resets and token deletion do not guarantee deletion of server-side history.

Privacy contact for these apps

  • Capi Bar and Watermelon: maxdevapp@gmail.com
  • Brainy: maxdev@appyapp.org

Send privacy questions or requests to the contact for your app and include the app name. Website: https://appyapp.org.

1. Data Controller

«APPYAPP» MCHJ (APPYAPP LLC), registered at 3 Amir Temur St, Obihayot MFY, Namangan 160100, Uzbekistan, is the data controller for the personal data collected through our games and services. You can contact us at maxdev@appyapp.org.

For an eligible Brainy purchase processed through YooKassa, Individual Entrepreneur Maksim Sergeevich Kochergin, Taxpayer ID 664605614840, is the Russian operator of the payment and receipt data needed to perform that transaction and meet fiscal obligations.

2. Data We Collect

APPYAPP collects limited data directly when you contact support or enter an email for a purchase receipt. Other data may be collected automatically by integrated third-party SDKs:

  • Brainy: Trivia & Logic purchase data - receipt email, IP address and country used for regional purchase eligibility, purchase history and refund state, and the Google Play Games Services player identifier used to bind an authenticated entitlement. The app does not send question text, answer text, raw purchase tokens, receipt signatures, or YooKassa payment identifiers to product analytics
  • Google Play Games Services data - player ID and account binding, and in some games nickname and avatar, collected only if you choose to sign in for progress or purchase entitlement continuity
  • Device information (device model, operating system, language) - collected automatically by third-party SDKs
  • Advertising identifiers (GAID on Android, IDFA on iOS, Amazon Fire Advertising ID on Fire OS devices) - used by ad networks, ad mediation platforms, and mobile measurement partners for ad serving and attribution
  • Attribution data - collected by our mobile measurement partners: Tenjin for install and campaign tracking, and Adjust (games distributed through the Amazon Appstore) for the same purpose
  • Marketing attribution events (Food Story) - device and campaign identifiers sent to TikTok via the TikTok Business SDK to measure the performance of TikTok ad campaigns
  • Usage and gameplay analytics data (session duration, levels completed, in-game events) - collected via AppMetrica and Firebase Analytics
  • Crash data - collected via AppMetrica and Firebase Crashlytics to improve app stability
  • IP address - collected by third-party SDKs in the course of network communication
  • Amazon User ID and subscription receipt identifiers - received through Amazon In-App Purchasing, stored on the device, and sent to Amazon's Receipt Verification Service only to verify or restore subscription access
  • Purchase history - processed via Google Play Billing, Apple StoreKit, or Amazon In-App Purchasing, depending on the store the app was installed from

3. Third-Party Services

Our games use the following third-party services that may collect data independently. Each service operates under its own privacy policy:

  • AppLovin (MAX mediation) - ad mediation platform that manages ads from multiple networks - Privacy Policy
  • CAS (CleverAdsSolutions) - ad mediation platform - Privacy Policy
  • Google AdMob - advertising (served via mediation) - Privacy Policy
  • Amazon Publisher Services (Amazon Ads) - advertising in apps distributed through the Amazon Appstore - Privacy Policy
  • AppMetrica (Yandex) - analytics and crash reporting - Privacy Policy
  • Tenjin - mobile measurement and attribution (MMP): receives the device advertising identifier, technical device and app data, session data and the install source - Privacy Policy
  • Adjust - mobile measurement and attribution (MMP) for games distributed through the Amazon Appstore - Privacy Policy
  • Firebase (Analytics, Crashlytics, Cloud Messaging) - analytics, crash reporting, and push notifications - Privacy Policy
  • TikTok Business SDK (Food Story) - marketing attribution events - Privacy Policy
  • Google Play Games Services (Food Story) - optional sign-in used to sync game progress; provides player ID, nickname and avatar - Privacy Policy
  • Google Play Billing - in-app purchases on Android - Privacy Policy
  • YooKassa (Brainy) - payment processing and electronic receipt delivery for eligible purchases outside Google Play Billing - Privacy Policy
  • Apple StoreKit - in-app purchases on iOS - Privacy Policy
  • Amazon In-App Purchasing - in-app purchases on Amazon Fire devices - Privacy Notice

Additional ad networks (such as Unity Ads, IronSource, Meta Audience Network, and others) may serve ads through the AppLovin MAX and CAS mediation platforms. These networks have their own privacy policies governing their data collection practices.

4. How We Use Your Data

We use collected data to:

  • Improve our games and user experience
  • Analyze gameplay patterns and app performance
  • Serve advertisements through ad mediation
  • Process in-app purchases
  • Send the electronic receipt required for an eligible Brainy purchase and prevent duplicate grants or refunds
  • Let players optionally sign in via Google Play Games Services to sync game progress (Food Story)
  • Track app install attribution and marketing campaign performance
  • Send push notifications via Firebase Cloud Messaging
  • Monitor and resolve crashes and technical issues

We do not sell your personal data for money. See Section 12 (Your Rights) for how US state privacy laws treat certain advertising data sharing, and how to opt out.

5. Advertising

Our games display ads served through ad mediation platforms, specifically AppLovin MAX and CAS (CleverAdsSolutions). These mediation platforms connect to multiple ad networks - including Google AdMob, Unity Ads, IronSource, Meta Audience Network, and others - to serve ads within our games. In games distributed through the Amazon Appstore, ads are served via Amazon Publisher Services (APS) and connected ad networks.

Ad mediation platforms and ad networks may collect device information, advertising identifiers (GAID, IDFA, or Fire Advertising ID), and usage data to serve personalized or contextual advertisements. You can opt out of personalized advertising through your device settings:

  • iOS: Settings > Privacy > Advertising
  • Android: Settings > Google > Ads
  • Amazon Fire devices: Settings > Security & Privacy > Advertising ID (turn off Interest-Based Ads)

6. Analytics and Attribution

We use AppMetrica and Firebase Analytics to understand how players interact with our games, including session data, level completion, in-game events, and crash reports. We also use Tenjin and Adjust (games distributed through the Amazon Appstore) as our mobile measurement partners (MMPs) to track app install attribution and measure the effectiveness of marketing campaigns. Food Story additionally integrates the TikTok Business SDK to report marketing attribution events for TikTok ad campaigns. These services collect data as described in their respective privacy policies linked above.

7. Children's Privacy (COPPA)

Our games and services are not child-directed and are not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at maxdev@appyapp.org and we will take steps to delete the information.

8. Cookies

We use cookies and similar tracking technologies for analytics purposes. These help us understand how users interact with our website and services.

9. Data Retention

We retain different categories of data for different periods, based on the purpose of collection:

  • Analytics events (AppMetrica, Firebase Analytics) - up to 26 months
  • Crash logs (AppMetrica, Firebase Crashlytics) - up to 90 days
  • Attribution data (Tenjin, Adjust, TikTok Business SDK) - up to 24 months
  • Support emails - up to 2 years
  • Brainy receipt email - held only while the YooKassa order is pending and deleted after the order claim is acknowledged; the payment provider and fiscal operator may retain their own receipt records as required by law
  • Purchase and refund ledger - transaction hashes, product, amount, status and entitlement history are retained for fraud prevention, accounting, dispute handling and applicable legal retention periods; raw card data is not stored by APPYAPP

Where a category is not listed above, we retain the data only for as long as necessary to fulfill the purposes described in this policy, or as required by law.

10. International Transfers

Your data may be transferred to and processed on servers located in the European Union and/or the United States. We take appropriate measures to ensure your data is protected in accordance with this privacy policy.

11. Legal Bases for Processing (GDPR Art. 6)

Where the GDPR applies, we and our partners rely on the following legal bases to process personal data:

  • Consent - for personalized advertising and any processing for which consent is requested (for example, ad-tracking prompts)
  • Legitimate interest - for analytics, product improvement, and fraud prevention
  • Contract - for processing in-app purchases and delivering features you request, such as subscription verification

You can withdraw consent at any time through your device's ad-tracking settings; this does not affect the lawfulness of processing carried out before withdrawal.

12. Your Rights

Under GDPR (EU/EEA residents): You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and withdraw consent at any time. To exercise these rights, contact us at maxdev@appyapp.org.

Under CCPA (California residents): You have the right to know what personal information is collected, request deletion of your personal information, and opt out of the sale of personal information. To exercise these rights, contact us at maxdev@appyapp.org.

US State Privacy Rights (Do Not Sell or Share My Personal Information): Residents of California, Virginia, Colorado, Connecticut, Utah, and other US states with comprehensive privacy laws have the right to opt out of the "sale" or "sharing" of personal information, including for cross-context behavioral (personalized) advertising. We do not sell personal information for money; however, sharing device and advertising identifiers with ad networks and ad mediation platforms to serve personalized ads may be treated as a "sale" or "sharing" under some of these laws. You can opt out at any time by:

  • Limiting ad tracking in your device settings (see Section 5, Advertising, above)
  • Emailing us at maxdev@appyapp.org with the subject line "US Privacy Opt-Out"

All users have the right to:

  • Access the personal data we hold about you
  • Request deletion of your personal data
  • Request correction of inaccurate data
  • Request data portability
  • Opt out of personalized advertising via device settings

13. Data Deletion

You can request deletion of your personal data at any time. Please visit our Data Deletion page for instructions. Financial and fiscal records that must be retained by law are restricted and retained only for the applicable legal period.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of our games and services after any changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us at maxdev@appyapp.org.

«APPYAPP» MCHJ (APPYAPP LLC) · STIR 312855930 · Namangan, Uzbekistan · © 2026

Privacy Policy Terms of Service Data Deletion Support Company