Privacy Policy
Last updated: August 2026
1. Data Controller
«APPYAPP» MCHJ (APPYAPP LLC), registered at 3 Amir Temur St, Obihayot MFY, Namangan 160100, Uzbekistan, is the data controller for the personal data collected through our games and services. You can contact us at maxdev@appyapp.org.
For an eligible Brainy purchase processed through YooKassa, Individual Entrepreneur Maksim Sergeevich Kochergin, Taxpayer ID 664605614840, is the Russian operator of the payment and receipt data needed to perform that transaction and meet fiscal obligations.
2. Data We Collect
APPYAPP collects limited data directly when you contact support or enter an email for a purchase receipt. Other data may be collected automatically by integrated third-party SDKs:
- Brainy: Trivia & Logic purchase data - receipt email, IP address and country used for regional purchase eligibility, purchase history and refund state, and the Google Play Games Services player identifier used to bind an authenticated entitlement. The app does not send question text, answer text, raw purchase tokens, receipt signatures, or YooKassa payment identifiers to product analytics
- Google Play Games Services data - player ID and account binding, and in some games nickname and avatar, collected only if you choose to sign in for progress or purchase entitlement continuity
- Device information (device model, operating system, language) - collected automatically by third-party SDKs
- Advertising identifiers (GAID on Android, IDFA on iOS, Amazon Fire Advertising ID on Fire OS devices) - used by ad networks, ad mediation platforms, and mobile measurement partners for ad serving and attribution
- Attribution data - collected by our mobile measurement partners: Tenjin for install and campaign tracking, and Adjust (games distributed through the Amazon Appstore) for the same purpose
- Marketing attribution events (Food Story) - device and campaign identifiers sent to TikTok via the TikTok Business SDK to measure the performance of TikTok ad campaigns
- Usage and gameplay analytics data (session duration, levels completed, in-game events) - collected via AppMetrica and Firebase Analytics
- Crash data - collected via AppMetrica and Firebase Crashlytics to improve app stability
- IP address - collected by third-party SDKs in the course of network communication
- Amazon User ID and subscription receipt identifiers - received through Amazon In-App Purchasing, stored on the device, and sent to Amazon's Receipt Verification Service only to verify or restore subscription access
- Purchase history - processed via Google Play Billing, Apple StoreKit, or Amazon In-App Purchasing, depending on the store the app was installed from
3. Third-Party Services
Our games use the following third-party services that may collect data independently. Each service operates under its own privacy policy:
- AppLovin (MAX mediation) - ad mediation platform that manages ads from multiple networks - Privacy Policy
- CAS (CleverAdsSolutions) - ad mediation platform - Privacy Policy
- Google AdMob - advertising (served via mediation) - Privacy Policy
- Amazon Publisher Services (Amazon Ads) - advertising in apps distributed through the Amazon Appstore - Privacy Policy
- AppMetrica (Yandex) - analytics and crash reporting - Privacy Policy
- Tenjin - mobile measurement and attribution (MMP): receives the device advertising identifier, technical device and app data, session data and the install source - Privacy Policy
- Adjust - mobile measurement and attribution (MMP) for games distributed through the Amazon Appstore - Privacy Policy
- Firebase (Analytics, Crashlytics, Cloud Messaging) - analytics, crash reporting, and push notifications - Privacy Policy
- TikTok Business SDK (Food Story) - marketing attribution events - Privacy Policy
- Google Play Games Services (Food Story) - optional sign-in used to sync game progress; provides player ID, nickname and avatar - Privacy Policy
- Google Play Billing - in-app purchases on Android - Privacy Policy
- YooKassa (Brainy) - payment processing and electronic receipt delivery for eligible purchases outside Google Play Billing - Privacy Policy
- Apple StoreKit - in-app purchases on iOS - Privacy Policy
- Amazon In-App Purchasing - in-app purchases on Amazon Fire devices - Privacy Notice
Additional ad networks (such as Unity Ads, IronSource, Meta Audience Network, and others) may serve ads through the AppLovin MAX and CAS mediation platforms. These networks have their own privacy policies governing their data collection practices.
4. How We Use Your Data
We use collected data to:
- Improve our games and user experience
- Analyze gameplay patterns and app performance
- Serve advertisements through ad mediation
- Process in-app purchases
- Send the electronic receipt required for an eligible Brainy purchase and prevent duplicate grants or refunds
- Let players optionally sign in via Google Play Games Services to sync game progress (Food Story)
- Track app install attribution and marketing campaign performance
- Send push notifications via Firebase Cloud Messaging
- Monitor and resolve crashes and technical issues
We do not sell your personal data for money. See Section 12 (Your Rights) for how US state privacy laws treat certain advertising data sharing, and how to opt out.
5. Advertising
Our games display ads served through ad mediation platforms, specifically AppLovin MAX and CAS (CleverAdsSolutions). These mediation platforms connect to multiple ad networks - including Google AdMob, Unity Ads, IronSource, Meta Audience Network, and others - to serve ads within our games. In games distributed through the Amazon Appstore, ads are served via Amazon Publisher Services (APS) and connected ad networks.
Ad mediation platforms and ad networks may collect device information, advertising identifiers (GAID, IDFA, or Fire Advertising ID), and usage data to serve personalized or contextual advertisements. You can opt out of personalized advertising through your device settings:
- iOS: Settings > Privacy > Advertising
- Android: Settings > Google > Ads
- Amazon Fire devices: Settings > Security & Privacy > Advertising ID (turn off Interest-Based Ads)
6. Analytics and Attribution
We use AppMetrica and Firebase Analytics to understand how players interact with our games, including session data, level completion, in-game events, and crash reports. We also use Tenjin and Adjust (games distributed through the Amazon Appstore) as our mobile measurement partners (MMPs) to track app install attribution and measure the effectiveness of marketing campaigns. Food Story additionally integrates the TikTok Business SDK to report marketing attribution events for TikTok ad campaigns. These services collect data as described in their respective privacy policies linked above.
7. Children's Privacy (COPPA)
Our games and services are not child-directed and are not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child under 13, please contact us immediately at maxdev@appyapp.org and we will take steps to delete the information.
8. Cookies
We use cookies and similar tracking technologies for analytics purposes. These help us understand how users interact with our website and services.
9. Data Retention
We retain different categories of data for different periods, based on the purpose of collection:
- Analytics events (AppMetrica, Firebase Analytics) - up to 26 months
- Crash logs (AppMetrica, Firebase Crashlytics) - up to 90 days
- Attribution data (Tenjin, Adjust, TikTok Business SDK) - up to 24 months
- Support emails - up to 2 years
- Brainy receipt email - held only while the YooKassa order is pending and deleted after the order claim is acknowledged; the payment provider and fiscal operator may retain their own receipt records as required by law
- Purchase and refund ledger - transaction hashes, product, amount, status and entitlement history are retained for fraud prevention, accounting, dispute handling and applicable legal retention periods; raw card data is not stored by APPYAPP
Where a category is not listed above, we retain the data only for as long as necessary to fulfill the purposes described in this policy, or as required by law.
10. International Transfers
Your data may be transferred to and processed on servers located in the European Union and/or the United States. We take appropriate measures to ensure your data is protected in accordance with this privacy policy.
11. Legal Bases for Processing (GDPR Art. 6)
Where the GDPR applies, we and our partners rely on the following legal bases to process personal data:
- Consent - for personalized advertising and any processing for which consent is requested (for example, ad-tracking prompts)
- Legitimate interest - for analytics, product improvement, and fraud prevention
- Contract - for processing in-app purchases and delivering features you request, such as subscription verification
You can withdraw consent at any time through your device's ad-tracking settings; this does not affect the lawfulness of processing carried out before withdrawal.
12. Your Rights
Under GDPR (EU/EEA residents): You have the right to access, rectify, erase, restrict processing of, and port your personal data. You may also object to processing and withdraw consent at any time. To exercise these rights, contact us at maxdev@appyapp.org.
Under CCPA (California residents): You have the right to know what personal information is collected, request deletion of your personal information, and opt out of the sale of personal information. To exercise these rights, contact us at maxdev@appyapp.org.
US State Privacy Rights (Do Not Sell or Share My Personal Information): Residents of California, Virginia, Colorado, Connecticut, Utah, and other US states with comprehensive privacy laws have the right to opt out of the "sale" or "sharing" of personal information, including for cross-context behavioral (personalized) advertising. We do not sell personal information for money; however, sharing device and advertising identifiers with ad networks and ad mediation platforms to serve personalized ads may be treated as a "sale" or "sharing" under some of these laws. You can opt out at any time by:
- Limiting ad tracking in your device settings (see Section 5, Advertising, above)
- Emailing us at maxdev@appyapp.org with the subject line "US Privacy Opt-Out"
All users have the right to:
- Access the personal data we hold about you
- Request deletion of your personal data
- Request correction of inaccurate data
- Request data portability
- Opt out of personalized advertising via device settings
13. Data Deletion
You can request deletion of your personal data at any time. Please visit our Data Deletion page for instructions. Financial and fiscal records that must be retained by law are restricted and retained only for the applicable legal period.
14. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of our games and services after any changes constitutes acceptance of the updated policy.
15. Contact Us
If you have any questions about this Privacy Policy, please contact us at maxdev@appyapp.org.