Privacy Policy

1. Who we are

Upwell Studios ("Upwell Studios", "we", "us") develops and publishes the mobile games described below. We are the controller of the personal data described in this policy. You can reach us any time at info@upwellstudios.com.

2. What this policy covers

This policy applies to the Upwell Studios games distributed through Google Play and the Apple App Store, currently:

• Bounce Smash 2048
• Bash Zone

It also applies to any future Upwell Studios game that links to this page from its store listing. It does not cover our other products, which publish their own privacy policies, and it does not cover the practices of the app stores or of any third party whose services are linked from a game.

3. What the games collect

The games have no sign-up, no login, and no in-app purchases. We do not ask you for any personal information, and we do not collect your name, email address, phone number, contacts, photos, microphone input, or precise GPS location.

What is collected happens automatically through the third-party advertising and analytics services built into the games:

Game progress, high scores, sound and vibration settings, and similar preferences are stored locally on your device. They are not sent to us, and deleting the game deletes them.

4. Services we use, and what they receive

Advertising — Unity Ads and LevelPlay mediation

Our games show ads through Unity Ads with Unity LevelPlay mediation. Mediation means Unity runs an auction across a number of partner advertising networks and serves the winning ad. Those networks, and the demand partners listed in our app-ads.txt file, may receive your advertising identifier, IP address, device and app information, and data about the ads you were shown or interacted with. They use it to select ads, cap how often you see the same ad, detect fraud, and measure results — and, where personalized advertising applies to you, to build an advertising profile associated with your advertising ID.

See Unity's Game Player and App User Privacy Policy for what Unity and its mediation partners do with this data.

Analytics and crash reporting — Google Firebase

We use Google Analytics for Firebase and Firebase Crashlytics to see how the games are used in aggregate and to be told when they crash. These services collect usage events, device and app information, an app-instance identifier, and crash diagnostics. We use them to decide what to improve — never to identify you personally. See Firebase's privacy and security information and Google's Privacy Policy.

App stores

Google and Apple provide the games' distribution and collect their own data about downloads and, if you opt in, crash reporting at the platform level. That processing is governed by their own privacy policies, not this one.

What we never do

We do not sell your personal data for money, and we do not share it with data brokers. We do not combine the data described here with data from any other source to identify you. Under some US privacy laws, the use of advertising identifiers for personalized advertising is treated as a "sale" or "sharing" of personal information — see section 9 for how to opt out.

5. Why we're allowed to use this data (EEA/UK)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on these legal bases under the GDPR and UK GDPR:

• Consent (Art. 6(1)(a)) — for personalized advertising and for analytics. Where consent is required, you are asked before that data is used, through a consent request shown the first time you open the game. You can change your answer at any time from the privacy option in the game's settings, and withdrawal is as easy as giving consent.
• Legitimate interests (Art. 6(1)(f)) — for showing non-personalized ads that keep the games free, for preventing ad fraud and abuse, and for crash reporting that keeps the games working. We balance these against your rights and use the least data that will do the job.

If you decline consent, the games still work — you'll see non-personalized ads instead, which are chosen from context rather than from a profile about you.

6. Your choices

• Android — open Settings › Google › Ads (or Settings › Privacy › Ads) to delete your Advertising ID or opt out of ad personalization. Deleting the ID stops apps from receiving it.
• iOS — open Settings › Privacy & Security › Tracking to turn off tracking requests, and Settings › Privacy & Security › Apple Advertising to turn off personalized Apple ads. If you decline the game's tracking prompt, no advertising identifier is shared.
• Inside the game — where a consent request applies to your region, the game's settings include a privacy option that reopens it so you can change your choice.
• Google's ad settings — adssettings.google.com controls personalization across Google's advertising services.
• Uninstalling — removing a game stops all further collection and deletes everything stored on your device.

7. How long data is kept

We keep analytics and crash data only as long as it is useful for improving the games — in practice, Firebase is configured to retain user-level event data for a limited period (currently 14 months) and then delete it, while aggregate statistics with no identifiers may be kept longer. Advertising partners set their own retention periods, described in their privacy policies. Data tied to an advertising identifier stops being associated with you once you reset or delete that identifier.

8. International transfers

Our advertising and analytics providers operate globally, so data described in this policy may be processed in countries outside your own, including the United States. Where data leaves the EEA, the UK, or Switzerland, those providers rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision such as the EU–US Data Privacy Framework.

9. Your rights

EEA, UK and Switzerland

You have the right to request access to your personal data, and to request its correction, erasure, or restriction; to object to processing based on legitimate interests; to data portability; and to withdraw consent at any time without affecting processing that already happened. To exercise any of these, email info@upwellstudios.com and include your advertising ID if you have it, since without it we have no way to locate data relating to you. You also have the right to lodge a complaint with your local data protection authority.

California and other US states

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information is collected and disclosed, to request deletion or correction, to opt out of the "sale" or "sharing" of personal information for cross-context behavioural advertising, and not to be discriminated against for exercising these rights. Residents of other US states with comparable laws have similar rights. To opt out of personalized advertising, use the device controls in section 6, or email us at info@upwellstudios.com. We do not knowingly collect sensitive personal information, and we do not sell personal information for money.

A note on identification

Because the games have no accounts, we usually cannot connect a request to a specific person. If we cannot verify that the data relates to you, we will tell you and explain what you can do instead — typically resetting your advertising ID, which severs the link between you and any advertising data.

10. Children

Our games are intended for a general audience aged 13 and over. They are not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact info@upwellstudios.com and we will delete what we can and take steps to stop further collection.

11. Security

We keep the data we handle to a minimum, which is the strongest protection available to us. Data transmitted between the games and our providers is encrypted in transit. Our providers maintain their own technical and organisational safeguards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes to this policy

We'll update this page when our games, or the services inside them, change. The "last updated" date at the top always reflects the current version. If a change materially affects how we handle your data, we'll make it noticeable — for example, through a notice in the game or in the store listing.

13. Contact

Questions, requests, or corrections — write to info@upwellstudios.com. We read everything and aim to reply within 30 days.