Carve Flow — Privacy Policy

1. Overview

This Privacy Policy explains how DevNPlay ("we", "us", "our") handles information in connection with the mobile game Carve Flow (the "Game"). You can play the whole Game without creating an account, without giving us your name, and without an internet connection. We do not run our own servers for the Game; this page lists everything that leaves your device and who receives it.

By downloading or playing the Game you agree to the practices described here. If you do not agree, please do not use the Game.

2. Information We Collect

We never ask you to register, and we never ask for your real name, email address, or phone number. The information involved is limited to:

• Gameplay events — when a level starts, is completed or failed, which booster was used, whether an ad was shown or a reward was earned, and whether a purchase succeeded. These are sent to Google Analytics for Firebase with a random app-instance identifier that is not your name, email, Apple ID or Google account.
• Device and technical data — the advertising, analytics and purchase SDKs we embed receive standard device information such as device model, operating system version, language and region, an approximate location derived from your IP address, and (subject to your permission) an advertising identifier.
• Purchase records — when you buy something, Apple or Google processes the payment. Our purchase provider, RevenueCat, receives the store receipt and a random customer ID so it can confirm the purchase and let you restore it. We never receive or store your card number, billing address, Apple ID or Google account.
• Game Center (iOS) — if you are signed in to Game Center, Apple records the achievements you unlock under Apple’s own privacy policy. We do not receive your Game Center identity.
• Support messages — if you email us, we receive the address you write from and whatever you choose to tell us.

3. How We Use Information

• To run the Game and save your progress on your device.
• To understand which levels are too hard or too easy, and to balance them.
• To deliver and measure advertising, and to enable and restore in-app purchases.
• To answer your support requests.

4. Your Progress Is Stored On Your Device

Your save — levels cleared, coins, boosters, albums, your daily reward streak and your settings — lives in a file on your device and nowhere else. We do not operate a cloud save.

• A new device starts a new game. The one thing that carries across is the no-ads part of REMOVE ADS, the Starter Pack and the No-Ads Bundle: use "Restore Purchases" in Settings or the Shop.
• Deleting the Game deletes your progress permanently. We cannot restore it, because we never had a copy.

5. Advertising

The Game shows advertising supplied by Google AdMob. Most ads are rewarded — you choose to watch one to revive, double your coins or get a free booster, and nothing happens if you decline. From level 15 on there is also an occasional full-screen ad between levels, at most once every few levels.

• Google AdMob acts as an independent controller of the data it collects through its SDK. Its handling is governed by Google’s own privacy policy: https://policies.google.com/technologies/ads
• On iOS, Apple’s App Tracking Transparency prompt asks whether the Game may track you across other companies’ apps and websites. If you decline, ads still appear but are not personalised. The Game plays identically either way.
• In the European Economic Area, the UK and some US states, a Google-certified consent form asks separately about personalised advertising. You can change that choice at any time in Settings → Privacy Options.
• Buying REMOVE ADS (or a pack that includes it) stops the between-level ads permanently. Rewarded ads remain available by choice, because they are how you earn rewards without paying.

6. Analytics

We use Google Analytics for Firebase to see how the Game is played as a whole — for example, how many players finish level 20, or which boosters are used. Your advertising and analytics consent choices are passed to Firebase; when you have not consented, Firebase collects data in a restricted, non-personalised mode. Google’s policy: https://firebase.google.com/support/privacy

7. In-App Purchases

Purchases are processed by Apple (App Store) or Google (Google Play). RevenueCat, our purchase infrastructure provider, receives the receipt of each purchase and a random customer ID so the Game can verify the purchase and restore permanent items. RevenueCat’s policy: https://www.revenuecat.com/privacy

8. What We Do Not Collect

• No account, name, email address or phone number (unless you email us).
• No precise location — the Game never asks for location permission.
• No contacts, photos, camera, microphone or health data.
• No chat, no user-generated content and no public profile.

9. Sharing of Information

We do not sell your personal information. The information described above is shared only with the service providers that make the Game work: Google (AdMob advertising and Firebase analytics), RevenueCat (purchases), and Apple or Google as the app store. We may also disclose information if required by law.

10. Data Retention

Analytics events are kept by Firebase for a limited period and then deleted automatically. Purchase records are kept by RevenueCat and the app stores as long as needed to honour and restore your purchases. Data handled by our ad partners is retained according to their own policies. Support emails are kept while your request is open and for a reasonable period afterward.

11. Deleting Your Data

Deleting the Game erases your local progress immediately and permanently, and a reinstall starts with a new random analytics identifier. Because the Game has no account, we usually cannot link an email to the anonymous identifiers our providers hold; if you want us to try, email [email protected] with the subject "Data deletion" and, for purchases, the date and the item, and we will help.

12. Children’s Privacy

The Game is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will remove it.

13. Your Rights

Depending on where you live, you may have rights over your personal information, including the right to access it, correct it, delete it, object to or restrict its processing, receive a copy in a portable form, and withdraw consent you have given. Where we rely on consent — advertising personalisation and analytics in particular — you may withdraw it at any time in Settings → Privacy Options without affecting processing already carried out.

Our legal bases for processing are: performance of a contract (running the Game and delivering purchases), our legitimate interests (fixing bugs and balancing difficulty), and your consent (personalised advertising and analytics). The data controller is DevNPlay, reachable at [email protected]. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

14. International Transfers

Our service providers operate globally, so the limited information described here may be processed in countries other than your own, including the United States. Where required, those transfers rely on the safeguards offered by those providers, such as the European Commission’s standard contractual clauses.

15. Changes to This Policy

We may update this Policy as the Game changes. The revision date at the top of this page always reflects the current version, and material changes will be reflected in the Game or on this site.

16. Contact Us

Questions about this Policy or about your data? Email [email protected] and we will get back to you.