1. Introduction
This Privacy Policy explains how theArrow ("we", "us", or "our") collects, uses, and protects information when you download, install, or play the game on iOS and Android devices.
We are committed to respecting your privacy and ensuring transparency about how data is handled. theArrow requires an internet connection to access the game. Progress and settings are stored on your device, and cloud synchronization, accounts, in-app purchases, advertising, and optional crash reporting process the data described below.
2. Information We Collect
Depending on how you use the App, we and our third-party service providers may process the following categories of data:
| Data Category | Examples | Purpose |
|---|---|---|
| Advertising Data & Device IDs | Advertising Identifier (Apple IDFA, Google Advertising ID), IP address, device model, operating system version. | Delivering ads, frequency capping, fraud prevention, and ad performance measurement via Google AdMob. |
| Purchase History | App Store / Google Play transaction receipts, product identifier (e.g., Remove Ads, coin packs), timestamp. | Fulfilling in-app purchases, restoring entitlements across devices. Payment details are handled exclusively by Apple/Google. |
| Game Progress & Sync | Level completion status, star ratings, unlocked themes, coin balance, anonymous user ID, account email/provider when connected, and a public display name if you join the leaderboard. | Synchronizing your progress across devices when cloud save is enabled via Supabase. |
| Local App Preferences | Sound & haptic settings, active theme, daily streak counter. | Stored on your device (via AsyncStorage) to maintain your game configuration. |
Optional crash reporting uses Sentry when configured in the app build. Reports can include crash details, stack traces, app and operating system versions, and device context to diagnose failures. We disable default personally identifying data collection and do not intentionally include purchase receipts, authentication callbacks, or cloud-save payloads.
3. Third-Party Services & Advertising
The App integrates trusted third-party service providers that process data in accordance with their respective privacy policies:
- Google AdMob: We display banner, interstitial, and rewarded video ads through Google Mobile Ads SDK. In jurisdictions requiring consent (such as the European Economic Area, UK, and California), we present a Google-certified User Messaging Platform (UMP) consent form before personalized ads are served. You can update your ad privacy choices at any time inside the App under Settings → Ad privacy options.
- Apple StoreKit & Google Play Billing: In-app purchases are processed directly by Apple Inc. and Google LLC. We do not receive, process, or store your credit card or financial information.
- Supabase: Provides cloud database and authentication services to allow cross-device save synchronization. Initial cloud saves use an anonymous session ID without requiring personal information. If you choose to link your account via Google or Apple Sign-In, authentication tokens are handled securely.
4. Data Retention & Account Deletion
We retain game progress and cloud-sync data only for as long as your account remains active.
How to Delete Your Data: You have full control over your data. You can permanently delete your cloud save and account directly within the App:
- Open theArrow.
- Tap Settings (gear icon).
- Scroll to Account and select Delete account.
Confirming deletion immediately and permanently erases your account record and cloud save data from our Supabase database.
5. Apple App Tracking Transparency (ATT)
On iOS 14.5 and later, the App requests your permission before tracking your activity across other companies' apps and websites for advertising purposes. You may grant or deny permission through the system prompt or change your preference at any time in your iOS device settings under Settings → Privacy & Security → Tracking.
6. Children's Privacy
theArrow is designed for a general audience and does not knowingly collect personal information from children under the age of 13 (or under 16 in the European Union). If you believe an account was created by a child, you can delete the account directly within the in-app settings.
7. Your Rights (GDPR, UK GDPR, & CCPA/CPRA)
Depending on your location, you may have statutory rights regarding your personal information, including:
- Right of Access: Request a copy of the data we hold about you.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request the deletion of your personal data.
- Right to Object/Opt-Out: Opt out of personalized advertising via the in-app consent menu or system-level advertising controls.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Continued use of the App following the posting of changes constitutes acceptance of the revised policy.