Capsumi privacy policy

Who is responsible

Kissylabs Digital Solutions SL (NIF B88127030, C/ Mayor 26, 2º B, 28801 Alcalá de Henares, Madrid, Spain) is the controller of your data. Contact: contacto@kissylabs.com.

The game has no accounts

You don't create an account or give us your name, email or phone number. We can't tell who a player is from what the game sends.

Your age

When you first open the game it asks for your month and year of birth. We use it only to decide how the game treats ads and analytics for your age. The game compares it with the age limit of your country (for example 13 in the United States and 14 in Spain), keeps only one result, "above the limit" or "below the limit", and throws the date away. The date is never saved, never sent anywhere and never shown to anyone. This result is saved with your game and, if you use iCloud, in your iCloud save.

Where the law requires the App Store to confirm ages (for example in Texas), the game asks Apple for your age range instead of asking you. Apple only tells the game the range, for example "under 13" or "18 or over", never your date of birth, and only if you or your parent or guardian agree to share it. The game turns it into the same single result, "above the limit" or "below the limit", and asks again each time you open it, so a change is picked up. If a parent or guardian needs to approve an important change to the game, Apple asks them.

What stays on your device

Your progress (levels, dolls, coins, streak, helpers, purchases) and your settings (sound, music, vibration, language) are saved on your iPhone, inside the app. Deleting the app deletes them, unless your iCloud save has a copy (see "Apple" below).

Ads (Google AdMob)

The game shows ads from Google AdMob: a short ad between some levels (never in the first session, never before level 6, never in the daily puzzle, and never if you bought "Remove ads" or the starter pack) and optional videos that you choose to watch to get a reward. To show them, Google receives information from your device, such as your IP address, device and system data, and how you interact with the ads. We receive reports from Google about how the ads perform and what they earn.

• Consent. In the European Economic Area, the United Kingdom and other regions where the law requires it, Google's consent form (UMP) asks for your choice before the game requests ads. You can change it any time in Settings, Privacy, Privacy options.
• No tracking. The game never asks for Apple's tracking permission and never uses your iPhone's advertising ID (IDFA), for any player. Google does not get it from the game, so the ads you see are never chosen by following you across other companies' apps and websites. Where you allow it in the consent form, Google may still adapt ads to what it receives with the ad request (for example, the app and your approximate location).
• Below the age limit, or age unknown. The game asks Google to treat you as a child: ads are not personalised and they are rated for all audiences (rating G).
• Above the age limit. Ads are rated for teens at most (rating T). Below the limit, or when the age is unknown, they are rated for all audiences (G). We block sensitive categories, such as gambling, dating, adult content, politics and alcohol.

Analytics and remote settings (Google Firebase)

We use Firebase Analytics to learn how the game is used and to improve it. Firebase receives an identifier of the game's installation on your iPhone (the "app instance ID", which is not your name and is not the advertising ID), gameplay events (for example, level started, level completed, moves, helpers used, shop opened, ad watched, purchase completed), technical data (device model, iOS version, app version, language) and your approximate location, worked out from your IP address. We also receive the revenue that each ad impression earns, to know how the game pays for itself.

• Consent. In regions where the law requires it, analytics are only switched on if you accept them in Google's consent form. Outside those regions they are on, unless you are below the age limit.
• Below the age limit, or age unknown. Analytics stay off for you, always and in every country: Firebase Analytics receives nothing from the game. Firebase never gets advertising signals from the game, from any player, anywhere.
• Before you answer, or if you say no. Until the game has asked for your age and your consent, and whenever analytics are not allowed for you, nothing reaches Firebase Analytics: no identifier, no events, no basic pings. If you withdraw your consent later, collection stops again. (Crash reports are separate: see below.)
• Comparison with other players. After you complete a level, the game may send the number of moves you used, with the level number, and nothing that identifies you. We use the numbers of all players to show "Better than X% of players". Only if analytics are on for you.
• Remote settings. Only if analytics are on for you, and only after you have answered, the game downloads settings from Firebase Remote Config (for example, the average number of moves of each level). To do that, Firebase receives the app instance ID and your IP address, as any internet request does. No gameplay data travels with it. Without analytics there is no download, and so no comparison with other players.
• How long. Firebase keeps event data for 2 months and then deletes it. Aggregated, anonymous statistics may be kept longer.

Crash reports (Google Firebase Crashlytics)

When the game crashes or hits an error, it sends a crash report to Firebase Crashlytics so we can find and fix the problem. This happens for every player, including players below the age limit and players who did not accept analytics, from the moment the game opens, because it is only used to keep the game working (our legitimate interest).

• What it contains. What went wrong (the technical trace of the crash or error), technical data about the device (model, iOS version, free memory and storage, whether it is jailbroken), the app version, two random identifiers of the game's installation (a Crashlytics installation ID and a Firebase installation ID) and four values of our own: the level, the screen, your age result (above the limit, below the limit or not asked yet) and the app's version and build.
• What it never contains. Your name, an account or user ID, the advertising ID, your age or birth date, or anything else that says who you are. Crash reports are not linked to you, not used for tracking and not used for advertising.
• How long. Crashlytics keeps crash reports and their identifiers for 90 days, and then starts deleting them.

Apple

• Purchases. In-app purchases are handled by Apple. We never see or store your payment details, your name or your Apple ID. Apple tells the game that a purchase was made (a transaction identifier and the product), and the game stores that on your iPhone so it never gives the same purchase twice and can restore it. If you reinstall, "Restore purchases" asks Apple again.
• iCloud. The game saves a copy of your progress to your iCloud (iCloud key-value storage), so you can recover it on a new iPhone or after reinstalling. It contains your levels, dolls, coins, helpers, the list of your purchases, your settings and your age result (above/below the limit). It is stored in your own iCloud account under Apple's terms; we can't read it, and you can switch it off in iOS Settings, your name, iCloud.

Android (Google Play)

On Android everything above works the same way, with these differences:

• Advertising ID. The game does not use your Android advertising ID (it removes the permission to read it), for any player. Google may use an app-scoped identifier (App Set ID) to serve and measure ads, which is not shared across other companies' apps.
• Purchases. In-app purchases are handled by Google Play. We never see your payment details or your Google account; Google tells the game which product was bought and an order identifier, and the game keeps it on your phone so it never gives the same purchase twice.
• Backup. There is no iCloud save. Android's own backup (Auto Backup, in your Google account) copies only the game's save file (your progress, purchases list, settings and age result), so you can get your game back after reinstalling or on a new phone. It never syncs two phones, and nothing else is copied (not your consent choices). You can switch it off in your phone's backup settings.
• Your age. Where the law requires the store to confirm ages (for example in Texas), the game asks Google Play for your age range (Play Age Signals) instead of asking you. Google only gives a range, never your birth date. Elsewhere the game asks you, as described above.
• Crash reports. They include Android's version and whether the device is rooted instead of iOS data. Sharing your daily puzzle result uses Android's share sheet.

The date and time

For the daily puzzle, the daily capsule and the streak, the game checks the real date. It asks Google for it with a small HTTPS request (to www.gstatic.com) and reads the date in the answer. The game sends no data of its own in that request; Google sees the IP address, as in any internet request. If there is no connection, the game uses your iPhone's clock.

Sharing

If you share your daily puzzle result, the game opens the standard iOS share sheet with a short text (an emoji grid and your number of moves). You choose where it goes, and nothing is shared unless you do it.

Who receives your data

• Google (AdMob, the consent form, Firebase Analytics, Crashlytics and Remote Config, and the date request), for the purposes above. Google may process data in the United States and other countries, with the safeguards the law requires (such as the EU–US Data Privacy Framework or standard contractual clauses).
• Apple (purchases and iCloud) and, on Android, Google Play (purchases and backup).
• We do not sell your data and we do not use it for anything else.

Why we may use your data (legal bases)

Your consent for analytics and personalised ads in regions where the law requires it; our legitimate interest in running and improving the game, in finding and fixing crashes (crash reports), in showing non-personalised ads and in checking the date; and the performance of the contract for your purchases.

Children

Capsumi is rated 13+ on the App Store and is not directed at children under 13, but younger players may still play it. That is why it asks every player for their age, without suggesting an answer. Players below the age limit of their country (under 13 in the United States) are treated as children: ads are not personalised, never use the advertising ID and are rated for all audiences, and there are no analytics. The only things collected from them are what the game needs to work: crash reports (kept 90 days) and what Google needs to serve an ad that is not personalised. We do not ask children for any personal information. No player is ever tracked, and the game never uses the advertising ID. Purchases are protected by Apple's family controls ("Ask to Buy" works). If you are a parent or guardian and think a child has given us information, write to us at contacto@kissylabs.com and we will help you.

Your rights

Under the GDPR (and similar laws) you can ask us for access to your data, to correct or delete it, to limit or object to its use, to receive it, and to withdraw your consent at any time (Settings, Privacy, Privacy options), without affecting what was done before. Because the game has no accounts and we don't keep anything that says who you are, we usually can't tell which data is yours (GDPR, Art. 11), and the game doesn't show its installation identifiers. If you write to us we will explain what we can do. The simplest way to erase everything is to delete the app: your progress goes with it (and, if you want, switch off iCloud for Capsumi), and what Google holds expires on its own (2 months for analytics, 90 days for crash reports). You can also complain to your data protection authority (in Spain, the Agencia Española de Protección de Datos, www.aepd.es).

US residents

We do not sell your personal information, and we do not use the advertising ID or track you across other companies' apps and websites. If a US state law gives you rights over your data (for example California's), write to contacto@kissylabs.com.

Changes

If we change how we use your data, we will update this policy before the new version is released and ask for your consent in the app where the law requires it.

Contact

Kissylabs Digital Solutions SL · contacto@kissylabs.com