Privacy Policy

Last updated: September 24, 2026

This Privacy Policy explains how Gym Tycoon ("the Game", "we", "us") handles information when you play our mobile game (package com.gymtycoon.game). We built the Game to need as little personal data as possible. By playing, you agree to this policy.

1. Information we collect

Account & sign-in

To enable cloud save and social features you sign in with your Google account (via Google Sign-In or Google Play Games Services). We receive your Google account identifier and, if your email is verified, your email address. We store these on our own game server to identify your account and let you restore your progress on another device. We do not receive your Google password. If you use the Play Games leaderboards, your level and net-worth scores are submitted to Google Play Games under Google's privacy policy.

Game progress (cloud save)

Your game save — your gym layout, cash and gems, level and research progress, staff, and settings — is backed up to our server and linked to your account so you can restore it. This is game data, not personal information about you.

Social / community data

If you use the "visit other gyms" feature, a cosmetic snapshot of your gym (its layout, decorations, level, reputation and a display name derived from your account id) is shared so other players can view it and send tips. Do not include personal information in any name you choose.

Gameplay analytics

We collect gameplay analytics (e.g. "level up", "equipment placed") through the Firebase Analytics SDK (Google Analytics for Firebase). Events are tied to a random app-instance identifier generated by the SDK — not your name, email, or account id. Like other Google SDKs on Android, Firebase Analytics may also read your device's Advertising ID and basic device information (model, OS version, language, country). This helps us understand and improve the Game.

Crash diagnostics

If the Game crashes, Firebase Crashlytics collects a crash report with technical details (device model, OS, stack trace) and recent in-game context (such as your current level and day) plus your account identifier, so we can fix bugs.

Push notifications

If you allow notifications, the Game stores a Firebase Cloud Messaging device token on our server so we can send you reminders (e.g. "your register is full"). You can turn off notifications in your device settings at any time.

Advertising

The Game shows optional, user-initiated rewarded video ads. They are delivered through Yodo1 MAS, an ad-mediation platform that picks which third-party advertising network fills each ad — for example Google AdMob, AppLovin or Unity Ads (full list in section 2). These companies collect and process data such as your device's Advertising ID, IP address and device information to serve, personalize (where permitted) and measure ads. The first time you start the Game, a privacy prompt asks for your age and your consent choices. See section 3 (Advertising) for details and section 7 for how to opt out of personalized ads and the "sale" or "sharing" of your data.

Purchases & attribution

In-app purchases are processed by Google Play (Google Play Billing); we never see your payment details — only the product bought and a purchase token we verify with Google. To measure our own advertising, the Game includes the Meta (Facebook) SDK, which reports app events to Meta: first launch/install, app activation, tutorial completion, level-ups, opening the gem Store, and purchases (amount and currency only — never your email, name or account id). The Meta SDK may also read your device's Advertising ID and device information. Meta uses this to attribute installs and purchases to its ads under Meta's Privacy Policy; you can limit it through your device's ad settings (section 7).

Device permissions

The Game requests Internet (for cloud features), Notifications and Boot-completed (for reminders), and Vibrate (haptics). It does not request location, contacts, camera, microphone, or your phone identity.

2. Third-party SDKs & service providers

The Game contains the following third-party software development kits (SDKs) and uses these service providers. Each partner's own privacy policy governs what it does with the data.

Ad networks that may serve ads in the Game through Yodo1 MAS (each under its own privacy policy): Google AdMob, AppLovin, Unity Ads, ironSource, Mintegral, Pangle, Liftoff (Vungle), InMobi, Meta Audience Network, DT Exchange (Digital Turbine), BidMachine, Bigo Ads, Moloco, TopOn, and Yodo1's own ads.

The Game does not use cookies or web pixels. Ad SDKs may store small identifiers and settings on your device to remember your choices and limit ad frequency.

3. Advertising

Ads in the Game are optional: you choose to watch a rewarded video in exchange for an in-game bonus, and you can play without ever watching one. We do not show forced interstitial or banner ads. If you have purchased the ad-free option or a VIP subscription, you claim these bonuses without watching ads.

Ads are delivered by third-party advertising networks, chosen for each ad by Yodo1's MAS mediation platform. Third parties, including Yodo1, AppLovin, Google and the other networks listed in section 2, may collect, process and share personal data for advertising purposes, including your device's Advertising ID (GAID), App Set ID, IP address (from which a coarse location such as country or city may be inferred), device make, model, operating system and screen size, carrier and network type, app session and performance data, and how you interact with ads. They use this to deliver ads, personalize them where you have consented or not opted out, limit how often you see an ad, measure performance, and detect fraud.

We work with AppLovin to deliver ads in our mobile application and other devices and/or platforms. For more information about AppLovin's collection and use of your information visit: https://legal.applovin.com/privacy/. To exercise your rights with AppLovin directly, use AppLovin's privacy data request portal.

We work with Yodo1 (the MAS SDK) to choose and deliver ads. For more information about Yodo1's collection and use of your information visit: Yodo1's Privacy Policy.

Google AdMob is one of the networks that delivers ads. See How Google uses information from sites or apps that use its services and Google's Privacy Policy; manage Google ad personalization at adssettings.google.com.

Ad measurement. Our ad partners' SDKs include the IAB Tech Lab Open Measurement SDK. Third-party measurement partners may collect and process personal data (such as device information and ad-viewability signals) as part of the Open Measurement Working Group to verify that ads were actually displayed. See iabtechlab.com/standards/open-measurement-sdk.

Consent and personalization. The first time you start the Game — before any ad is requested — a privacy prompt from Yodo1's MAS SDK asks for your age and whether you agree to your data being used for personalized advertising. You can decline and keep playing. Your answers are passed to every ad network as privacy signals:

• GDPR (EEA, UK, Switzerland): ads are personalized only if you are 16 or older and agree; otherwise they are non-personalized.
• US state privacy laws (e.g. CCPA/CPRA): unless you agree, your data is flagged "Do Not Sell or Share", and you can opt out later at any time (section 7).
• Children (COPPA): if the age you enter is under 13, our ad partners are told to treat you as a child — no personalized ads and no ad tracking.

Everywhere, you can reset or delete your Advertising ID in your device settings, and our ad partners honor the device-level "opt out of ads personalization" / "Limit Ad Tracking" signal.

4. Summary of data & recipients

We do not sell your personal data for money. However, allowing ad and attribution partners to collect your Advertising ID for personalized advertising may count as a "sale" or "sharing" of personal information under some US state privacy laws. You can opt out — see section 7.

5. How we use your information & legal bases

To run and save your game, provide social and notification features, show ads, measure our advertising and purchases, fix crashes, and improve the Game. Where the GDPR or UK GDPR applies, our legal bases are:

• Performance of a contract (our Terms): accounts, cloud save, social features, purchases.
• Consent: personalized ads (asked in the first-launch privacy prompt), and push notifications. You can withdraw consent at any time (section 7).
• Legitimate interests: analytics, crash reporting, non-personalized ads, measuring our advertising, fraud prevention, and keeping the Game secure.
• Legal obligation: keeping basic transaction records.

6. Data retention

Your account and cloud save are kept while your account exists, so you can keep playing. Analytics and crash data are retained according to Google's default retention periods. Ad and attribution partners retain data under their own policies (linked in section 2). You can request deletion at any time (see below).

7. Your choices & rights

Controls

• Delete your account & data: use our Data Deletion page.
• Personalized ads: answer the privacy prompt shown the first time you start the Game. To change your answer later, clear the Game's app data (Android Settings → Apps → Gym Tycoon → Storage → Clear data; the prompt is shown again on the next launch — sign in first so your cloud save can be restored) or contact us. On any Android device: Settings → Google → Ads → "Delete advertising ID" or turn off ads personalization. With our partners directly: Yodo1, Google, AppLovin, Meta, and the other networks linked in section 2.
• Notifications: turn off in your device settings.
• Analytics & crash reports: we cannot switch these off per player, but deleting your account removes the account link, and resetting your Advertising ID unlinks past ad data.

Your rights (EEA, UK, Switzerland and similar laws)

You have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to our processing, and to withdraw consent at any time (without affecting processing that happened before). Email us (section 12); we respond within 30 days and may ask you to verify that you own the account. You also have the right to complain to your local data-protection authority.

US state privacy rights — Do Not Sell or Share My Personal Information

If you live in California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another US state with a consumer privacy law, you have the right to know what personal information we collect and how it is used (this policy), to access, correct and delete it, to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and not to be discriminated against for exercising these rights. We do not collect or use sensitive personal information, and we do not knowingly sell or share the personal information of anyone under 16.

To opt out of sale/sharing and targeted advertising:

• On your device: Android Settings → Google → Ads → turn on "Opt out of Ads Personalization" or tap "Delete advertising ID". Our ad partners honor this signal.
• In the Game: in the privacy prompt shown on first launch, don't agree to personalized ads (to change an earlier answer, clear the Game's app data so the prompt appears again).
• By email: erolrony91@gmail.com with the subject "Do Not Sell or Share". You may use an authorized agent.
• With our partners directly: Yodo1, Google, AppLovin, Meta, and the other networks linked in section 2.

In the last 12 months we collected these categories of personal information: identifiers (account id, email, Advertising ID, app-instance id, push token); commercial information (purchases); internet or app activity (gameplay and ad interactions); approximate geolocation (derived from IP address by our ad partners); and, by our ad partners, inferences used for ad personalization. The categories "sold" or "shared" for advertising are identifiers (Advertising ID) and app activity, with the ad and attribution partners listed in section 2. We do not sell or share any other category, and we do not offer financial incentives in exchange for personal information.

8. Security

All communication between the Game and our servers is encrypted in transit using HTTPS (TLS). We restrict access to the data we store. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

9. Children

Gym Tycoon is intended for players aged 13 and over and is listed on Google Play for that audience. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If the age entered in the first-launch privacy prompt is under 13, our advertising partners are told to treat the player as a child (COPPA): only non-personalized ads, with no ad tracking or profiling. If you are under 13, please do not play the Game or send us any personal information. If you believe a child under 13 has provided us data, contact us and we will delete it.

10. International transfers

Our service providers (Google, Meta, Yodo1 and the ad networks listed in section 2, Railway) may process data in countries other than yours, including the United States, Singapore and China. Where required, transfers rely on Standard Contractual Clauses, the EU-US Data Privacy Framework (for certified providers), or other appropriate safeguards.

11. Changes

We may update this policy; we will post the new version here and update the date above.

12. Contact

Questions or requests: erolrony91@gmail.com. The data controller is Roni Abravaya, the developer of Gym Tycoon.