Privacy Policy
Last updated: June 17, 2026
This Privacy Policy explains how Gym Tycoon ("the Game", "we", "us")
handles information when you play our mobile game (package com.gymtycoon.game).
We built the Game to need as little personal data as possible. By playing, you agree to this policy.
1. Information we collect
Account & sign-in
To enable cloud save and social features you sign in with your Google account (via Google Sign-In / Google Play Games). We receive your Google account identifier and, if your email is verified, your email address. We store these on our own game server to identify your account and let you restore your progress on another device. We do not receive your Google password.
Game progress (cloud save)
Your game save — your gym layout, cash and gems, level and research progress, staff, and settings — is backed up to our server and linked to your account so you can restore it. This is game data, not personal information about you.
Social / community data
If you use the "visit other gyms" feature, a cosmetic snapshot of your gym (its layout, decorations, level, reputation and a display name derived from your account id) is shared so other players can view it and send tips. Do not include personal information in any name you choose.
Gameplay analytics
We collect anonymous gameplay analytics (e.g. "level up", "equipment placed") through Google Analytics. These are tied to a random, app-generated install identifier — not your name, email, or account id — and help us understand and improve the Game.
Crash diagnostics
If the Game crashes, Firebase Crashlytics collects a crash report with technical details (device model, OS, stack trace) and recent in-game context (such as your current level and day) plus your account identifier, so we can fix bugs.
Push notifications
If you allow notifications, the Game stores a Firebase Cloud Messaging device token on our server so we can send you reminders (e.g. "your register is full"). You can turn off notifications in your device settings at any time.
Advertising
The Game shows optional rewarded ads via Google AdMob. AdMob may collect and use your device's Advertising ID and ad-interaction data to serve and measure ads. In the EEA/UK we show a consent prompt (Google's User Messaging Platform) before personalized ads. The Game itself does not collect your Advertising ID.
Purchases & attribution
In-app purchases are processed by Google Play; we never see your payment details. When you make a purchase we send a purchase event to Meta (Facebook) for ad attribution, containing the purchase value and a one-way hashed version of your account id (never your email or a readable id).
Device permissions
The Game requests Internet (for cloud features), Notifications and Boot-completed (for reminders), and Vibrate (haptics). It does not request location, contacts, camera, microphone, or your phone identity.
2. Summary of data & recipients
| Data | Why | Shared with |
|---|---|---|
| Google account id & email (if verified) | Sign-in, cloud save, account recovery | Our game server (hosted on Railway) |
| Game save & gym data | Cloud backup & restore | Our game server |
| Public gym snapshot & display name | Social "visit gyms" feature | Our game server; visible to other players |
| Anonymous gameplay events | Analytics / improving the Game | Google Analytics |
| Crash reports & context | Bug fixing & stability | Google Firebase Crashlytics |
| Push token | Notifications | Our game server; Google FCM |
| Advertising ID & ad data | Rewarded ads | Google AdMob |
| Purchase value + hashed account id | Ad attribution | Meta (Facebook) |
We do not sell your personal data.
3. How we use your information
To run and save your game, provide social and notification features, show ads, measure purchases, fix crashes, and improve the Game. We process data to provide the service you request and for our legitimate interest in operating and improving the Game.
4. Data retention
Your account and cloud save are kept while your account exists, so you can keep playing. Analytics and crash data are retained according to Google's default retention periods. You can request deletion at any time (see below).
5. Your choices & rights
- Delete your data: request account & data deletion via our Data Deletion page.
- Ads: manage ad personalization through the in-app consent prompt (EEA/UK) and your device's "Ads" settings.
- Notifications: turn off in your device settings.
- Depending on where you live, you may have rights to access, correct, or delete your personal data — contact us to exercise them.
6. Security
All communication between the Game and our servers is encrypted in transit using HTTPS (TLS). We restrict access to the data we store. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
7. Children
Gym Tycoon is not directed to children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.
8. International transfers
Our service providers (Google, Meta, Railway) may process data in countries other than yours, including the United States, under appropriate safeguards.
9. Changes
We may update this policy; we will post the new version here and update the date above.
10. Contact
Questions or requests: erolrony91@gmail.com.
← Back to home