Survival Isles Privacy Policy

Publisher: Flowzy ("Flowzy", "we", "us", "our") Contact: support@flowzy.ai

Survival Isles is a survival-crafting game for iOS and Android published by Flowzy. This policy explains what information the game collects, why, who receives it, how long we keep it and the choices you have. It covers the Survival Isles app (the "App") and the online services that power it. It does not cover the Apple App Store, Google Play or any website the App links to; they have their own privacy policies.

1. Summary

• You can play without an account. Your progress is saved on your device. We do not ask for your name, age or contact details to play.
• Accounts are optional. If you sign in (e-mail code, Sign in with Apple or Google) we store your account and a copy of your progress so you can restore it on another device.
• The leaderboard shows the survivor name you choose and your levels to all players whenever online features are available.
• Ads are shown through Google AdMob. Where the law requires it we ask for your consent first; on iOS we ask for tracking permission. Declining never stops you from playing.
• Purchases are processed by Apple or Google and managed through RevenueCat. We never see your payment card.
• You can delete everything from inside the App: Settings → Account → Delete account. Deletion is immediate.
• The App is not directed at children under 13.

2. Information we collect

2.1 Information stored only on your device

Your game progress (skills, items, your camp, quests, daily rewards, settings and statistics) is stored on your device. So are a random installation identifier (used to tell your devices apart when you use cloud save), the reminder schedule and a record of the purchases the App has delivered. This information stays on your device unless you sign in to cloud save, and it is erased when you delete your account or the App.

2.2 Account information (optional)

• Guest identifier. When online features are available, the App creates a random guest account identifier (a UUID) with our backend provider, Supabase, so that you can appear on the leaderboard without signing in. It is not derived from your device and does not identify you personally.
• E-mail address. If you sign in with an e-mail code, your e-mail address is used to send you the one-time code and to let you sign in again later. We do not send marketing e-mail.
• Sign in with Apple / Google. If you use them, Apple or Google shares with us an account identifier and, depending on your choices, your e-mail address (Apple lets you hide it behind a relay address) and your name. We use them only to sign you in.
• Sign-in security logs. Our backend provider records the IP address and app identifier (user agent) of sign-in requests in a security log that we use only to prevent abuse; it is kept for a short period.

2.3 Cloud save and leaderboard

If you are signed in, a copy of your game progress is stored on our server together with the random installation identifier of the device that last saved it, so that it survives reinstalling the App and can be restored on another device.

When online features are available, the App publishes your survivor on the public leaderboard automatically after you level up (guests included): we store the survivor name you choose, your total level, total experience and combat level, and when they were last updated. Survivor names and levels are visible to all players; no account identifier or e-mail address is shown. Please do not use your real name or any personal information as your survivor name. Deleting your account (Section 8) removes your entry.

2.4 Advertising

The App shows rewarded ads (which you choose to watch for an in-game bonus) and occasional interstitial ads when travelling between isles, through Google AdMob. Google and its advertising partners may collect:

• your device's advertising identifier (Google Advertising ID on Android, IDFA on iOS) where you allow it;
• your IP address and an approximate (city-level) location derived from it, device type and model, operating-system version, language, App version, and ad interaction data (impressions, clicks, whether a rewarded ad was completed);
• product interactions such as App launches and taps, and performance and diagnostic information about the App and the ad SDK (for example App launch time, hangs, energy use and crash information).

Google uses this information for advertising, analytics and fraud prevention. Ads are limited to content suitable for the game's age rating.

On iOS the App asks for permission through App Tracking Transparency before the IDFA can be used; if you decline, ads are not personalised. In the European Economic Area, the United Kingdom, Switzerland and applicable US states, Google's consent form asks for your choices before ads are requested. Players who buy Remove Ads or hold an active Survivor's Pass do not see interstitial ads and receive rewarded bonuses without watching an ad.

2.5 Purchases

When you buy gems, the Starter Pack, Remove Ads or the Survivor's Pass, the payment is processed by the Apple App Store or Google Play. RevenueCat, Inc. receives the purchase receipt or token, the product, price and currency, purchase and expiry dates, store country and your account identifier, so that your purchases can be verified, delivered and restored. We keep a record of these purchase events (not your payment details) linked to your account. We never receive your card number, billing address or store password.

2.6 Crash reports and analytics

This version of the App does not include a third-party crash-reporting or analytics SDK. When the App encounters an error it keeps a short diagnostic trail (error message, App version, device model, operating-system version and recent in-app events) in memory on your device only, so it can recover gracefully; nothing is sent to us or to anyone else. If we add such a provider in a future version, we will update this policy and name it before it is switched on.

2.7 Notifications

If you allow notifications, the App schedules local reminders on your device (for example when your crops are ripe or a supply crate has washed ashore). They are created and stored on your device; no push token or notification data is sent to us.

2.8 Information we do not collect

We do not collect precise location, contacts, photos, camera or microphone data (the App never records audio), health data, browsing history or the contents of other apps. Survival Isles has no chat, messaging or friend features.

3. Why we use your information

• To provide the game and your account (saving and restoring progress, cloud save, the leaderboard, signing you in).
• To process and restore purchases and to prevent fraud.
• To show ads that fund the free game, personalised only where you allow it.
• To keep the game fair and secure (plausibility checks and rate limits on leaderboard scores, abuse prevention).
• To answer support requests and to meet legal obligations.

We do not sell your personal information and we do not make automated decisions that have legal or similarly significant effects on you.

4. Legal bases (EEA, UK and Switzerland)

• Performance of a contract: your account, cloud save, purchases and leaderboard entries, which are needed to provide the game described in our Terms of Service.
• Consent: personalised advertising and notifications. You can withdraw consent at any time (Section 7) without affecting earlier processing.
• Legitimate interests: non-personalised advertising that funds a free game, security, fair play and support. You may object at any time.
• Legal obligation: responding to lawful requests.

5. Who receives your information

We share information only with the service providers needed to run the game, each under its own privacy policy and, where required, a data-processing agreement:

• Supabase, Inc.: authentication, database and server functions (hosted in Tokyo, Japan): account identifier, e-mail (if provided), cloud save, installation identifier, leaderboard entry, purchase records and sign-in security logs.
• Google LLC / Google Ireland Ltd (AdMob, User Messaging Platform): advertising identifier, IP address, device information and ad interaction data (Section 2.4).
• RevenueCat, Inc.: purchase receipts and your account identifier (Section 2.5).
• Apple Inc. and Google LLC: as app stores and payment processors, and for Sign in with Apple / Google if you use them.

We may also disclose information when required by law, to protect the rights, safety or property of Flowzy, our players or others, or as part of a merger or sale of the business (in which case we will tell you in the App before your information becomes subject to a different policy).

6. How long we keep information

• Account, cloud save and leaderboard entry: until you delete your account. Guest accounts with no activity for 12 months may be deleted automatically.
• Purchase records we hold: until you delete your account, when they are erased with it. Apple, Google and RevenueCat keep their own records of your purchases, including for tax and refunds.
• Sign-in security logs: a short period, normally no more than 7 days.
• Support e-mails: up to 24 months after your request is closed.
• Advertising data collected by Google is kept under Google's policies.
• Server backups expire within 30 days.

7. Your choices

• Ad consent: change your choices at any time in Settings → Privacy options (shown where the consent form applies).
• Tracking (iOS): iOS Settings → Privacy & Security → Tracking.
• Advertising ID (Android): Android Settings → Google → Ads (reset or delete it).
• Notifications: turn reminders on or off in Settings, or in your device settings.
• Accounts are optional: you can keep playing without one and sign out at any time.

8. Deleting your account and data

In the App go to Settings → Account → Delete account, read what will be deleted and type DELETE to confirm. Your account, cloud save, leaderboard entry and purchase records are erased from our servers immediately, and the App removes its data from your device. If you used Sign in with Apple, the App also asks Apple to revoke the sign-in it gave the App. Players without an account can use the same button to erase everything stored on the device; if a guest's device is offline at that moment, the device is erased at once and the guest account and leaderboard entry are removed from our servers the next time the App is opened with a connection.

Deleting your account does not cancel an active Survivor's Pass subscription, because subscriptions are managed by Apple or Google. Cancel it in your App Store or Google Play subscription settings (the App links there from the Shop).

If you no longer have the App, e-mail support@flowzy.ai from the address linked to your account (or tell us your survivor name if you played as a guest) and we will delete the account within 30 days.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your information, to restrict or object to processing, to withdraw consent, and to complain to your data-protection authority (in the EU see edpb.europa.eu; in the UK, ico.org.uk).

California and other US states: you may request to know, delete or correct your personal information and opt out of the "sale" or "sharing" of personal information, which can include personalised advertising. We do not sell personal information for money. You can opt out of personalised ads through Privacy options or App Tracking Transparency. We will not discriminate against you for exercising these rights.

To exercise a right, use the in-App controls or e-mail support@flowzy.ai. Because guest accounts contain no contact details, we can act only on requests we can link to an account (from the e-mail address on the account, or from the device holding it). We reply within one month (45 days for US state requests).

10. Children

Survival Isles is not directed at children under 13, or under the minimum age for consenting to data processing in their country (up to 16 in parts of the EU). We do not knowingly collect personal information from children below that age. If you believe a child has given us personal information, contact support@flowzy.ai and we will delete it.

11. Security

Traffic between the App and our servers is encrypted (TLS). Access to stored data is restricted so that each account can read and write only its own records, and leaderboard scores go through validated server functions. Payments are handled only by Apple, Google and RevenueCat. No system is perfectly secure, but we will notify you and the authorities of a data breach where the law requires it.

12. International transfers

Our backend provider stores the game's online data in Tokyo, Japan (a country covered by an EU and UK adequacy decision), and our service providers may process information in the United States and other countries whose data-protection laws differ from yours. Where information from the EEA, the UK or Switzerland is transferred, we rely on adequacy decisions, the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses.

13. Changes to this policy

We may update this policy. The effective date above will change, and for material changes we will show a notice in the App. Continuing to use the App after the effective date means you accept the updated policy.

14. Contact

Flowzy FZC Building C1, Ajman Free Zone Ajman, United Arab Emirates E-mail: support@flowzy.ai