Privacy Policy

Last updated: 18 August 2026

This policy explains what data FLINCH collects, why, and what your choices are. The data controller is AppTube doo, Dalmatinska 31, Novi Sad, Serbia — contact: privacy@playflinch.com.

1. Data stored only on your device

Your progress — best levels, REFLEX balance, unlocked skins, settings, daily results — is stored locally on your device. It is not uploaded to us, and it is deleted when you delete the app. There is no account and we cannot recover local progress.

2. Data we collect, and why

a. Leaderboards (optional)

If you submit a run to the leaderboard, we receive and store on our servers:

• a random install identifier generated on your device (not tied to your name, email, or advertising ID),
• the player handle you choose (pick anything — it doesn't have to identify you),
• the run result (level reached, run seed, timing data, date, Supporter badge status).

Handle and score are visible to other players; the install identifier is not. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) — providing the leaderboard you asked to join.

b. Purchases

Payments are processed entirely by Apple or Google; we never receive your payment details. To recognize and restore your entitlements, our purchase-management provider RevenueCat processes a pseudonymous app user ID, store receipts, device type, and purchase history (RevenueCat privacy policy). Legal basis: performance of a contract.

c. Advertising

The free version shows ads via Google AdMob. Depending on your consent, AdMob may process your device's advertising identifier, IP address, coarse location derived from it, and ad-interaction data (Google privacy policy).

• Consent first. Where required (EU/EEA/UK and other regions), you are asked for consent through Google's consent flow before any personalized ad is requested. On iOS, personalized ads additionally require your permission via App Tracking Transparency.
• Refusing is fine. If you decline, we request non-personalized ads (or no ads where that is not possible). The game remains fully playable; features that depend on watching a rewarded ad are simply hidden if ads cannot be served.
• Changing your mind. You can revisit your consent choice any time from the game's settings, and on iOS via Settings → Privacy → Tracking.

Legal basis: consent (Art. 6(1)(a) GDPR) for personalized ads; legitimate interest in funding a free game (Art. 6(1)(f)) for non-personalized ads.

d. Analytics and diagnostics

To understand how the game is played and to fix problems, we collect pseudonymous gameplay telemetry and crash diagnostics: events such as runs started, levels reached, microgame outcomes, ads shown, purchases made (product only, no payment data), plus device model, OS version, app version, language, and country. This data is keyed to the random install identifier, not to your identity. Legal basis: legitimate interest (Art. 6(1)(f)) in improving and securing the game; where a jurisdiction requires consent for analytics, we ask first.

e. Sharing your results

The "Share" button hands a text snippet to your device's share sheet. Nothing is sent to us — where it goes is entirely between you and the app you share it to. Opening a shared link (playflinch.com/d/… or /r/…) on our website is logged like any web visit (IP address, user agent) for security and capacity purposes only.

3. Who we share data with

We do not sell your personal data, and we do not share it for cross-context behavioral advertising beyond the AdMob processing described above (which you can refuse).

4. International transfers

Some providers above process data outside the EU/EEA (notably in the United States). Where they do, transfers rely on adequacy decisions (such as the EU–US Data Privacy Framework) or Standard Contractual Clauses.

5. Retention

• Leaderboard entries: kept while the leaderboard exists, or until you ask us to delete yours.
• Telemetry and crash data: up to 24 months, then deleted or aggregated.
• Server logs: up to 90 days.
• Purchase records: as long as needed to honor entitlements and legal obligations.

6. Children

FLINCH is not directed at children under 13, and we do not knowingly collect personal data from them. Where consent-based features apply, users below the applicable digital-consent age are served non-personalized ads only. If you believe a child has provided us personal data, contact us and we will delete it.

7. Your rights

Depending on where you live (including under the GDPR and the CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, to withdraw consent at any time, and to complain to your data-protection authority. Since we hold almost nothing tied to your identity, the most useful lever: email us your leaderboard handle and we will delete your entries and the associated install ID from our servers. California residents: we do not "sell" or "share" personal information as defined by the CPRA, other than ad processing you can opt out of in-app.

8. Security

Leaderboard traffic is encrypted in transit (TLS). Our servers store the minimum described above. No system is perfectly secure; we will notify affected users and authorities of breaches where required by law.

9. Changes

We will update this policy as the game evolves (for example, if we add new providers). Material changes will be flagged in-app, and the "Last updated" date above always reflects the current version.

10. Contact

AppTube doo
Dalmatinska 31, Novi Sad, Serbia
Email: privacy@playflinch.com