Privacy Policy

• The App has no accounts and no sign-in. We do not ask for your e-mail address, phone number or real name.
• The App contains no advertising, no analytics and no crash-reporting tools. We do not track you.
• We run no server for the App. A two-player match takes place between two phones over Bluetooth, and a match against the bot takes place on your phone alone.
• Your player name, a random identifier of your installation and your settings are stored on your phone. They never reach us.
• In a Bluetooth game, your player name and that identifier are sent, unencrypted, to the other phone in the game.
• The App uses the internet for one thing: the plane shop. Each time it starts with a connection, it asks our purchase service provider, RevenueCat, which planes you own. Payment is handled by Apple or Google.

The controller of the personal data described in this policy is:

For any privacy question, write to us at the e-mail address above.

The App stores the following on your phone, in its own storage, which other apps cannot read. None of it is sent to us.

This data stays until you change it, clear the App's data or uninstall the App. Uninstalling removes all of it. A new installation gets a new identifier.

Backups. On Android, the App has switched off cloud backup for its data. On an iPhone, the App's data is part of the backup of your phone if you use iCloud Backup or back up to a computer, as with most apps. That backup is yours and is handled by Apple, not by us.

A two-player match runs directly between two phones over Bluetooth Low Energy. The data of a match does not pass through the internet and does not reach us.

The other phone receives:

• your player name;
• your installation identifier;
• whether your phone runs Android or iOS;
• the game itself: your moves, the score and the plane you fly.

The other phone keeps this data in memory for the duration of the game. The App does not save it, there or anywhere else. We have no control over what the owner of the other phone does with what they see on their screen.

Playing against the bot and choosing a map need neither Bluetooth nor the internet. Nothing leaves your phone.

The first plane is free. You can buy further planes, each with a one-time payment. This is optional.

Payment. You pay through your App Store account (Apple) or your Google Play account (Google). Apple or Google processes the payment under its own terms and privacy policy, as an independent controller: Apple's Privacy Policy, Google's Privacy Policy. We never receive your card or other payment details.

Keeping track of what you own. To record purchases and unlock the planes, we use the service of RevenueCat (RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA). RevenueCat is our processor: it handles the data on our behalf and on our instructions, under its Data Processing Addendum.

The RevenueCat software in the App contacts RevenueCat's servers when the App starts with an internet connection, when you open the shop, and when you buy or restore. It sends:

• an anonymous purchase ID that the RevenueCat software generates at random on your phone. We do not link it to your name, your player name or the installation identifier used in Bluetooth games;
• your purchases in the App: the product, the time, and the receipt or purchase token issued by Apple or Google;
• technical details of the request: the App's version, the operating system and its version, the device model, the language settings of the phone and the country of your store account;
• on iPhone and iPad, Apple's “identifier for vendor”. Apple assigns it to our apps on your device. It is not the advertising identifier, and apps of other companies get a different one;
• the IP address of your connection, which every server on the internet sees when it is contacted.

We use this data only so that you get and can restore what you bought, and so that we can answer your questions about a purchase. We do not use it for advertising or profiling. What RevenueCat processes is described in its Privacy Policy and in its guides to the privacy declarations of the App Store and Google Play.

What we see: anonymous purchase records in RevenueCat's dashboard, that is an ID, the products bought, the dates, the country and the store. We cannot tell from them who you are.

We do not sell personal data, we do not use it for advertising, and we make no automated decisions about you.

No law requires you to provide this data. Without the Bluetooth data, however, there is no two-player match (playing against the bot works without it), and without the purchase data we cannot unlock paid planes.

We do not transfer the data stored on your phone or sent over Bluetooth anywhere.

RevenueCat is a company in the United States and, according to its privacy policy, stores data on Amazon Web Services servers in the United States. The purchase data described in section 5 is therefore transferred to the United States. The transfer is based on the European Commission's standard contractual clauses (the controller-to-processor module), which form part of RevenueCat's Data Processing Addendum. The addendum also lists RevenueCat's sub-processors. We will send you a copy of the clauses on request.

Apple and Google may process payment data outside the EEA under their own rules.

On an iPhone the App asks for one permission only: the use of Bluetooth.

You can withdraw the Bluetooth and Location permissions at any time in the phone's settings. Two-player games then do not work; playing against the bot and the shop do not need them.

Biplanes is a game for a general audience. It is not directed to children under 13 (or under the higher minimum age that applies in your country), and we do not knowingly collect personal data from them.

The App has no age check, because it has no accounts and asks for no personal details. The only data that goes from a phone to us or to our processor is the anonymous purchase data described in section 5.

A purchase by a player under 18 needs the consent of a parent or guardian. With the parental controls of Apple and Google, purchases can be made subject to approval. If you are a parent and believe that your child's data has reached us, write to us and we will delete what we can find.

Under the GDPR you can ask us for access to your personal data, to correct or delete it or to restrict its processing; you can ask for it in a portable form; and you can object to processing based on legitimate interest. Using your rights is free. We answer within one month.

Because the App has no accounts, we hold nothing that tells us who you are, and we cannot look you up by name or e-mail address (Article 11 GDPR). In practice:

• Data on your phone. It is under your control. You can change your player name on the menu screen. To erase everything, including the installation identifier, uninstall the App or clear its data in the phone's settings.
• Data seen by the other player. We never had it, and we cannot delete it from someone else's memory. The App does not keep it after the game.
• The purchase record at RevenueCat. Write to hello@hypercodesolutions.io. To find the anonymous record that belongs to you, we will ask for something that identifies the purchase, for example the order number on the receipt you got from Apple or Google. We then send you the record or delete it. Deleting it does not refund the purchase, and you do not lose the purchase either: the store still knows about it, and Restore purchases brings the plane back.
• Data held by Apple or Google. Use the privacy tools of your Apple or Google account, or contact them as described in their privacy policies.

If you think we handle your data unlawfully, please write to us first: we will try to put it right. You can also complain to the supervisory authority. In Hungary this is the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH).

Seat: 1055 Budapest, Falk Miksa utca 9-11., Hungary. Postal address: 1363 Budapest, Pf. 9. Phone: +36 1 391 1400. E-mail: ugyfelszolgalat@naih.hu. Website: www.naih.hu.

You can also complain to the authority of the EU member state where you live or work, and you can go to court.

The data on your phone is protected by the phone itself: other apps cannot access it. Bluetooth traffic is not encrypted (section 4). Traffic between the App and RevenueCat is encrypted in transit.

If the App changes, for example if it gets a new feature that uses data, we update this policy before the change reaches you and change the effective date above. The current version is always on this page.

Questions? Write to hello@hypercodesolutions.io. Our company details are in section 2.