Privacy Policy

1. Who We Are

Diminos is operated by Gridley Studio LLC (“we,” “us,” or “our”). We are the data controller responsible for your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Diminos mobile application and related services. By using Diminos, you agree to the practices described in this policy. This policy is incorporated into our Terms of Service and End User License Agreement.

2. Information We Collect

When you use Diminos, we may collect the following types of information:

• Account information (your email address) when you create an account
• A public handle that is randomly generated for you from a word list (you do not type it) and shown on leaderboards and other public features
• An optional private nickname you may set, which is shown only to you, is never displayed to other players, and is not shared with third parties
• An age check at first launch: we ask for a date of birth to confirm you are old enough to use Diminos and to provide age-appropriate experiences; we store only a coarse age range and do not retain your exact date of birth
• Gameplay data (scores, progress, achievements, level completions)
• Purchase and transaction data (items purchased, transaction IDs, subscription status) as provided by the Apple App Store or Google Play Store
• Device information (device type, operating system, app version, language settings)
• Crash and diagnostic reports, which are always on so we can keep the game stable
• Product-analytics data (app usage patterns, session duration), collected only if you turn analytics on, which is off by default
• Leaderboard data (your generated public handle, scores, and rankings that are visible to other players)
• Push notification tokens (a unique device identifier issued by Apple or Google) if you enable push notifications
• User-created content you submit, such as Workshop challenges or community submissions, along with the generated public handle associated with them

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the game
• Save and sync your game progress across devices
• Process and manage in-app purchases and subscriptions
• Display leaderboard rankings and scores to other players
• Improve game performance, fix bugs, and analyze usage patterns
• Communicate with you about updates, support, and promotional content
• Detect and prevent fraud, cheating, or unauthorized use

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contract performance: processing your account data and gameplay data to provide the game and fulfill our agreement with you
• Legitimate interest: analytics, fraud prevention, game improvement, and leaderboard functionality
• Consent: marketing communications and optional data collection where you have opted in
• Legal obligation: where we are required by law to retain or disclose your data

5. Data Storage, Security & Retention

Your data is stored securely using industry-standard encryption and security practices. We use Firebase for authentication and data storage, which is operated by Google and complies with major security standards. Your data may be transferred to and stored on servers located outside your country of residence, including in the United States. For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission.

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your personal account data (such as your email address, account settings, and gameplay progress) within 30 days, except where we are required by law to retain it longer. Aggregated analytics data that cannot identify you may be retained indefinitely.

Please note the following exceptions to account deletion:

• Leaderboard scores, Daily Challenge entries, and Workshop submissions you created may remain visible to other players after deletion, though we will remove or anonymize the connection to your account where reasonably possible
• Transaction and subscription records may be retained by the Apple App Store, Google Play Store, and our payment processor for tax, accounting, and fraud-prevention purposes
• Backups created before account deletion may persist in encrypted storage until they roll off according to our backup schedule
• Crash reports and aggregated analytics that have been disassociated from your identity may be retained indefinitely

7. Third-Party Services

Diminos uses the following third-party services, each with their own privacy policies:

• Firebase by Google (authentication, Firestore data storage, Cloud Messaging push notifications, and Cloud Storage backups)
• Google Analytics for Firebase (GA4) for product analytics, used only if you opt in (analytics is off by default)
• Google AdMob (rewarded video advertisements; see the Advertising note below)
• Sentry (crash reporting, error monitoring, and performance diagnostics)
• RevenueCat (subscription management and entitlement verification)
• Google reCAPTCHA and Firebase App Check (abuse prevention and fraud protection)
• Apple App Store and Google Play Store (distribution, payments, and subscription management)

Advertising. Diminos may show optional rewarded video advertisements provided by Google AdMob. These are short videos you can choose to watch in exchange for an in-game reward. Advertising is non-personalized: we do not use your personal data to target ads or to build an advertising profile, we do not enable cross-app tracking, and we do not show ads based on your behavior. We never sell your personal data to advertisers.

We do not sell your personal data to third parties. We do not share your personal data with third parties for their own marketing purposes.

8. Leaderboard & Public Data

When you participate in leaderboards, Daily Challenges, Workshop, or other community features, your generated public handle, scores, rankings, and any content you submit (such as Workshop challenges) may be visible to other players. Your public handle is randomly generated and does not contain your real name, and your optional private nickname is shown only to you. Please do not submit content (such as a Workshop challenge) that you would not want shared publicly.

Leaderboard scores and other public submissions you create may remain visible after you delete your account. See Section 5 for details on what is and is not removed on deletion.

9. Children's Privacy

Diminos is intended for users aged 13 and older. We do not direct Diminos to children under 13, and we do not knowingly collect personal information from children under 13.

When you first set up the game, we ask for your date of birth on a neutral age screen. If you indicate that you are under 13, you cannot create an account or play. We store only a coarse age range, never your exact date of birth. Across all players, public names are randomly generated rather than free-typed, any private nickname you set is shown only to you, product analytics are off unless you turn them on, and advertising is non-personalized.

If you are a parent or guardian and believe a child under 13 has created an account, please contact us at support@gridleystudio.com with the account email or public handle. We will confirm the account, stop any further collection, and delete the child's personal information within 30 days.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request data portability
• Enable or disable product analytics at any time (analytics is off by default)
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at support@gridleystudio.com. We will respond to your request within 30 days.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your privacy rights

We do not sell or share your personal information as defined by the CCPA/CPRA. We do not respond to Do Not Track browser signals, as there is no industry-standard method for honoring them. To exercise your California privacy rights, contact us at support@gridleystudio.com.

12. Push Notifications & Communications

We may send you push notifications about game events, updates, or promotions. Push notifications are delivered via Firebase Cloud Messaging (FCM), which is operated by Google. When you enable push notifications, a unique device token is generated and stored by us and by Google to route notifications to your device. You can disable push notifications at any time through your device settings, which stops further notifications and prevents new tokens from being created.

If you provide your email address, we may send you marketing communications from which you can unsubscribe at any time.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. The “Last updated” date at the top of this page indicates when this policy was last revised. Continued use of the app after changes constitutes acceptance of the revised policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at support@gridleystudio.com.