Privacy Policy

1. Who We Are

Diminos is operated by Gridley Studio LLC (“we,” “us,” or “our”). We are the data controller responsible for your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Diminos mobile application and related services. By using Diminos, you agree to the practices described in this policy. This policy is incorporated into our Terms of Service and End User License Agreement.

2. Information We Collect

When you use Diminos, we may collect the following types of information:

• Account information (email address, display name) if you create an account
• Gameplay data (scores, progress, achievements, level completions)
• Purchase and transaction data (items purchased, transaction IDs, subscription status) as provided by the Apple App Store or Google Play Store
• Device information (device type, operating system, app version, language settings)
• Analytics data (app usage patterns, session duration, crash reports)
• Leaderboard data (display name, scores, and rankings that are visible to other players)
• User-uploaded content, such as custom avatar images, if you choose to provide them (stored with your account as image data)
• Push notification tokens (a unique device identifier issued by Apple or Google) if you enable push notifications
• User-created content you submit, such as Workshop challenges or community submissions, along with the display name associated with them

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the game
• Save and sync your game progress across devices
• Process and manage in-app purchases and subscriptions
• Display leaderboard rankings and scores to other players
• Improve game performance, fix bugs, and analyze usage patterns
• Communicate with you about updates, support, and promotional content
• Detect and prevent fraud, cheating, or unauthorized use

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contract performance: processing your account data and gameplay data to provide the game and fulfill our agreement with you
• Legitimate interest: analytics, fraud prevention, game improvement, and leaderboard functionality
• Consent: marketing communications and optional data collection where you have opted in
• Legal obligation: where we are required by law to retain or disclose your data

5. Data Storage, Security & Retention

Your data is stored securely using industry-standard encryption and security practices. We use Firebase for authentication and data storage, which is operated by Google and complies with major security standards. Your data may be transferred to and stored on servers located outside your country of residence, including in the United States. For transfers from the EEA/UK, we rely on Standard Contractual Clauses approved by the European Commission.

We retain your data for as long as your account is active. If you delete your account, we will delete or anonymize your personal account data (such as your email address, account settings, and gameplay progress) within 30 days, except where we are required by law to retain it longer. Aggregated analytics data that cannot identify you may be retained indefinitely.

Please note the following exceptions to account deletion:

• Leaderboard scores, Daily Challenge entries, and Workshop submissions you created may remain visible to other players after deletion, though we will remove or anonymize the connection to your account where reasonably possible
• Transaction and subscription records may be retained by the Apple App Store, Google Play Store, and our payment processor for tax, accounting, and fraud-prevention purposes
• Backups created before account deletion may persist in encrypted storage until they roll off according to our backup schedule
• Crash reports and aggregated analytics that have been disassociated from your identity may be retained indefinitely

6. Third-Party Services

Diminos uses the following third-party services, each with their own privacy policies:

• Firebase by Google (authentication, Firestore data storage, Cloud Messaging push notifications, Cloud Storage backups, and Firebase Analytics)
• Google Analytics (aggregated usage analytics)
• Sentry (crash reporting, error monitoring, and performance diagnostics)
• RevenueCat (subscription management and entitlement verification)
• Google reCAPTCHA and Firebase App Check (abuse prevention and fraud protection)
• Apple App Store and Google Play Store (distribution, payments, and subscription management)

We do not sell your personal data to third parties. We do not share your personal data with third parties for their own marketing purposes.

7. Leaderboard & Public Data

When you participate in leaderboards, Daily Challenges, Workshop, or other community features, your display name, scores, rankings, and any content you submit (such as Workshop challenges) may be visible to other players. Do not use your real name as your display name if you do not want it publicly visible, and do not submit content you would not want shared publicly.

Leaderboard scores and other public submissions you create may remain visible after you delete your account. See Section 5 for details on what is and is not removed on deletion.

8. Children's Privacy

Diminos is intended for general audiences and is not directed to children under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe that your child under 13 has provided personal information to Diminos without your consent, please contact us at support@gridleystudio.com with your child's account email or display name. We will confirm the account and delete the child's personal information within 30 days, and we will stop further data collection from that account.

We do not knowingly serve behaviorally-targeted advertising to any user, and we do not use any user's data for advertising profile building.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request data portability
• Opt out of analytics data collection
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at support@gridleystudio.com. We will respond to your request within 30 days.

10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt out of the sale or sharing of your personal information
• The right to non-discrimination for exercising your privacy rights

We do not sell or share your personal information as defined by the CCPA/CPRA. We do not respond to Do Not Track browser signals, as there is no industry-standard method for honoring them. To exercise your California privacy rights, contact us at support@gridleystudio.com.

11. Push Notifications & Communications

We may send you push notifications about game events, updates, or promotions. Push notifications are delivered via Firebase Cloud Messaging (FCM), which is operated by Google. When you enable push notifications, a unique device token is generated and stored by us and by Google to route notifications to your device. You can disable push notifications at any time through your device settings, which stops further notifications and prevents new tokens from being created.

If you provide your email address, we may send you marketing communications from which you can unsubscribe at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. The “Last updated” date at the top of this page indicates when this policy was last revised. Continued use of the app after changes constitutes acceptance of the revised policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at support@gridleystudio.com.