Privacy Policy — Android

Mongi is a daily puzzle game developed by Jade Circuit OÜ (Estonia, EU). This policy explains what data we collect on Android, how we use it, and your rights. It is consistent with Google Play's Data Safety section in the store listing.

1. What we collect

When you use Mongi without an account, no personal data is sent to our servers — everything is stored on your device. When you sign in, we may collect:

• Account information: your name, email address, and profile photo from your sign-in provider (Google, Apple, or Facebook).
• Game data: scores, streaks, statistics, achievements, and game progress.
• Friend connections: friend codes and friend lists if you use the social features.
• Avatar configuration: your custom mongoose avatar settings.
• Push-notification tokens (FCM): if you enable streak reminders, via Firebase Cloud Messaging.
• Crash reports: anonymous diagnostic data for bug fixing — no personal data included.

2. Android-specific considerations

• Sign-in providers: Mongi supports Google Sign-In, Sign in with Apple, and Facebook Login. Each is optional. We only receive what the provider chooses to share (typically name + email + avatar URL).
• Google Play Services: Mongi depends on Google Play Services for Firebase functionality (auth, Firestore, FCM). Google's privacy practices apply to that layer.
• Advertising: Mongi does not currently show advertisements. We do not access the Android Advertising ID (AAID). If we add advertising in a future version, we will disclose it here and request applicable permissions.
• Permissions: Mongi requests INTERNET for cloud sync, POST_NOTIFICATIONS for streak reminders (Android 13+), and CAMERA only when you scan a friend's QR code. All permissions are opt-in.
• Data Safety section: the labels on the Google Play store listing are the authoritative summary. This policy is the long-form version.

3. How we use it

• Save your scores and progress across devices
• Show your ranking on leaderboards and weekly leagues
• Maintain your streak and game history
• Enable friend connections and score sharing
• Send streak-reminder notifications (if enabled)
• Improve the app through crash reports

4. Where your data is stored

Your data is stored in Google Firebase (Cloud Firestore), hosted in the EU (europe-west1 region, Belgium). Firebase is operated by Google and subject to Google's security and privacy standards. Authentication is handled by Firebase Authentication. Local data lives on your device using Android SharedPreferences.

5. Third-party services

• Google Firebase (Firestore, Authentication, Cloud Functions, Crashlytics, Cloud Messaging) — data storage, accounts, server-side logic, crash reporting, push notifications
• Google Sign-In — optional sign-in method
• Sign in with Apple — optional sign-in method
• Facebook Login — optional sign-in method, provided by Meta
• Google Play Services — underlying platform services used by Firebase SDKs

6. Data retention & deletion

We keep your data while your account is active. You can delete your account and all associated data anytime from Settings → Profile → Delete Account within the Android app. This permanently removes your profile, scores, friendships, and all other personal data from our servers. You can also request deletion by emailing support@jadecircuit.com. If your account is inactive for over 24 months, we may remove your data automatically.

7. Data sharing

We do not sell your data. Your display name, avatar, and scores may be visible to other players through leaderboards, weekly leagues, and friend connections. Data is processed by Google Firebase as described above. We do not share data with advertisers in the current Android release.

8. Your rights (GDPR)

Under EU law, you have the right to:

• Access your personal data
• Correct inaccurate data (edit your profile in the app)
• Delete your data (Settings → Profile → Delete Account, or email us)
• Export your data (email us for a data export)
• Object to data processing (email us)

For any privacy request, email support@jadecircuit.com.

9. Children

Mongi is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us at support@jadecircuit.com and we will delete the account.

10. Changes to this policy

We will notify you in-app and ask for fresh consent if we make material changes to this policy.

11. Contact

Data controller: Jade Circuit OÜ, Estonia, EU
Email: support@jadecircuit.com
Company: www.jadecircuit.com