Not Bad Technology

Privacy Policy — Hidden Gem

Last updated 14 September 2026·Version 1.0

The bodies below are placeholders: each one is a short brief for the clause that belongs there, so the real text can be pasted straight over it. Section numbers and the contents list are generated from the headings, so adding, removing or reordering a section keeps both in step. Nothing here is typed by hand.

Summary

A plain-language paragraph covering the whole policy: what the game stores, whether an account is needed, whether anything is sold or shared for advertising, and where to write with a question. Written so that a player who reads only this section is not misled by it.

Who we are

The legal identity behind the app: registered name, address, tax identifier, and the address to use for privacy matters. Names the data controller for the purposes of the GDPR and says which supervisory authority applies.

Data we collect

Each category of data the game handles, with the reason it is handled and the lawful basis for it. Device identifiers, progress, purchases and support correspondence are separate categories and belong in separate lines.

  • Game progress: level, gems found, difficulty records, streak.
  • Balances and purchase history tied to the App Store account.
  • Scene descriptions you type, and the scenes generated from them.
  • Technical data sent with crash reports: device model, iOS version, app version.

Data we do not collect

An explicit list of what the game never asks for or receives: precise location, contacts, photo library, microphone, advertising identifiers, cross-app tracking. Worth stating plainly, because the absence is what most players actually want to know.

How we use data

The purposes each category is used for — running the game, restoring progress, delivering purchases, fixing crashes, answering support mail — and a statement that it is not used for profiling, advertising or automated decisions.

Scenes you create

What happens to a description you type: how it is processed, whether it is reviewed before a scene enters the shared rotation, how long the description is kept, and how to ask for a scene you made to be removed.

Purchases

That purchases are handled by Apple and that no card details reach us, what receipt data is received and why it is needed to restore a purchase, and where refunds are handled.

Third-party services

Every processor the app relies on, named, with what it receives and a link to its own policy. Covers hosting, scene generation, crash reporting and the App Store, and states that no data is sold.

Analytics and crash reports

Whether analytics are used at all, what a crash report contains, whether it can be linked to a player, and how to turn the reports off in iOS settings or in the game.

How long data is kept

A retention period per category, with the reason for each: progress kept while the account exists, crash reports kept for a fixed window, support mail kept as long as the correspondence is live plus any statutory period.

Your rights

Access, correction, erasure, restriction, portability, objection and complaint, phrased for a player rather than a lawyer. Gives the address to write to, what proof is needed, and how long a reply takes.

Children's privacy

The minimum age the game is offered at, the App Store age rating, what happens if we learn a younger child has an account, and how a parent can ask for the data to be deleted.

Security

The measures actually in place — transport encryption, access control, backups, how long logs live — described honestly rather than aspirationally, plus what happens and who is told if there is a breach.

International transfers

Which countries data is processed in, the mechanism relied on for transfers outside the EEA, and where to read the safeguards. Lists the regions the hosting and generation services run in.

Changes to this policy

How a change is announced, how far in advance for a material one, that the version number and date at the top move with it, and that earlier versions stay available on request.

Contact

Where to write about anything in this policy, including a request to see, correct or delete data. A reply usually comes within a few working days.

contact@notbad.tech

Protip Norbert Częścik · NIP 5242874350

Back to top