private

1

What Do These Terms Mean?

Application: Arrow Spark, the mobile puzzle game and related services
Company: The operator of Arrow Spark ("we," "us," "our")
Personal Information: Information that identifies or can reasonably be linked to you
Usage Data: Technical and behavioral data generated when you use the app
Device: Any phone, tablet, or hardware used to access Arrow Spark
Service Provider: A third party that processes personal information on our behalf
Account: Your profile, progress, or session within the application

2

Information Collection

Collected automatically

IP address, device model, OS, app version
Device identifiers (GAID, ANDROID_ID)
Usage Data — levels, session length, feature use
Crash logs and diagnostic reports
Network type and connection quality

With your permission

Advertising identifiers (GAID, IDFA)
Engagement and ad interaction metrics
PayPal email and name — withdrawal processing only

3

Why Do We Need Your Data?

Deliver arrow puzzle gameplay, progress sync, and core features
Operate accounts, authentication, and saved preferences
Process PayPal withdrawals and conduct fraud-prevention reviews
Respond to support requests and send permitted communications
Analyze usage trends, measure campaigns, and improve stability
Support lawful business transitions and compliance obligations

4

When We Share Your Information

Service providers — hosting, analytics, support, payments
Business transfers — mergers, acquisitions, or asset sales
Affiliates — entities under common control
Business partners — joint features you choose to use
Public interactions — content you voluntarily share
Legal obligations — valid legal process or regulatory requests
Your consent — any purpose you explicitly authorize

PayPal commitment: PayPal email and payout details are never sold or rented. Shared only for withdrawal processing, fraud prevention, or when required by law.

5

Data Security

We protect personal information through TLS 1.2+ encryption, role-based access controls, vulnerability reviews, and contractual security requirements for subprocessors.

6

App Permissions

Permission	Purpose	Data
`INTERNET`	Connectivity, ads, updates	Network status
`ACCESS_NETWORK_STATE`	Connection optimization	Network type
`ACCESS_WIFI_STATE`	Wi-Fi stability	Wi-Fi status
`AD_ID`	Ad delivery	Resettable ad ID
`VIBRATE`	Haptic feedback	None
`ACCESS_ADSERVICES_TOPICS`	Ad topics	Topic signals
`ACCESS_ADSERVICES_ATTRIBUTION`	Attribution	Campaign data
`BIND_GET_INSTALL_REFERRER_SERVICE`	Install tracking	Referrer
`BIND_APPHUB_SERVICE`	Ad via AppHub	Ad params
`ACCESS_ADSERVICES_AD_ID`	Ad API compliance	Ad service IDs
`FOREGROUND_SERVICE`	Background tasks	None
`DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`	Internal messaging	None

7

Third-Party Services & Ad Partners

Advertisements are delivered through AppLovin and its mediation network.

May be shared

Resettable advertising identifiers
Device model, OS, screen size
Session frequency and duration
Ad impressions, clicks, conversions
Country and language

Never shared

Email or phone number
Account credentials
Gameplay progress tied to identity
Precise GPS location
PayPal payout details

Partner privacy policies

Partner	Privacy Policy
AppLovin	applovin.com/privacy
Chartboost	chartboost.com/legal/privacy-policy
Google	policies.google.com/privacy
InMobi	inmobi.com/privacy-policy
IronSource	ironsource-mobile-privacy-policy
Kwai	kwai.com/legal
Fyber	fyber.com/privacy-policy
Mintegral	mintegral.com/en/privacy
Moloco	moloco.com/privacy-policy
Bytedance (Pangle)	pangleglobal.com/privacy
Vungle	vungle.com/privacy
Unity Ads	unity3d.com/legal/privacy-policy
Yandex	yandex.com/legal/confidential
BidMachine	bidmachine.io/docs
Verve	verve.com/privacy-policy
Bigo	bigo.tv/policy
TaurusX	publisher.taurusx.com/…

8

Analytics & Endpoints

Our backend at https://sohey.fortunemo.com supports gameplay delivery, progress synchronization, performance monitoring, anonymized analytics, issue detection, and customer support.

TLS 1.2+ encryption for data in transit
Role-based access controls and least-privilege access
Data minimization in collection and retention
Periodic security assessments
Data Processing Agreements with subprocessors

9

What Can You Do About Your Data?

GDPR (EEA)

Access, Rectification, Erasure
Restrict processing, Object

CCPA / CPRA (California)

Right to Know, Delete
Opt-Out, Non-Discrimination

VCDPA (Virginia)

Access & confirm, Correct, Delete, Data portability, and Opt-out of targeted advertising.

Submit requests to ashleshaparekh@icloud.com.

10

Opting Out

Android

Settings → Google → Ads → Opt out of Ads Personalization

iOS

Settings → Privacy & Security → Tracking → limit ad tracking

Email ashleshaparekh@icloud.com with subject "Do Not Sell My Personal Information".

11

Data Retention

Personal information is retained only as long as needed. After 90 consecutive days of inactivity, we delete your personal information. Anonymized usage data may persist for analytics.

12

International Transfers

Your information may be processed outside your country of residence. We use encryption and contractual safeguards designed to provide comparable protection during transfer and storage.

13

Disclosure Requirements

Business transactions — data may transfer during mergers or acquisitions
Law enforcement — we comply with valid legal process
Safety — we may disclose data to prevent fraud, abuse, or harm

14

Children's Privacy

Arrow Spark is not directed to children under 13. If you believe a child has provided personal information, contact ashleshaparekh@icloud.com and we will delete it promptly.

15

Third-Party Links

External sites linked from the app have independent privacy practices. Review their policies before sharing personal information.

16

Cookie Policy

Arrow Spark may use cookies and similar technologies in embedded web views to remember preferences, measure performance, and support advertising. You can limit tracking through device settings and browser controls where available.

17

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you. Ad personalization does not determine eligibility for core gameplay or withdrawals.

18

Changes to This Policy

Revisions are posted here with an updated effective date
Material changes may be communicated via email or in-app notice where required
Continued use constitutes acceptance of updates

19

How to Reach Us

Email: ashleshaparekh@icloud.com
In-App: Settings → Help & Support

We respond to privacy inquiries within 48 hours.

Privacy Policy