Privacy Policy

1. Introduction

Plus1UP ("Company," "we," "our," or "us") operates the website https://plus1up.com and develops mobile applications and games (collectively, the "Services"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Children's Online Privacy Protection Act (COPPA).

This Privacy Policy explains how we collect, use, disclose, transfer, and store your information when you use our Services. By downloading, installing, or using our Services, you consent to the practices described in this policy. If you do not agree with this policy, please do not use our Services.

2. Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing: Any operation performed on personal data (collection, storage, use, transfer, etc.).
• Data Controller: Plus1UP, which determines the purposes and means of processing personal data.
• Data Processor: A third party that processes personal data on behalf of Plus1UP.
• Services: All websites, mobile applications, games, and digital products owned or operated by Plus1UP.

3. Information We Collect

We collect various categories of data to provide, improve, and personalize our Services. The types of data we collect depend on how you interact with our Services.

3.1 Information You Provide Directly

• Account Data: When you create an account, we may collect your username, display name, email address, password, profile picture, and any optional profile information you choose to provide.
• Communication Data: When you contact us via email, support forms, social media, or in-app feedback, we collect the content of your message and any attachments you include.
• Newsletter & Marketing Data: When you subscribe to our newsletter or marketing communications, we collect your email address and communication preferences.
• User-Generated Content: Any content you create, upload, or share within our applications, such as game progress, scores, chat messages, reviews, forum posts, or customizations.
• Survey & Contest Data: Information you provide when participating in surveys, contests, sweepstakes, or promotions.

3.2 Information Collected Automatically

• Device Information: Device type, model, manufacturer, operating system and version, screen resolution, language settings, carrier, and hardware identifiers (e.g., Identifier for Advertisers / IDFA, Android Advertising ID / AAID).
• Usage Data: App interactions, gameplay statistics, session duration, feature usage, pages visited, in-app purchases, clickstream data, and referring/exit pages.
• Log Data: IP address, browser type and version, Internet Service Provider (ISP), date/time stamps, crash logs, performance diagnostics, and system activity.
• Location Data: Approximate location derived from your IP address. We do not collect precise GPS location unless explicitly disclosed in a specific application and with your express consent.
• Cookies & Similar Technologies: Pixel tags, web beacons, local storage, and software development kits (SDKs) used for analytics, advertising, and functionality purposes.

3.3 Information from Third-Party Sources

• Third-Party Login Services: If you sign in using Google Play Games, Apple Game Center, Facebook Login, or similar services, we may receive your public profile information (name, profile picture, email) as permitted by your privacy settings on those platforms.
• App Stores: Purchase transaction data and subscription status from Google Play, Apple App Store, or other distribution platforms.
• Analytics Providers: Aggregated and anonymized usage statistics from third-party analytics services.
• Advertising Partners: Attribution data and campaign performance data from advertising networks.
• Fraud Prevention: Risk assessment data from fraud detection and bot mitigation service providers.

4. Purposes of Data Processing

We use the information we collect for the following purposes:

• Service Delivery: To create and manage user accounts, authenticate users, process in-app purchases, and deliver the core functionality of our Services.
• Improvement & Development: To analyze usage patterns, diagnose technical issues, optimize performance, and develop new features and products.
• Personalization: To tailor content, in-app offers, and recommendations based on your preferences and usage history.
• Communication: To send service-related announcements, security alerts, administrative messages, and respond to support inquiries.
• Marketing: To send promotional communications about our products, services, and events (subject to your consent where required by law).
• Analytics: To generate aggregated, de-identified statistical data about how users interact with our Services.
• Advertising: To display contextual and interest-based advertisements within our free Services (subject to your consent where required by law).
• Security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, cheating, hacking, and other illegal or prohibited activities.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
• Rights Enforcement: To enforce our Terms of Service and other agreements, and to protect our rights, property, and safety.

4.1 Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and the United Kingdom, our legal bases for processing personal data include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose (e.g., marketing emails, personalized ads).
• Contractual Necessity: Processing is necessary for the performance of a contract with you (e.g., delivering app functionality).
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., security, analytics, service improvement), and these interests are not overridden by your data protection rights.
• Legal Obligation: Processing is necessary to comply with a legal obligation (e.g., tax laws, law enforcement requests).

5. How We Share Your Information

We do not sell your personal data for monetary consideration. We do not rent or trade your personal data with unaffiliated third parties. We may share your information in the following limited circumstances:

5.1 Service Providers & Data Processors

We engage trusted third-party companies to perform services on our behalf. These providers only access personal data necessary to perform their functions and are contractually bound to process data in accordance with this Privacy Policy. Categories of service providers include:

• Cloud infrastructure and hosting providers (e.g., AWS, Google Cloud)
• Analytics services (e.g., Firebase, Google Analytics)
• Payment processors (e.g., Google Play Billing, Apple StoreKit)
• Customer support and communication platforms
• Crash reporting and performance monitoring tools
• Advertising and attribution partners
• Authentication and single sign-on services

5.2 Third-Party SDKs & APIs

Our applications may include third-party SDKs or APIs that collect and process data independently. These third parties have their own privacy policies. We recommend reviewing the privacy policies of:

• Google Play Services and Firebase
• Apple Game Center and StoreKit
• Unity Ads, AdMob, or other ad networks (if applicable)
• Facebook SDK (if applicable)
• Adjust, AppsFlyer, or other attribution platforms (if applicable)

5.3 Legal & Safety Disclosures

• To comply with applicable laws, regulations, subpoenas, court orders, or other lawful requests by public authorities.
• To respond to claims that content violates the rights of third parties.
• To protect the rights, property, or personal safety of Plus1UP, our users, our employees, or the general public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your personal data becomes subject to a different privacy policy.

5.5 Aggregated & De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with partners, advertisers, or for industry analysis and research purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. The specific retention periods vary depending on:

• Account Data: Retained while your account is active. Upon account deletion, data is anonymized or deleted within 90 days, unless a longer retention period is required by law.
• Usage & Analytics Data: Retained for a maximum of 26 months, after which it is anonymized or deleted.
• Marketing Data: Retained until you withdraw consent or unsubscribe. Inactivity for 24 months will trigger an automatic removal from marketing lists.
• Payment Records:Retained for the period required by applicable tax and accounting laws (typically 7–10 years).
• Support Communications: Retained for 3 years after the resolution of your query.
• Backup & Log Systems: Data may persist in encrypted backups and system logs for up to 12 months before permanent deletion.

When data is no longer needed, we securely delete, destroy, or irreversibly anonymize it using industry-standard methods.

7. Data Security

We implement and maintain appropriate technical, administrative, and physical security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure server infrastructure with access controls
• Multi-factor authentication for internal systems
• Regular security audits, vulnerability scanning, and penetration testing
• Employee data protection training and confidentiality agreements
• Strict access restrictions to personal data on a need-to-know basis
• Incident response and data breach notification procedures

While we strive to protect your personal data, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your personal data, we will notify you and relevant authorities in accordance with applicable law.

8. Your Data Protection Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 GDPR Rights (EEA & UK Users)

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data under certain circumstances.
• Right to Restriction: You may request that we limit the processing of your personal data under certain conditions.
• Right to Data Portability: You may request a copy of your data in a structured, commonly used, machine-readable format, and have it transferred to another controller.
• Right to Object: You may object to processing based on legitimate interests, including direct marketing and profiling.
• Right to Withdraw Consent: You may withdraw previously given consent at any time without affecting the lawfulness of prior processing.
• Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

8.2 CCPA/CPRA Rights (California Residents)

• Right to Know: You may request information about the categories of personal data we collect, the sources of collection, the purposes of processing, and the categories of third parties with whom we share data.
• Right to Access: You may request a copy of the specific pieces of personal data we have collected about you.
• Right to Delete: You may request deletion of personal data we have collected, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal data.
• Right to Opt-Out: You may opt out of the sale or sharing of your personal data for cross-context behavioral advertising. Plus1UP does not sell personal data for monetary consideration.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

8.3 Other Jurisdictional Rights

Residents of other jurisdictions (including Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, etc.) may have similar rights. We will honor all rights granted by applicable law and will respond to any verified request within the timeframe required by the applicable regulation.

8.4 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@plus1up.com. We will respond to your request within 30 calendar days (or the timeframe required by applicable law). We may need to verify your identity before processing your request, which may require you to provide additional information.

If you believe we have not satisfactorily addressed your concern, you have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

9. Children's Privacy

Our Services are not directed to individuals under the age of 13 (or 16 in the EEA, or the applicable age of digital consent in your jurisdiction). We do not knowingly collect, use, or disclose personal data from children without verified parental consent, where required by applicable law (including COPPA in the United States and GDPR-K in the EEA).

If you are a parent or guardian and believe your child has provided us with personal data without your consent, please contact us immediately at privacy@plus1up.com. Upon verification, we will take steps to delete such information from our systems promptly.

In applications that may appeal to a mixed-age audience, we implement age screening mechanisms and limit data collection for users identified as children. We do not serve behavioral advertising to users we know to be under the age of digital consent.

10. Cookies & Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, and similar technologies on our website and within our applications. These technologies help us:

• Remember your preferences and settings
• Understand how you interact with our Services
• Authenticate your sessions and maintain security
• Measure the effectiveness of our marketing campaigns
• Deliver relevant advertisements (with your consent where required)

10.1 Types of Cookies We Use

• Essential / Strictly Necessary Cookies: Required for the operation of our Services. These cannot be disabled.
• Functional Cookies: Enable enhanced functionality and personalization (e.g., remembering your language preference).
• Analytics Cookies: Help us understand how users interact with our Services and identify areas for improvement.
• Advertising Cookies: Used to deliver advertisements relevant to your interests, measure ad performance, and limit ad frequency.

10.2 Managing Cookies

You can manage or disable cookies through your browser or device settings. Please note that disabling certain cookies may impact the functionality and performance of our Services. For mobile applications, you can reset your advertising identifier through your device settings (e.g., "Limit Ad Tracking" on iOS or "Opt out of Ads Personalization" on Android).

11. Advertising & Analytics

11.1 In-App Advertising

Our free applications may display advertisements served by third-party ad networks, including but not limited to:

• Google AdMob (Privacy Policy: policies.google.com/privacy)
• Unity Ads (Privacy Policy: unity.com/legal/privacy-policy)

These ad networks may use your device's advertising identifier and other data to deliver personalized ads. You may opt out of interest-based advertising through your device settings or through the ad choices made available by individual ad networks.

11.2 Analytics Services

We use third-party analytics tools, including but not limited to:

• Google Analytics for Firebase
• Google Analytics (web)
• Crashlytics

These analytics providers collect de-identified data regarding app usage, performance, and user behavior trends. The data collected is used solely to improve our Services and does not directly identify individual users.

12. In-App Purchases & Payment Processing

Our Services may offer in-app purchases and subscriptions. All payment transactions are processed directly by the respective app store platform (Google Play or Apple App Store). Plus1UP does not collect, store, or process your full credit card numbers, bank account details, or other sensitive financial credentials. We receive only transaction identifiers, purchase confirmation, and subscription status from the app store to enable the purchased features.

For more information on how your payment data is handled, please refer to:

• Google Payments Privacy Notice
• Apple Pay & Privacy

13. International Data Transfers

Plus1UP is based in [Your Country/Region]. Your personal data may be transferred to, stored in, and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data across international borders, we implement appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy and applicable law. For transfers from the EEA/UK to countries not deemed adequate by the European Commission or UK authorities, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• International Data Transfer Agreements (IDTA) as applicable to UK data
• Binding Corporate Rules
• Other transfer mechanisms recognized under applicable data protection law

14. Third-Party Links & Services

Our Services may contain links to websites, applications, or services operated by third parties not affiliated with Plus1UP. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services before providing them with your personal data. Plus1UP assumes no responsibility or liability for the privacy practices, content, or data handling of third-party websites or services.

15. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal that communicates a preference not to be tracked across websites. Our website and Services do not currently respond to DNT signals. However, you may exercise control over tracking through your device and browser settings as described in this policy, including opting out of interest-based advertising and managing cookie preferences.

16. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Post the revised Privacy Policy on this page with a new "Last updated" date.
• Notify you via email (if you have provided one) or display a prominent notice within our applications at least 30 days before material changes take effect.

We recommend that you review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes take effect constitutes your acceptance of the revised policy.

17. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For EEA/UK users: You may also contact our EU/UK Representative (if applicable) or lodge a complaint with your local data protection supervisory authority.

For California residents: You may designate an authorized agent to submit requests on your behalf. We may require written proof of the agent's authorization and verify your identity directly.

18. App-Specific Privacy Disclosures

Individual applications published by Plus1UP may collect additional or different categories of data depending on their specific functionality. Each application will include a clear and prominent privacy disclosure on its Google Play Store listing page, including:

• The specific types of data collected by that application
• Whether the data is optional or required
• The purpose for each data type
• Whether data is shared with third parties and for what purposes
• Whether data is encrypted in transit
• Whether users can request deletion of their data

In the event of any inconsistency between this general Privacy Policy and an app-specific disclosure, the app-specific disclosure shall prevail for that particular application.