SudokuXYZ Privacy Policy

Effective Date: February 6, 2026

Last Updated: August 25, 2026

This Privacy Policy explains how btmaapps ("we", "us", or "our") handles information when you use SudokuXYZ on Android or iOS. Platform features and third-party services can differ by operating system and app version. A service listed for one platform should not be read as enabled on the other platform.

Summary: SudokuXYZ does not require a btmaapps account and we do not operate our own gameplay-data backend. Most game progress is stored locally on your device. Advertising, consent, analytics, messaging, app-store billing, and subscription-management providers may process limited device, app, interaction, purchase, and network information as described below.

1. Data Controller and Privacy Contact

Data Controller: btmaapps
Privacy Contact: btmaapps@gmail.com

Contact us at this address for privacy questions or requests. We do not claim that a formally appointed Data Protection Officer exists unless such an appointment is separately made and published.

2. Information Stored Locally

SudokuXYZ stores gameplay and preference information on your device. Depending on platform and app version, this can include:

Puzzle progress, saved games, notes, completion times, scores, wins, losses, and streaks
Difficulty ratings, tier/progression state, achievements, and challenge history
Language, theme, sound, haptic, accessibility, consent, and notification preferences
Local app identifiers used to keep app state consistent

Android local storage

The Android app stores gameplay data in a local Room database protected with SQLCipher AES-256 encryption. The Android manifest disables app backup, and the encrypted gameplay database is also explicitly excluded from cloud backup and device-to-device transfer rules. Some non-database settings are stored using Android preferences or DataStore.

iOS local storage

The iOS app stores gameplay, progress, statistics, and settings in its local app container and system preference storage. The iOS release does not claim SQLCipher database encryption; iOS platform security and app-container protections apply. Apple backup or device-migration behavior can depend on your Apple settings and the final distributed build.

3. Information Processed by Third-Party Services

Third-party services process information under their own privacy terms. Availability can depend on platform, region, consent choices, app configuration, and released app version.

Android services

Google AdMob and Google User Messaging Platform (UMP): may process Advertising ID, device and app information, IP address, approximate location inferred from network information, consent choices, ad requests, impressions, clicks, and fraud/measurement signals for advertising and consent management.
Firebase Analytics: may process Firebase Installation ID, app-instance information, screen views, app events, session information, app version/build, and device/app metadata for analytics.
Firebase Cloud Messaging: may process installation or messaging identifiers, registration tokens, topic state, delivery/open information, and messaging diagnostics.
Firebase In-App Messaging: may process Firebase installation or app-instance identifiers, analytics-linked audience and campaign information, campaign fetch/display status, impressions, clicks, and other message-interaction or diagnostic signals.
Adapty and Google Play Billing: may process anonymous app/customer identifiers, device/app information, IP address, locale, paywall interactions, product and purchase information, subscription status, restore results, and entitlement state. Google Play processes the payment transaction.

iOS services

Google Mobile Ads and Google UMP: the iOS app is designed to request ads only when release configuration and consent state allow it. Google may process device/app information, IP address, approximate location inferred from network information, consent choices, ad requests, impressions, clicks, and measurement/fraud signals. Access to Apple advertising identifiers is subject to App Tracking Transparency where required.
Adapty: may process anonymous app/customer identifiers, device/app information, IP address, locale, paywall interactions, product and purchase information, subscription status, restore results, and entitlement state for subscription management, integrations, and analytics. IP-address collection is currently enabled in the audited Adapty iOS configuration.
Apple App Store and StoreKit: Apple processes purchase confirmation, billing, renewal, cancellation, refund, and store-account information. SudokuXYZ and Adapty receive product, transaction, and entitlement status needed to provide or restore paid features; we do not receive your full payment-card details.
Apple Push Notification service (APNs): when the distributed build provides remote-notification features, Apple may process a device push token and delivery-related information. Notification authorization controls whether alerts can be displayed and can be changed in iOS Settings.

Firebase analytics or in-app messaging services are not described as active iOS data flows unless the distributed iOS build contains and enables the required Firebase configuration. If that release composition changes, this policy and App Store privacy disclosures must be updated before release.

4. Permissions, Consent, and Advertising Choices

Android

Internet and network-state access support ads, consent, analytics, messaging, purchases, and other configured network services.
Vibration supports haptic feedback.
Advertising ID permission supports advertising and measurement where available.
Notification permission on Android 13 and later controls whether notification alerts can be displayed.
Google UMP provides consent and privacy-options controls where required.

iOS

Notification authorization controls whether notification alerts can be displayed.
App Tracking Transparency authorization is requested where access to tracking-related identifiers or behavior requires it.
Google UMP provides consent and privacy-options controls where required.

You can change available privacy or consent choices in the app's Settings, through the relevant consent form, and through Android or iOS system settings. Choosing non-personalized ads does not necessarily stop all ads or all processing needed for security, fraud prevention, delivery, or measurement.

5. How We Use Information

Provide, save, and restore gameplay and preferences
Operate app features, difficulty/progression systems, and local statistics
Display and measure ads, subject to consent and platform rules
Measure app usage and improve stability and user experience where analytics is enabled
Deliver notifications where configured and permitted
Display subscription products, process purchase results, restore entitlements, and suppress paid-feature restrictions
Prevent abuse, diagnose errors, and protect service integrity
Comply with legal, accounting, app-store, and consumer-protection obligations

6. Legal Bases

Depending on your location and the processing activity, we rely on one or more of the following:

Contract: to provide requested gameplay and paid features
Consent: for personalized advertising, tracking-related access, or similar processing where required
Legitimate interests: to operate, secure, troubleshoot, measure, and improve the app where those interests are not overridden by your rights
Legal obligations: for app-store, tax, accounting, fraud-prevention, or regulatory requirements

7. Third-Party Privacy Information

Google Privacy Policy: https://policies.google.com/privacy
Google/Firebase privacy information: https://firebase.google.com/support/privacy
Adapty Privacy Policy: https://adapty.io/privacy/
Apple Privacy Policy: https://www.apple.com/legal/privacy/
Google Play privacy and security information: https://support.google.com/googleplay/answer/11416267?hl=en

We do not sell personal information for money. Advertising and analytics disclosures to service providers may be considered “sharing,” “targeted advertising,” or similar regulated activity in some jurisdictions. Where required, applicable consent and opt-out controls are provided through the app, platform settings, or provider controls.

8. Data Retention

Local app data: remains on your device until removed through available in-app reset/delete controls, app-data clearing, or uninstall, subject to platform backup or restore behavior.
Purchase records: Apple, Google, and Adapty retain purchase and entitlement information according to their policies, legal duties, fraud-prevention needs, and configured service settings.
Advertising, analytics, messaging, and in-app messaging data: Google/Firebase and other providers retain service data under their own policies and configured retention controls.

We do not state a universal fixed retention period for third-party systems because periods vary by data type, provider, configuration, and legal requirement.

9. Data Security

We use reasonable technical and organizational measures appropriate to the app and the information involved. Network services generally use encrypted transport such as TLS. Android gameplay database protections and iOS app-container protections are described above. No storage or transmission method is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a copy of personal information, object to certain processing, withdraw consent, opt out of targeted advertising or regulated sharing, and complain to a supervisory authority.

Because most gameplay data is local and SudokuXYZ does not require a btmaapps account, we may not be able to identify local device data from an email address. We will explain whether a request concerns local app data or data controlled by Apple, Google, Adapty, or another provider.

To make a request, email btmaapps@gmail.com. We may need enough information to understand and verify the request, but do not send passwords, payment-card details, private keys, or complete transaction identifiers by email.

11. Deleting or Managing Data

Use available in-app reset or delete controls to remove local gameplay and settings where offered.
On Android, you can clear the app's storage or uninstall it. On iOS, uninstalling removes the app container from that device, subject to platform backup/restore behavior.
Manage advertising and consent choices through the app's privacy options and platform settings.
Manage Apple or Google purchase/subscription information through the store account used for the purchase.
For data already processed by Google, Apple, Adapty, or another provider, use that provider's privacy controls or contact us for guidance.

Deleting local game data or uninstalling SudokuXYZ does not automatically cancel a subscription and does not automatically erase data already processed by an app store or third-party provider.

12. Children and Age Considerations

SudokuXYZ does not currently include an age-gate or parental-consent flow, and it does not require users to create an online account or submit their name, address, or contact details. Parents and guardians should supervise a minor's use of the app and configure device, app-store, advertising, consent, purchase, and notification controls as appropriate. Third-party advertising, analytics, messaging, purchase, and platform providers may process limited technical information as described in this policy. If you believe child-related information should be addressed, contact us.

13. International Processing

Third-party providers may process information in countries other than your own. Their privacy policies describe applicable transfer mechanisms and safeguards. Where required, we rely on provider and contractual safeguards for international processing.

14. Changes to This Policy

We may update this policy when app features, platform releases, third-party services, legal requirements, or store disclosures change. The “Last Updated” date identifies the current version. Material changes will be communicated where required by law or platform policy.

15. Contact and Related Pages

Email: btmaapps@gmail.com