پرائیویسی پالیسی

1. تعارف اور ڈیٹا کنٹرولر

This Privacy Policy explains how NibTip Labs ("we", "us", or "our") handles personal data in connection with Levelux, the website at levelux.nibtip.tech, and support requests.

Levelux is designed around local, single-player puzzle sessions. The platform version matters: the Apple App Store version and any Android / Google Play version may use different monetization and data practices, described separately below.

This Policy is intended to describe the actual behavior of each platform version. If a store listing, in-app disclosure, consent prompt, SDK configuration, or platform requirement is more specific for the version you use, that more specific notice should be read together with this Policy.

This Policy is written to support the transparency requirements of major privacy frameworks that may apply depending on where Levelux is offered, including the EU General Data Protection Regulation (GDPR), UK GDPR, Swiss data protection law, ePrivacy rules, California / U.S. state privacy laws, Brazil's LGPD, and similar privacy laws. The exact rights and obligations depend on your location, the platform version, and the data actually processed.

The English version controls this Policy. Localized headings are provided for navigation only; the legal body remains in English.

2. وہ ڈیٹا جو آپ کے آلے پر رہتا ہے

Normal gameplay data is created and stored locally on your device. This may include:

• local game state and run history;
• local high scores, settings, language/theme preferences, and accessibility choices;
• local trial state, including the number of meaningful runs used, where a trial model is used;
• local store entitlement cache data needed to recognize a full unlock on the device, where paid unlocks are offered;
• local privacy, consent, or ad-preference signals on Android where Google advertising services are used.

We do not need your board state, gestures, scores, or gameplay events on our servers to operate the game. We do not operate a Levelux account system, custom backend, cloud leaderboard, multiplayer service, or remote gameplay analytics pipeline for normal gameplay.

Your device operating system, Apple, Google, or your backup provider may separately back up app data if you enable device backup, cloud restore, or similar operating-system features. Those features are controlled by the relevant platform provider and your device settings.

3. وہ ذاتی ڈیٹا جو ہمیں مل سکتا ہے

We do not automatically collect gameplay data. The personal data we may receive is limited to the contexts below:

• Support communications: your email address, message content, and attachments you voluntarily send.
• Website operational data: request data such as IP address, user-agent, URL, referrer, and request time may be processed by hosting/security infrastructure.
• Website local preferences: language and theme choices may be stored locally in your browser when you choose them. The Levelux website is not designed to use advertising cookies, analytics cookies, or cross-site tracking pixels.
• Store-side metadata: Apple may provide limited purchase or entitlement status through StoreKit. We do not receive your full payment card details.
• Android advertising data: if an Android / Google Play version includes Google advertising services, Google may process data such as advertising identifiers, IP address, device and app information, approximate location derived from network signals, ad interactions, diagnostics, consent signals, and fraud-prevention signals. We do not use this data to build our own user profiles.
• Platform diagnostics: Apple, Google, operating systems, or app stores may process crash, performance, purchase, refund, review, install, or device diagnostic data under their own terms and privacy policies. We only receive such data if the platform makes it available to developers and only use it for permitted operational purposes.
• Legal or business communications: information you provide if you contact us about rights, support, billing, or legal matters.

4. پلیٹ فارم کے لحاظ سے اشتہارات اور ٹریکنگ

Apple App Store / iOS and iPadOS

The Apple App Store version of Levelux is not built around advertising, profiling, or behavioral analytics. It does not include a third-party advertising SDK, analytics SDK, attribution SDK, cross-app tracking, device fingerprinting, user accounts, or automatic gameplay telemetry upload.

We do not request App Tracking Transparency permission in the Apple version because that version is not designed to track users.

Android / Google Play

An Android / Google Play version of Levelux may include Google advertising services, such as Google Mobile Ads / AdMob. In that case, Google and its partners may process advertising-related data to serve ads, measure ad performance, prevent fraud and abuse, comply with law, and apply your device, account, consent, and ads-personalization settings.

Ads may be personalized or non-personalized depending on region, consent status, Google settings, and SDK configuration. Even non-personalized ads may use mobile identifiers or similar signals for frequency capping, aggregated ad reporting, fraud prevention, and security where permitted.

We do not sell personal data. We do not permit advertising based on sensitive data, and we do not request precise location permission solely for advertising. If Android advertising requires consent, a prominent disclosure, or a Google-certified consent flow under applicable law or Google policy, it must be shown before the relevant advertising data is accessed or used.

Where available, users may reset or delete the Android Advertising ID, change ads personalization settings, manage Google account ad settings, or use in-app consent choices. We must respect those choices where required by law, Google Play policy, or Google advertising policies.

We aim to keep App Store privacy details, Google Play Data safety disclosures, in-app disclosures, consent prompts, and this Policy consistent with the actual platform version you use.

For Android / Google Play, our disclosures are intended to be read together with Google's official requirements, including the Google Play User Data policy, Google Play Ads policy, Google Play Data safety requirements, and Google Play Advertising ID requirements.

If Android ads are served to users in the European Economic Area, the United Kingdom, or Switzerland, the Android version must also follow applicable Google AdMob consent requirements, including Google's EU user consent policy guidance and certified CMP requirements where they apply.

You can also learn more from Google's Privacy Policy and Google's advertising technologies page.

5. نیٹ ورک تک رسائی کب ہو سکتی ہے

Core gameplay is offline-first. Network access may still occur when you use platform, website, or support features:

• opening this website or legal/support pages;
• contacting support by email;
• using App Store / StoreKit for purchase, full unlock, restore purchases, tax, refund, or entitlement checks;
• using Google Play services, Google Play Billing, or Google advertising services in an Android version;
• opening external links that you choose to follow.

These events are not gameplay analytics and do not involve remote processing of your game board. We do not intentionally transmit puzzle layouts, gestures, or run-by-run outcomes to our own servers as part of normal gameplay.

6. ہم ذاتی ڈیٹا کیسے پروسیس کرتے ہیں

This section is our integrated personal data processing notice. It explains the practical rules we apply when personal data is processed through Levelux, the website, support channels, app stores, platform services, or Android advertising services.

When we process personal data, we apply purpose limitation, data minimization, transparency, reasonable security measures, retention limits, and respect for applicable user rights. We do not process personal data for hidden purposes, and we do not use normal gameplay data to create our own behavioral advertising profile.

We only process personal data when there is a valid reason, such as providing requested functionality, responding to support, protecting security, complying with law, honoring store rules, handling purchases, or supporting Android advertising where that version includes ads and the required notices or consent choices are provided.

For users in the European Economic Area, the United Kingdom, Switzerland, and other regions with similar requirements, this section is intended to explain the controller, categories of data, purposes, legal bases, recipients, transfer context, retention criteria, rights, and consequences of not providing optional data. You can use Levelux without contacting support and without creating an account; if you choose not to provide optional support information, we may be unable to answer that specific request.

Where processing relies on consent, consent must be freely given, specific, informed, unambiguous, and capable of being withdrawn where applicable. Withdrawal does not affect processing that occurred before withdrawal or processing that continues under another lawful basis, such as legal obligations, security, fraud prevention, or dispute handling.

Levelux is not designed to require access to contacts, phonebook, camera, microphone, precise location, health data, government identifiers, payment-card numbers, or other sensitive categories for normal gameplay. If a future feature needs a protected permission or a new category of personal data, we will update the app, store disclosures, consent flow, and this Policy where required before or when that feature is released.

We do not make decisions that produce legal or similarly significant effects based solely on automated processing. Any fraud-prevention, purchase, ad, or platform-integrity processing is limited to operating Levelux, enforcing store rules, protecting the service, or complying with law.

7. خریداریاں، اشتہارات اور اسٹورز

Apple App Store / iOS and iPadOS

The Apple version is distributed through the App Store. Apple independently processes payment information, taxes, refunds, purchase history, and related store records under Apple's own terms and privacy policies.

The Apple version may be downloaded for free with a limited number of meaningful runs. Continued play can be unlocked through a one-time non-consumable purchase. StoreKit entitlement status overrides the local trial counter.

Android / Google Play

An Android / Google Play version may be monetized differently, including through Google advertising services. If Google Play Billing or paid items are offered, Google independently processes payment information, taxes, refunds, purchase history, and related store records under Google's own terms and policies.

If the Android version contains ads, we will maintain the required Google Play declarations, including the ads declaration and Data safety information, so the store listing, in-app disclosures, and this Policy describe the same data practices.

Refunds, chargebacks, family sharing, payment disputes, taxes, and purchase-history records are handled primarily by the relevant app store or payment provider. We do not receive full payment-card numbers from Apple or Google.

8. سروس فراہم کنندگان اور افشا

We may use limited third-party providers for website hosting, security, email delivery, legal or accounting support, App Store distribution, Google Play distribution, Google Play Billing, and Google advertising services. These providers process only the data reasonably necessary for their role.

In Android versions that display ads, ad requests necessarily involve sharing advertising-related data with Google advertising services so ads can be served, measured, limited, and protected from fraud.

We do not authorize service providers to use personal data we control for unrelated purposes. Some providers, including Apple and Google, may also act as independent controllers for store, payment, advertising, security, or account data under their own terms.

We may disclose information if required by law, to protect rights and security, to enforce our terms, to respond to lawful requests, to prevent fraud or abuse, or in connection with a merger, acquisition, reorganization, financing, asset sale, or similar business transfer, subject to appropriate safeguards where required.

9. محفوظ رکھنا اور حذف کرنا

Local game data is controlled by you on your device. You can usually remove it by using in-app controls where available, resetting local app data, or deleting the app.

Deleting local data does not cancel or revoke an App Store purchase. Restoring a non-consumable unlock depends on Apple ID, StoreKit, and App Store availability.

Levelux does not currently provide a Levelux account. If a future version adds account creation, we will update this Policy and provide an account-deletion path where required by platform rules or law.

Support records and website security logs are retained only for the limited periods described above unless longer retention is reasonably required by law, dispute resolution, fraud prevention, accounting, tax, chargeback handling, or security investigation.

When we delete personal data from active systems, limited residual copies may remain in backups, logs, or provider systems for a restricted period until they are overwritten or deleted according to normal retention cycles, unless faster deletion is required by law.

10. آپ کے حقوق

Depending on applicable law, you may have rights to access, correct, delete, restrict, port, or object to processing of personal data that we control. Where processing is based on consent, you may have the right to withdraw consent.

Practical privacy choices may include deleting the app, clearing local app data, clearing browser storage for this website, changing in-app settings, using operating-system privacy settings, restoring or revoking store permissions where available, changing Google ads settings, resetting or deleting the Android Advertising ID, or using the Android ad consent interface where offered.

To submit a request, email apps@nibtip.tech with the subject line "Privacy Request". We may request reasonable verification before acting on a request.

Depending on your location, you may also have the right to complain to a data protection authority, appeal a denied request where applicable, opt out of certain advertising uses, or opt out of sale/share concepts defined by applicable privacy laws. We do not knowingly sell personal data as the term is commonly understood, and we do not use the Apple version for cross-app advertising tracking.

For residents of California and other U.S. states with privacy laws, applicable rights may include the right to know/access, correct, delete, obtain a copy of personal data, opt out of sale/share or targeted advertising where applicable, limit certain sensitive-data uses, and not be discriminated against for exercising privacy rights. Because Levelux does not operate accounts or its own gameplay analytics, many requests may relate only to support emails, website logs, store metadata made available to us, or Android advertising choices handled through Google and device settings.

For Android versions with Google advertising services, if applicable law treats personalized advertising, ad measurement, or disclosure to advertising partners as "sale", "sharing", or targeted advertising, we will provide or honor the required consent or opt-out mechanism for that platform version.

If the data is controlled by Apple, Google, or another provider, we may direct you to that provider. We respond within applicable legal deadlines or, where no specific deadline applies, within 30 days.

11. بین الاقوامی پروسیسنگ

NibTip Labs is based in the Kyrgyz Republic. Website, support, store, payment, advertising, and security operations may involve processing in that jurisdiction and in countries where Apple, Google, hosting providers, email providers, or other service providers operate.

Where applicable law requires transfer safeguards, we rely on the safeguards provided by the relevant service provider, contractual protections, consent, necessity for contract performance, or other lawful transfer mechanisms available for the processing context.

12. بچے

Levelux is not intended for children under the minimum age required by applicable law or store rules, and we do not knowingly collect personal data from children through a Levelux account system.

If a future platform version is directed to children or included in a child/family program, we will review the app, advertising SDKs, consent flows, target-audience declarations, age-rating materials, and store disclosures before release.

If you believe a child has provided personal data through support channels, contact us and we will review the request.

13. سیکیورٹی

We apply reasonable technical and organizational measures to protect personal data we process. The strongest privacy control in Levelux is architectural: normal gameplay is offline-first and does not require account-based remote collection.

No method of storage or transmission is completely secure. You are responsible for keeping your device, operating system, app store account, backups, and email account secure.

14. پالیسی میں تبدیلیاں

We may update this Privacy Policy if the product, website, support process, legal requirements, platform rules, SDKs, consent flows, monetization model, or data practices change. The effective date at the top of the page will be updated accordingly.

If a material change requires additional notice or consent under applicable law or app store policy, we will provide that notice or consent flow in the appropriate place, such as in-app, on the website, in store metadata, or through the relevant platform mechanism.

15. رابطہ

NibTip Labs
Bishkek, Kyrgyz Republic
Privacy contact: apps@nibtip.tech
General contact: apps@nibtip.tech