Flowboo · October 27, 2026
Privacy Policy
Who is responsible
Yusuf Qazi publishes Flowboo and is responsible for its handling of personal information. For privacy questions, access or correction requests, or complaints, contact rbsbuilder112@gmail.com. This policy covers the iOS and Android game.
Playing without an account
Progress, preferences, hints, tutorial state, reminder choices, and ad frequency are saved locally on your device. You can play without signing in. The device operating system may include app data in backups according to your settings. Network services can receive your IP address and technical request information when the app connects.
Accounts, saves, and leaderboards
If you sign in using email or Google, Supabase handles authentication and stores your account ID, email, sign-in information, profile, game progress, and verified scores. Google supplies the basic identity information you approve during sign-in. We use these records to sign you in, synchronize devices, recover access, and run leaderboards. Your chosen display name, avatar, frame, rank, and scores may be visible to other players; your email is not displayed on the leaderboard. Avoid putting private information in your public name.
Purchases and daily rewards
Apple or Google handles payment details. We do not receive your full card number or bank details. RevenueCat processes a random anonymous customer ID, or your Flowboo account ID if you sign in, purchase and subscription records, store, product, entitlement status, and technical app/device information to verify purchases, restore access, and keep subscription status current. Guest Plus hint claim dates and amounts are saved on this device. Signed-in daily hint claim dates and amounts are stored with your account to prevent duplicate rewards. We do not send your email or profile name to RevenueCat as customer attributes.
Optional play statistics
Only if you choose to share play statistics, we collect a random installation identifier, session and puzzle visit identifiers, app version and platform, timestamps, screen and dialog visits, active and idle time, puzzle starts, progress, completions, retries, hints and undos, coarse ad, purchase and sync outcomes, app startup and board-readiness timings, long JavaScript delay samples and memory-warning signals. These statistics help us understand return visits, puzzle difficulty and where play stops. We do not include your name, email, account identifier, advertising identifier, full puzzle paths, payment details, or audio or screen recordings. We do not link this data to your game account, share it with advertising networks, or track you across other apps. Data is sent to our existing Supabase service over an encrypted connection. Service infrastructure necessarily receives network information such as IP addresses, but we do not add IP addresses to play statistics. Offline events are queued on this device for up to 7 days, capped at 500 events. Raw server events are retained for up to 90 days. Choose Settings → Play statistics to stop sharing and request deletion of this installation’s statistics. If offline, deletion is retried when connected. Disabling sharing clears queued events immediately. Re-enabling creates a new identifier. Account deletion also turns off statistics and requests deletion on that device. Reinstalling or clearing app data loses the previous identifier, so it cannot be recovered to delete that history directly; it expires under the retention policy.
Optional ad measurement
Separately from play statistics, you may allow Meta advertising measurement under Settings → Ad measurement & crash reports. If enabled in your build and permitted by your device settings, Meta receives install and app-activation information and selected level-completion events, app/device and network information, and permitted advertising identifiers to attribute Facebook and Instagram ads. This can match activity across companies and apps. On iOS, we also require App Tracking Transparency authorization. We do not send your Flowboo account, name, email, purchases, revenue, raw puzzle paths, or recordings to Meta. Automatic app-event and purchase logging are disabled. Declining does not prevent gameplay, subscriptions or existing AdMob advertising. Turning this off stops future optional Meta events; it does not erase information already held by Meta. Provider-held data follows Meta’s policies and applicable rights. Ask us about access or deletion requests.
Optional crash reports
You may separately enable crash reports under Settings → Ad measurement & crash reports. Only when this is enabled and configured in your build, Sentry receives technical JavaScript and native crash information, stack traces, release/build and device/system metadata. We do not attach your game account or profile, recordings, navigation breadcrumbs, or custom messages. JavaScript exception text and source URLs are filtered; native crash reports may include operating-system and native-library error details. Profiling, replay recordings, automatic session tracking and performance transactions are disabled. Turning this off stops future reports; it does not delete previously sent reports, which follow the Sentry project retention settings. Contact us about access or deletion requests. This is independent of play statistics and optional Meta measurement.
Advertising
Google AdMob delivers banner ads during eligible puzzles and occasional interstitial ads between puzzles. We request non-personalized ads with general-audience content restrictions and protections for younger players. The ad service may process IP addresses, device and app information, ad interactions, diagnostics, and identifiers permitted by your settings to deliver and measure ads and prevent fraud. Non-personalized ads still involve data processing. We do not send your Flowboo name, email, or game account to AdMob. Where available, manage consent under Settings → About our ads. Active paid memberships disable in-game banner and interstitial ads.
Notifications and permissions
Optional reminders are scheduled locally on your device using the operating system. You choose whether to allow them and can change reminder settings in the app or system settings. These reminders do not require us to store a remote push-notification token. We do not request your precise location, contacts, microphone, or photo library for gameplay. Any store or sign-in screen is governed by that provider’s permissions and policies.
Service providers and international processing
We use Supabase for accounts, cloud saves, game services, and optional play statistics; RevenueCat for subscription verification; Google for optional sign-in and advertising; Apple and Google for store billing; Meta for separately optional advertising attribution; and Sentry for separately optional crash reports. They process information to provide these services, secure systems, and meet legal requirements. Information may be processed outside your province or country, including in the United States, where laws may differ. We may disclose information when legally required or reasonably necessary to prevent fraud and protect rights or safety. We do not sell your account or save data.
Retention and security
Account and save data are kept while needed to operate your account and services. You can delete your account in Settings → My account & cloud save; this removes its game profile, cloud save, scores, and daily reward ledger from our active game database. Store and subscription providers may retain transaction records for accounting, fraud prevention, disputes, or legal obligations. Limited backup or security records may remain until their normal expiry or as required by law. We use authentication, access restrictions, and encrypted network connections, but no service can guarantee perfect security.
Your choices and rights
You can change your public profile, disable reminders, manage ad privacy where offered, sign out, or delete your account in Settings. Account deletion does not cancel store subscriptions; cancel in the App Store or Google Play first if you no longer want renewal. Contact rbsbuilder112@gmail.com to request access, correction, export, or deletion of personal information, including subscription-provider records, or to withdraw optional consent. We may need to verify your identity. Rights and lawful retention exceptions depend on where you live; you may also contact your local privacy regulator.
Young players and policy updates
Flowboo is intended for ages 13 and up, and is not directed at children under 13. If you believe a child under 13 has provided account information, contact rbsbuilder112@gmail.com so we can investigate and take appropriate action. We may update this policy as the game changes and will provide any notices or choices required by applicable law.