Privacy Policy

Effective Date: May 10, 2026

1. Who We Are

UpJoyAP ("we", "us", "our") is the developer and publisher of mobile applications including Jigsaw Puzzles Master, Sudoku EyeCare, Gown Jigsaw, Arrows Out, Mosaicards, and Hexa: Witch's Grimoire. We are committed to protecting your privacy and being transparent about our data practices.

Contact: support@upjoyap.com

2. Information We Collect

2.1 Information You Provide Directly

• Email address or other contact information (only if you voluntarily contact us for support or feedback)
• Any content you submit through in-app feedback features

2.2 Information Collected Automatically (Group A apps only)

When you use a Group A app (Jigsaw Puzzles Master, Sudoku EyeCare, Gown Jigsaw, Mosaicards, or Arrows Out), the following information may be collected automatically through our integrated third-party services. Hexa: Witch's Grimoire does not collect any of this data — see Section 14.

• Device information: Device model, operating system and version, screen resolution, device language, time zone
• Identifiers: Advertising ID (IDFA on iOS, GAID on Android), Firebase Installation ID, anonymous app instance identifiers
• Usage data: App opens, session duration, screens visited, in-app events and interactions, feature usage patterns
• Performance data: Crash logs, error reports, ANR (Application Not Responding) data, app launch time, network latency
• Network information: IP address (used to derive approximate location at city level), network connection type (Wi-Fi, cellular), carrier name
• Ad interaction data: Ad impressions, clicks, conversions, ad format and placement identifiers

2.3 Information Stored Locally

Game progress, scores, achievements, statistics, and user preferences are stored locally on your device. This data is not transmitted to our servers unless explicitly described otherwise.

3. Third-Party Services (SDKs) — Group A Apps Only

Jigsaw Puzzles Master, Sudoku EyeCare, Gown Jigsaw, Mosaicards, and Arrows Out integrate the following third-party services provided by Google LLC. These services may collect and process data independently as described below. Hexa: Witch's Grimoire integrates no third-party SDKs of any kind.

3.1 Google Firebase

We use the following Firebase services in Jigsaw Puzzles Master, Sudoku EyeCare, Gown Jigsaw, Mosaicards, and Arrows Out:

• Firebase Analytics (Google Analytics for Firebase) — Collects usage data and app events to help us understand user behavior, measure feature adoption, and improve app quality. Data collected includes: app opens, session duration, screen views, in-app events, device model, OS version, country (derived from IP), app version, and Firebase Installation ID. Firebase Privacy Information
• Firebase Crashlytics — Collects crash reports and error logs to help us identify and fix stability issues. Data collected includes: crash stack traces, device state at time of crash, device model, OS version, and Crashlytics Installation UUID. Crashlytics Terms

Firebase data is processed by Google on servers located in the United States and other countries. For more information, see Firebase Privacy and Security documentation.

3.2 Google AdMob

Jigsaw Puzzles Master, Sudoku EyeCare, Gown Jigsaw, Mosaicards, and Arrows Out use Google AdMob to display advertisements. AdMob may collect and process the following data:

• Device identifiers: Advertising ID (IDFA / GAID)
• IP address (used for ad targeting and fraud prevention)
• Device information: Device model, operating system version, screen size, device language
• Ad interaction data: Impressions viewed, ads clicked, ad format and placement
• App usage data: Session duration, app version

AdMob may use this data to serve personalized or non-personalized ads depending on your consent choices. For more information, see Google's Privacy Policy and How Google Uses Information from Sites or Apps That Use Our Services.

3.3 Google User Messaging Platform — Consent

Group A apps integrate Google's User Messaging Platform (UMP) SDK to obtain and record your consent for advertising data processing in regions that require it (such as the EEA, the United Kingdom, Switzerland, and certain US states). UMP itself does not show advertisements; it presents a consent form, stores your consent string locally on the device, and forwards that consent state to AdMob and its mediation partners. You can re-open the consent form at any time from the in-app Settings screen.

3.4 Third-Party Ad Networks

Through AdMob mediation, ads may also be served by third-party ad networks. These networks may independently collect data as described in their respective privacy policies. A list of our ad network partners is available in our app-ads.txt file.

4. How We Use Your Information

We use the collected information for the following purposes:

• Provide and maintain our services: Deliver core game functionality, save progress, and manage settings
• Improve and optimize: Analyze usage patterns, identify bugs, improve app performance and user experience
• Crash and error analysis: Diagnose and fix crashes, errors, and performance issues
• Advertising: Display ads within the Apps, measure ad effectiveness, and manage ad frequency
• Customer support: Respond to your inquiries and provide technical assistance
• Legal compliance: Meet applicable legal and regulatory requirements

5. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your data based on the following legal grounds:

• Consent: For personalized advertising and optional analytics tracking. You can withdraw consent at any time.
• Legitimate interests: For core analytics, crash reporting, and app improvement, where our interests do not override your rights.
• Contract performance: To provide the services you requested when using our Apps.
• Legal obligation: To comply with applicable laws and regulations.

6. Data Sharing and Disclosure

We do not sell your personal information.

We may share data with the following categories of recipients:

• Google LLC: As our Firebase and AdMob provider, Google receives data as described in Section 3. Google processes this data according to its own privacy policy.
• Ad network partners: Third-party ad networks that serve ads through AdMob mediation may receive device identifiers and ad interaction data.
• Legal authorities: When required by law, regulation, legal process, or governmental request.
• Safety and protection: To protect the rights, property, or safety of UpJoyAP, our users, or the public.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

7. Data Storage, Security and Transfers

• Game data is primarily stored locally on your device.
• Data collected by Firebase and AdMob is stored and processed by Google on servers in the United States and other locations globally. Google uses Standard Contractual Clauses (SCCs) and other safeguards for international data transfers.
• We implement reasonable security measures, including encryption in transit (HTTPS/TLS), to protect data from unauthorized access.
• We retain data only for as long as necessary to fulfill the purposes described in this policy. Analytics data is retained for up to 14 months in Firebase. Crash data is retained for 90 days in Crashlytics.
• When you uninstall an App, locally stored data is deleted. Data already transmitted to third-party services is subject to those services' retention policies.

By using our Apps, you acknowledge that your data may be transferred to and processed in countries other than your country of residence, where data protection laws may differ from those in your jurisdiction.

8. App Tracking Transparency (iOS)

On iOS 14.5 and later, our Apps request your permission through Apple's App Tracking Transparency (ATT) framework before allowing any third-party service to access your device's Advertising Identifier (IDFA). You can choose to:

• Allow tracking: Enables personalized ads and full analytics.
• Deny tracking: Third-party services will only receive limited, non-personalized data. You will still see ads, but they will not be tailored to your interests.

You can change this setting at any time in Settings > Privacy & Security > Tracking on your iOS device.

9. Google Play Data Disclosure (Android)

In accordance with Google Play's Data Safety requirements, here is a summary of data handling in our Android apps:

• Data collected: Device identifiers (Advertising ID), crash logs, app usage and performance data, ad interaction data
• Data shared with third parties: Device identifiers and ad interaction data shared with Google (AdMob) for advertising purposes; crash and analytics data shared with Google (Firebase) for app improvement
• Data not collected: Name, email (unless you contact us), phone number, precise location, payment information, photos, files, contacts, calendar, messages
• Data encryption: Data is encrypted in transit
• Data deletion: You can request data deletion by contacting us (see Section 13)

10. Children's Privacy

Our Apps are rated for all ages (4+ on App Store, Everyone on Google Play). We take children's privacy seriously:

• We do not knowingly collect personal information from children under 13 (or the applicable age of consent in your jurisdiction).
• When our Apps detect that a user may be a minor, or when required by platform policies, AdMob is configured to serve only limited, non-personalized ads compliant with COPPA (Children's Online Privacy Protection Act) and similar regulations.
• If we discover that personal information has been collected from a child without proper consent, we will take steps to delete that information promptly.
• Parents or guardians may contact us at support@upjoyap.com to review, delete, or restrict the collection of their child's information.

11. Your Rights and Choices

Depending on your location, you may have the following rights regarding your data:

All Users

• Opt out of personalized ads: On iOS, decline the ATT prompt or go to Settings > Privacy > Apple Advertising. On Android, go to Settings > Google > Ads > Opt out of Ads Personalization. You can also visit Google Ads Settings.
• Reset your Advertising ID: Available in your device's privacy settings to disassociate future data from your current profile.
• Delete local data: Uninstall the App from your device to remove all locally stored data.
• Request server data deletion: Contact us at support@upjoyap.com and we will process your Firebase data deletion request within 30 days. For data collected by Google AdMob, visit Google's Data & Privacy page.

EEA/UK Users (GDPR)

If you are in the European Economic Area or United Kingdom, you additionally have the right to:

• Access the personal data we hold about you
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict or object to processing of your personal data
• Data portability
• Withdraw consent at any time (without affecting the lawfulness of prior processing)
• Lodge a complaint with a supervisory authority

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

12. Device Identifiers and Local Storage

Our Apps use the following identifiers and storage technologies:

• Firebase Installation ID: A unique identifier assigned to each app installation, used for analytics and crash reporting. Automatically generated, not linked to personal identity.
• Advertising ID (IDFA/GAID): A resettable device identifier used for ad personalization and measurement. You can reset or disable it in your device's privacy settings.
• Local storage: Used to store game progress and preferences on your device. This data never leaves your device.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Effective Date" at the top of this page.
• We may notify you through in-app notifications or app store update notes.
• Significant changes affecting your rights will require renewed consent where applicable.

We encourage you to review this policy periodically. Your continued use of our Apps after changes are posted constitutes acceptance of the updated policy.

14. Hexa: Witch's Grimoire — Privacy-Respecting App

Hexa: Witch's Grimoire is intentionally designed as a privacy-respecting application. This section describes its data practices, which differ materially from the other apps covered by this policy.

14.1 No Data Collection

Hexa does not collect any personal data. Specifically:

• No name, email, phone number, age, gender, or any other identifying information
• No advertising identifiers (IDFA / GAID)
• No device identifiers, IP address, or network information
• No usage analytics, session data, or screen view tracking
• No crash reports sent off device
• No location, contacts, photos, calendar, or other system data

14.2 No Third-Party SDKs

Hexa integrates no third-party software development kits. There is no Firebase, no AdMob, no analytics provider, no advertising network, no attribution SDK, and no crash reporter. The only Apple framework used for transactions is Apple's own StoreKit (for the optional in-app purchase), which Apple processes directly and does not share with us.

14.3 Local Storage Only

Game progress, completed puzzles, streak counts, witch type selection, audio/haptics preferences, and the Book of Shadows journal are all stored locally on your device using Apple's SwiftData framework. This data never leaves your device. When you uninstall Hexa, all of this data is removed by iOS.

14.4 Fully Offline

Hexa works completely offline after installation. The app makes no network requests except those Apple's StoreKit may initiate when you choose to make or restore an in-app purchase, which Apple handles directly.

14.5 In-App Purchases

Hexa offers a single optional one-time purchase ("Witch Initiate", $4.99 lifetime, with Family Sharing). Purchase processing is handled entirely by Apple's App Store and StoreKit. We receive aggregated, non-identifying sales information from Apple but no personal data about purchasers. See Apple's Privacy Policy for details on App Store transactions.

14.6 App Store Privacy Label

Hexa's App Store listing declares "No Data Collected" consistent with the practices described above.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@upjoyap.com

We will respond to all privacy-related inquiries within 30 days.