Last updated: June 2026
BalloUP ("we", "our", or "us") values your privacy and is committed to protecting it. This Privacy Policy explains how we collect, use, store, and share information when you use the BalloUP mobile game ("the App").
By using the App, you agree to this Privacy Policy.
For registered users, we may collect and store:
Passwords are never stored locally and are securely managed by Supabase authentication services.
Authentication tokens are stored locally in encrypted save files to maintain login sessions.
Users may play using an anonymous guest account without providing an email address.
Guest accounts may store:
Guest account data is linked to an anonymous account identifier and does not require an email address or other directly identifying personal information.
If a guest user later registers an account, guest progress may be associated with the registered account.
For registered users, we may collect:
Date of birth information is stored in our backend systems and used to determine eligibility for account creation.
We collect and store gameplay information, including:
BalloUP includes public leaderboards.
Your username (or "Guest" for guest users) and high score may be visible to other players through in-game leaderboard features.
Email addresses, authentication data, and other account information are not displayed publicly.
For supported platforms, we may collect:
Purchase records are associated with your account and may be stored in our backend systems to restore purchases and prevent fraud.
We may collect:
This information helps us operate, improve, and secure the App.
We may collect technical information required to operate the App, including:
The App also generates a device fingerprint consisting of a SHA-256 hash derived from device information.
This fingerprint is stored locally on the device and is used for:
The device fingerprint is not transmitted to our backend services.
We use Supabase to provide:
Supabase may process account-related information on our behalf.
Data may be stored in the European Union and the United States using appropriate contractual safeguards, including Standard Contractual Clauses (SCCs).
We use Google AdMob to display advertisements and rewarded video advertisements.
Advertising is configured for a general audience (13+) application.
Ad content is restricted to Google's General (G) content rating where supported.
For users located in regions where consent is legally required, including the European Economic Area (EEA), consent choices are managed through Google's User Messaging Platform (UMP).
Users who decline consent may receive non-personalized advertisements.
Google may process certain device and advertising-related information according to its own privacy practices.
For Android devices, Google Play Billing is used to process and verify in-app purchases.
Google may process payment information according to its own privacy policies.
We use collected information to:
Where the GDPR applies, we process personal data under one or more of the following legal bases:
BalloUP is intended for users aged 13 and older.
An age verification step is required during account creation. Users who enter a date of birth indicating they are under 13 years of age are blocked from completing registration.
Guest play may be available without account registration.
We do not knowingly collect personal information from children under 13. If we become aware that personal information has been collected from a child under 13, we will take reasonable steps to delete that information.
Parents or guardians may contact us regarding concerns about a child's information using the contact details below.
We implement reasonable technical and organizational measures to protect user information, including:
Local encryption is intended to protect against casual access and should not be considered resistant to advanced reverse engineering.
| Data Type | Retention Period |
|---|---|
| Account Data | Until account deletion |
| Game Progress | Until account deletion or 3 years of inactivity |
| Transaction Records | Up to 7 years where legally required |
| Operational Logs | Up to 1 year |
Inactive guest accounts may be removed after 3 years of inactivity.
Where applicable, users may request:
California residents may have the right to:
We do not sell personal information.
Requests may be submitted to: hooded.jb@gmail.com
Your information may be processed in countries outside your country of residence.
Where required, appropriate legal safeguards are used to protect transferred data.
Users may delete their account:
Account deletion removes:
Certain records may be retained where required by law.
We may update this Privacy Policy from time to time.
Material changes may be communicated through the App or other appropriate methods.
Continued use of the App after changes become effective constitutes acceptance of the updated policy.
Email: hooded.jb@gmail.com
Controller: BalloUP
The App may request the following Android permissions:
The App does not request access to: