Privacy Policy and Data Protection Notice

1. Scope and controller

This policy applies to visitors, app users, account holders, people who use the contact form, and users who interact with Gugoosh figures.

App Store, Google Play, payment providers, and linked third-party services operate under their own privacy policies.

2. Personal data we may process

• Account and profile data: username, email address, profile identifier, and language preference.
• Location data: approximate or precise location you permit us to use to show nearby figures, record hiding locations, and provide map features.
• Figure and gameplay data: QR/figure identifier, activation, discovery and hiding records, XP, achievements, ranking, and lost-figure reports.
• Camera access: only when you use QR scanning. We do not retain images or video unless required for a separate feature that is clearly disclosed.
• Device and technical data: IP address, device and operating system information, app version, timestamps, error logs, and security logs.
• Communications: name, email address, message, and support correspondence you submit through the website or email.
• Purchase data: product, order, and transaction status. Gugoosh does not receive full payment-card details; the relevant store or payment provider may process them.

3. How data is collected

We may obtain data electronically and partly by automated means from you, device permissions, QR and map interactions, app and server logs, the contact form, and store/payment services you use.

You can withdraw location or camera permissions in your device settings. Disabling a permission may prevent the related map or QR feature from working.

4. Purposes and legal bases

• Creating accounts, authenticating users, and providing core services; performance of a contract.
• Operating map, figure activation, discovery, XP, and profile features; performance of a contract and consent where required.
• Responding to support requests and communicating with users; your request and our legitimate interests.
• Preventing fraud, misuse, and security incidents; legitimate interests and legal obligations.
• Meeting accounting, consumer-law, and lawful authority requirements; compliance with legal obligations.
• Sending optional marketing communications; only where you have provided the required permission.

5. Sharing and international transfers

We do not sell personal data. To operate the services, we may share necessary data with hosting and infrastructure providers, map/location services, email and support services, app stores, payment and logistics providers, professional advisers, and legally authorized bodies.

The website contact form is delivered through FormSubmit. Information submitted in the form may be processed by that service.

Some providers may operate outside your country. Where applicable, we use legally required transfer mechanisms, safeguards, and consent.

6. Retention

We retain data only for as long as needed for the relevant purpose and applicable limitation, accounting, consumer, and security requirements. Account data is generally kept while the account is active; support records for a reasonable period after resolution; and technical logs for a limited period required for security and troubleshooting.

After a deletion request, data is deleted or anonymized from active systems. Limited records may be retained where required for law, disputes, security, or fraud prevention. Backups are removed through their normal rotation cycle.

7. Account and data deletion

To request deletion of your account and associated personal data, use the account settings in the app or email gugoosh.app@gmail.com from your registered address. We may request reasonable information to verify account ownership.

Deletion covers the active account and identifiable profile, location, figure, and gameplay data. Records legally required to be retained and irreversibly anonymized statistics may be excluded.

8. Children’s privacy

The services are not directed to children under 13. If a higher digital-consent age applies where you live, parental or guardian authorization is required. Contact us if you believe a child’s data was processed without the required permission; after verification, we will take appropriate deletion steps.

9. Security

We use reasonable technical and organizational measures, including access restrictions, secure communications, logging, and provider controls, to protect data from unauthorized access, loss, misuse, or alteration. No internet transmission or storage method is guaranteed to be completely secure.

10. Website, cookies, and links

The website does not currently use advertising or behavioral-tracking cookies. The hosting provider may process IP addresses and technical request logs for security, availability, and abuse prevention.

Gugoosh is not responsible for the privacy practices of linked third-party sites or app stores; please review their policies.

11. Your rights

Depending on applicable law, you may have rights to know whether we process your data, obtain information and access, correct inaccurate data, request deletion or restriction, learn about recipients, object to certain processing or solely automated adverse decisions, request portability, and seek compensation for unlawful processing.

Send requests to gugoosh.app@gmail.com. We will verify your identity and respond within the period required by applicable law. You may also lodge a complaint with the competent data-protection authority.

12. Changes and contact

We may update this policy as our services or legal requirements change. We will provide appropriate notice of material changes and update the date above.

Privacy questions, data-protection requests, and account/data deletion requests: gugoosh.app@gmail.com.