Ball Jump Fest is a game that runs entirely on your device.
This summary is provided for convenience only. It is not a substitute for the full policy below, which governs.
This Privacy Policy explains how personal data is handled in connection with the mobile game Ball Jump Fest (the "App"), including any updates, and the related web pages we publish at https://sheikhamais.github.io/balljumpfest/privacy/ and https://sheikhamais.github.io/balljumpfest/terms/ (together, the "Service").
The party responsible for the App — the "data controller" for the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR, and the "business" for the purposes of the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA") — is:
Amais Sheikh, an individual developer
Pakistan
Email: sheikhamais@gmail.com
References to "we", "us" and "our" mean that party. References to "you" and "your" mean the person using the App.
Contacting us about privacy. For any question, request, or complaint about privacy or personal data, including to exercise any of the rights described in Section 12, write to sheikhamais@gmail.com. This is our designated contact address for all privacy matters worldwide, and it is monitored.
We have not appointed a Data Protection Officer, because our processing does not meet the thresholds in Article 37 GDPR. Privacy enquiries go to the address above.
This policy applies to the App and to the legal pages we publish for it at https://sheikhamais.github.io/balljumpfest/privacy/ and https://sheikhamais.github.io/balljumpfest/terms/.
This policy does not apply to:
Ball Jump Fest is a general-audience arcade game. It contains no chat, no messaging, no social features, no user-generated content, no user profiles, and no way for one player to contact another.
We do not knowingly collect personal data from anyone, of any age. Because the App does not collect or transmit personal data at all (see Section 4), it does not collect personal data from children.
Specifically:
If advertising is introduced in a future version (see Section 7), we will not permit behaviourally targeted or personalised advertising to be served to users we know or reasonably believe to be children, and any advertising shown will be limited to non-personalised, contextual advertising for such users, consistent with COPPA, the GDPR, and Apple's App Store requirements.
Parents and guardians. If you believe a child has provided personal data to us in any way, contact sheikhamais@gmail.com and we will investigate and delete anything found. Parents and guardians should also be aware that purchases made in the App are charged to the Apple Account on the device; Apple provides Screen Time, Ask to Buy, and content-and-privacy restrictions to control this.
We want to be specific here, because "we care about your privacy" statements are often vague. As of the effective date of this policy, the App does not:
The App stores a small amount of information locally, using the operating system's standard local storage (UserDefaults). This information stays in the App's private storage area on your device. It is not personal data in our hands, because we never receive it and have no means of accessing it.
| What is stored | Why | Example value |
|---|---|---|
| Selected theme | So the App reopens with the look you chose | classic |
| Selected ball | So your chosen ball is used in the next game | 3 |
| Selected background | So your chosen backdrop is used in the next game | 1 |
| Unlocked/owned themes | So items you have unlocked stay unlocked | ["classic","peacefulnight"] |
| Sound enabled | To remember whether game audio plays | true / false |
| Haptics enabled | To remember whether the device vibrates on a jump | true / false |
| Auto-jump enabled | To remember whether the ball jumps automatically | true / false |
| High score | To show your personal best on the home screen | 142 |
None of this is transmitted. It is not backed up to a server by us. It may be included in a backup you choose to make of your own device through iCloud Backup or a computer, in which case it is covered by Apple's terms and your own backup settings, not by us.
How to delete it. Deleting the App from your device deletes all of it. There is no separate reset step, and nothing survives elsewhere.
The App uses your device's accelerometer, through Apple's Core Motion framework, to read how far you are tilting the device so it can move the ball left and right.
Game sounds are played from audio files bundled inside the App. The App uses the "ambient" audio mode, meaning it mixes with whatever you were already listening to rather than interrupting it, and stays silent when your device's ring/silent switch is set to silent. The App does not access your microphone and does not record any audio. Haptic feedback is generated locally by the device.
The App offers, or may in future offer, optional paid content — additional visual themes for the ball, bars, and background.
Apple is the merchant of record. All purchases are processed by Apple through the App Store using the Apple Account already signed in on your device. This means:
We may receive from Apple aggregated, non-identifying sales and financial reports through App Store Connect — for example, the number of units of an item sold in a country in a period. These reports do not identify individual purchasers, and we do not attempt to re-identify anyone from them.
The record that you own an item is stored on your device as described in Section 5, and is verified against Apple's records when you restore purchases.
RevenueCat. We use RevenueCat, a subscription and purchase-management platform, to verify what you have bought and keep it in sync if you reinstall the App or use it on another device signed into the same Apple Account. To do this, RevenueCat's SDK:
RevenueCat processes this information as our processor, under a data processing agreement, and does not use it for its own advertising purposes. Its own privacy policy is available at https://www.revenuecat.com/privacy/. We do not use RevenueCat's optional customer-attribute features to send it your name, email address, or any other directly identifying information.
Current position. The App includes Google's Mobile Ads SDK and shows one optional rewarded video advertisement, which you may choose to watch from the WATCH AD button on the game-over screen in exchange for continuing your run.
Where the GDPR or UK GDPR applies, we must identify a lawful basis for each processing activity. Because the App is designed so that we do not receive personal data, the table below is short by design.
| Processing activity | Personal data involved | Purpose | Legal basis |
|---|---|---|---|
| Running the game on your device (motion input, gameplay, score, settings, theme) | None received by us; data stays on your device | To provide the game you asked for | Article 6(1)(b) — performance of a contract with you. To the extent any of it were personal data in our hands, Article 6(1)(f) — our legitimate interest in providing a functioning game, which does not override your interests given that nothing leaves your device |
| Delivering and restoring in-app purchases | Handled by Apple as an independent controller, and by RevenueCat as our processor (anonymous app user ID, device vendor ID, transaction data — see Section 6); we receive only aggregated reports | To deliver content you paid for and to comply with tax and accounting obligations | Article 6(1)(b) — performance of a contract; Article 6(1)(c) — compliance with a legal obligation |
| Responding to a support, rights, or legal request you send us by email | Your email address and whatever you choose to include in your message | To answer you and to keep a record that we did | Article 6(1)(b), Article 6(1)(c) where the request is a statutory rights request, and Article 6(1)(f) — our legitimate interest in handling correspondence and in establishing, exercising, or defending legal claims |
| Optional rewarded advertising (see Section 7) | Device and usage information processed by Google, without an advertising identifier | To show an advertisement you chose to watch, and to measure and cap it | Article 6(1)(a) — your consent, obtained through Google's User Messaging Platform in the EEA, UK, and Switzerland, together with consent under national ePrivacy rules for storing or accessing information on your device |
| Detecting and preventing fraud or abuse of purchases | Handled by Apple and RevenueCat | To protect against fraudulent transactions | Article 6(1)(f) — legitimate interest in preventing fraud |
We do not process any special category data under Article 9 GDPR (such as health, biometric, racial or ethnic origin, religious belief, or sexual orientation data), and we do not process criminal-offence data under Article 10.
Where we rely on legitimate interests, you have the right to object under Article 21 GDPR — see Section 12.
If you email sheikhamais@gmail.com, we will hold your email address and the content of your message for as long as needed to deal with it, and for a reasonable period afterwards to keep a record of what was asked and answered — normally 24 months from the last message in the exchange, or longer where a legal claim, dispute, or statutory record-keeping obligation requires it.
We use that information only to respond to you and to comply with our legal obligations. We do not add you to a mailing list, and we do not use your address for marketing. Email is carried by our email provider, which processes it on our behalf as a processor, or, in the case of a consumer webmail service, under its own terms.
Please do not send us sensitive personal information, payment card details, or passwords by email. We will never ask you for them.
We do not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not disclose personal information for money or other valuable consideration.
We may disclose information in the following limited circumstances:
We do not disclose information to data brokers.
Because the App does not transmit data to us, routine use of the App involves no international transfer of your personal data by us.
Where a transfer does occur — for example, because you email us and our email provider stores messages outside your country, because you visit our GitHub-hosted legal pages, or because a future advertising provider operates internationally — and personal data is transferred out of the EEA, the UK, or Switzerland to a country without an adequacy decision, we will ensure an appropriate safeguard under Chapter V GDPR is in place, which will normally be:
You may request a copy of the relevant safeguard by writing to sheikhamais@gmail.com. We may redact commercial terms.
The rights available to you depend on where you live. We honour the rights below for everyone, wherever you are, so far as it is technically possible for us to do so — but please note the important practical limitation that follows.
Most privacy rights are rights over data a company holds about you. Because we hold no personal data about App users, in most cases the honest answer to an access or deletion request will be that we hold nothing to give you or to delete, and we will confirm that in writing.
The data described in Section 5 is under your control, not ours. You can see it in the App, change it in the App, and erase it completely by deleting the App. We cannot access it, retrieve it, or delete it for you.
Under the GDPR and UK GDPR you have the right to:
Representative. Where we are not established in the EEA or the UK, Article 27 GDPR may require the designation of a representative. We have not designated one, because the Article 27(2) exemption applies: our processing is occasional, does not include large-scale processing of special category data, and is unlikely to result in a risk to the rights and freedoms of individuals.
Depending on your state of residence, you may have rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, and under the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Maryland, Minnesota, Tennessee, Indiana, Kentucky, Rhode Island, and other states as their laws take effect. These rights typically include:
CCPA/CPRA statutory disclosures. In the preceding 12 months we have:
Authorised agents. You may use an authorised agent to submit a request. We may ask the agent for proof of written authorisation, and may ask you to verify your identity directly.
Verification. We will verify a request by matching information you provide against information we hold. Because we hold so little, we will generally verify by corresponding with you at the email address from which the request was sent. We will not create or retain new information solely to verify a request.
Notice at collection. This policy, together with the App Store product page privacy details, serves as the notice at collection required by the CCPA/CPRA. No personal information is collected at or before the point of collection beyond what is described here.
Email sheikhamais@gmail.com with:
Cost and timing. Requests are free. We will acknowledge promptly and respond within one month (GDPR/UK GDPR, extendable by two further months for complex or numerous requests, with reasons given within the first month), within 45 days (most US state laws, extendable once by a further 45 days with notice), or within the period required by your local law, whichever is shorter. We may refuse or charge a reasonable fee for manifestly unfounded or excessive requests, and will explain why if we do.
| Data | Where it lives | How long |
|---|---|---|
| Game settings, theme, unlocked items, high score | Your device only | Until you delete the App, reinstall it, or reset the device. We cannot influence this |
| Motion/tilt readings | Device memory, during play | Discarded frame by frame; never stored |
| Purchase records | Apple's systems, and a local record on your device | Per Apple's policy; local record until the App is deleted |
| Aggregated, non-identifying sales reports | App Store Connect | For as long as we need them for business and tax purposes, typically 7 years to meet accounting and tax retention obligations |
| Support and rights-request correspondence | Our email account | Normally 24 months from the last message, longer where a claim, dispute, or statutory obligation requires it |
We apply the principle of storage limitation: where we no longer need personal data for the purpose it was collected, we delete it or irreversibly anonymise it.
We take appropriate technical and organisational measures to protect personal data, as required by Article 32 GDPR and comparable laws.
The most significant security measure here is architectural: data that is never collected cannot be breached. By keeping gameplay data on your device and operating no back-end server, we remove the class of risk that most mobile-app data breaches fall into.
In addition:
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We encourage you to protect your device with a passcode or biometric lock and to keep iOS up to date.
Breach notification. In the unlikely event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it, as required by Article 33 GDPR, and will notify affected individuals without undue delay where Article 34 or applicable state breach-notification law requires it.
We may update this policy to reflect changes to the App, to our practices, or to the law — in particular before introducing in-app purchases or advertising, as described in Sections 6 and 7.
When we do:
Continuing to use the App after a change takes effect indicates acceptance of the revised policy, except where your consent is required, in which case we will ask for it separately.
Apple requires developers to declare their data practices on the App Store product page (the "App Privacy" section). Because the App includes the Google Mobile Ads SDK and the RevenueCat SDK, our declaration reflects the categories those SDKs process for app functionality and advertising, consistently with Sections 6 and 7 of this policy — it is not "Data Not Collected." We keep that declaration and this policy in step, and update both together whenever either changes.
The privacy policy URL declared on our App Store product page is https://sheikhamais.github.io/balljumpfest/privacy/ — the same address linked from the App's home screen.
For any question, request, complaint, or rights request relating to privacy:
Email: sheikhamais@gmail.com
Amais Sheikh, Pakistan
We aim to acknowledge every message within 5 business days and to resolve it within the statutory period set out in Section 12.5.
If you are in the EEA, the UK, or Switzerland and you are not satisfied with our response, you may complain to your supervisory authority as described in Section 12.2. If you are in the United States, you may contact your state Attorney General. Nothing in this policy limits your right to do so.
Related document: Terms and Conditions