Privacy Policy

1. Who we are

This Privacy Policy explains how MeanwhileX (“MeanwhileX”, “we”, “us”, “our”) collects, uses, shares and protects information about you when you play Mahjong Therapy (the “Game”).

MeanwhileX is a trade name of Havrylenko Olena Fedorivna FOP, an individual entrepreneur registered in Ukraine, registry number 2596822942, registered address 26/2 Starokostiantynivske Shose, apt. 47, Khmelnytskyi, 29001, Ukraine. We are the data controller for the information described in this policy. Contact: privacy@meanwhilexgames.com.

2. Scope

This policy covers the Game on Android and the data it sends from your device. The Game has no accounts and no sign-in, and does not offer purchases with real money. It does not apply to third-party services that the Game integrates with; those are governed by their own privacy policies, listed in section 4. The Data safety section of the Game’s Google Play listing gives a summary of the same information.

3. Information we collect

3.1 Information you give us

• Feedback from the “Rate us” window. The Game occasionally asks you to rate it. Depending on your rating, you are either taken to Google Play’s review prompt or offered a short feedback form. If you press Submit in the feedback form, we receive: your star rating, the text you typed (up to 500 characters), the level number you had reached, the Game version, the platform, your device language, the time, and your installation identifier (section 3.2). If you have agreed to analytics (where we ask), we also receive your device model. Please do not write personal information, such as your name or email address, in the feedback text. Feedback is optional; nothing is sent unless you submit it.
• Support emails. If you email us, we receive your email address, your message and any attachments you choose to include.

3.2 Information collected automatically

• Device and app information – device model, manufacturer, operating system version, language, region, screen characteristics, Game version, package name, network type (Wi-Fi or mobile data).
• Identifiers – the Android Advertising ID (AAID), the Google Play Services App Set ID, the Firebase app instance ID, identifiers assigned by AppsFlyer and DevToDev, and a randomly generated installation ID. The Game shows this installation ID in its Settings screen so that you can quote it when contacting us. These identifiers are pseudonymous: we do not link them to your name or email address.
• Installation source – Google Play’s Install Referrer service and AppsFlyer tell us which campaign or store listing an installation came from, and when it happened.
• Approximate location – derived from your IP address at country or region level by our analytics, advertising and attribution providers. We do not collect precise (GPS) location.
• Gameplay and usage data – sessions, levels reached and completed, in-game events and progress, feature and setting usage, and advertising interactions (for example that an ad was shown or completed and the revenue it generated).
• Diagnostics – crash logs, stack traces, error reports and performance metrics.

3.3 Gameplay replay data (our own server)

For levels you play, the Game may record your in-game actions: which tiles were placed or merged and when, and use of undo, shuffle, hints, boosters, restarts, pauses and ads, together with the level, the attempt number and how the level ended (won, failed or left). This record is tied only to your pseudonymous identifier (the Firebase app instance ID, or the random installation ID if that is not available), not to your name, email or account. We use it only to analyse and improve level difficulty and game balance. It is not used for advertising.

It is sent over an encrypted connection (HTTPS) to our own server infrastructure on Google Cloud (Cloud Functions and BigQuery, region: United States). Recording is switched on remotely by us, and only if you have agreed to analytics where we ask for that (section 6).

3.4 Technical launch diagnostics (our own server)

To find and fix crashes and slow starts, the Game sends a small technical record of each launch to the same Google Cloud infrastructure. Before you make any consent choice, and in any case where consent is not given, this record contains only: the loading step reached, timings in milliseconds, the number and length of pauses of the app during loading, the Game version and build, the Android version, whether it is the first launch, your consent status, the platform, and a random identifier that is generated anew for every launch and is not linked to your installation. It contains no device or installation identifier.

Once you have agreed to analytics (or where consent is not required), the record also contains the installation ID, device model and manufacturer, memory size, graphics chip and graphics API/driver version, and network type. This data is used only to diagnose crashes and long loading times and is not used for advertising.

Our code does not store IP addresses or user-agent strings in these records. Like any internet service, our servers necessarily receive your IP address when your device connects to them.

3.5 Information we do not collect

The Game does not collect your real name, email address, phone number, postal address, precise location, contacts, calendar, photos, microphone or camera input, health or biometric data, SMS or call logs. The Game can send you reminders as notifications if you allow them; these are scheduled locally on your device, we do not collect a push token for them, and no notification content leaves your device. You can turn notifications off at any time in Android settings.

4. Third-party services

The Game uses the following third-party services, each of which processes data under its own privacy policy:

5. How we use information

• to operate and maintain the Game and keep it working;
• to diagnose crashes, fix bugs and improve performance and stability, including slow starts;
• to understand how the Game is used and to improve its design, level difficulty and balance (including analysis of replay data);
• to read and act on feedback you send us, and to answer support requests;
• to measure which marketing campaigns lead to installations and how ad revenue is generated;
• to show advertising and measure its performance;
• to detect and prevent fraud, abuse and security incidents;
• to comply with legal obligations.

We do not sell your personal information for money.

6. Consent, advertising and your choices

EEA, UK and Switzerland. The first time you open the Game, we ask for your choice through Google’s User Messaging Platform, a Google-certified consent management platform. The advertising, analytics and attribution services (Google AdMob, Firebase Analytics, DevToDev and AppsFlyer) and gameplay replay recording are started only after this choice has been made, and only to the extent you allow. Your choice is passed to Firebase Analytics as consent signals. You can reopen the dialog at any time with the “Privacy Options” button in the Game’s Settings and change your answer. The only data sent before your choice is the identifier-free launch diagnostics described in section 3.4.

Other countries, including the United States. The consent dialog is shown only where the law requires it, so in other regions the services above start without it. You can still control advertising with the settings below, and exercise your rights under section 13.

• Reset or delete your advertising ID. On Android: Settings → Google → Ads (the path can differ by device). Deleting it prevents apps from using it to personalise ads.
• Opt out of personalised ads in the same Android Ads settings. You will still see ads, but they will not be personalised.
• Notifications can be turned off in Android settings.

7. Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process personal data under the GDPR on these bases:

• Consent (Art. 6(1)(a)) – for advertising, analytics and attribution that rely on reading or storing identifiers on your device (Google AdMob, Firebase Analytics, DevToDev, AppsFlyer) and for gameplay replay data and the extended launch diagnostics. You can withdraw consent at any time (section 6).
• Legitimate interests (Art. 6(1)(f)) – for crash reporting, identifier-free launch diagnostics, security and fraud prevention, and for reading the feedback you choose to send us. We use the least intrusive data that achieves the purpose.
• Legal obligation (Art. 6(1)(c)) – to meet statutory requirements.

8. Age and children

The Game is directed to a general audience and is not intended for children under 13, or the higher minimum age of digital consent in your country. It is not part of the Google Play Families programme. We do not knowingly collect personal information from children below that age. If you believe a child has provided us with information, email privacy@meanwhilexgames.com and we will delete it.

9. How we share information

• Service providers listed in section 4, which process data on our behalf or, in the case of Google AdMob and AppsFlyer, as independent controllers for their own purposes described there. AppsFlyer may exchange installation and campaign data with the advertising networks and publishers that ran the campaign that led you to install.
• Legal and safety – where required by law, or reasonably necessary to investigate fraud or abuse or to protect the rights and safety of players or the public.
• Business transfers – if our business or its assets are merged, acquired or reorganised, information may transfer as part of that transaction.

Feedback, gameplay replay data and launch diagnostics stay on our own infrastructure and are not shared with advertising or attribution partners. We do not share your personal information with anyone else for their own marketing.

10. Data retention

• Gameplay replay data – up to 90 days on our servers, then deleted automatically.
• Technical launch diagnostics – up to 90 days on our servers, then deleted automatically.
• Feedback from the Rate us window – up to 24 months, then deleted.
• Crash reports (Firebase Crashlytics) – up to 90 days.
• Analytics events (Firebase Analytics) – up to 14 months, then deleted or aggregated so that they no longer identify an installation. DevToDev keeps event data as long as needed for the purposes in this policy or until a deletion request.
• Attribution data (AppsFlyer) – as long as needed to measure campaigns, according to the retention settings of our AppsFlyer account and AppsFlyer’s policies, or until a deletion request.
• Support emails – up to 24 months after the request is resolved.

Retention by third-party providers is also governed by their own policies.

11. International transfers

We are based in Ukraine and our providers operate globally, including in the United States and the European Union. Feedback, gameplay replay data and launch diagnostics are stored in Google Cloud in the United States (BigQuery multi-region US; Cloud Functions in us-central1). Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and, where applicable, the EU adequacy decision covering Ukraine.

12. Security

Data is sent to our servers and to our providers over encrypted connections (HTTPS/TLS), and is encrypted at rest on Google Cloud. We use access controls on the accounts that administer the Game and its servers, pseudonymous identifiers for gameplay data, and collect only the data we need. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Your rights

13.1 EEA, UK and Ukraine

You have the right to access your personal data, have it corrected or erased, restrict or object to processing (including profiling for advertising), receive it in a portable format, withdraw consent at any time without affecting earlier processing, and lodge a complaint with your local supervisory authority.

13.2 United States

Depending on your state (including California, Colorado, Connecticut, Virginia, Texas and others), you may have the right to know what personal information we collect, to request its deletion or correction, to obtain a copy, and to opt out of targeted advertising. We will not discriminate against you for exercising these rights. We do not sell personal information for monetary consideration; however, the use of advertising identifiers to show personalised ads may count as “sharing” for cross-context behavioural advertising under California law. You can opt out using the Android Ads settings in section 6, or by emailing us.

13.3 How to exercise your rights

Email privacy@meanwhilexgames.com with the name of the Game and the installation ID shown in the Game’s Settings screen (tap the ID to copy it). Without an identifier we may not be able to link any data to you. We respond within 30 days and will tell you if we need longer.

14. Deleting your data

You can ask us to delete your data at any time, free of charge. Email privacy@meanwhilexgames.com with the subject “Data deletion request”, naming the Game and including the installation ID from the Settings screen. We will delete the data we hold for that installation, including feedback, gameplay replay data and launch diagnostics, and forward the request to AppsFlyer and DevToDev, which hold their own copies. Firebase data linked to the installation is deleted on our request as well. Instructions are also on our data deletion page.

We delete the requested data within 30 days, except where we are legally required to keep records. Uninstalling the Game does not by itself delete data already held by us or our providers.

15. Changes to this policy

We may update this policy as the Game or the law changes. We will revise the “Last updated” date, and for material changes we will give notice in the Game or on our website before the change takes effect.

16. Contact us

Trade name	MeanwhileX
Legal entity	Havrylenko Olena Fedorivna FOP (registry number 2596822942)
Address	26/2 Starokostiantynivske Shose, apt. 47, Khmelnytskyi, 29001, Ukraine
Privacy and data requests	privacy@meanwhilexgames.com
Support	support@meanwhilexgames.com