Privacy Policy

Depending on how you use the Services, we may process:

• Account and profile data — email address, username, hashed password, display name, optional profile photo, country or region, account identifiers and login timestamps. If you use Google Sign-In or Sign in with Apple, we receive the identifiers those services share with us (typically name and email, and a stable account identifier).
• Gameplay and progress — campaign progress, scores, lives, inventory, Galactic Units balance, Virtual Goods, settings, session length, device type, operating system, app version and language. Sandbox or leaderboard entries may include a display name, avatar and score visible to other players.
• Purchases and subscriptions — Apple, Google and RevenueCat process payments. We do not collect or store full payment card numbers. We receive purchase status, product identifiers, entitlement status (for example whether a no-ads subscription is active) and a store or RevenueCat customer identifier so we can credit Galactic Units, packs and subscriptions.
• Advertising identifiers — if ads are shown, Google AdMob and its partners may collect advertising identifiers (such as Apple’s IDFA or Google’s advertising ID), IP address, device information and ad interactions, as described in their policies.
• Notifications and support — push notification tokens (Firebase Cloud Messaging / Apple Push Notification service); whether you opted in to email updates; messages you send through Contact us or the help centre, including optional on-device speech-to-text transcripts; support tickets and our replies.
• Website data — IP address, browser type, pages viewed, and a language preference stored on your device (local storage). We use this to operate and secure the site.

We do not ask for precise GPS location, contacts, or access to your photos except when you choose a profile image. We do not collect payment card details on our own servers. Please do not send us special-category (sensitive) information unless we explicitly ask for it to handle a support case.

We use personal data to:

• provide, operate, update and secure Spaceship Nova and your account;
• save and synchronise progress, lives, Galactic Units and inventory;
• verify purchases and restore subscriptions;
• show or hide ads according to your entitlements;
• provide customer support and the in-app help centre;
• send service messages (for example account, security or purchase confirmations);
• send marketing email or push notifications where you have opted in or another lawful basis applies;
• prevent cheating, fraud, abuse and illegal activity, and enforce our Terms of Service;
• analyse aggregated or de-identified data and first-party logs to fix bugs and improve the game;
• comply with law, including tax and accounting, and to establish or defend legal claims.

Unless you have an active no-ads entitlement, Spaceship Nova may show third-party ads, including interstitial and rewarded ads, through Google AdMob. AdMob and its partners use identifiers and other data to deliver, measure and, where allowed, personalise ads.

You can opt out of personalised ads in your device settings (iOS: Privacy / Tracking or Apple Advertising; Android: Google / Ads). You will still see ads unless you subscribe to a no-ads plan, but they may be less relevant. Industry opt-outs are also available at youronlinechoices.com (EEA), aboutads.info (US) and youradchoices.ca (Canada).

If you opt in to email or push marketing, you can unsubscribe using the link in an email, your device notification settings, or by contacting us. Service messages about your account or purchases are not marketing and may still be sent.

Where UK GDPR or EU GDPR applies, we rely on:

• Contract — to create your account, provide the game, save progress, process purchases you request and provide support;
• Legitimate interests — to keep the game secure and fair, improve features, understand aggregated usage, and communicate about the product in ways that do not override your rights;
• Consent — for optional marketing, certain cookies, microphone access for dictation, and personalised advertising where required;
• Legal obligation — tax, accounting, and responding to lawful requests.

You can withdraw consent at any time without affecting processing that already took place.

We share information with:

• Apple and Google — sign-in, app distribution, in-app purchases and, on Android, ads;
• RevenueCat — purchase validation and subscription status;
• Google (Firebase Cloud Messaging, AdMob) — push notifications, advertising and related measurement;
• Hosting and infrastructure providers that store our game servers, website and databases;
• Email delivery providers if we send you mail you requested or opted into;
• professional advisers, authorities, or a buyer if we sell or reorganise the business, where the law allows.

We do not sell your personal information for money. Some advertising disclosures may be treated as a “sale” or “sharing” under certain US state laws; see the US section below. Usernames, avatars and scores you choose to display may be visible to other players.

Depending on where you live, you may have the right to access, correct, delete or restrict personal data, to object to processing based on legitimate interests, to withdraw consent, and to data portability. US residents may have additional rights described below.

To exercise these rights, email contact_us@boulivancorp.com with the subject “Privacy request”, use Contact us in the app, or write via Support / Contact. We may need to verify your identity. We will respond within the time required by law (generally one month in the UK/EEA).

Deleting your account removes or anonymises personal data we no longer need, except records we must keep for tax, fraud prevention, or legal claims. Progress and unspent Galactic Units associated with a deleted account are lost and cannot usually be restored. You may also delete the app from your device and, for Google or Apple sign-in, revoke access in your Google or Apple account settings.

If you are in the UK you may complain to the Information Commissioner’s Office at ico.org.uk. If you are in the EEA you may complain to your local supervisory authority. We would appreciate the chance to address your concern first.

If you live in California or another US state with a comprehensive privacy law, this section applies in addition to the rest of this Policy.

We collect the categories of personal information described above, including identifiers, commercial information (purchases), internet or app activity, and inferences used to operate the game. We use them for the purposes described in this Policy.

We disclose identifiers and device/app activity to advertising and analytics partners so that ads can be delivered and measured. Under some state laws this may be “sharing” or a “sale” of personal information. We do not sell personal information for money and we do not knowingly sell or share the personal information of consumers under 16.

You may request to know, delete or correct personal information, and to opt out of sale or sharing / targeted advertising, by emailing contact_us@boulivancorp.com or by using device advertising settings. You will not be discriminated against for exercising these rights. You may use an authorised agent as permitted by law; we will take reasonable steps to verify the agent’s authority. We do not use or disclose sensitive personal information for purposes that require a right to limit under the CPRA, other than as allowed to provide the Services.

Please also read the privacy policies of partners we rely on:

• Apple Privacy Policy — Sign in with Apple, App Store, in-app purchases and push notifications;
• Google Privacy Policy — Google Sign-In, Google Play, Firebase Cloud Messaging and AdMob;
• RevenueCat Privacy Policy — purchase validation and subscription status.

Use device and account controls (such as Apple’s App Tracking Transparency or Google’s advertising settings) where available.