Privacy Policy

GXAI Studio ("we", "us") is an independent game studio. This policy covers our website at gxai.studio and the games we publish under the GXAI Studio name on the App Store, Google Play, and the web.

• Contact form submissions: when you send us a message, we collect the name, email, and message you provide. Stored in Firebase Firestore (Google Cloud, asia-southeast1).
• Anonymous analytics: page views, country, device type. No personal identifiers, no advertising IDs.

• Anonymous user ID: generated by Firebase Anonymous Auth. No name, email, or phone is required to play.
• Game progress: levels completed, scores, settings — so you can keep your progress across devices.
• Crash reports: stack traces and device model when the game crashes. Used only to fix bugs.

• We do not sell data to third parties.
• We do not run ads or use ad-tracking SDKs.
• We do not collect contacts, photos, location, microphone, or camera.
• Our games do not use IDFA or Google Advertising ID.

Our games are rated 4+ and family-friendly. Since we do not collect names, emails, phone numbers, or precise location from any user, our games comply with COPPA, GDPR-K, and Apple's Kids Category guidelines.

All data lives in Firebase (Google Cloud) with encryption at rest and in transit. Access is limited to the studio owner. Game data is keyed by anonymous user ID, not by personal information.

• Contact form messages: retained until the conversation is resolved, then deleted.
• Game progress: retained while your account exists.
• Crash reports: 90 days, then auto-deleted.

You can request a copy or deletion of your data by emailing gxai2026@gmail.com with your anonymous user ID (shown in the game's Settings screen). We respond within 30 days.

Under GDPR (EU), CCPA (California), and similar laws, you have the right to access, correct, delete, or port your data, and to object to processing. We honor all such requests.

• Firebase / Google Cloud — authentication, database, hosting.
• Apple App Store / Google Play — distribution.
• Cloudflare — CDN and DDoS protection for the website.

Data is processed in Singapore (asia-southeast1) and may be transferred to other regions where our service providers operate. Transfers are protected by Standard Contractual Clauses where required.

We may update this policy as our games evolve. Material changes will be announced on this page with an updated "Last updated" date.

Questions, requests, or concerns: gxai2026@gmail.com.