Privacy Policy

Last updated: this policy reflects Luma Jars as of its current release.

What we collect

• If you create an account with email: your email address, password (handled by our authentication provider, Supabase — we never see or store your raw password ourselves), and the display name you choose.
• If you sign in with Google: the basic profile info Google shares for sign-in (name, email, profile photo URL), via Supabase's Google OAuth integration. We only request the standard email/profile scopes.
• If you play as a guest: a random identifier generated on your device. No personal information is collected for guest play.
• Gameplay data: your level progress, in-game currency/score, and monetization state (lives, hints, claimed milestone rewards) — tied to your account (or guest identifier) so progress can sync across sessions.
• Leaderboard: your display name, score, and level are shown publicly on the in-app leaderboard if you choose to appear on it. The "country" shown next to your name is a cosmetic default, not real location data — we do not collect or infer your geographic location.
• Advertising: if you're on the Free tier, our ad partner (Google AdMob) may collect your device's advertising identifier and other ad-related data to show and measure ads, per Google's own AdMob data practices.
• Purchases: if you subscribe to Premium, our subscription platform (RevenueCat) and Google Play's billing system process your purchase and subscription status. We do not see or store your payment card details — those are handled entirely by Google Play.

We do not collect contacts, photos, camera, microphone, or precise location data — Luma Jars never requests any of those device permissions.

Why we collect it

To let you sign in and keep your progress; to run the free-tier ad-supported experience; to process and validate Premium subscriptions; and to power the optional public leaderboard.

Who we share it with

• Supabase — our authentication and database provider, used to operate the app itself.
• Google AdMob — shown ads and associated ad-measurement data, for Free-tier players only.
• RevenueCat and Google Play — subscription/purchase processing, for Premium purchases and restores.

We do not sell your data, and we do not share it with anyone else for their own independent purposes.

Data deletion

To request deletion of your account and associated data, contact us at didiappinfo@gmail.com from the email address associated with your account, or see our account deletion page for full details. We'll delete your account record, gameplay progress, and leaderboard entry. Guest play data can be cleared at any time by clearing the app's local storage or uninstalling the app — it's never sent anywhere identifiable to you.

Children

Luma Jars is not directed at children under 13 and we do not knowingly collect personal information from children under 13.

Contact

Questions about this policy: didiappinfo@gmail.com