Privacy Policy

Last updated: May 2026

1. Information We Collect

We believe in data minimization - collecting only what's necessary to provide you with an excellent market simulation game experience.

• Pseudonymous Identifiers: A device/account identifier used for security authentication and to keep your game progress linked to your device
• Game Progress & Score Data: Your game score and progress, gameplay history, achievements, and game progression to maintain your game challenge experience
• Performance Analytics: Anonymous usage patterns to optimize game performance and enhance the market simulation game
• Technical Logs: Error reports and crash logs to ensure StockIT runs smoothly on your device
• Session Data: Temporary session information to maintain your game state and gameplay activities
• Push Notification Delivery Data (optional): If you enable push notifications, we store identifiers needed to deliver notifications to your device (for example, a push token/endpoint identifier)

2. How We Use Your Information

Every piece of data we collect serves a specific purpose in enhancing your game challenge experience.

• Game Service Delivery: Providing and maintaining the StockIT market simulation game
• User Authentication: Secure, anonymous authentication without requiring personal accounts
• Fraud Prevention: Detecting and preventing cheating or manipulation in the market simulation game
• Performance Optimization: Improving app speed, stability, and user experience
• Feature Development: Understanding how players interact with game features to develop new challenges
• Customer Support: Providing technical assistance when you contact us
• Security Monitoring: Ensuring the integrity of the market simulation game and user data
• Notifications (optional): Sending push notifications about game events (you can disable this in Settings)

3. Data Storage and Security

We use security measures designed to protect your data, including secure cloud infrastructure and restricted access.

• Amazon Web Services (AWS): Game data is stored on AWS cloud infrastructure
• Encryption in Transit: Data is transmitted over secure connections (for example, HTTPS)
• Access Controls: Access is restricted to authorized systems and personnel
• Data Isolation: Your game data is completely isolated from other users
• Backup & Recovery: We take reasonable steps to protect data availability and integrity

4. Data Sharing and Third Parties

We never sell your data. Period. Here's exactly who has access and why:

• No Data Sales: We never sell, rent, or trade your personal information to third parties
• Service Providers:
  • Amazon Web Services (AWS) - Cloud infrastructure and data storage
  • Google Play Services - Android device authentication only
  • Apple DeviceCheck - iOS device authentication only
  • Firebase (FCM) - Push notifications delivery (only if notifications are enabled)
• Legal Requirements: Only when required by law, court order, or to protect user safety
• Anonymous Analytics: We may share anonymous, aggregated statistics (no personal data) for research
• Business Transfers: In the unlikely event of a company sale, user data would be transferred under the same privacy protections

5. Push Notifications (Optional)

If you enable push notifications, we use notification delivery identifiers to send notifications to your device.

• What we store: Notification delivery identifiers (for example, a push token/endpoint identifier)
• Purpose: To deliver notifications related to game events and updates
• How to control: You can disable push notifications at any time in the app's Settings

6. Children's Privacy

StockIT is designed to be safe for a broad audience. We do not require children to provide real names or contact information.

• No Contact Information Required: Children can play without providing a real name, email address, or phone number
• Anonymous Authentication: We use device-based authentication, not personal accounts
• Educational Content: The game teaches basic strategy and decision-making concepts
• Parental Rights: Parents can contact us to delete any data associated with their child's device
• Compliance: We aim to comply with applicable children's privacy requirements (including COPPA where applicable)
• No Advertising: No third-party advertisements or cross-app tracking for advertising

7. Your Privacy Rights

You have complete control over your data. Here are your rights:

• Right to Access: Request a copy of all data we have about your device/game progress
• Right to Deletion: Request complete deletion of your game data and progress
• Right to Correction: Request correction of any inaccurate data
• Right to Portability: Request your data in a portable format (JSON/CSV)
• Right to Restrict Processing: Limit how we process your data
• Right to Object: Object to certain types of data processing
• Right to Withdraw Consent: Withdraw consent at any time (may affect game functionality)

How to exercise these rights:

• In-app: You can use the Settings screen to view/export your data and manage notification preferences.
• Email: For correction or deletion requests, contact us at idodohen@gmail.com.

We will respond within a reasonable timeframe and in accordance with applicable law.

8. Data Export (“View My Data”)

You can request a copy of your data from within the app.

• What happens: The app can generate an external page that displays your data and provides a “Download as JSON” option.
• Security: The export is provided using a time-limited link. The export is designed to exclude security-sensitive information.
• Availability: Export links may expire after a limited time.

9. Device Storage and Identifiers

The app may store limited information locally on your device to improve your experience.

• Local Storage: Game preferences and settings stored locally on your device (for example, audio settings)
• Performance Monitoring: Technical diagnostics to improve stability
• No Advertising Trackers: We do not use third-party advertising trackers in the app

10. International Data Transfers

Your data may be processed in different countries, but always with appropriate safeguards.

• AWS Global Infrastructure: Data stored in secure AWS data centers worldwide
• Adequate Protection: All international transfers include appropriate security safeguards
• GDPR Compliance: European user data handled according to GDPR requirements
• Data Localization: We respect local data residency requirements where applicable
• Standard Contractual Clauses: Legal protections for international data transfers

11. Data Retention

We keep data only as long as needed to provide the service and for legitimate purposes such as security and compliance.

• Game Data: Retained to provide the service and keep your progress available, unless you request deletion
• Technical Logs: Retained for a limited period as needed for debugging and security
• Exports: Data export links/files may be temporary and may be removed after a limited period
• Legal Requirements: Some data may be retained longer if required by law

12. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements.

• Notification Method: We'll update this page and may notify you through the app
• Version History: Previous versions available upon request
• Continued Use: Continued use after changes constitutes acceptance
• Right to Object: You can delete your data if you disagree with changes

13. Third-Party Services and Integrations

StockIT integrates with minimal third-party services, all focused on security and functionality.

• Amazon Web Services (AWS):
  • Purpose: Cloud infrastructure, data storage, and API services
  • Data Shared: Game progress and pseudonymous identifiers needed to operate the service
  • Privacy Policy: AWS Privacy Policy
• Google Play Services (Android only):
  • Purpose: Device authentication via Play Integrity API
  • Data Shared: Device attestation tokens (no personal information)
  • Privacy Policy: Google Privacy Policy
• Apple DeviceCheck (iOS only):
  • Purpose: Device authentication and fraud prevention
  • Data Shared: Device attestation tokens (no personal information)
  • Privacy Policy: Apple Privacy Policy
• Firebase Cloud Messaging (FCM):
  • Purpose: Push notification delivery (optional)
  • Data Shared: Notification delivery identifiers needed to route notifications to your device
  • Privacy Policy: Google Privacy Policy

14. Security Measures

We take reasonable steps to protect your data, but no method of transmission or storage is 100% secure.

• Technical Safeguards: Secure communication, access controls, and monitoring
• Least Privilege: Systems are designed to limit access to what is necessary
• Incident Handling: We investigate security issues and take appropriate action

15. Contact Us

We're committed to addressing your privacy concerns promptly and transparently.

16. Legal Compliance

We aim to comply with applicable privacy laws and platform policies. If you have questions about your rights, contact us using the information above.