Privacy Policy

1. Who we are

This Privacy Policy explains how MeanwhileX (“MeanwhileX”, “we”, “us”, “our”) collects, uses, shares and protects information about you.

MeanwhileX is a trade name of Havrylenko Olena Fedorivna FOP, an individual entrepreneur registered in Ukraine, registry number 2596822942, with a registered address at 26/2 Starokostiantynivske Shose, apt. 47, Khmelnytskyi, 29001, Ukraine. We are the data controller responsible for the information described in this policy.

You can reach us at privacy@meanwhilexgames.com.

2. Scope of this policy

This policy applies to:

• our mobile games and applications published under the MeanwhileX name (the “Games”);
• this website at meanwhilexgames.com;
• our chatbots and business messaging on Facebook Messenger, Instagram and WhatsApp (the “Messaging Channels”);
• our player support and business correspondence.

It does not apply to third-party services that our Games or website link to or integrate with. Those services are governed by their own privacy policies, and we list the main ones in section 4.

3. Information we collect

3.1 Information you give us

• Support correspondence. If you email us, we receive your email address, the contents of your message, and any attachments or diagnostic details you choose to include.
• Optional in-game input. Where a Game lets you set a display name, avatar or similar, we store what you enter. Please do not include personal details in a public display name.
• Messages you send us through the Messaging Channels. When you write to us on Facebook Messenger, Instagram or WhatsApp, we receive the content of your messages and any attachments you send, along with the identifier and profile details the platform gives us. What that includes depends on the platform:
  • Messenger — a Page-scoped ID, your public profile name and profile picture;
  • Instagram — an Instagram-scoped ID and your username;
  • WhatsApp — your phone number and the profile name you have set.
  We also keep the time each message was sent and received, so that a conversation can be followed.

3.2 Information collected automatically

When you use our Games, certain information is collected automatically by us or by the third-party SDKs we integrate:

• Device and app information — device model, operating system version, language, region, screen characteristics, app version and app package name.
• Identifiers — the Android Advertising ID (AAID), the Google Play Services App Set ID, the Firebase app instance ID, identifiers assigned by AppsFlyer and DevToDev, and randomly generated installation identifiers used to distinguish one installation from another. These identifiers are pseudonymous: we do not link them to your name or email address.
• Installation source — when you install a Game, Google Play’s Install Referrer service and AppsFlyer tell us which campaign or store listing the installation came from, together with the time of installation.
• Approximate location — derived from your IP address at country or region level, for content availability, ad delivery and compliance. We do not collect precise GPS location.
• Gameplay and usage data — session starts and lengths, levels reached, in-game progress and events, feature usage, settings you change, and ad interactions (for example, that an ad was shown or completed, and the revenue it generated), including the order and timing of moves within levels, used to improve level difficulty.
• Gameplay replay data. For each level you play we may record which moves were made, in what order and at what moments, and how the level ended. This record is tied only to a pseudonymous identifier (the Firebase app instance ID, or a randomly generated installation ID if the former is not available), not to your name, email or account. It is sent over an encrypted connection to our own server infrastructure on Google Cloud (Cloud Functions and BigQuery, region: United States), kept for up to 90 days, and used only to analyse and improve level difficulty and game balance. It is not used for advertising.
• Diagnostics — crash logs, stack traces, error reports and basic performance metrics.
• Purchase records — where a Game offers in-app purchases, Google Play processes the transaction and provides us with a purchase token, product identifier and order status. We never receive or store your full payment card details.

Notifications. If you allow notifications, the Game schedules reminders locally on your device. We do not collect a push-notification token for this and no notification content leaves your device. You can turn notifications off at any time in Android settings.

3.3 Information we do not collect

In our Games we do not collect your real name, postal address, precise location, contacts, calendar, photos, microphone or camera input, health data, biometric data, SMS or call logs.

In the Messaging Channels the position is different, and not because we ask for it: when you message a business, the platform itself passes on your profile name, and on WhatsApp your phone number, as part of delivering the message. We receive those details in whatever form the platform provides them, and we cannot switch that off. Nothing beyond that is collected, and we never request identity documents, payment details or precise location over chat.

4. Third-party services

Our Games and Messaging Channels rely on the following third-party services, each of which processes data under its own privacy policy:

5. How we use information

• to operate, deliver and maintain the Games;
• to save your progress and restore it across sessions;
• to process and validate in-app purchases;
• to diagnose crashes, fix bugs and improve performance and stability;
• to understand how our Games are used, so we can improve design and balance;
• to analyse gameplay replay data (the order and timing of moves within levels) in order to improve level difficulty;
• to measure which marketing campaigns lead to installations and how ad revenue is generated (attribution);
• to serve advertising and measure its performance, where a Game shows ads;
• to respond to your support requests and correspondence;
• to reply to messages you send us on the Messaging Channels, automatically and through a human operator;
• to send you service messages about a request you made — for example confirming that we received it, or following up on a support case;
• to send promotional messages about our games, only if you have opted in, and only until you opt out;
• to detect, prevent and investigate fraud, cheating, abuse and security incidents;
• to comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information for money. See section 13 for how US state privacy laws treat advertising-related sharing.

6. Legal bases (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process personal data on these legal bases under the GDPR:

• Contract (Art. 6(1)(b)) — to provide the Game you chose to install and play, including saving progress and processing purchases.
• Legitimate interests (Art. 6(1)(f)) — to keep our Games secure and working, diagnose crashes, prevent fraud and cheating, and understand usage. We balance these interests against your rights and use the least intrusive data that achieves the purpose.
• Contract or legitimate interests — to read and answer the messages you send us on the Messaging Channels. If your message concerns a Game you use or a purchase you made, we rely on contract; if it is a general enquiry, we rely on our legitimate interest in responding to people who contact our business.
• Consent (Art. 6(1)(a)) — for personalised advertising, analytics and attribution that rely on reading or storing identifiers on your device (including Firebase Analytics, DevToDev, AppsFlyer and gameplay replay data), and any promotional messages we send you on the Messaging Channels. Where consent is required we ask for it through a compliant consent flow before collection, and you can withdraw it at any time in the Game’s privacy settings or, for messaging, by replying STOP in the chat.
• Legal obligation (Art. 6(1)(c)) — to meet tax, accounting and other statutory requirements.

7. Advertising, consent and your choices

Some of our Games are free because they show advertising. Ads are served by Google AdMob, which uses the Android Advertising ID and related signals to choose which ad to show and to measure whether it worked. Where it is permitted and you have given consent, those ads are personalised to your interests; otherwise they are not.

If you are in the EEA, the UK or Switzerland, we ask for your choice through Google’s User Messaging Platform, a Google-certified consent management platform, the first time you open the Game. Advertising, analytics and attribution services (AdMob, Firebase Analytics, DevToDev and AppsFlyer) and gameplay replay collection are started only after you have made that choice, and only to the extent you allow. You can reopen that dialog at any time from the Game’s settings screen and change your answer.

You have several controls:

• Reset or delete your advertising ID. On Android: Settings → Google → Ads. You can reset the identifier or delete it entirely, which prevents apps from using it to personalise ads.
• Opt out of personalised ads. Use the same Android Ads settings screen, or the in-game privacy settings where we provide them. You will still see ads, but they will be non-personalised.
• Withdraw consent. Where we collected consent through the consent dialog, you can reopen it from the Game’s settings screen and change your choice.
• Buy an ad-free option, where a Game offers one.

8. Children’s privacy

Our Games are directed to a general audience and are not intended for children under 13, or the equivalent minimum age of digital consent in your country. They are not listed in the Google Play Families programme, and we do not design, market or age-rate them for children.

We do not knowingly collect personal information from children under that age. If we learn that we have collected personal information from a child without verifiable parental consent, we will delete it promptly. A parent or guardian who believes their child has provided us with personal information should contact privacy@meanwhilexgames.com and we will remove it.

9. How we share information

We share information only in these circumstances:

• Service providers — the providers listed in section 4, who process data on our behalf or as independent controllers for the purposes described there.
• Advertising and attribution partners — where a Game shows ads, as described in section 7. AppsFlyer may also exchange installation and campaign data with the advertising networks and publishers that ran the campaign that led you to install, so that they can measure its results.
• Legal and safety — where we are required to by law, or where disclosure is reasonably necessary to investigate fraud or abuse, enforce our terms, or protect the rights and safety of players or the public.
• Business transfers — if our business or its assets are merged, acquired or reorganised, information may transfer as part of that transaction. We will notify you and this policy will continue to apply until it is replaced.

We do not share your personal information with anyone else for their own marketing. Gameplay replay data stays on our own infrastructure and is not shared with advertising or attribution partners.

10. Data retention

We keep information only as long as we need it for the purposes described in this policy:

• Crash and diagnostic data — up to 90 days.
• Gameplay replay data (order and timing of moves) — up to 90 days on our servers, then deleted automatically.
• Analytics event data (Firebase Analytics, DevToDev) — up to 14 months in Firebase, then deleted or aggregated so it can no longer identify an installation; DevToDev keeps event data for as long as needed for these purposes or until a deletion request. Retention in each service is set in our account configuration for that service.
• Attribution data (AppsFlyer) — for as long as needed to measure campaigns, according to the retention settings of our AppsFlyer account and AppsFlyer’s own policies, or until a deletion request.
• Support correspondence — up to 24 months after the request is resolved.
• Chat history from the Messaging Channels — up to 12 months from the last message in the conversation, then deleted.
• Purchase and tax records — for as long as Ukrainian accounting and tax law requires.

Retention periods for data held by third-party providers are governed by their own policies and our configuration of their services.

11. International transfers

We are based in Ukraine, and our service providers operate globally, including in the United States and the European Union. Gameplay replay data is stored in the Google Cloud region United States (BigQuery multi-region US; Cloud Functions in us-central1). This means your information may be processed outside your country of residence. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and, where applicable, the EU adequacy decision covering Ukraine.

12. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS/TLS), encryption at rest on Google Cloud, access controls and multi-factor authentication on the accounts that administer our Games and servers, pseudonymous identifiers for gameplay data, and collecting the minimum data necessary. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Your rights

13.1 If you are in the EEA, the UK or Ukraine

You have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing, including profiling for advertising;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, without affecting processing already carried out;
• lodge a complaint with your local supervisory authority.

13.2 If you are a US resident

Depending on your state (including California, Colorado, Connecticut, Virginia, Texas and others), you may have the right to know what personal information we collect, to request its deletion or correction, to obtain a copy, and to opt out of targeted advertising. We will not discriminate against you for exercising these rights.

We do not sell personal information for monetary consideration. However, the use of advertising identifiers to serve personalised ads may qualify as “sharing” for cross-context behavioural advertising under the California Consumer Privacy Act as amended. You can opt out at any time using the controls in section 7, or by emailing privacy@meanwhilexgames.com.

13.3 How to exercise your rights

Email privacy@meanwhilexgames.com with the name of the Game, your device platform, and — if you have it — your in-game or installation identifier, which the Game shows in its settings screen. We need enough information to locate your records; without an identifier we may not be able to link any data to you, which is itself a privacy protection. We respond within 30 days, and will tell you if we need longer.

14. Deleting your data

You can ask us to delete your data at any time, free of charge. How you identify yourself depends on how you reached us.

If you use one of our Games, email privacy@meanwhilexgames.com with the subject line “Data deletion request”, naming the Game and including your in-game or installation identifier. We will delete the data we hold about that installation, including gameplay replay data, and forward the request to AppsFlyer and DevToDev, which hold their own copies. Firebase data linked to the installation is deleted on our request as well.

If you messaged us on Messenger, Instagram or WhatsApp, you have two options. You can reply DELETE in the same conversation, which is the simplest route because it proves the request comes from that account. Or you can email the address above, telling us which platform you wrote from and giving the phone number (WhatsApp) or username (Instagram) or profile name (Messenger) you used, so we can find the conversation. We cannot locate your records without one of these.

Full instructions are on our data deletion page.

We delete the requested data within 30 days, except where we are legally required to retain records — for example, purchase records kept for tax purposes. Deleting a conversation on your own device, or uninstalling a Game, removes it from your side but does not by itself delete data already held by us or our providers.

15. Changes to this policy

We may update this policy as our Games evolve or as the law changes. We will revise the “Last updated” date above, and for material changes we will give notice in the affected Game or on this website before the change takes effect. Continuing to use our Games after a change means you accept the updated policy.

16. Contact us

Trade name	MeanwhileX
Legal entity	Havrylenko Olena Fedorivna FOP
Registry	2596822942
Address	26/2 Starokostiantynivske Shose, apt. 47, Khmelnytskyi, 29001, Ukraine
Privacy	privacy@meanwhilexgames.com
Support	support@meanwhilexgames.com