Privacy Policy

1. Introduction

This Privacy Policy explains how Grovano Inc. (“we,” “us,” or “our”) collects, uses, shares, and protects information about you when you use the Glyph Rush mobile game and any related applications, our website at glyphrush.com, and related features and services (together, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree, please do not use the Service. This Policy is incorporated into our Terms and Conditions.

2. Who we are and how to contact us

Grovano Inc. is the controller responsible for your personal information. You can reach us at:

• Email: privacy@glyphrush.com (privacy) · support@glyphrush.com (support)
• Address: PO Box 702099, San Antonio, TX 78270, United States
• Website: glyphrush.com

3. A note about children

The Service is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use the Service or provide any personal information.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will take reasonable steps to delete it as soon as practicable. If you believe a child under 13 has provided us with personal information, contact us at privacy@glyphrush.com. Depending on your location, additional protections may apply to users under 16 or under 18, and we handle such information in accordance with applicable law.

4. Information we collect

We collect the following categories of information:

4.1 Information you provide to us

• Contact and support information. If you email us, request support, or sign up for a newsletter or waitlist on the Website, we collect your email address and the contents of your message.
• Account information (optional). Glyph Rush does not require an account to play. On first launch, the app generates a random install identifier and an anonymous player id so your progress, scores, and streak persist across sessions; this is not tied to your real-world identity. If you choose to link Apple or Google sign-in for cross-device restore, we store only the opaque identifier that provider returns.
• Display names and in-game entries. If you appear on a leaderboard or choose a display name, that information is collected and may be visible to others. Leaderboards are spoiler-safe by design: we publish ranks, bands, word lengths, and rarity colors — never the words you played.
• Purchase information. When you make an in-app purchase, the transaction is processed by the app store (Apple or Google). We do not receive your full payment-card details; we may receive confirmation of the purchase and a transaction identifier.

4.2 Information collected automatically

When you use the Service, we and our service providers automatically collect:

• Device and technical information — such as device model, operating-system version, language, region, time zone, screen and hardware characteristics, network information, and app version.
• Identifiers — such as a device advertising identifier (for example, Apple's IDFA or Google's Advertising ID), a resettable app-instance or installation identifier, and, on the Website, IP address.
• Usage and gameplay data — such as game modes played, levels or waves reached, scores, streaks, session length and frequency, in-game choices and progression, feature usage, settings, and interactions with advertisements. When you submit a Daily Trial run, we also store an encoded replay of your inputs and the puzzle date, which we re-simulate on our servers to verify that the score is legitimate (anti-cheat).
• Diagnostics — such as performance data and error reports.
• Approximate location — we do not collect precise GPS location; we may infer coarse location (such as country or region) from your IP address for analytics, fraud prevention, ad delivery, and legal compliance.
• Website cookies and similar technologies — as described in Section 5.

4.3 Information from third parties

We may receive information from:

• App stores and platforms (for example, purchase validation and, where you connect it, a platform account identifier);
• Advertising and analytics partners (for example, aggregated performance and attribution data about which campaigns led to installs); and
• Service providers that help us operate the Service.

5. Cookies and similar technologies

On the Website, we and our providers may use cookies, local storage, and similar technologies to make the site work, remember your preferences, measure traffic, and understand how the site is used. You can control cookies through your browser settings; blocking some cookies may affect how the site functions. Where required by law, we will request your consent before setting non-essential cookies and provide a cookie banner or preference tool.

In the Game, we and our SDK providers use device identifiers and similar technologies (rather than browser cookies) for analytics, advertising, and fraud prevention, as described in this Policy and subject to the consent controls in Section 8.

6. How we use information

We use information to:

1. Provide and operate the Service — run the Game, save and sync your progress, maintain leaderboards and streaks, verify submitted runs, and process in-app purchases;
2. Improve and develop the Service — understand how the Service is used, fix bugs, analyze performance, test features, and design new content;
3. Advertising — display and measure advertisements, including rewarded ads, and (subject to your consent where required) personalize ads;
4. Communicate with you — respond to support requests, send service-related messages, and, where you have opted in, send updates or newsletters;
5. Safety, security, and integrity — detect, prevent, and address fraud, cheating, abuse, and technical issues, and enforce our Terms; and
6. Comply with law — meet legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims.

7. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR:

• Performance of a contract — to provide the Game and features you request (such as cloud save and leaderboards).
• Legitimate interests — to operate, secure, analyze, and improve the Service and for non-personalized advertising, balanced against your rights.
• Consent — for personalized advertising, certain analytics, non-essential cookies, and push notifications, where required. You may withdraw consent at any time.
• Legal obligation — to comply with applicable laws.

8. Advertising, analytics, and your ad choices

The Service is supported in part by advertising and uses third-party SDKs for advertising and analytics. We run our own backend on Amazon Web Services rather than a third-party game-backend provider. The providers we currently use are:

• Advertising / mediation — AppLovin MAX (which may source demand through bidding adapters such as Google AdMob, Meta Audience Network, Unity Ads, Pangle, and Mintegral) — privacy policy
• Analytics — GameAnalytics — privacy policy
• Backend, cloud save, leaderboards, and push — Amazon Web Services (AWS), operated by us — privacy notice

These partners may collect or receive device identifiers, usage data, and similar information to perform their services. Each partner processes data under its own privacy policy; we encourage you to review them. If we add or change providers — for example, if we introduce a crash-reporting SDK — we will update this Section and the table in Appendix A.

Apple App Tracking Transparency (ATT). On Apple devices, we will ask for your permission through Apple's App Tracking Transparency prompt before we (or our partners) access your device's advertising identifier (IDFA) for cross-app tracking or personalized advertising. If you decline, we will not use the IDFA for that purpose; you may still see non-personalized ads.

Your ad choices.

• iOS: Settings → Privacy & Security → Tracking (and → Apple Advertising).
• Android: Settings → Privacy → Ads (reset or delete your advertising ID; opt out of personalization).
• EEA/UK: where required, we present a consent prompt (Consent Management Platform) that lets you accept or reject personalized advertising and certain analytics.

9. How we share information

We do not sell your personal information for money. We share information only as described here:

• Service providers and partners — the advertising, analytics, hosting, and support providers described above, who process information on our behalf or to provide their services.
• App stores and platforms — Apple and Google, to deliver the Service, validate purchases, and provide platform features you use.
• Advertising partners — to serve and measure ads. Depending on your settings and applicable law, sharing device identifiers and usage data with advertising partners for targeted advertising may be considered a “sale” or “sharing” of personal information under certain U.S. state laws. See Section 11 for your opt-out rights.
• Legal and safety — to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, or safety of our users, the public, or us.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• With your direction or consent — such as when you choose to appear on a public leaderboard or share your results.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

10. Your rights and choices (EEA/UK)

If you are in the EEA or UK, you have the right, subject to conditions and exceptions, to: access your personal data; correct inaccurate data; request erasure; restrict or object to processing (including profiling for personalized ads); data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local data-protection authority. To exercise these rights, contact us at privacy@glyphrush.com. We will respond within the time required by law.

11. Your rights and choices (United States)

Depending on your state of residence (for example, California under the CCPA/CPRA, Texas under the Texas Data Privacy and Security Act, and other states with comprehensive privacy laws), you may have the right to:

• Know / access the categories and specific pieces of personal information we collect, use, and disclose;
• Delete personal information we hold about you;
• Correct inaccurate personal information;
• Opt out of “sale” or “sharing” of personal information and of targeted advertising; and
• Limit the use of sensitive personal information (we do not use sensitive personal information for purposes that require a limitation right, but we honor requests where applicable).

You will not be discriminated against for exercising these rights.

How to opt out of targeted advertising / “sale” or “sharing”: use the device ad controls in Section 8, respond to our consent prompt where shown, and/or email us at privacy@glyphrush.com with the subject “Privacy Request.” Where supported on the Website, we honor opt-out preference signals such as Global Privacy Control (GPC).

How to exercise other rights: you can request an export or deletion of the data associated with your player id — see Delete your account for how, or email privacy@glyphrush.com. We may need to verify your request. You may use an authorized agent where the law permits; we may require proof of authorization.

California “Shine the Light.” California residents may request information about disclosures of personal information to third parties for their direct-marketing purposes. We do not share personal information with third parties for their own direct marketing.

12. Data retention

We keep personal information only as long as necessary for the purposes described in this Policy, including to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and context — for example, we keep account and progress data while your account is active; submitted replays are retained only as long as needed to validate scores and operate leaderboards; and analytics and advertising identifiers are kept for a limited period consistent with our providers' settings. When information is no longer needed, we delete or de-identify it.

13. Data security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration. Data is stored on Amazon Web Services in the United States and encrypted in transit and at rest. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping any account credentials confidential.

14. International data transfers

We are based in the United States, and our service providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those of your country. Where required (for example, for transfers from the EEA or UK), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

15. Third-party links and services

The Service may contain links to, or integrate with, third-party websites, platforms, and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party you interact with.

16. Push notifications

If you enable push notifications (for example, streak or daily-challenge reminders), we send them through your device. You can turn notifications off at any time in your device settings or within the Game where offered.

17. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as by posting the updated Policy with a new “Last updated” date or through an in-Game or Website notice. Your continued use of the Service after the changes take effect constitutes acceptance of the revised Policy.

18. Contact us

If you have questions, concerns, or requests regarding this Policy or your personal information, contact us at:

Grovano Inc.
Email: privacy@glyphrush.com
Address: PO Box 702099, San Antonio, TX 78270, United States
Website: glyphrush.com

Appendix A — Summary of data we collect

We do not knowingly collect precise geolocation, contacts, photos, health, biometric, or other sensitive categories in the Game. We keep this table consistent with our Apple “App Privacy” labels and Google Play “Data Safety” form.