Privacy Policy

Active From:July 31, 2026

This Data Privacy Policy details how Yimu Health Care ("we," "our," or "us") collects, uses, and secures your personal information while you interact with our mobile application, Creamy Screw Puzzle, available via Google Play. We process your information strictly to deliver high-quality gaming experiences and to optimize user engagement.

1. Information Collection Strategies

We acquire, utilize, and oversee your personal data across multiple avenues, committing to stringent data security protocols at all times. Below is a breakdown of the specific information categories we log and how we handle them.

1.1 Categories of Collected Data

When you open or play Creamy Screw Puzzle, we may capture the following general data classifications:

Server Logs: Your IP address, network connection timestamps, and hardware classification.

Hardware Specifications: Device brand, specific model, operating system version (Android/Google OS), local time zone, and system language preferences.

Device Identifiers: Unique network tags linked to your gaming device. These include the Google Advertising ID (GAID), Android ID, Google Play Games ID, and your Google account tag.

In-Game Metrics: Your gameplay progress, high scores, earned achievements, and records of multiplayer activity.

Financial and Transaction Data: Purchase history, item usage logs, customized game settings, and records of bought virtual currency or assets.

1.2 Third-Party Data Sources

If you decide to link your account using external services like Google Play Games Services, we will extract relevant profile details (e.g., your public profile and username) from that platform. This extraction strictly follows their authorization procedures and requires your prior agreement to their data-sharing policies.

You can examine the privacy standards of these platforms here:

Google Play Games / Google Services: https://policies.google.com/privacy

By accessing our game through an external platform, you acknowledge that:

Your use of the game's features complies with the current terms and conditions of that specific third-party service.

You satisfy the minimum age criteria set by the third-party provider under your local jurisdiction's laws.

2. Why We Use Your Data

We process your personal information for the following purposes, ensuring each data type is backed by a valid legal justification:

Service Delivery and Support: To fulfill product orders, answer user queries, and manage communications; to operate fundamental game features, personalize your session, and send out technical patches, security warnings, and support messages.

Legal Justification: Handled under GDPR Article 6(1)(b) (contractual necessity). This is essential for upholding our user agreements, maintaining servers, and rolling out updates.

Product Optimization and Marketing: To send out promotional content regarding Yimu Health Care or associated partners based on your preferences; to preserve your custom settings; to analyze game performance, design novel features, and upgrade our software, marketing, and customer care.

Legal Justification: Handled under GDPR Article 6(1)(f) (legitimate interests). We use this information to fulfill our legitimate interest in offering captivating content and continuously refining our operations.

Targeted Advertising Delivery: To serve personalized advertisements and promotional offers to users who have explicitly agreed to share their device IDs with our advertising partners.

Legal Justification: Also based on GDPR Article 6(1)(f). This processing is motivated by our legitimate interest in providing tailored ads and improving our business offerings.

3. Data Retention Periods

We will store your personal data strictly for the period necessary to supply our game services, meet statutory requirements, and protect or assert our legal standing. To resolve disputes, enforce agreements, maintain technical infrastructure, comply with the law, or ensure security, we might hold specific data fragments in our systems for a legally acceptable duration.

Furthermore, we keep Usage Data to analyze internal metrics. Usually, this information is retained for a short time unless it is explicitly required to boost system security, improve game features, or if legal obligations dictate a longer holding period.

4. Data Sharing and Disclosure

In observance of your rights and under the frameworks of GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may share or enable the transfer of your collected data to external parties under these circumstances:

External Partners: For collaborative service delivery, regulatory compliance, business asset transfers, or other projects where you have given clear consent.

Legal and Regulatory Bodies: If we suspect a breach of our terms, or if disclosing data is legally required to protect the public or the rights, safety, and intellectual property of Yimu Health Care.

Other Users: When you participate in open forums, multiplayer matches, or when your stats appear on global leaderboards.

4.1 Sharing with Advertising Affiliates

Assuming you have provided consent in accordance with GDPR Article 6(1), we will share your device IDs with ad networks to deliver tailored advertising experiences. Our current and future advertising partners include:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Note that this Data Privacy Policy does not cover the data practices of these external companies. We highly recommend reading their individual privacy policies if you have any concerns regarding their data management.

4.2 Working with Third-Party Processors

To run our backend infrastructure smoothly, we team up with specialized data processors. This includes hosting providers, user authentication services, and analytics platforms:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

5. Children's Privacy Shield

Creamy Screw Puzzle is not intended for, nor targeted at, users under the age of 13. We do not deliberately collect personal identifiers from children below this age threshold. If we discover that we have accidentally gathered such information, we will promptly erase it from our databases. If you are a parent or legal guardian and realize your child has provided us with personal data, please contact us immediately to take corrective measures.

6. Security Safeguards

We highly value your trust and utilize commercially reasonable security frameworks to protect your personal information. However, please be aware that no method of electronic storage or online transmission is flawlessly secure. Consequently, we cannot guarantee the absolute invulnerability of your data.

7. Push Notifications

If you have opted in, we may transmit gameplay alerts, marketing campaigns, and important notifications directly to your Android/Google device. You reserve the right to stop receiving these push notifications at any time by modifying your device's system preferences.

8. User Privacy Entitlements

8.1 Rights for Residents of the European Economic Area (EEA)

We strive to handle your privacy requests swiftly, guaranteeing a reply within one month of receipt. For highly complex inquiries, this timeframe may be extended by a maximum of three months, as permitted by GDPR Article 12. We will inform you of any delays and the reasoning behind them.

(1) Access Right: Under GDPR Article 15, you can ask for comprehensive details regarding the data we possess about you, including processing motives, data categories, recipient entities, and anticipated storage timelines. You may also request a digital extract of this data, provided it doesn't infringe on trade secrets or intellectual property.

(2) Right to Object: According to GDPR Article 21, you may contest data processing predicated on the "legitimate interests" clause (Article 6(1)(f)). If you object, we will halt processing unless we can establish compelling legitimate grounds that override your rights. You also possess an absolute right to opt out of processing for direct marketing purposes.

(3) Right to Rectification: Under GDPR Article 16, you are entitled to have any inaccurate or incomplete personal records corrected.

(4) Right to Restrict Processing: Per GDPR Article 18, you can mandate that we limit the active use of your data under specific conditions. During restriction, we will only process it with your permission, for legal claims, or for significant public interest reasons.

(5) Right to Withdraw Consent: In line with GDPR Article 7, if our operations require your explicit agreement, you can revoke it at any moment. This stops future processing but does not retroactively invalidate data handling that took place prior to the withdrawal.

(6) Right to Data Portability: Under GDPR Article 20, you are entitled to obtain your personal information in a universally readable, structured digital format, and to request its transfer to another data controller without hindrance.

8.2 Rights for California Consumers

(1) Response Timeline: We aim to fulfill verified consumer inquiries within 45 days. Should we need a time extension (up to 90 days total), we will notify you in writing regarding the justification and the revised schedule.

(2) Scope of Disclosure: Data disclosures will strictly cover the 12-month period immediately preceding your request. Information will be provided in a user-friendly format to ensure seamless data portability.

(3) Opt-Out of Data Sales: The California Consumer Privacy Act (CCPA) grants you the right to direct businesses to cease selling your personal details to third parties.

(4) Right to Know: You are entitled to understand exactly what types of personal information we acquire and why. These details are clearly outlined in this policy, which is updated at least annually.

(5) Right to Request Records: You can ask for a detailed account of the personal data we have collected about you over the past 12 months, covering data sources, collection motives, and third-party sharing practices. This access right can be exercised free of charge twice per calendar year.

(6) Right to Deletion: You can petition for the permanent removal of personal information gathered over the preceding 12 months. While we honor this right, certain legal exceptions—such as keeping services active, troubleshooting technical bugs, protecting free speech, or adhering to statutory mandates—may require us to retain specific data points.

9. Submitting a Deletion Request

Whenever it is no longer absolutely necessary for us to harbor your personal details, you may instruct us to securely eliminate them. To initiate a formal deletion request, please submit your inquiry to the contact email provided below.

10. Contact Details

For any questions, concerns, or requests related to this Data Privacy Policy, please reach out to us at:

Contact Email: [email protected]