Gummy Rally privacy policy

Effective date: 20 September 2026

Gummy Rally is a puzzle game provided by AppForge Digital. This policy explains how the Android and iOS apps handle information. Contact us at admin@appforgedigital.com.au with privacy questions or requests.

Playing and saving progress

You do not need to provide a name, email address, or password to play. Your puzzle progress, settings and locally chosen nickname are stored on your device. Recovery codes contain game progress; share them only with someone you trust. Clearing the app's storage can remove local progress.

Purchases

The game is free and offers an optional, one-time Remove Ads purchase through Google Play or the Apple App Store. Google or Apple handles payment details. AppForge Digital does not receive your full card details.

We use RevenueCat to verify purchases and restore the ad-free unlock. RevenueCat processes a generated app-user identifier, purchase records and purchase status, along with technical information needed to operate its service. Purchase status may also be stored in our Supabase backend. We use these records to provide and restore purchases, handle refunds, prevent fraud and understand purchase activity.

Advertising

The free version uses Google AdMob. Both apps request non-personalized ads with child-directed treatment, under-age-of-consent treatment and a General Audiences ad-content limit. The Android app removes the Android advertising-ID permission. The iOS app does not ask for permission to track you and does not use the advertising identifier (IDFA) for tracking; ads are served without cross-app tracking.

Advertising still involves processing technical data. Google may process your IP address, approximate location inferred from it, app or device identifiers other than the blocked advertising ID, ad interactions and diagnostic information to deliver ads, measure performance and prevent fraud. These settings do not mean that no information leaves your device. Privacy choices are available in the game where Google's consent service requires them. A verified Remove Ads purchase stops the game from showing ads.

Private friend races

Online friend races are optional and have a grown-up check. Share a room code only with a friend you know. The app uses Supabase to create an anonymous network session and exchange room identifiers and connection messages. It does not send your locally entered nickname to our matchmaking service; the opponent is displayed as “Friend.”

The devices exchange game information over a direct WebRTC connection, which can reveal network addresses to the other player. Connection services also process network addresses to establish the connection. There is no public matchmaking or free-text chat in either app.

Room-presence and connection messages are short-lived: inactive presence expires after 30 seconds and signaling messages after 60 seconds, with expired records removed when the service is used again. Anonymous session records and operational logs can remain longer. Local play and races against Pip do not require a friend-race network session.

Children and families

The app uses the child-directed advertising settings described above for all players. Purchases and private friend-race access include a grown-up check. We do not ask children to submit contact details, photos, precise location, or chat messages. A parent or guardian can contact us about a child's information.

Providers, security and retention

Our service providers include Google Play, the Apple App Store, Google AdMob, RevenueCat and Supabase. They process information for the purposes described above and may process it in countries outside Australia. Our Supabase project is hosted in Sydney. Network requests to our backend and purchase services use encrypted HTTPS connections. Direct game connections use WebRTC encryption.

We retain purchase records as needed to support purchases and restoration, resolve disputes and meet applicable obligations. Operational records are retained as needed to run and protect the service. Provider retention periods may differ. We do not sell your contact information or game progress.

Your choices and requests

You can play without using friend races, choose not to purchase, and clear local app storage through your device settings (or delete and reinstall the app). Contact admin@appforgedigital.com.au to request access, correction or deletion of information we can identify as yours, or to raise a privacy complaint. Include “Gummy Rally” and a description of your request. For a purchase-related request, a Google Play order reference or App Store receipt may help us locate the record; never send card details or passwords. We may need additional information to verify your request. Some records may need to be retained for purchase restoration, disputes or legal obligations. Deleting data does not itself refund a purchase.

Read the providers' policies: Google, Apple, RevenueCat, and Supabase.

We may update this policy when the app or its data practices change and will update the effective date above.