Privacy Policy - Pass the Phone

1. Introduction

Welcome to Pass the Phone ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our mobile application.

2. Information We Collect

Pass the Phone is designed with privacy in mind. We collect limited data, and some of it is collected by the services described in sections 5 to 7:

Device and app information, such as device model, operating system version, app version, language and time zone
A device identifier that the app reads from your device (the vendor ID on iOS, the Android ID on Android, or a random ID if neither is available) and uses to link your purchases, usage analytics and notifications to the same device. It is not your advertising ID
Usage analytics, such as the screens you open and events like starting a game, sharing your results or opening the purchase screen. These events do not include your answers or player names. Starting with app version 1.4.2, they also include a consent_status event (whether a consent message was needed and the resulting consent status) and an ad_error event (an error code when an ad, the consent step, the ad SDK start or the purchase status check fails). They never include an advertising ID
Purchase and subscription status, handled by the app stores and RevenueCat. We never receive your payment card details
Your IP address, which is received by every online service the app connects to, including the services described in sections 5 to 7
Advertising data collected by Google AdMob when ads are shown (section 5). Starting with app version 1.4.2 this includes your consent record: the choices you make in Google's consent message, which Google's consent tool stores on your device (section 6)
Push notification details, such as a push token, if you allow notifications
How you found the app, if you arrived through an ad or a link: an Apple Search Ads attribution token on iOS, the Google Play install referrer on Android, or campaign parameters in the link you opened

We do NOT collect: Your answers, game results, or any content you create within the app, other than feedback you choose to send us.

3. How We Use Your Information

To provide and maintain the app
To improve user experience and app performance
To process in-app purchases
To show, measure and secure ads in the free version of the app (sections 5 and 6)
To understand which campaigns and links bring new players to the app
To send notifications and important updates about the app (optional, and only if you allow notifications)

4. Data Storage

All game data, including your answers and custom questions, is stored locally on your device. We do not have access to this information. If you delete the app, this data will be permanently removed.

The information described in sections 2 and 5 to 7 is different: it is sent to us or to the services named there, and deleting the app does not by itself delete what they already hold.

5. Advertising

The free version of Pass the Phone shows ads served by Google AdMob, a service of Google. You see banner ads on the menu, game setup, tutorial, game and settings screens, and a full-screen ad before a game starts. In app version 1.4.1 and earlier, the Google ad SDK starts each time the app opens, for every player, without asking for your consent first. Starting with app version 1.4.2, the app first asks Google's consent tool (the User Messaging Platform) whether consent is needed, shows Google's consent message where it is required (section 6), and starts the ad SDK and requests ads only after that tool reports that ads may be requested. Once the app has confirmed your Premium or ad removal purchase, it does not request ads for you. Starting with app version 1.4.2 it also does not show you the consent message and does not initialize the ad SDK. If you buy Premium or ad removal during a session in which the ad SDK has already started, it stays started for the rest of that session, but no further ads are requested. After a reinstall or on a new device, an ad may be requested, and the consent message may be shown once, before your purchase has been restored.

When the ad SDK starts and when ads are requested and shown, Google AdMob collects the following data from your device for ad delivery, measurement, analytics and fraud prevention:

Device identifiers, such as the Android advertising ID and an app set ID
Your IP address, which Google may use to estimate your general location
Technical and diagnostic information about your device, the app and the ad SDK, such as performance data
How you interact with the app and ads, such as app launches, taps and video views

6. Ad Personalization, Consent and Your Choices

Pass the Phone asks Google for non-personalized ads only. These ads are not based on your past behavior in apps and websites. Google uses contextual information instead, such as the content of the app and your general location. Google still uses device identifiers for frequency capping and aggregated ad reporting.

In app version 1.4.1 and earlier, the app does not ask for your consent before ads are requested, in any region. Starting with app version 1.4.2, it asks where Google's consent tool requires it, including the European Economic Area (EEA), the United Kingdom and Switzerland. Google's consent message is shown when the app opens, before any ad is requested. Google's consent tool stores your choices on your device and they apply to every ad request. To check whether consent is required where you are, the tool contacts Google when the app opens, before ads load, and Google receives your IP address with that request. If you do not consent, Google can still serve limited ads, which are served with limited data and are not tailored to you. Ads stay non-personalized whatever you choose.

On iOS, the app does not show the App Tracking Transparency prompt and never asks permission to track you, so iOS does not give the ad SDK the advertising identifier (IDFA).

In app version 1.4.1 and earlier, the app has no ad settings. Starting with app version 1.4.2, where Google's consent message applies to you, you can reopen it in the app under Settings, then Other, then "Privacy choices", and change or withdraw your choices at any time. Players with Premium or ad removal are not asked and do not see this entry. On Android, you can reset or delete your advertising ID in your device's Ads settings. You can stop seeing ads by buying Premium or the ad removal option in the app. You can also contact us at info@codixus.com.

Google handles the data it collects under its own policies:

7. Other Third-Party Services

Besides Google AdMob, the app uses the services below. Each one processes data under its own privacy policy:

RevenueCat: manages purchases and subscription status. It receives your device identifier, purchase information and campaign attribution details
OneSignal: sends push notifications. It receives your device identifier, push token, language, app version and basic device data
Litemetrics: our own analytics service. It receives the usage events and device details described in section 2, together with your IP address
Expo (EAS Update): delivers app updates, so it receives your IP address and basic app and device details when the app checks for updates
Our own server at api.codixus.com: provides the list of our other apps and receives your language and IP address when you open the Settings or Other Apps screen
Apple App Store and Google Play: process your purchases and payments

8. Legal Bases (EEA, UK and Switzerland)

If the GDPR or similar laws apply to you, we process your data on these legal bases:

Contract: to provide the app and process your purchases
Legitimate interests: to understand how the app is used, to measure which campaigns bring new players and to keep the app secure. In app version 1.4.1 and earlier, also to show non-personalized ads that fund the free version
Consent: to send you push notifications, which you give through the system permission prompt and can withdraw in your device settings. Starting with app version 1.4.2, also to store and read information on your device and use device identifiers for ads, which you give or refuse in Google's consent message and can change under Privacy choices

9. International Transfers

Some of our service providers, such as Google, RevenueCat, OneSignal and Expo, are based in the United States or process data there. When your data is transferred from the EEA, the United Kingdom or Switzerland, the transfer takes place under the safeguards these providers offer.

10. Children's Privacy

Pass the Phone is rated 17+ in the App Store and Google Play and is not directed at children. We do not knowingly collect personal data from children under 13 (or under the age of digital consent where you live). Adult Mode is for players 18 and older. If you believe a child has used the app and data about them reached us, please contact us and we will delete it.

11. Your Rights

You have the right to access, update, or delete your personal information. Since most data is stored locally on your device, you have full control over it. For any data we hold, please contact us at info@codixus.com and include your User ID, which you can copy from the app's Settings screen.

If you are in the EEA, the United Kingdom or Switzerland, you may also have the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
info@codixus.com