Catchybara – Privacy Policy

This Privacy Policy explains how Catchybara LLC (“we,” “us,” or “our”) collects, uses, discloses, and protects information about you when you use our mobile game Catchybara (the “Game”), and any related services, websites, or in-game events.

By downloading or using the Game, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Game.

1. Scope

This Privacy Policy applies to:

• Our Game released on app stores in the United States (including the Apple App Store and Google Play Store); and
• All related online services we operate for the Game, including backend services hosted on Amazon Web Services (AWS) and our use of Unity Gaming Services (UGS).

This Policy does not apply to independent third-party websites, apps, or services that we do not control.

2. Information We Collect

We collect information in three main ways:

• Information you provide directly to us
• Information collected automatically when you use the Game
• Information we receive from third-party partners such as Apple, Google, Unity, and logistics companies

2.1 Information You Provide Directly

Account and Profile Information

When you use Catchybara, you may provide us with:

• Nickname / display name
• Region / language (if you choose to provide)
• Avatar information:
  • If you choose to set a custom avatar, we may request access to your device’s photo library.
  • We only access the photo(s) you select and upload; we do not scan your entire photo library.
  • The uploaded avatar image itself is stored on our AWS storage; only the avatar image URL is stored in Unity Cloud Save.

Third-Party Login Information

The Game supports third-party login via Sign in with Apple and Google Sign-In. When you use these services, we may receive from the provider:

• A unique user ID or identifier
• Display name / nickname
• Email address (if you grant permission)
• The fact that your account is linked to that provider

We store your third-party account binding information securely on our AWS servers to support login and account recovery.

Shipping and Delivery Information

Catchybara is a claw-machine style game that allows you to win physical prizes. When you request shipment of a prize, we collect:

• Full name (first name and last name)
• Shipping address (country, state/region, city, postal code, street address)
• Phone number or contact number
• Order number and prize details
• Shipping status and tracking number

This information is stored on our AWS servers and is shared with logistics and courier partners to deliver your prize and provide tracking updates.

Customer Support & Communications

If you contact us for support or feedback, we may collect:

• Your contact information (for example, email address)
• The content of your message and any attachments you send
• Technical information related to your issue (for example, screenshots or logs you provide)

2.2 Information Collected Automatically

Device and Technical Information

When you use the Game, we and our partners (such as Unity Gaming Services and our own AWS servers) may automatically collect:

• Device model (for example: iPhone 15, Pixel 9, etc.)
• Operating system and version (iOS / Android and version number)
• Device language and region settings
• IP address and approximate location (country/region level)
• In-game identifiers (such as your player ID)
• Crash logs, error codes, and performance data

We use device model and technical information mainly for bug diagnosis, security, and game performance optimization.

Gameplay and Progress Information

Through Unity Cloud Save, Economy, Leaderboards, Matchmaker, Lobby, and other UGS services, we may collect:

• Your game progress, levels, and achievements
• In-game items and inventory status (virtual currencies and prizes)
• Match history, versus/friend matches, and leaderboard scores
• Participation in events, tournaments, and custom battles
• A/B test group assignments via Remote Config and Game Overrides

We explicitly do not store your shipping address in Unity Cloud Save. Shipping addresses and logistics information are stored only on our AWS servers.

In-App Purchases and Transaction Information

Using Apple’s in-app purchase system (StoreKit) and Google Play Billing, the Game supports in-app purchases (IAP). In connection with IAP, we may collect:

• Product ID and type of item purchased
• Purchase time and transaction ID
• Store receipts or verification tokens used to confirm your purchase
• Result of purchase verification and the granted in-game items or currency

We do not store your full payment card number or bank account details. Payments are processed securely by Apple and Google; we receive only the information needed to verify the transaction and grant your in-game items.

Push Notification Tokens

Using Unity Push Notifications (and the platform services it relies on, such as APNs/FCM), we may collect:

• A device-specific push notification token
• Information about whether you opened the notification or interacted with it

We use push notifications to:

• Send shipping and logistics updates for physical prizes
• Send important game announcements and in-game events or tournaments
• Send occasional promotions related to the Game where allowed by law

You can stop receiving push notifications at any time by changing your device settings (see Your Rights and Choices).

Analytics and Usage Information

With the help of Unity Analytics and our server logs, we collect:

• Session duration, gameplay frequency, and retention indicators
• In-game actions (for example, which game modes you play)
• Error codes and crash data
• Aggregated statistics about game performance

This information is usually processed in aggregate and does not directly identify you. We use it to understand how players use the Game and to improve balance, usability, and performance.

2.3 Information from Other Sources

We may receive information about you from other sources, such as:

• Logistics providers (shipping status, delivery result, updated tracking information)
• Payment platforms (limited information to confirm transactions or refunds)
• Platform operators (Apple, Google) in connection with fraud detection or policy enforcement

We combine this information with the data we collect directly to operate the Game and protect our services.

3. How We Use Your Information

We use your information for the following purposes:

1. To provide and operate the Game
   • Authenticate players via Unity Player Authentication and third-party logins
   • Maintain your game progress, inventory, and virtual economy using Cloud Save and Economy
   • Manage in-game leaderboards using Leaderboards
   • Run matchmaking and custom battles using Matchmaker and Lobby
   • Execute server-side logic through Cloud Code
2. To process purchases and rewards
   • Invoke and verify in-app purchases through Apple and Google IAP
   • Grant in-game currency, items, and physical prize eligibility
   • Maintain transaction history for fraud prevention, refunds, and customer support
3. To ship physical prizes
   • Store and manage your provided shipping address on AWS
   • Track the status of physical prizes and shipping orders
   • Share necessary shipping data with courier and logistics companies
   • Send you shipping and delivery updates via push notifications or email
4. To personalize and improve the Game
   • Analyze gameplay data with Unity Analytics
   • Run A/B tests using Remote Config and Game Overrides
   • Fix bugs and improve performance using crash logs, device model data, and error reports
   • Adjust difficulty, rewards, and events to improve balance and user experience
5. To communicate with you
   • Send important in-app messages and push notifications (e.g., prize shipment, event reminders)
   • Respond to customer support requests and player feedback
   • Send marketing communications about the Game where permitted by law (you may opt out)
6. To ensure security and prevent fraud
   • Detect and prevent cheating, abuse, or unauthorized transactions
   • Protect the integrity of tournaments, leaderboards, and matchmaking
   • Comply with legal obligations and enforce our Terms of Service

4. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data only when we have a legal basis, including:

• Contract: to provide the Game, process your purchases, and deliver your prizes.
• Legitimate Interests: to analyze and improve the Game, prevent fraud, and secure our services, in a way that does not override your rights.
• Consent: for certain optional data uses (for example, push notifications for marketing, access to your photo library for avatars), where required by applicable law.
• Legal Obligations: to comply with accounting, tax, and other legal requirements.

5. How We Share Your Information

We do not sell your personal information to third parties.

We may share your information in the following circumstances:

5.1 Service Providers and Partners

We share information with trusted third-party service providers who help us operate the Game, including:

• Unity Technologies (Unity Gaming Services), providing:
  • Player Authentication
  • Cloud Save
  • Cloud Code
  • Leaderboards
  • Matchmaker
  • Lobby
  • Economy
  • Remote Config
  • Game Overrides
  • In-App Purchases integration
  • Analytics
  • Push Notifications
• Cloud hosting and storage providers such as Amazon Web Services (AWS) for our backend servers, databases, and avatar storage.
• Platform providers such as Apple (App Store, Sign in with Apple, StoreKit) and Google (Google Play Store, Google Sign-In, Google Play Billing).
• Payment and fraud-prevention partners for verifying transactions, handling chargebacks, and preventing abuse.
• Logistics and courier companies to ship physical prizes to your provided address and obtain tracking and delivery updates.

These third parties are only allowed to use your information as needed to perform services on our behalf and are contractually required to protect your information.

5.2 Legal Requirements and Protection

We may disclose your information if we believe in good faith that such disclosure is necessary to:

• Comply with a legal obligation or government request
• Protect and defend our rights or property
• Protect the safety of our players or the public
• Detect, prevent, or address fraud, security, or technical issues

5.3 Business Transfers

If we are involved in a merger, acquisition, asset sale, or other corporate transaction, your information may be transferred as part of that transaction. We will notify you of any such change of ownership or control where required by law.

6. International Data Transfers

We operate globally and may store and process your information in countries other than where you reside, including the United States and locations of our service providers such as Unity and AWS.

Where required by law, we implement appropriate safeguards (such as standard contractual clauses) to protect your personal data when it is transferred internationally.

7. Data Retention

We retain your information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

• As long as your account is active or as needed to provide the Game
• For the duration required by law for tax, accounting, and regulatory purposes
• For a reasonable period to resolve disputes, enforce our agreements, and protect our interests

When we no longer need your information, we will delete it or anonymize it in accordance with applicable laws and our internal policies.

If you request deletion of your account, we will delete or anonymize your personal data, except where we are legally required or have a compelling legitimate interest to retain certain data (for example, basic transaction records or anti-fraud logs).

8. Security

We take reasonable technical, organizational, and administrative measures to protect your information, including:

• Using encryption in transit (for example, HTTPS)
• Access controls and authentication for our internal systems
• Limiting access to personal data to personnel who need it for their job functions

However, no method of transmission over the internet or method of electronic storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security.

9. Your Rights and Choices

9.1 Account and Profile

You may review and update certain profile information (such as your nickname or avatar) in the Game settings. If your account is based on third-party login (Apple or Google), you may also manage permissions through those platforms.

9.2 Push Notifications

You can control whether you receive push notifications (including shipping updates and event messages) by adjusting your device settings:

• On iOS: Settings → Notifications → Catchybara
• On Android: Settings → Apps → Catchybara → Notifications

9.3 Access, Correction, and Deletion

Depending on your location, you may have the right to:

• Request access to the personal data we hold about you
• Request that we correct inaccurate or incomplete data
• Request that we delete your personal data
• Object to or restrict certain processing activities

You can exercise these rights by contacting us at Email@Cachybara.com. We may need to verify your identity before fulfilling your request.

9.4 California Privacy Rights (if applicable)

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including:

• The right to know what categories of personal information we collect and how we use it
• The right to request deletion of your personal information
• The right to request that we correct inaccurate personal information
• The right to not be discriminated against for exercising your privacy rights

We do not sell your personal information as defined under California law. To exercise these rights, please contact us at Email@Cachybara.com and indicate that your request relates to “California privacy rights.”

10. Children’s Privacy

The Game is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

• If you are under 13, please do not use the Game or provide any personal information.
• If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as soon as possible.

If you believe we may have collected information from a child under 13, please contact us at Email@Cachybara.com.

11. Third-Party Links and Services

The Game may contain links to third-party sites, services, or content that we do not own or control (for example, official websites of Apple, Google, Unity, or logistics companies). This Privacy Policy does not apply to those third parties.

We encourage you to review the privacy policies of any third-party services you use.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will:

• Update the “Last Updated” date at the top of this Policy; and
• Provide additional notice in the Game or on our website when required by law.

Your continued use of the Game after the revised Privacy Policy has become effective indicates that you have read, understood, and agreed to the current version of the Policy.

13. Contact Us