1. Who is responsible
P Fun Store Company Limited is responsible for the personal data processed through Plafy. For any privacy question or request, email privacy@pfunstore.company.
2. Your account
When you first open Plafy we create an anonymous account for you. It has a random account ID and no name or email, so you can play without signing up.
You can choose to link Sign in with Apple or Google Sign-In to keep your progress across devices. When you do, we receive from Apple or Google an account identifier and, if you allow it, your email address and name. If you use Apple's "Hide My Email", we receive only the relay address Apple gives us. We never receive your Apple or Google password.
If you stay anonymous and delete the app or lose your device, we may not be able to restore your progress.
3. What we collect
| Information | Examples | Why we use it |
|---|---|---|
| Account data | Account ID; if you link sign-in: Apple or Google account identifier, email, name | To create and secure your account and restore it on another device |
| Game data | Game progress, scores, Volts balance and history, partner offers completed, settings | To run the games, keep your progress and credit Volts |
| Device and usage data | Device model, operating system, app version, language, crash and performance data, in-app events | To run and improve Plafy and fix problems |
| Device and network data for fraud prevention | Device identifiers and characteristics, IP address, network and connection information | To detect and prevent fraud and abuse, for example automated play or several accounts used to collect Volts |
| Advertising identifiers | IDFA on iOS (only if you allow tracking), Android advertising ID | To show and measure ads and to confirm partner offers (see sections 5 and 6) |
| Messages you send us | Emails to support or privacy | To answer you |
We do not collect your contacts, photos, precise location or payment card details.
4. Where your data is stored
Account and game data is stored with Supabase, our database and sign-in provider, on servers in Singapore. This means your data is transferred outside Hong Kong. We choose providers that protect data with security measures appropriate to the information involved.
5. Advertising (Google AdMob) and App Tracking Transparency
Plafy shows ads through Google AdMob. AdMob may collect device information, IP address, advertising identifiers and ad interaction data to show ads, limit how often you see them, measure them and prevent fraud.
- iOS: we ask for your permission through Apple's App Tracking Transparency (ATT) prompt before the IDFA can be used. If you choose "Ask App Not to Track", the IDFA is not used and you still see ads, but they are not based on tracking across other companies' apps and websites. You can change this any time in iOS Settings > Privacy & Security > Tracking.
- Android: you can reset or delete your advertising ID, or opt out of ads personalisation, in your device's Google settings.
Google's use of data is described at policies.google.com/technologies/partner-sites.
6. Partner offers (Tapjoy)
Plafy offers optional partner tasks provided by Tapjoy, such as trying another app, to earn extra Volts. If you open the offers, Tapjoy receives information it needs to show offers and confirm that you completed them, such as your Plafy account ID, device information, IP address and advertising identifier (on iOS, only if you allowed tracking). Tapjoy tells us when a task is completed so we can credit your Volts. Each partner's own app or website has its own privacy policy. You never have to use partner offers to play Plafy.
7. Analytics (Firebase)
We use Google Firebase Analytics to understand how Plafy is used, for example which games are played and where players stop, so we can improve the app. Firebase receives app events, device information and an app instance identifier. See firebase.google.com/support/privacy.
8. Who we share data with
We do not sell your personal data. We share it only with the service providers named in this policy (Supabase, Google AdMob, Google Firebase, Tapjoy, and Apple or Google for sign-in) to run Plafy, and when required by law or to protect our users and services.
9. How long we keep data
- Account and game data: while your account exists. When you ask us to delete your account, it is deleted after a 30-day cooling-off period (section 10).
- Analytics and advertising data: kept by Google and Tapjoy under their own retention settings and policies.
- Emails to us: kept as long as needed to deal with your request.
We may keep limited records longer where the law requires it or to deal with fraud or a dispute.
10. Deleting your account
You can delete your account in the app or by email. Deletion starts a 30-day cooling-off period: if you change your mind, sign in again within 30 days to cancel. After 30 days your account, game data and Volts are permanently deleted and cannot be restored. Full steps: pfunstore.company/plafy/delete-account.
11. Your rights
Under the Personal Data (Privacy) Ordinance of Hong Kong you may ask for a copy of the personal data we hold about you and ask us to correct it. You can also ask us to delete your account and data. Email privacy@pfunstore.company; we may ask you to confirm the request comes from the account holder. We reply within 40 days.
12. Children
Plafy is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has given us personal data, contact us and we will delete it.
13. Security
We send data over secure connections (HTTPS) and use access controls and the security features of our providers to protect your data. No system is completely secure, so we cannot guarantee absolute security.
14. Changes to this policy
We may update this policy. We will change the date at the top and, for significant changes, tell you in the app.
15. Contact
P Fun Store Company Limited, Hong Kong
Privacy: privacy@pfunstore.company
Support: support@pfunstore.company
If there is any difference between the English and Chinese versions of this policy, the English version applies.