Legal
Privacy Policy
The short version
- We don't ask for your name, email, contacts, photos or location to play.
- Your progress is saved on your phone. If you turn on cloud save, it is also stored with an anonymous player ID so you can move to a new phone.
- Payments go through Apple or Google. We never see your card details.
- Ads only appear when you choose to watch one for a reward. Google AdMob shows them, and you choose whether they may be personalised.
- We use crash reports and basic game statistics to fix bugs and keep the game fair and fun.
- We never sell your personal information.
- You can ask us to delete your data at any time: here's how.
1. Who we are
Rosie's Bakery: Merge & Story (the "Game") and rosiesbakery.co.za are made by Rosie's Bakery Games ("we", "us"), based in South Africa. We are responsible for the personal information described in this policy.
Contact us at support@rosiesbakery.co.za. Under South Africa's Protection of Personal Information Act (POPIA), this address also reaches our Information Officer.
2. What we collect and why
| Information | Why we use it | Who handles it |
|---|---|---|
| Game progress and settings: chapters, bakes, coins, gems, stars, tablecloths, daily rewards | To save your bakery. It is stored on your device. With cloud save on, a copy is linked to an anonymous player ID so you can restore it on a new device. | Your device; Google Firebase (cloud save) |
| Purchase records: what you bought, when, the store's transaction ID and an anonymous app user ID | To deliver what you bought, restore purchases, run the Baker's Pass subscription and handle refunds. | Apple App Store or Google Play; RevenueCat |
| Device and advertising information: advertising ID (on iPhone only if you allow tracking), IP address, device model, operating system, language, and how you interact with ads | To show the reward ads you choose to watch, give you the reward, measure ads and prevent ad fraud. Ads are personalised only where you have agreed. | Google AdMob |
| Game statistics and diagnostics: events such as "chapter 3 started" or "order served", session length, app version, crash reports | To find and fix bugs, and to balance the game, for example to check that no chapter is too slow. | Google Firebase Analytics and Crashlytics |
| Messages you send us: your email address and anything you include | To answer your question or request. | Us, through our email provider |
We do not collect your name, postal address, phone number, contacts, photos, microphone or camera, or precise location. Google may estimate an approximate region (for example, the country) from your IP address to show suitable ads and comply with local law.
3. Ads and your choices
The Game has no pop-up ads. An ad only plays when you tap a button such as "Watch a short ad · +20 energy", and you can close it at any time (you just won't get that reward).
- Europe, the UK and Switzerland: the first time you play, Google's consent message asks whether ads may be personalised and whether your information may be used for measurement. You can change your choice at any time with Privacy choices in the Game's settings.
- iPhone: iOS asks whether the Game may track you across other companies' apps and websites. If you choose "Ask App Not to Track", your advertising ID is not shared and ads are not personalised using it. You can change this in Settings → Privacy & Security → Tracking.
- Android: you can reset or delete your advertising ID in Settings → Privacy → Ads (on some phones: Settings → Google → Ads).
- US states with privacy laws: showing personalised ads can count as "sharing" or "targeted advertising" under some state laws. You can opt out with Privacy choices in the Game's settings or by turning off ad personalisation on your device as described above.
Google's use of information from apps that use its services is explained at policies.google.com/technologies/partner-sites.
4. In-app purchases
The Game is free to play. You can buy gems, the one-time Rosie's Starter Pack, and the Baker's Pass, a monthly subscription. Apple or Google takes the payment, so your card and billing details stay with them. We receive confirmation of the purchase and an anonymous ID so we can give you your items and let you restore them on another device. RevenueCat processes these confirmations for us.
5. Children
Rosie's Bakery is a cozy game suitable for all ages, but it is designed for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13 (or the higher age set by your country, such as 16 in some European countries). If you are a parent or guardian and believe your child has given us personal information, email support@rosiesbakery.co.za and we will delete it.
6. Our legal reasons for using your information
Where laws such as the EU and UK GDPR or POPIA require a legal basis, we rely on:
- Providing the Game you asked for: saving your progress and delivering purchases.
- Legitimate interests: fixing crashes, keeping the game secure, preventing fraud and improving the game, in ways you would reasonably expect.
- Consent: personalised ads and, where the law requires it, measurement and statistics. You can withdraw consent at any time with Privacy choices in the Game.
- Legal obligations: keeping purchase records for tax and accounting.
7. Who we share information with
We share information only with the service providers that help us run the Game, each bound by its own privacy terms:
- Apple (App Store payments): apple.com/legal/privacy
- Google (Google Play payments, AdMob ads, Firebase cloud save, statistics and crash reports): policies.google.com/privacy
- RevenueCat (purchase records): revenuecat.com/privacy
We may also disclose information if the law requires it, to protect players or our rights, or to a new owner if the Game is ever sold (this policy would continue to apply). We do not sell personal information.
8. International transfers
Our providers may store and process information in countries other than yours, including the United States and countries in the European Union. Where the law requires it, these transfers are protected by safeguards such as the European Commission's standard contractual clauses, which our providers offer.
9. How long we keep information
- Progress on your device: until you delete the Game.
- Cloud save: until you ask us to delete it, or 24 months after your last play.
- Game statistics: up to 14 months. Crash reports: about 90 days.
- Purchase records: as long as tax and accounting law requires (usually 5 to 7 years).
- Support emails: up to 2 years after we last hear from you.
10. Your rights
Depending on where you live, you can ask us to: tell you what information we hold about you and give you a copy; correct it; delete it; restrict or object to how we use it; move it to another service; and withdraw consent. You will not be treated differently for using these rights.
To make a request, email support@rosiesbakery.co.za or follow the steps on our delete your data page. We reply within 30 days. Because we don't know players' names, we may ask for your player ID (shown in the Game's settings) to find your data.
You can also complain to a data protection authority: in South Africa the Information Regulator (inforegulator.org.za), in the UK the ICO (ico.org.uk), or in the EU your local supervisory authority. We'd appreciate the chance to help first.
11. Security
Information sent between the Game and our providers is encrypted in transit, and access to our provider accounts is limited and protected with two-step verification. No system is perfectly secure, but we work to protect your information and will tell you and the relevant authorities about any breach where the law requires.
12. This website
rosiesbakery.co.za uses no cookies, no analytics and no advertising trackers. Its fonts and pictures are served from this site. Like every website, our hosting provider briefly keeps standard server logs (including IP addresses) to keep the site secure and running.
13. Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the Game before it takes effect.
14. Contact
Questions about privacy? Email support@rosiesbakery.co.za. We read every message.