legal

Privacy Policy

Last Updated: March 25, 2026 Effective Date: March 25, 2026 Policy Version: 1.0

Information We Collect
How We Use Information
Third-Party Services
Advertising
In-App Purchases
Data Storage and Security
Data Retention and Deletion
Children’s Privacy
Permissions
International Data Transfers
Your Rights
Future Changes to Data Practices
EU Digital Services Act (DSA) Disclosures
Changes to This Privacy Policy
Contact Us
Additional Disclosures

Uplyfire (“we,” “us,” or “our”) operates the MapGenius mobile application (the “App”). This Privacy Policy describes how we collect, use, store, and protect information when you use our App. Please read this Privacy Policy carefully to understand our data practices. Where our processing of your personal data relies on consent as its legal basis (such as personalized advertising), we will obtain that consent separately through appropriate mechanisms (e.g., the in-app consent dialog for EEA/UK users) in compliance with applicable law.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy is designed to comply with applicable data protection regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Brazilian General Data Protection Law (Lei Geral de Protecao de Dados, LGPD), the Children’s Online Privacy Protection Act (COPPA), and Google Play Developer Program Policies.

1. Information We Collect

1.1 Information We Do NOT Collect

MapGenius does not collect, request, or process:

Personal identification information (name, email address, phone number, mailing address, date of birth)
Location or GPS data
Contacts, calendar, or phone data
Photos, files, or media from your device
Microphone or camera input
Biometric data
Health or fitness data
Financial information (credit/debit card numbers, bank accounts)
Browsing history
Social media profiles or credentials
Device identifiers such as IMEI or IMSI

1.2 Information Collected Automatically

When you use MapGenius, the following non-personal information may be collected automatically:

a) Game Data (Stored Locally on Your Device)

Quiz scores, results, and completion statistics
Per-country performance metrics (times asked, times correct, average response time)
Game settings and preferences (sound, vibration, theme, language, auto-advance)
Progress and achievement data (stars, best scores, best times)

This data is stored exclusively on your device using a local database (SQLite via Room) and local preferences (Jetpack DataStore). This data is not transmitted to our servers or any third party by the App itself.

b) Information Collected by Third-Party Services

MapGenius integrates the following third-party services, each of which may collect information as described below:

Google AdMob (Advertising)

We use Google AdMob to display advertisements. AdMob may automatically collect:

Device advertising identifier (Google Advertising ID / AAID)
IP address (for ad delivery and geographic targeting)
Device information (model, operating system version, screen size)
Ad interaction data (impressions, clicks, engagement)
App usage data relevant to ad delivery (session length, app foreground state)
Diagnostic data (crash logs, performance metrics, and other diagnostic information collected automatically by the Google Mobile Ads SDK)

Prominent Disclosure (Google Play User Data Policy): The Google AdMob SDK integrated in MapGenius collects your device’s Advertising ID, IP address, and device information to deliver and measure advertisements. For users who have granted consent (EEA/UK) or who have not opted out of ad personalization (other regions), this data is also used to personalize the ads you see. This data is transmitted to Google’s servers over an encrypted connection whenever the App is in use. You can control or stop this collection by: (1) opting out of ad personalization in your device settings, (2) purchasing MapGenius Pro to disable all advertising, or (3) uninstalling the App.

For more information, see Google’s Privacy Policy and How Google Uses Information from Sites or Apps That Use Our Services.

Google Play Billing

When you make an in-app purchase, the transaction is processed entirely by Google Play. We do not collect or store your payment information. Google Play may collect:

Purchase history for the App (product identifiers, purchase tokens, timestamps)
Google Account information necessary for transaction processing

For more information, see Google Play’s Terms of Service.

c) Cloud Backup (Android System Feature)

If you have enabled Android’s automatic backup feature, your game data (quiz history, scores, progress) may be backed up to your Google account via Google One. This is an Android system feature controlled by your device settings, not by MapGenius. We do not access, read, or manage these backups.

2. How We Use Information

We use the information described above for the following purposes:

Purpose	Data Used	Legal Basis (GDPR Art. 6)
Providing core App functionality (quizzes, scoring, progress tracking)	Game data stored locally	Performance of a contract (Art. 6(1)(b))
Displaying personalized advertisements to support the free version of the App	Data collected by AdMob (Advertising ID, IP address, device info)	Consent (Art. 6(1)(a)), obtained via the EU User Consent flow (IAB TCF v2.2 Consent Management Platform)
Displaying non-personalized advertisements	Contextual data only	Legitimate interest (Art. 6(1)(f)) — to fund the free version of the App
Processing in-app purchases	Data collected by Google Play Billing	Performance of a contract (Art. 6(1)(b))
Saving and restoring your preferences and settings	Preferences stored locally	Performance of a contract (Art. 6(1)(b))

We do not use any information for:

Profiling or automated decision-making that produces legal or similarly significant effects (GDPR Art. 22)
Selling personal information (as defined under CCPA/CPRA)
Direct marketing or email campaigns
Cross-app or cross-device tracking initiated by us (note: Google AdMob may perform cross-context behavioral advertising as described in Section 4)

3. Third-Party Services

MapGenius relies on the following third-party services:

Service	Provider	Purpose	Privacy Policy
AdMob	Google LLC	Advertising (banner, interstitial, rewarded, app-open ads)	Google Privacy Policy
Google Play Billing	Google LLC	In-app purchase processing	Google Play Terms
Google Play Services	Google LLC	Core app infrastructure	Google Privacy Policy
Google User Messaging Platform (UMP)	Google LLC	Consent management for advertising (GDPR/EEA)	Google Privacy Policy

We do not share your information with any other third parties, data brokers, or analytics providers.

Data Processing Agreements: Our use of Google services is governed by Google’s data processing terms, including the Google Ads Data Processing Terms and applicable Standard Contractual Clauses (SCCs) for international data transfers. Google acts as a data processor on our behalf for certain advertising operations, and as an independent data controller for its own purposes as described in Google’s privacy policy.

4. Advertising

4.1 Types of Ads

MapGenius displays the following types of advertisements to users of the free version:

Banner ads: Displayed at the bottom of game screens
Interstitial ads: Full-screen ads shown between quiz rounds (frequency-capped)
Rewarded ads: Optional video ads that grant in-game hints when viewed
App-open ads: Displayed when the App resumes from the background (cooldown-limited)

EEA/UK Users: Before displaying personalized ads, the App presents a consent dialog compliant with the IAB Transparency and Consent Framework (TCF v2.2). You may grant or withhold consent for personalized advertising. If you withhold consent, only non-personalized, contextual ads will be shown. You may change your consent choice at any time through: Settings → Privacy → Ad Consent.

All Users: You can further control ad personalization through:

Android device settings: Settings → Google → Ads → Opt out of Ads Personalization
Resetting your Advertising ID: Settings → Google → Ads → Reset Advertising ID
Deleting your Advertising ID: On Android 12 and above, Settings → Google → Ads → Delete Advertising ID

4.3 Removing Ads

You may remove all advertisements permanently by purchasing the Pro upgrade within the App. Once purchased, no ads of any type will be displayed.

5. In-App Purchases

MapGenius offers a single in-app purchase:

MapGenius Pro — a one-time, non-recurring lifetime purchase that removes all advertisements and unlocks all available premium content and features.

All purchases are processed by Google Play. We do not collect, process, or store your payment information. Purchases are tied to your Google account and can be restored on any device signed into the same account.

Refunds are governed by Google Play’s refund policy.

6. Data Storage and Security

6.1 Local Storage

All game data is stored locally on your device using:

SQLite database (via Room ORM) for game history, country statistics, and user progress
Jetpack DataStore for app preferences and settings

This data never leaves your device through the App. It remains under your direct control.

6.2 Security Measures

All local data is stored in the App’s private storage directory, inaccessible to other applications
The App does not load or execute any remote scripts, code, or external web content
The WebView component used for map rendering loads only local assets bundled with the App
Network communication is limited to AdMob (ad delivery) and Google Play Billing (purchase verification)

7. Data Retention and Deletion

7.1 Retention

Game data is retained on your device for as long as you use the App. We do not retain any data on servers.

7.2 Deletion

You may delete your game data at any time through the following methods:

In-App: Open Settings → tap “Reset Progress” → confirm in the dialog (deletes all game history, scores, and statistics)
Uninstalling the App: Removes all locally stored data from your device
Clearing App Data: Android Settings → Apps → MapGenius → Storage → Clear Data
By email request: You may request data deletion by emailing us at uplyfire@gmail.com. Since all data is stored locally on your device, we will provide instructions for the methods above. We will respond to deletion requests within 30 days.

7.3 Web-Based Data Deletion Request (Google Play Requirement)

In accordance with Google Play’s data deletion policy, you may also submit a data deletion request via our website at: https://uplyfire.github.io/legal/mapgenius/data-deletion

Since MapGenius stores all data locally on your device and does not maintain server-side user accounts or data, the deletion process consists of following the in-app or device-level steps described in Section 7.2 above. For data collected by Google AdMob, you may manage or delete your data through your Google Account settings.

Purchase history managed by Google Play cannot be deleted through the App. To manage purchase records, visit Google Play Order History.

8. Children’s Privacy

MapGenius is an educational geography quiz application suitable for general audiences. We do not knowingly collect personal information from children under the age of 13 (or the applicable age of consent in your jurisdiction).

The App does not:

Require account creation or registration
Collect names, email addresses, or other personal identifiers
Enable communication between users
Share data with third parties for behavioral advertising targeted at children

If you are a parent or guardian and believe your child has provided personal information through the App, please contact us at the address provided in Section 15 so we can take appropriate action.

Note regarding advertising: The App is not directed at children under 13, and we do not set the AdMob tagForChildDirectedTreatment flag. Google AdMob may serve personalized ads based on the device’s advertising settings. If the device is used by a child, we strongly recommend that a parent or guardian either (a) configure the device’s ad settings to disable ad personalization, (b) use a Google Family Link managed account, or (c) purchase MapGenius Pro to remove all advertising.

Age of digital consent by jurisdiction: For users in the EEA, the age of digital consent varies by member state (13-16 years under GDPR Art. 8). For users in Brazil, parental consent is required for processing data of children under 12 (LGPD Art. 14). If you are under the applicable age of consent in your jurisdiction, you must have a parent or legal guardian’s permission to use the App.

9. Permissions

MapGenius requests the following device permissions:

Permission	Purpose	Required?
`INTERNET`	Required for loading advertisements (AdMob) and processing in-app purchases (Google Play Billing). The App does not use this permission to transmit your game data.	Yes
`VIBRATE`	Provides optional haptic feedback during quizzes (e.g., on correct or incorrect answers). Can be disabled in the App’s Settings.	Yes

The App does not request access to: location, camera, microphone, contacts, storage, phone state, SMS, Bluetooth, or any other sensitive permissions.

10. International Data Transfers

The App itself does not transfer data internationally. However, Google AdMob and Google Play Billing may process data on servers located outside your country of residence, including in the United States.

For transfers of personal data from the European Economic Area (EEA), the United Kingdom (UK), or Switzerland to countries that have not received an adequacy decision from the European Commission, Google relies on the following transfer mechanisms:

Standard Contractual Clauses (SCCs) approved by the European Commission
UK International Data Transfer Addendum where applicable
Additional technical and organizational safeguards as described in Google’s Data Transfer Frameworks documentation

For transfers from Brazil, Google maintains compliance with LGPD requirements for international data transfers, including adherence to adequate levels of protection or contractual safeguards as required under LGPD Art. 33.

11. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your data:

If you are located in the EEA or UK, you have the following rights under the GDPR (and UK GDPR):

Right of access (Art. 15) — Request a copy of the personal data we process about you
Right to rectification (Art. 16) — Correct inaccurate or incomplete personal data
Right to erasure (Art. 17) — Request deletion of your personal data (see Section 7.2)
Right to restrict processing (Art. 18) — Limit how your personal data is processed
Right to data portability (Art. 20) — Receive your personal data in a structured, commonly used, machine-readable format
Right to object (Art. 21) — Object to processing based on legitimate interest, including objecting to non-personalized advertising
Right to withdraw consent (Art. 7(3)) — Withdraw consent for personalized advertising at any time without affecting the lawfulness of processing based on consent before its withdrawal
Right to lodge a complaint (Art. 77) — Lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en

Since MapGenius does not collect personal data on its own servers, most of these rights are exercisable directly through your device settings and the in-app data reset functionality. For data processed by Google AdMob, you may also exercise your rights directly with Google as described in Google’s Privacy Policy.

Data Protection Officer: Given the nature and scale of our data processing activities, we are not required to appoint a Data Protection Officer under GDPR Art. 37. For all privacy-related inquiries, please contact us using the details in Section 15.

11.2 CCPA/CPRA Rights (California Residents)

If you are a California resident, you have the following rights under the CCPA as amended by the CPRA:

Right to know (Cal. Civ. Code Section 1798.100) — Request disclosure of the categories and specific pieces of personal information collected, the categories of sources, the business or commercial purpose for collection, and the categories of third parties with whom personal information is shared
Right to delete (Section 1798.105) — Request deletion of personal information we have collected
Right to correct (Section 1798.106) — Request correction of inaccurate personal information
Right to opt-out of sale or sharing (Section 1798.120) — Opt out of the sale of personal information and the sharing of personal information for cross-context behavioral advertising
Right to limit use of sensitive personal information (Section 1798.121) — We do not collect sensitive personal information as defined by the CPRA
Right to non-discrimination (Section 1798.125) — Not be discriminated against for exercising your privacy rights

Sale and Sharing of Personal Information: MapGenius does not “sell” personal information as defined under the CCPA/CPRA. However, the use of Google AdMob may constitute “sharing” of personal information (specifically, the Advertising ID and device information) for the purpose of cross-context behavioral advertising as defined under CPRA Section 1798.140(ah). You have the right to opt out of this sharing by:

Disabling ad personalization: Android Settings → Google → Ads → Opt out of Ads Personalization
Deleting your Advertising ID (Android 12+): Android Settings → Google → Ads → Delete Advertising ID
Purchasing MapGenius Pro to remove all advertising

To submit a verifiable consumer request, contact us at the email address in Section 15. We will respond within 45 days as required by law. You may also designate an authorized agent to make a request on your behalf.

California “Shine the Light” (Cal. Civ. Code Section 1798.83): We do not disclose personal information to third parties for their direct marketing purposes.

11.3 LGPD Rights (Brazilian Residents)

If you are located in Brazil, you have the following rights under the Lei Geral de Protecao de Dados (LGPD, Law No. 13,709/2018):

Confirmation of processing (Art. 18(I)) — Confirm whether your personal data is being processed
Access (Art. 18(II)) — Access your personal data
Correction (Art. 18(III)) — Correct incomplete, inaccurate, or out-of-date personal data
Anonymization, blocking, or deletion (Art. 18(IV)) — Request anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD
Portability (Art. 18(V)) — Request portability of your personal data to another service provider
Deletion (Art. 18(VI)) — Request deletion of personal data processed with your consent
Information about sharing (Art. 18(VII)) — Obtain information about public and private entities with which your data has been shared
Information about consent (Art. 18(VIII)) — Obtain information about the possibility of denying consent and the consequences of such denial
Revocation of consent (Art. 18(IX)) — Revoke consent at any time

Legal basis for processing under LGPD: The processing of personal data through Google AdMob is based on your consent (Art. 7(I)) for personalized advertising and on legitimate interest (Art. 7(IX)) for non-personalized advertising. Processing for in-app purchases is based on contractual necessity (Art. 7(V)).

To exercise your LGPD rights, contact us at the email address in Section 15. We will respond within 15 business days as recommended by the ANPD (Autoridade Nacional de Protecao de Dados).

12. Future Changes to Data Practices

We may in the future integrate additional services to improve the App experience. These may include:

Analytics (e.g., Firebase Analytics) to understand how the App is used and improve features
Crash reporting (e.g., Firebase Crashlytics) to identify and fix technical issues more quickly

If and when we enable such services, we will:

Update this Privacy Policy before any new data collection begins
Clearly describe what additional data is collected and for what purpose
Update the Google Play Data Safety section accordingly
Notify users through the App or the Google Play Store listing

No additional data collection beyond what is described in this Privacy Policy will occur without a published update to this policy.

13. EU Digital Services Act (DSA) Disclosures

For users in the European Union, in accordance with Regulation (EU) 2022/2065 (the Digital Services Act):

Advertising transparency: All advertisements displayed in the App are served by Google AdMob. We do not independently select, target, or curate the specific advertisements shown to you. Information about why a particular ad was shown to you is available through Google’s “Why this ad?” feature displayed alongside each advertisement.
Recommender systems: MapGenius does not use recommender systems or algorithmic content curation. Quiz content is determined by user-selected categories, continent filters, and difficulty levels, not by profiling or automated recommendations.
Content moderation: MapGenius does not host user-generated content and therefore does not perform content moderation.
Point of contact: For DSA-related inquiries, please contact us at uplyfire@gmail.com (see Section 15).

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

For all updates: We will update the “Last Updated” date and Policy Version number at the top of this document
For material changes (new data collection, new third-party services, changes to data sharing): We will notify users through an in-app notice or the Google Play Store listing before the changes take effect
For non-material changes (clarifications, formatting, updated links): Changes take effect upon posting

We encourage you to review this Privacy Policy periodically. Where changes affect processing activities that rely on your consent (such as personalized advertising), we will seek your renewed consent before applying the changes. For other changes, your continued use of the App after changes are posted constitutes your acknowledgment of the revised policy, to the extent permitted by applicable law.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Uplyfire Email: uplyfire@gmail.com

You may also contact us through the developer contact information listed on the MapGenius Google Play Store listing.

We aim to respond to all privacy-related inquiries within 30 days. For GDPR-related requests, we will respond within one month as required by Art. 12(3). For CCPA/CPRA requests, we will respond within 45 days as required by Sec. 1798.145. For LGPD requests, we will respond within 15 business days.

16. Additional Disclosures

16.1 Google Play Data Safety Section

In accordance with Google Play requirements, the following summarizes our data practices as declared in the Data Safety form:

Data Category	Data Type	Collected?	Shared?	Purpose	Optional?
Device or other IDs	Advertising ID (AAID)	Yes (by AdMob)	Yes (with ad networks)	Advertising	No (free version)
Location	Approximate location (IP-derived, country/region level)	Yes (by AdMob)	Yes (with ad networks)	Advertising	No (free version)
Device or other IDs	Device info (model, OS version, screen)	Yes (by AdMob)	Yes (with ad networks)	Advertising	No (free version)
App activity	Ad interaction data (impressions, clicks)	Yes (by AdMob)	Yes (with ad networks)	Advertising, Analytics	No (free version)
App info and performance	Diagnostics (crash data, performance metrics)	Yes (by Google Play Services)	Yes (with Google)	App stability	No
Financial info	Purchase history (product ID, timestamp)	Yes (by Google Play)	No	App functionality	Yes
App activity	Game progress (scores, stats)	Yes (stored locally only)	No	App functionality	No
App activity	App preferences (settings)	Yes (stored locally only)	No	App functionality	No

Data handling declarations:

Encryption in transit: Yes – all network communication uses HTTPS/TLS
Data deletion: Users can request deletion of local data via in-app Settings (“Reset Progress”) or by uninstalling the App. For data held by Google (AdMob, Play), users should refer to Google’s data controls
Data is not sold: We do not sell user data to third parties
Data collected by Pro users: If you purchase MapGenius Pro, AdMob data collection ceases because no ads are served

16.2 Apple App Store Compatibility

If MapGenius becomes available on iOS, this Privacy Policy also covers the iOS version. On iOS:

The App will use Apple’s App Tracking Transparency (ATT) framework to request your permission before tracking your activity across other companies’ apps and websites
If you decline tracking, only non-personalized, contextual ads will be served
You can change your tracking preference at any time via iOS Settings > Privacy & Security > Tracking
The App Store “App Privacy” nutrition labels will match the data disclosures in this Privacy Policy