Privacy Policy

Last updated: June 13th 2026

Introduction

This Privacy Policy (“Policy”) explains how GenPlay (“Company,” “we,” “us,” or “our”) collects, uses, shares, and protects the personal information of users (“you”) of our mobile application and related services (collectively, the “Services”). We take your privacy very seriously and are committed to complying with applicable laws and protecting your personal information.

The Service is intended for users in the United States. We do not offer the Service to, or target, residents of the European Economic Area (EEA) or the United Kingdom.

Please read this Policy carefully. By accessing or using our Service, you agree to the terms of this Policy. If you do not agree with the terms of this Policy, please do not access or use the Service.

Information We Collect and How We Collect It

We may collect your personal information in the following ways:

1. Information You Provide Directly:
   • Account Creation (via OAuth): When you sign up for or log in to our Services using your Google or Apple account, we may receive information from the respective OAuth provider, such as your email address, username (or profile name), and profile picture (if permitted by the provider and consented to by you). We do not collect or store your passwords directly.
   • User-Generated Content (UGC): Any content you create or share on the Services, such as game play videos, screenshots, related text descriptions, and comments, may contain personal information. This can include your or others’ likeness (image), voice, in-game chat content, and user IDs visible in the video.
   • Customer Support and Inquiries: When you request customer support or contact us, we may collect information you provide, such as the content of your inquiry, your email address, and device information necessary to resolve the issue.
2. Information Automatically Collected During Service Use:
   • Device Information: Model of your mobile device, operating system (OS) version, language settings, unique device identifiers (including the Advertising ID (ADID/IDFA)), and IP address. Subject to your choices described in “Advertising and Your Choices,” the Advertising ID and related data are used by us and our advertising partners for personalized and non-personalized advertising, ad measurement, analytics, and fraud prevention.
   • Log Information: Time of your service use, access IP address, app version information, error logs, and service activity records (e.g., videos watched, features clicked).
   • Cookies and Similar Technologies: We may use cookies and similar technologies (e.g., local storage) to provide the Services, improve user experience, and analyze service usage. You may refuse the use of cookies through your browser or device settings, but this may limit your ability to use some features of the Services.
3. Information Collected from Non-Registered Users: Even if you use the Services without an account, we may automatically collect certain information, such as your IP address, device information, and service usage records. Such information is collected in a non-directly identifiable form or limited to the minimum necessary for service provision and analysis.
4. Push Notification Token: If you enable push notifications, we collect a push token (via Firebase Cloud Messaging and Apple Push Notification service) to deliver notifications to your device. You can disable push notifications at any time in your device settings.

How We Use Your Information

We use the personal information we collect for the following purposes:

• Providing and Operating the Services: Creating and managing accounts, identifying and authenticating users, storing, processing, displaying, and streaming UGC (videos, etc.) you upload, linking to game store download pages, and providing the seamless functionality of the Services.
• Improving Services and Developing New Services: Enhancing user experience, analyzing service usage statistics (using de-identified or anonymized data where possible), resolving errors, and conducting research for the development of new features and services.
• Advertising: Displaying advertising, including personalized advertising where permitted by your choices and applicable law, and measuring ad performance.
• User Support and Communication: Responding to customer inquiries and resolving issues, delivering important notices regarding the Services, and informing you of changes to our terms and policies.
• Legal Compliance and Dispute Resolution: Complying with applicable laws or regulatory requirements, responding to orders from government authorities or courts, investigating and preventing violations of our service terms, and assisting in the resolution of disputes between the Company and users or among users.
• Enhancing Security and Preventing Misuse: Maintaining the security of the Services, protecting system integrity, and detecting and responding to abusive or fraudulent activities (e.g., violations of terms, uploading illegal content).

We use your personal information only for the purposes described in this Policy. For how advertising works and the choices available to you, see “Advertising and Your Choices.”

Advertising and Your Choices

The Service is supported by advertising provided through Google AdMob and its advertising partners. To deliver and measure ads, we and these partners may use your Advertising ID (ADID/IDFA) and other device and usage information.

Personalized advertising. For users 13 and older, we may show personalized (interest-based) advertising by default, which uses the Advertising ID and other data to make ads more relevant. We limit ad content to a maximum “Teen (T)” content rating.

Minors and age signals. Where we identify a user as a minor — including through app-store age signals such as Google Play’s Age Signals or Apple’s Declared Age Range — and where required by applicable law, we serve only non-personalized advertising and apply child-directed / under-age-of-consent treatment. We do not knowingly use the personal information of children under 13 for advertising.

Your choices:

• iOS (App Tracking Transparency): We ask for your permission before using identifiers to track you across apps. If you do not allow tracking, you will receive non-personalized ads. You can change this in your device settings.
• Opt out of ‘sale’/’sharing’ (U.S. state laws): Use the in-app “Do Not Sell or Share My Personal Information” control to opt out of the use of your information for cross-context behavioral advertising (see “Your Rights and Choices”).
• Advertising ID: You can reset or limit your Advertising ID in your device settings.

You can learn how Google uses information from apps that use its services at https://policies.google.com/technologies/partner-sites.

How We Share Your Information

As a general principle, we do not share your personal information with external parties or provide it to third parties without your consent. However, we may provide personal information in the following exceptional cases:

1. With Your Prior Consent: We may share information restrictively only when you have explicitly consented to the provision of such information.
2. When Required by Law or for Investigative Purposes: If required by a court order, subpoena, or other legitimate legal process, or if requested by law enforcement agencies according to procedures and methods prescribed by law for investigative purposes.
3. For Essential Service Provision (Limited):
   • OAuth Providers (e.g., Google, Apple): When you log in via OAuth, minimal information (e.g., authentication tokens) may be exchanged with the respective provider. This is part of the information you have already provided to that OAuth provider and is essential for implementing the login functionality.
   • Cloud Service Providers (e.g., Amazon Web Services): We use trusted cloud service providers like AWS for service operation and data storage. Your data may be stored and processed on AWS servers located in the United States, where AWS acts as our service provider (data processor). We require these providers to safeguard your information and to process it only on our behalf under appropriate contractual terms (such as a data processing agreement).
4. Affiliated Entities: If we engage in a business transaction such as a merger or acquisition, your data may be transferred as part of the agreement.
5. Advertising Partners: We share online identifiers (such as the Advertising ID) and limited device and usage data with Google AdMob and its advertising partners to deliver and measure advertising, as described in “Advertising and Your Choices.”
6. To Avert Imminent Danger to Life or Bodily Harm: If deemed clearly necessary for the urgent protection of the life, body, or property interests of you or a third party.

We do not sell your personal information for money. Our sharing of identifiers for advertising may be considered a “sale” or “sharing” for cross-context behavioral advertising under certain U.S. state laws; you can opt out as described in “Your Rights and Choices.”

Third-Party Service Providers

We work with the following service providers, who process data on our behalf or as independent controllers under their own policies:

• Google: AdMob (advertising), Google Sign-In (authentication), Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring, Firebase Cloud Messaging, and Google Play Age Signals (age assurance). See https://policies.google.com/privacy
• Apple: Sign in with Apple (authentication) and Declared Age Range (age assurance). See https://www.apple.com/legal/privacy/
• Amazon Web Services (AWS): Cloud hosting and storage.

User-Generated Content and Public Information

User-Generated Content (UGC) such as videos, comments, and profile information that you upload to the GenPlay Services may be visible to other users of the Services. When you upload or share UGC, you should be aware that any personal information contained within that content (e.g., your face, voice, real name, contact information) may be disclosed to others.

Please note the following in particular:

• Scope of Disclosure: Videos you upload and related information (descriptions, tags, etc.) are generally made public for other users to search and view.
• Personal Information in UGC: If your video contains your own or others’ likeness, voice, in-game IDs, etc., this may be exposed to other users. You are responsible for obtaining any necessary lawful consent from third parties before uploading content containing their personal information. We may not be liable for issues arising from such actions.
• Profile Information: Certain parts of your profile information, such as your username (nickname) and profile picture, may be visible to other users within the Services.

You should exercise caution when posting content or sharing information on the Services and avoid including sensitive personal information that you do not wish to make public.

Children’s Privacy

The GenPlay Services are not directed to children under the age of 13 (or the applicable age that defines a child in your country of residence). We do not knowingly collect personal information from children under 13.

If we obtain “actual knowledge” (e.g., through a report from a parent or legal guardian, or discovery of content clearly indicating a child’s personal information) that we have collected personal information from a child under 13, we will promptly delete that information or take reasonable steps to obtain verifiable consent from the child’s parent or legal guardian if required by law.

Parents or legal guardians who believe that their child has provided personal information to us without their consent should contact us using the contact information provided in the section below. We will review the information and take appropriate actions, including deletion.

Users must not upload personal information of children under 13 (such as photos, videos, names, etc.) to the Services without the explicit and verifiable consent of their parent or legal guardian. This is also prohibited under our Terms of Service.

Advertising to minors. Where a user is identified as a minor (including through app-store age signals), and where required by law, we serve only non-personalized advertising and do not knowingly use the personal information of children under 13 for advertising.

Your Rights and Choices

You may have the following rights under applicable law, and we respect and support your exercise of these rights:

• Right to Access: You may request to access the personal information we hold about you at any time.
• Right to Rectification: If your personal information is inaccurate or incomplete, you may request its correction.
• Right to Deletion/Erasure: You may request the deletion of your personal information under certain conditions, such as when you delete (deactivate) your account or when the purposes for collecting and using your personal information have been achieved.
• Right to Restrict Processing: You may request the restriction of processing of your personal information under certain conditions.
• Right to Data Portability: Under certain conditions, you may have the right to receive the personal information you provided in a machine-readable format or to request its transfer to another controller.

California Resident Rights (CCPA/CPRA). If you are a California resident, you may have the following rights under the California Consumer Privacy Act, as amended:

• Notice at Collection: We collect the categories of personal information described in “Information We Collect” (identifiers such as account email and Advertising ID; internet/usage activity; user content; and inferences), for the purposes described in this Policy, and retain them as described in “Data Retention and Deletion.”
• Sharing/Sale: We share online identifiers (such as the Advertising ID) for cross-context behavioral advertising. We do not sell personal information for money. You may opt out using the “Do Not Sell or Share My Personal Information” control in the app.
• Other rights: You may request to know, access, delete, or correct your personal information, and you will not be discriminated against for exercising these rights.
• Opt-out preference signals: As there is no uniform “Do Not Track” standard, we treat recognized opt-out preference signals as a request to opt out of “sharing” where applicable.
• Response time: We respond within 45 days; if we need more time, we will notify you and may take up to a total of 90 days.

How to Exercise Your Rights:

To exercise the rights described above, please contact us at the email address provided in the section below. We will process your request within a reasonable period after receipt and notify you of the results. We may request additional information to verify your identity when processing your request.

Data Security

We take reasonable technical, administrative, and physical security measures to protect your personal information.

• Technical Measures:
• Data Encryption: Your personal information is encrypted in transit using TLS (HTTPS) and is protected at rest using encryption features provided by our cloud provider (AWS).
• Access Control: Access to personal information processing systems is granted only to a minimum number of personnel necessary for performing their duties, and Role-Based Access Control (RBAC) is applied. We manage access using tools like AWS IAM (Identity and Access Management).
• Security Systems: To prevent leakage or damage of personal information due to hacking or viruses, we install security programs, conduct periodic updates and inspections, install systems in areas where external access is controlled, and monitor and block access technically and physically.
• Administrative Measures:
• Internal Management Plan: We establish and implement an internal management plan for the secure processing of personal information.
• Regular Employee Training: We conduct regular training on personal information protection for employees who handle personal information.
• Use of OAuth Authentication: By using Google/Apple OAuth authentication, we do not directly store or manage your service passwords, thereby reducing related security risks.

While no security measure is perfect, we will continuously strive to protect your personal information. In the event of a security incident such as a data breach, we will endeavor to respond promptly and notify you in accordance with applicable laws.

Data Retention and Deletion

We, in principle, destroy your personal information without delay after the purposes of its collection and use have been achieved. However, if it is necessary to retain personal information pursuant to the provisions of applicable laws, we may store it for a certain period prescribed by such laws.

• Retention Period:
• Member Information: Until membership withdrawal (account deletion). However, it may be retained for a certain period after withdrawal for purposes such as dispute resolution and compliance with legal obligations.
• UGC (Videos, etc.): Retained until you delete the content yourself or withdraw your membership. However, it may be exceptionally retained if necessary for legal compliance or actions under the Terms of Service.
• Automatically Collected Information (Log Records, etc.): Retained for the minimum period necessary for service analysis and improvement, and fraud prevention (e.g., 3 months to 1 year), and then destroyed.
• Destruction Procedure and Method:
• Personal information stored in electronic file format is permanently deleted using a technical method that makes a record unrecoverable.
• Personal information recorded and stored in paper documents is shredded or incinerated.

We regularly review and manage personal information to avoid retaining unnecessary data.

Third-Party Links and Services

Our Service may contain links to third-party websites or applications, including game download links. We are not responsible for the privacy practices of these third-party services.

Data Protection Contact Information

To protect your personal information and handle complaints and inquiries related to personal information, we have designated the following data protection department and contact information:

• Department: Privacy Team
• Email Address: privacy@gameplaylabs.org

You may report or make inquiries regarding any privacy-related concerns arising from your use of the Services to the above contact department, and we will respond to your reports and inquiries promptly and sufficiently.

Changes to This Privacy Policy

When we make changes to this Privacy Policy, we will revise the “Last Updated” date at the top of this Policy and post the updated Policy on our Service.

• For non-material changes that do not significantly alter your rights or the way we handle your personal information, the revised Policy will be effective immediately upon posting, with the “Last Updated” date reflecting the date of the revision. We encourage you to review this Policy periodically to stay informed of our practices.
• For material changes that significantly affect your rights or the way we process your personal information (such as, but not limited to, collecting new categories of personal data, using your data for new purposes not previously disclosed, or sharing your data with new categories of third parties for different objectives), we will provide you with reasonable advance notice before such changes take effect. This notice will be provided through prominent means, such as via email to your registered email address or a conspicuous notice within our Service.