The game is about a company that overpromises. This document does not.
Who we are
Good Vibes Incorporated (the game) is made and published by Franz Health Ltd. Franz Health Ltd is the data controller for your personal data. Franz Health Ltd is registered in England and Wales, company number 17182431. We are registered with the Information Commissioner's Office (ICO), registration number ZC198020. You can reach us at support@playgoodvibes.com.
The short version
- There are no accounts and no sign in.
- There are no push notifications and no local notifications.
- The game never requests camera, microphone, or photo access.
- Your game saves stay on your device. We cannot see them.
- A small diagnostic buffer of at most 256 events exists on the device. It is off by default and it is never transmitted anywhere.
- The only data that leaves your device goes to the three vendors described below, for ads, purchases, and install attribution.
The rest of this document is the same information, at the length the law prefers.
Data that stays on your device
The game stores your save data and your settings locally on your device. It also keeps the bounded diagnostic buffer mentioned above: at most 256 recent events, recorded only if you switch the option on, stored only on the device, and never sent to us or to anyone else. Consent for it defaults to off. We run no servers, so there is nowhere for it to go even if we changed our minds. Deleting the app deletes all of this. We could not recover your save for you if we wanted to, and we have wanted to.
Advertising (Google AdMob)
The game shows rewarded ads through Google AdMob, with consent managed by Google's User Messaging Platform (UMP). Ads play only when you choose to watch one in exchange for an in game reward. There are no banner ads and no forced interstitials.
When an ad is requested, Google processes: device identifiers (including the advertising ID, where you have permitted it), your IP address (from which coarse location is derived), device and app information, ad interaction events, and diagnostics. If you decline consent, or decline Apple's tracking permission on iOS, ads become non personalized, but Google still processes your IP address and device information to serve ads, cap frequency, and fight fraud.
Google describes its own processing at policies.google.com/privacy and policies.google.com/technologies/partner-sites.
Purchases (RevenueCat)
In app purchases are managed through RevenueCat. Because the game has no accounts, RevenueCat assigns an anonymous random app user ID and records purchase history and receipt validation data against it. This is used to deliver your purchases, restore them when you reinstall, and support you when something goes wrong. Payment itself is handled entirely by Apple or Google. We never see your card details, and neither does RevenueCat.
RevenueCat's policy is at revenuecat.com/privacy.
Install attribution (AppsFlyer)
We use AppsFlyer to learn which marketing campaign, if any, brought you to the game. AppsFlyer receives the install event, the campaign source, device identifiers where permitted, coarse location derived from your IP address, and a small set of named in app events. It never receives your game progress or your save. Attribution starts only after the consent flow resolves: the UMP form, and on iOS the App Tracking Transparency prompt as well.
AppsFlyer's policy is at appsflyer.com/legal/services-privacy-policy and its opt out is at appsflyer.com/optout.
Identifiers
| Identifier | Platform | When it exists |
|---|---|---|
| IDFA | iOS | Only with your App Tracking Transparency permission |
| Android advertising ID | Android | Subject to your system settings and consent |
| RevenueCat anonymous app user ID | Both | Random, generated on the device, tied to no account |
We run no servers and hold none of these identifiers ourselves. They exist on your device and at the vendors named above, nowhere else.
Legal bases
Under the UK GDPR and the EU GDPR, we rely on: consent, for personalized advertising and install attribution; contract, for delivering, restoring, and supporting the purchases you make; and legitimate interests, for non personalized ad serving, fraud prevention, and vendor diagnostics. Where we rely on legitimate interests, the interest is running a free game funded by optional ads without being defrauded while doing it.
Consent, and changing your mind
In the EEA and the UK, the UMP consent form appears at first launch, before any advertising or attribution processing begins. On iOS, the App Tracking Transparency prompt appears as well. Where required, a persistent Privacy options entry inside the game reopens the consent form at any time. You can also use iOS Settings > Privacy and Security > Tracking to withdraw the tracking permission, and on Android you can reset or delete your advertising ID in system settings. Withdrawing consent is as easy as the original yes. Declining everything leaves the game fully playable.
In app opt outs
- The install attribution toggle in Settings stops AppsFlyer processing on the device.
- The Privacy options entry reopens the UMP form so you can revisit your advertising choices.
- Local diagnostic telemetry is consent based and defaults to off. Nothing is recorded until you turn it on, and nothing is transmitted either way.
Retention
We retain nothing, because there is no server to retain it on. The vendors above retain data under their own policies, at the links above. Support email threads are kept for as long as needed to resolve the issue and are then deleted.
Children
The game is not directed at children under 13, and it carries an age rating in each store. We do not knowingly process children's data. If you believe a child has sent us personal data by email, contact us and we will delete it.
Your rights (UK and EU)
You have the rights of access, rectification, erasure, restriction, portability, and objection. To exercise them, email support@playgoodvibes.com. For most of the data described in this policy the vendors above are the ones actually holding it, and we will point you to the right place rather than pretend to search servers we do not have. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) or to your local EU supervisory authority.
US state privacy
We do not sell personal information for money. The advertising and install attribution described above is the processing that some US state laws count as "sharing" or "targeted advertising". You can opt out through the tracking prompt, the in game Privacy options and attribution toggle, and your operating system's advertising ID controls. We honor rights requests sent to the support email, verified against device level identifiers you provide, because we hold nothing else to verify you with.
International transfers
The vendors named above process data in the United States and elsewhere. Those transfers rely on standard contractual clauses, the UK Addendum, or the EU-US Data Privacy Framework where the vendor is certified under it.
Changes
When this policy changes, we will update this page and the effective date at the top. No notification network exists to notify you with, which is rather the point.
Contact
support@playgoodvibes.com. Franz Health Ltd, United Kingdom.