Privacy Policy — Drone Delivery King

Company: GANA Holdings Inc.
Contact: drgby@ganaholdings.com
Effective date: November 2, 2025

This Privacy Policy explains how GANA Holdings Inc. (“GANA”, “we”, “us”, or “our”) collects, uses, discloses, and protects information in the mobile game Drone Delivery King (the “Service”) and on pages that link to this Policy. It is written to satisfy both Google Play Data Safety and Apple App Privacy disclosures.

1. Information We Collect

We collect only what is necessary to operate the game, synchronize progress, process purchases, show rewarded ads, and maintain stability.

Account & Identifiers

• Platform sign-in identifiers/tokens (Google Sign-In / Sign in with Apple), our internal user ID.
  
  

• (Optional) display name and country/region for UI or leaderboards.
  
  

Gameplay & Economy

• Progress snapshots (missions, unlocks, session stats), balances (gold/gems), XP/level, run history (success/fail, duration).
  
  

Purchases

• Purchase/validation data (transaction/receipt IDs, product, timestamps) from Google Play Billing and Apple In-App Purchases.
  
  

Ads & Analytics (with consent where required)

• Advertising identifiers (AAID on Android, IDFA on iOS), ad impressions/clicks/reward events.
  
  

• Installation/usage identifiers (e.g., Firebase Installation ID) and non-sensitive app events.
  
  

Diagnostics & Performance

• Crash logs, error stacks, device model/OS version, and performance metrics.
  
  

Not collected (as of the Effective date)

• Contacts, photos/videos, microphone recordings, precise geolocation, health/special-category data.
  
  

Network data

• IP addresses may be processed transiently by our infrastructure/CDN for security and service delivery.
  
  

2. How We Use Information (Purposes & Legal Bases)

• Perform the contract / operate the Service: authentication, cloud save/sync, gameplay features, entitlement restoration.
  
  

• Process payments: validate purchases, support refunds/restores, comply with accounting/audit duties.
  
  

• Improve and protect the Service (legitimate interests): analytics, crash diagnostics, fraud/abuse prevention, balancing/anti-cheat.
  
  

• Consent-based features: personalized ads/measurement (IDFA/AAID), push notifications where presented, certain analytics depending on region.
  
  

• Legal obligations: tax/financial recordkeeping and responding to lawful requests.
  
  

3. Data Retention

• Account & gameplay data: retained while your account is active and up to 24 months after last activity or account deletion request (for recovery/fraud prevention), then deleted or de-identified unless law requires longer retention.
  
  

• Purchase records/receipts: retained as required by law (typically 5–7 years).
  
  

• Ads/analytics/diagnostics: up to 24 months, then deleted or aggregated.
  
  

4. Sharing & Processors

We share information with service providers only as needed to run the Service:

• Authentication/Cloud: Google Firebase (Auth, Firestore/Storage, Remote Config, App Check), Google Cloud Platform; Apple “Sign in with Apple”.
  
  

• Payments: Google Play Billing; Apple In-App Purchases.
  
  

• Advertising (only): Google AdMob (rewarded/contextual ads; personalization only with consent).
  
  

• Analytics & Diagnostics: Firebase Analytics, Firebase Crashlytics.
  
  

• Security/Fraud: automated tools from platform vendors and cloud providers.
  
  

These providers act under our instructions and maintain their own privacy and security commitments. We do not sell personal information.

5. International Transfers

Data may be processed in countries outside your own (e.g., the United States or EU). Where required, we use safeguards such as Standard Contractual Clauses (SCCs) and strict access controls.

6. Your Choices & Rights

• Access, correction, deletion, restriction: request via drgby@ganaholdings.com.
  
  

• Account deletion (in-app): Settings → Account → Delete Account. This triggers deletion of your account-linked data after necessary verification. Purchase/financial records may be retained as required by law.
  
  

• Personalized ads / tracking:
  
  

  • Android: reset/limit Advertising ID and disable “Ads personalization”.
    
    

  • iOS: decline App Tracking Transparency (ATT) when prompted or disable tracking in iOS settings. If tracking is off, we show only contextual/non-personalized ads.
    
    

• EEA/UK (GDPR): data portability and the right to lodge a complaint with a supervisory authority.
  
  

• California (CCPA/CPRA): we do not sell personal information. Cross-context behavioral advertising (“sharing”) occurs only with consent; you can opt-out via the device settings above.
  
  

• Korea (PIPA) and other regions: analogous rights apply; contact us to exercise them.
  
  

We may ask you to verify your identity before fulfilling requests.

7. Children’s Privacy

The Service is not intended for children under 13 (or the minimum age of digital consent in your country). If we learn we collected such data, we will delete it promptly.

8. Security

We apply safeguards appropriate to the risk, including HTTPS in transit, encryption at rest where supported by our providers, role-based access and least-privilege, monitoring, and regular updates. No method is 100% secure, but we work to protect your data.

9. Cookies and Similar Technologies

Our website may use cookies for essential operations, analytics, and security. You can control cookies via your browser; some features may not work without them. The mobile app does not rely on browser cookies.

10. Third-Party Links

The Service may link to third-party sites (ads, support, payment). Their privacy practices are governed by their own policies.

11. Changes to This Policy

We will update this page when practices change. For material changes, we will provide a prominent notice in-app or on our website.

12. Contact

Questions or privacy requests: drgby@ganaholdings.com

Appendix A — Store Disclosure Mapping

Google Play Data Safety (summary)

• Collected data types:
  
  

  • Personal info / Identifiers: platform account IDs/tokens, internal user ID, (optional) display name/country.
    
    

  • Financial info: purchase history/receipts.
    
    

  • App activity: in-app interactions (e.g., rewarded-ad completions, mission progress metadata).
    
    

  • App info & performance: crash logs, diagnostics, performance.
    
    

  • Device or other IDs: AAID and Firebase installation IDs.
    
    

• Purposes: app functionality, account management, purchases, analytics, fraud prevention, advertising via Google AdMob (personalized only with consent).
  
  

• Data sharing: with processors listed in Section 4 for service delivery; no selling of data.
  
  

• Security: data encrypted in transit; users can request deletion (Section 6).
  
  

• Not collected: precise location, contacts, photos/videos, microphone, health/fitness.
  
  

Apple App Privacy (summary)

• Data Linked to You: Identifiers (internal ID, IDFA only with ATT consent), Purchases (IAP records), Usage Data (interactions/ads), Diagnostics (crash/performance).
  
  

• Tracking: If you consent, IDFA may be used by Google AdMob for ad personalization/measurement; if you decline, only contextual ads are shown.
  
  

• Not Collected: contacts, photos/videos, precise location, health/sensitive data.