Privacy Policy for City Weave

1. Introduction

City Weave ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App"), including any related services, sales, marketing, or events (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Automatically Collected Information

When you use City Weave, we automatically collect certain information about your device and usage:

• Device Information: Device type, operating system, device identifiers (IDFA for iOS, Advertising ID for Android), device settings
• Usage Data: Game progress, levels completed, scores, gameplay events, features used, time spent in-app
• Technical Data: IP address, browser type, crash reports, performance metrics, error logs
• Location Data: Approximate location only (if you grant permission); we do not collect precise GPS location

2.2 Information You Provide

• Account Information: If you create an account, we collect your username, email address, and authentication credentials
• In-App Communications: Messages, support requests, feedback, or reports you send to us
• Payment Information: If you make purchases, payment is processed by third-party payment processors (Google Play or Apple App Store); we do not store full payment card details

2.3 Information from Third Parties

• Analytics Providers: Data from analytics services about your interactions with the App
• Ad Networks: Data shared by advertising partners for serving personalized ads
• Social Features: If you connect social media accounts, we collect profile information you authorize

3. How We Use Your Information

We use the information we collect for the following purposes:

1. Providing and Improving Services: Operating, maintaining, and improving the App and user experience
2. Analytics and Research: Understanding how users interact with the App to enhance features
3. Personalization: Customizing your gaming experience and content recommendations
4. Advertising: Serving relevant ads and measuring ad performance
5. Customer Support: Responding to your inquiries and resolving issues
6. Compliance: Meeting legal obligations and enforcing our Terms of Service
7. Fraud Prevention: Detecting and preventing fraudulent activity and abuse
8. Communication: Sending you updates, notifications, and promotional content (which you can opt out of)

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers & Data Processors

We share information with the following third-party service providers who process data on our behalf under Data Processing Agreements (DPAs):

• Analytics: Firebase Analytics, Mixpanel, or similar analytics platforms — for understanding user engagement and app performance
• Advertising Networks: Google Ads, Facebook Ads, Unity Ads, AppLovin, or other ad networks — for serving contextual and personalized ads (subject to user consent and opt-out rights)
• Cloud Infrastructure: Amazon AWS, Google Cloud, Microsoft Azure, or similar providers — for secure hosting and data storage
• Payment Processors: Google Play Billing and Apple App Store In-App Purchases — for processing in-app transactions (we do not store credit card details)
• Crash & Error Reporting: Crashlytics, Sentry, Firebase Crashlytics — for debugging app stability issues only

Important: All third-party processors are contractually bound to comply with applicable privacy laws (GDPR, CCPA, COPPA) and process data only for specified purposes.

4.2 Legal Requirements

We may disclose information if required by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to:

• Comply with legal obligations
• Enforce our Terms of Service
• Protect the safety, rights, or property of the Company, users, or the public
• Prevent or investigate possible wrongdoing

4.3 Business Transfers

If City Weave is involved in a merger, acquisition, bankruptcy, or asset sale, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.

4.4 No Sale of Personal Information

We do not sell, trade, or rent personal information to third parties. However, we may share anonymized, aggregated data for business purposes.

5. Data Retention

• Account Information: Retained for the duration of your account and 30 days after deletion
• Usage and Analytics Data: Retained for up to 24 months unless required by law to retain longer
• Crash Reports: Retained for 90 days
• Advertising Data: Retained in accordance with ad network policies (typically 30-90 days)

You can request deletion of your account and associated data at any time by contacting us (see Section 11).

6. Data Security & Transmission

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted to our servers uses HTTPS/TLS 1.2 or higher encryption
• Encryption at rest: Sensitive data stored on servers is encrypted using AES-256 or equivalent
• Secure authentication: Account authentication uses industry-standard protocols
• Regular security audits: We conduct security assessments and vulnerability testing
• Principle of least privilege: Limited access to personal data by authorized personnel only
• No insecure transmission: Personal data is never transmitted over unencrypted connections

Note on Security Limitations: While we employ industry-standard security measures, no system is 100% secure. We cannot guarantee absolute security against sophisticated attacks or unforeseeable vulnerabilities.

Breach Notification: In the unlikely event of a security breach affecting your personal data, we will notify you without unreasonable delay as required by applicable law.

7. Children's Privacy (COPPA & GDPR Compliance)

Important: City Weave is a casual mobile game. The following applies if users under 13 (COPPA/US) or under 16 (GDPR/EU) use the app:

• No intentional collection from minors: We do not knowingly collect personal information from children under 13 (or 16 in the EU) without verifiable parental consent, except as permitted by law
• No behavioral advertising: Children's data is never used for targeted, behavioral, or interest-based advertising
• No third-party marketing: We do not share children's data with third parties for advertising, marketing, or profiling
• Minimal data collection: We collect only device identifiers and gameplay data necessary to operate the game (no email, location, or age verification data)
• App Tracking Transparency (iOS): If the app is marked as "Frequent/Intense" tracking in app age categories, we do not request ATT permission from users under 13
• No permanent identifier persistence: Advertising IDs and device identifiers cannot be used to build a profile of children's behavior across apps

Parental Rights (COPPA Compliance): Parents or guardians may request deletion of children's data, opt-out of data collection, or review what information we hold. Contact us at privacy@macrovatech.com with proof of guardianship.

Age Verification: We reserve the right to request age verification or parental consent for features requiring personal data.

8. Your Rights and Choices

8.1 App Tracking Transparency & Advertising Choices

iOS (App Tracking Transparency - ATT): If prompted, you can grant or deny permission for the app to track your activity across other apps and websites.

• To disable tracking after granting it: Settings > Privacy > Tracking > Toggle off for "City Weave"
• If you opt out of ATT, we will not request tracking permission again unless you manually re-enable it
• If you deny ATT, the app will function normally; you may see contextual (non-personalized) ads

Android (Google Advertising ID): You can limit ad personalization or reset your Advertising ID.

• To limit personalized ads: Settings > Google > Manage your Google Account > Data & Privacy > Ads personalization > Turn off
• To reset your Advertising ID: Settings > Google > Manage your Google Account > Data & Privacy > Ad Settings > Reset your Advertising ID
• The app functions normally with or without personalized ads

8.2 Notifications

You can disable push notifications in your device settings or app settings at any time. This does not affect core game functionality.

8.3 Location Data

You can revoke location permissions in your device settings. The App will function without location data.

8.4 Data Access and Deletion

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Correct inaccurate or incomplete information
• Deletion: Request deletion of your data (right to be forgotten)
• Portability: Receive your data in a structured, portable format

To exercise these rights, contact us (see Section 11).

8.5 EU GDPR Rights (if applicable)

If you are located in the European Union, you have additional rights:

• Right to access, rectification, erasure, and restriction of processing
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority

8.6 CCPA Rights (California residents)

California residents have the right to:

• Know what personal information is collected
• Know whether personal information is sold or disclosed
• Access and delete personal information
• Opt-out of the "sale" or sharing of personal information

To submit a request, contact us (see Section 11).

9. Third-Party Links and Services

City Weave may contain links to third-party websites, apps, and services (e.g., social media, payment processors) that are not operated by us. This Privacy Policy applies only to information collected through our App. We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy in the App or via email if you have provided an email address. Your continued use of the App after such modifications constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

12. Additional Information by Region

12.1 European Union (GDPR)

Legal Basis for Processing:

• Consent: For non-essential analytics and advertising
• Legitimate Interest: For fraud prevention, security, and app improvement
• Legal Obligation: For compliance with law enforcement
• Contract: For account management and game functionality

Data Protection Officer: If you have questions about our GDPR compliance, you may contact our Data Protection Officer (contact details available upon request).

12.2 United States (CCPA/CPRA)

We comply with the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). California residents have the right to opt-out of the "sale" or "sharing" of personal information. City Weave does not knowingly sell personal information; however, sharing data with ad networks may constitute "sharing" under CCPA.

12.3 United Kingdom (UK GDPR)

Similar to EU GDPR, UK residents have equivalent rights under UK GDPR and the Data Protection Act 2018.

13. App Store Compliance Statements

13.1 Google Play Store Compliance

City Weave complies with Google Play's Privacy Policy Guidance and Data Safety requirements:

• Data Minimization: We collect only the minimum data necessary to operate the game
• Transparency: All data types, purposes, and third parties are disclosed in this policy and in the app's Data Safety label
• No Hidden Tracking: All tracking and analytics are declared; no hidden or undisclosed data collection
• Compliance with Policies: The app does not engage in misleading advertising, deceptive practices, or policy violations
• User Control: Users can opt out of personalized ads, disable notifications, and revoke permissions

13.2 Apple App Store Compliance

City Weave complies with Apple's App Store Review Guidelines and Privacy Guidelines:

• Privacy Manifest: The app includes a PrivacyInfo.xcprivacy manifest declaring all APIs and data usage
• Accurate Privacy Label: Data collected is accurately represented in the app's Privacy nutrition label (App Privacy)
• Tracking Declaration: App Tracking Transparency (ATT) requests comply with Apple's guidelines—no deceptive prompts or forced consent
• No Illegal Content: The app does not contain illegal content, malware, or violation of third-party rights
• Kids Category Compliance: If marked as Kids category, the app strictly adheres to COPPA and does not use identifiers for tracking
• Sign-In Requirements: Sign-in is optional and not required to use core game features

13.3 International Compliance

• GDPR (EU): Processing is based on legitimate interest (analytics, security) or consent (advertising). Users have rights to access, deletion, and objection.
• CCPA (California): California residents can opt-out of "sale" or "sharing" of personal information. We do not knowingly sell data to third parties; however, sharing with ad networks may constitute "sharing" under CCPA.
• COPPA (USA): For users under 13, we do not use persistent identifiers for tracking or behavioral advertising.
• LGPD (Brazil): We comply with the Brazilian General Data Protection Law for Brazilian users.

14. Acknowledgment

By downloading, installing, and using City Weave, you acknowledge that you have read and understood this Privacy Policy and agree to be bound by its terms. Your use of the app constitutes your acceptance of this policy.

Appendix A: Data Processing Summary (App Store Compliant)

Note: This table is compatible with Google Play Data Safety labels and Apple App Privacy labels.

Data Minimization Principle: We collect only data necessary to operate the game and provide requested services. All data collection is user-resettable (except email) and complies with privacy-by-design principles.