HAYO
Privacy notice · from 1.0.1
How account, Gem, optional-ad and purchase features handle personal information.
This notice applies from version 1.0.1 with accounts, Gems, optional rewarded ads and in-app purchases. Version 1.0.0 without these features remains covered by the earlier notice linked below. Prepared: 14 October 2026.
Device records and online features
Your lives and archive are saved on your device; your full play history is not uploaded. Random lives are available without ads or purchases. This version attempts online authentication at startup to prepare your gem account. Countries, health and wealth in the game describe fictional characters.
Accounts and security
Firebase processes guest account identifiers and connection information. When you link an account, your email and password are used for Firebase Authentication. App and device verification information is sent to Google or Apple verification services to prevent abuse. Passwords and authentication tokens are not saved in game records or our own logs.
Ads and choices
When you first use ads, choose under 18, 18 or older, or prefer not to say. We do not ask for your date of birth. Your age category is saved only on your device and is not sent to our game server or your RevenueCat profile. For minors and those who do not answer, we send protective settings to Google’s ads and consent SDKs. Ad content is limited to a G rating, and we do not request personalized ads. The ad SDK may process IP addresses, device and app identifiers, viewing and interaction data, and diagnostics. Google screens explain required consent and changes; you can review ad privacy choices in Settings. This choice does not restrict the game or gem purchases to adults, and you can play for free even if you decline ads.
Gems and payments
Your gem balance, ad reward verification and purchase history are linked to RevenueCat using the same account identifier. Apple or Google processes payments; the app does not receive card numbers. Buying gems requires linking an email account. Losing a guest account may make its balance difficult to recover. Gems from different accounts are not automatically merged.
Country selection and save confirmation
When you use gems to choose a country, the server stores the selected in-game country, transaction identifier, generation information and processing time. A verification hash of the first save is sent to recover from duplicate charges or failed saves; the save contents are not sent. Restoring a gem account does not transfer your full life history to another device.
Deleting accounts and records
You can also delete a guest account under Account & restore in Settings. Accounts linked to an email require signing in again to confirm. Once deletion completes, the server account, gem balance and country-selection transaction records are deleted; the balance cannot be recovered. Deletion requests are processed in order. Life records on your device, exported files and operating-system backups must be deleted separately. Uninstalling the app alone does not delete the server account or refund purchases.
Transfers and retention
Account, advertising and payment providers may process information abroad. Account data is retained until deletion is requested; providers may retain backups and security records under their own retention policies. During update checks and website use, Firebase Hosting processes IP addresses and retains them for a few months. Support requests and reply addresses are used to answer you. See the web privacy policy for processing details and contact information.
Providers and processing locations
We use Google Firebase/Google Cloud for authentication, app verification, transaction storage, servers and web delivery; Google AdMob/UMP for advertising and consent; and RevenueCat for Gems, reward verification and store-purchase validation. Apple or Google Play handles payments, orders and refunds. Firestore and functions run in Seoul, but Firebase Authentication operates in the United States and other providers may also process information abroad.
Purchase and technical information; retention
RevenueCat may process app user identifiers, device/OS/app/locale information, last-used time, products, transactions, prices, currencies, status and store receipts or purchase tokens. Account and country-selection records are retained until account deletion. Firebase documents authentication IP-log retention for weeks, Hosting IP retention for months, and removal of authentication information from live/backup systems within 180 days after deletion. Advertising and store providers apply their own retention and legal obligations.
Account deletion and refunds are separate
Account deletion removes the HAYO server account, Gems and country-selection transactions. It does not erase Apple/Google order records or automatically issue a refund, and it does not waive statutory refund rights. Manage local game records, backups and shared files separately. Gem access may be restricted while deletion is pending.
Your rights and contact
Contact contact@hayo.dev to request access, correction, deletion, restriction or other rights available under applicable law. We may request the minimum account information needed to handle the request safely. Do not send passwords, authentication tokens or card numbers. If practices change, we will update the applicable version and notice and communicate changes where required.
For in-app deletion and requests when you cannot access the app, see Delete your account.