Privacy policy

Effective October 12, 2026. Bubble Garden is operated by VELVIN TECHNOLOGIES PRIVATE LIMITED.

No sign-in

Bubble Garden has no accounts and never asks for your name, email address or password. Each installation creates a random anonymous player identifier and a random device key, stored encrypted on your phone using Android Keystore.

What we store

For that anonymous player we store your exact puzzle, ammunition, score, unlocked level and progression records, when the player was last active, and a support code shown in Settings. We use this to keep your progress safe and to restore it on another phone. Sound and vibration preferences and detailed puzzle diagnostics stay on your phone.

Gameplay analytics

To see where the game is too hard or confusing, the app uses Google Analytics for Firebase. It sends simple gameplay events: when the app opens, practice steps, when a level or mode starts and ends (won or not, shots used and how long it took), settings and reminder changes, and whether a feedback or rating prompt was shown, along with the level, mode, app version, phone model, Android version and approximate country. Events are tied to a random Firebase app instance ID, not to your game player, support code or advertising ID; the app does not collect the advertising ID and turns off ad personalization. We use them only to improve the game. Google keeps event-level data for up to 14 months. Clearing the app's storage or uninstalling resets the app instance ID.

Crash reports

If the app crashes or hits an unexpected error, Firebase Crashlytics sends a technical report: the error and where in the code it happened, the app version, phone model, Android version, the level and mode in play and the last few game events. Reports are tied to a random Crashlytics installation ID, not to your game player. We use them only to fix bugs. Crashlytics keeps reports for 90 days.

Feedback

If you choose Send feedback, we store the topic you pick, any note you write, your current and highest level, the app version, your phone model and Android version, linked to your anonymous player. A copy of the topic, note, levels, app version, phone model and Android version (without your player or support code) is posted to the team's private Discord channel so we see it quickly; that copy is not linked to your player and is not removed when you delete your progress. We use it only to improve the game. Please don't include personal details in your note. Ratings and reviews on Google Play are handled by Google under its own policies.

Google Play Games

If you are signed in to Google Play Games, the game uses Google's Play Games Recall service so your progress follows your Play Games profile. We send Google an encrypted token and an opaque identifier for your anonymous player; neither contains personal information. Google never shares your Play Games identity with us. When you are signed in, the game also sends Play Games your unlocked achievements and, if a leaderboard is turned on, your daily puzzle score, which Play Games shows on your Play Games profile. You can manage or remove these links in your Play Games settings. Google processes this data under the Google privacy policy.

Challenges and invites

When you tap Challenge a friend, the app makes a picture of your result and opens your phone's share sheet; you choose whether and where to send it. The link in it carries a random referral code for your anonymous player (not your support code), the level and your result. If a friend installs from your link, Google Play tells the app the code, and we record that your anonymous players are connected so both of you get a garden reward when they reach the milestone level. To credit each phone only once, the app sends a salted one-way hash of the phone's Android ID; it can't be turned back into the ID. When an invited player reaches the milestone, the app also asks Google Play Integrity to confirm it is Google Play's copy of the game on a genuine phone; we keep only whether that check passed. Analytics records that a share happened and which app it went to, never who it went to. All of this is deleted with your progress.

Notifications

If notifications are allowed, the app stores a Firebase Cloud Messaging token for your anonymous player so we can send occasional game news and reminders. It is deleted with your progress. Daily reminders you turn on are scheduled on your phone.

Services and security

Convex hosts the game backend and some garden artwork the app downloads. Google Firebase delivers notifications (Cloud Messaging), gameplay analytics (Google Analytics for Firebase) and crash reports (Crashlytics) under the Google privacy policy. Network requests also expose connection information such as IP addresses to service providers. Cloud communication uses HTTPS. We do not sell personal information. This version has no advertising, advertising ID or purchases.

Retention and deletion

Progress is kept until you delete it, or automatically deleted after 12 months without playing. Use Delete my progress in the app's Settings, or the web deletion page with the support code from Settings. Deletion removes the player, saved game, feedback, notification token and every device key, and removes the Play Games link when the app can reach Play Games. Service providers may temporarily retain backups or operational logs under their retention policies. Convex dashboard backups, if enabled, expire after 7 days for manual/daily backups and 14 days for weekly backups. Uninstalling the app or clearing its storage removes local game data.

Service policies

Convex privacy policy and Google privacy policy explain provider practices. Data may be processed outside your country.

Contact

dash@heywhoisdash.com