Privacy Policy — Sweet Box: Tap & Serve

Effective Date: November 4, 2026 (last updated) · Developer: Tapmochi Games · Contact: support@tapmochi.com

This policy explains what information the mobile game "Sweet Box: Tap & Serve" (the "App") collects, why, who processes it and the choices you have. The App is intended for users aged 13 and over and is not directed at children.

Summary

• No account, no sign-in. The App never asks for your name, email address, phone number, contacts, photos or precise location.
• Your game progress (levels, coins, boosters, bakery decorations and an unfinished level) is stored on your device. We do not keep a copy on our servers.
• We use Google services to understand how the game is played, to measure which of our own ad campaigns bring new players, to fix crashes, to adjust game settings remotely .
• We do not give or sell your data to data brokers. The App shows ads by Google AdMob (on Android and iOS) and lets AdMob use your advertising ID to show personalised ads. Under some US state privacy laws this can count as "sharing" (or "selling") personal information. See "United States" below for how to opt out.

Information collected automatically

1. Gameplay analytics and campaign measurement — Google Firebase Analytics

• Gameplay events:
  • levels started, resumed and finished, with the result, number of moves, blocked taps, time spent, stars and hearts left;
  • boosters used;
  • customers served;
  • ad offers shown and watched;
  • sessions and their length.
• Device and app information: app version, device model, operating system version and language.
• Country: derived from your IP address. Analytics does not store the IP address itself.
• Identifiers: an app instance identifier generated for this installation, and your device's advertising identifier: the Android advertising ID, or on iOS the IDFA only if you allow tracking in the iOS prompt.
• Install source: install-referrer information, meaning which store page or ad campaign led to the install.
• Campaign measurement: our Firebase project is linked to Google Ads. The install and a few key events (for example reaching level 10) are used to measure our own ad campaigns.

2. Crash reports — Google Firebase Crashlytics

If the App crashes or hits a serious error, Crashlytics collects:

• the crash stack trace;
• device model, operating system version and app version;
• the app state and device information at the time of the crash;
• a Crashlytics installation identifier;
• a short log of the most recent analytics events. This helps us reproduce the problem.

3. Remote game settings — Google Firebase Remote Config

• The App downloads game settings from Firebase, for example difficulty and rewards.
• To do this, Remote Config uses a Firebase installation identifier and basic device and app information (country, language, time zone, operating system and app version).
• Remote Config is not used to build a profile of you.

4. Advertising — Google AdMob (Android and iOS)

• The App shows ads served by Google AdMob:
  • full-screen ads between levels, from level 8 onward and never in your first session;
  • optional rewarded ads that you choose to watch for an in-game reward.
• To show, measure and limit ads and to prevent fraud, AdMob collects:
  • your device's advertising ID and an app set identifier;
  • your IP address, which Google may use to estimate your general location;
  • device and app information and diagnostic information;
  • your interactions with ads (views, clicks, ad revenue events).
• Ads are limited to content rated "PG" (parental guidance) or lower.
• On Android, the Google Mobile Ads SDK may also use the Android Privacy Sandbox APIs (Topics and Attribution Reporting, enabled by the ACCESS_ADSERVICES permissions) to make ads more relevant and to measure them; you can turn these off in Android Settings → Privacy → Ads privacy.

5. In-app review — Google Play (Android) and Apple (iOS)

• From time to time the App may show the store's own rating prompt: Google Play's in-app review on Android, Apple's rating prompt (SKStoreReviewController) on iOS.
• The prompt is run by Google Play or Apple. We do not receive your account details, and we cannot tell whether or how you rated the App.

6. Local notifications

• The App can schedule reminders on your device. They are created and stored on your device only. No notification data is sent to us or to any server.
• On Android 13 and later the App asks for permission first.
• You can turn notifications off at any time in Android Settings → Apps → Sweet Box → Notifications, or on iOS in Settings → Notifications → Sweet Box.

Consent and tracking

• App Tracking Transparency: after the first levels (never on first launch), iOS asks whether the App may track you. Only if you tap "Allow" can Google AdMob use your advertising identifier (IDFA) for personalised ads and measurement. If you tap "Ask App Not to Track", ads are still shown without the IDFA. Change this any time in iOS Settings → Privacy & Security → Tracking.

EEA, UK and Switzerland:

In the European Economic Area, the United Kingdom and Switzerland we use Google's User Messaging Platform to ask for your choices when you first open the App. This is a consent management platform certified under the IAB Europe Transparency & Consent Framework.

• Until you answer, we treat your choice as "no consent":
  • no personalised ads;
  • the consent signals we pass to Google (analytics storage, ad storage, ad user data, ad personalisation) are set to "denied".
• After you answer, the App reads the choices you made in the consent message and uses data only for the purposes you agreed to.
  • If you decline personalised ads, any ads shown are non-personalised or limited ads.
  • These ads still use device and ad-interaction data for frequency capping, measurement and fraud prevention, as Google's policies allow.
• You can change your choices at any time in the game: Settings → Privacy options. This button appears only in regions where a consent choice is required.

How we use information

• To run the game and deliver remote game settings.
• To find and fix crashes and performance problems.
• To understand which levels and features players use, and to improve the game, its difficulty and its balance.
• To measure which of our own ad campaigns bring new players.
• To show ads, measure their performance and prevent ad fraud.

Legal bases where the GDPR, UK GDPR or Brazil's LGPD applies:

• In the EEA, UK and Switzerland:
  • analytics, campaign measurement and personalised advertising rely on the choices you make in the consent message;
  • crash reports and remote game settings rely on our legitimate interest in keeping the game working.
• Elsewhere, including Brazil, we rely on our legitimate interests in running, improving and promoting the game.

Who processes the information

Google LLC and its affiliates process this data:

• as our service provider for Firebase and Google Ads measurement;
• as the provider of AdMob and Google Play.

This happens under Google's terms and privacy policy:

• How Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites
• Google Privacy Policy: https://policies.google.com/privacy
• Firebase privacy and security: https://firebase.google.com/support/privacy

Google may process data on servers outside your country, including in the United States. Safeguards include the European Commission's Standard Contractual Clauses.

We do not share your information with any other third party, except where required by law.

Data retention

• Game progress: stays on your device until you uninstall the App or clear its data. If Android backup is turned on for your Google account, Android may also keep a copy in your device backup, managed by Google under your Google account settings. On iOS, an iCloud or computer (Finder/iTunes) device backup may also include it, managed under your Apple account.
• Gameplay analytics (event-level data): 2 months, then deleted automatically. Aggregated reports that do not identify an installation may be kept longer.
• Crash reports: up to 90 days.
• Advertising data: kept by Google under the Google Privacy Policy.

Your choices and rights

• Advertising identifier and ads personalisation:
  • On Android, delete or reset your advertising ID, or opt out of ads personalisation, in Android Settings → Google → Ads (or Settings → Privacy → Ads, depending on your device).
  • On iOS, turn off "Allow Apps to Request to Track" or deny tracking for Sweet Box in Settings → Privacy & Security → Tracking. When tracking is off, iOS gives the App no advertising identifier (IDFA); recent iOS versions have no separate "reset IDFA" switch.
  • This also stops the advertising ID from being used for analytics and campaign measurement.
  • Where required, you can also do this in the game under Settings → Privacy options.
• Notifications: turn them off at any time in Android Settings, or in iOS Settings → Notifications → Sweet Box.
• Delete game data: uninstall the App (on iOS: touch and hold the icon → Remove App → Delete App), or on Android clear its storage in Android Settings. This deletes your game progress on the device. A copy in your Android backup can be removed in your Google account's backup settings.
• Data requests (access, deletion, objection):
  • Email support@tapmochi.com with the subject "Sweet Box data request".
  • The App has no account. The data we hold is linked only to random installation identifiers, not to your name or email.
  • We will explain what we can find and delete for your request.
  • Depending on where you live (for example the EEA, UK, Brazil or California), you may have additional rights under local law, including the right to complain to your data protection authority.
• Brazil (LGPD): support@tapmochi.com is our channel of communication for data subjects and the ANPD. It is handled by the person responsible for personal data at Tapmochi Games (the "encarregado").
• United States:
  • When Google AdMob uses your advertising ID and ad-interaction data to show personalised ads, this may count as "sharing" personal information for cross-context behavioural (targeted) advertising, or as a "sale", under the privacy laws of some states (for example California).
  • To opt out, delete your advertising ID or on Android delete your advertising ID or turn on "Opt out of Ads Personalization" in Android Settings → Google → Ads; on iOS deny tracking in Settings → Privacy & Security → Tracking. After that, ads in the App are no longer personalised with your advertising ID.
  • You can also email support@tapmochi.com to opt out, or to exercise any other right you have under your state's privacy law. We will answer within the time that law requires.

Children

• The App is not designed for or directed at children under 13, and we do not knowingly collect personal information from them.
• If you believe a child under 13 has used the App and provided data, contact support@tapmochi.com and we will delete what we can identify.

Security

• Data sent by the Google services above is encrypted in transit (HTTPS/TLS).
• Your game save is stored in the App's private storage on your device.

Changes

• We may update this policy when the App changes, for example when new features or services are added.
• The "Effective date" above shows the current version.
• Significant changes will also be noted in the App's store listing release notes.

Contact

Tapmochi Games — support@tapmochi.com · https://tapmochi.com