Umro Ayyar — Privacy Policy

Developer: Muhammad Kashif · Package: com.zayanayyar
Updated: 3 November 2026
Contact: kashifcs509monetization@gmail.com

What the game stores

The game does not require a player account. Progress, settings, inventory, currency and daily rewards are stored in app storage. On Android, a second copy of gameplay progress is kept in private native app preferences to recover from WebView cache or storage loss. Purchase-delivery records remain in private app storage. Android cloud backup is disabled. Clearing app data or uninstalling removes this local information and can permanently remove consumed virtual items.

Crash diagnostics

The game keeps up to 20 recent diagnostic reports locally under zayan_crash_reports_v1. Reports can include an error message, stack trace, full page URL, browser/device user agent, room, time, and recent gameplay breadcrumbs. Do not put personal information in game URLs. In a supported native app, reports are also forwarded to the app bridge for diagnostics; handling beyond that bridge depends on the installed build. Browser code does not itself send these reports to a remote crash service. Clearing game site/app storage deletes the local reports as well as local progress.

Age and privacy settings

The game is intended for teens and adults, not marketed to children under 13. The optional date-of-birth screen calculates an age band on the device. Only the band is saved; the date is discarded. Under-13 and unknown-age users receive no native ads or purchases. Teens receive non-personalized ad requests with under-age-of-consent treatment. Paid random rewards and return-to-app ads are restricted to adults in this release. These settings are product safeguards, not a claim that all countries define childhood identically.

Advertising and third-party data

Where enabled, Google AdMob and its consent service process data for advertising, measurement, security and fraud prevention. This may include IP address and approximate location inferred from it, device or advertising identifiers where permitted, ad interactions and diagnostic information. Non-personalized advertising does not mean no data processing. Native ad requests are blocked unless the consent service permits them.

You can access Privacy & Terms → Ad privacy choices in the game where applicable, and your device's advertising/privacy settings. Google determines its own retention periods under its policies. See Google's Privacy Policy and Google's partner-services information.

Purchases

Google Play handles checkout, localized prices, payment details and purchase records. The developer does not receive your card details. For permanent Bazaar packs, the app sends the signed receipt, product ID and purchase token over HTTPS to our Supabase-hosted verification service in Mumbai, India. The service checks the receipt with Google Play and acknowledges completed purchases. It does not store receipts in a developer purchase database or intentionally log their contents. Supabase may process IP addresses and operational request metadata under its service policies. See Supabase's Privacy Policy.

Verified product ownership is cached in private app storage for up to seven days offline and rechecked when connected. Permanent packs can be restored using the purchasing Google Play account after reinstall. Refunded or revoked purchases are removed after verification. Earned currency, consumable supplies and gameplay saves are local and are not restored by Google Play. Prices are based on your Google Play region, not GPS or an assessment of your individual income. Google retains transaction records under its policies.

Permissions and connections

The game does not request camera, microphone, contacts, precise location or shared-storage access. Internet/network access supports ads and purchases; vibration supports controls. Gameplay assets and model decoders are bundled locally. Choosing external community links opens another service whose own privacy terms apply.

Support, retention and rights

If you email support, the developer receives your email address and anything you include. Do not send passwords, payment-card details or unnecessary personal data. Support correspondence is kept only as needed to resolve requests, prevent abuse and satisfy applicable legal obligations; deletion requests can be sent to the contact above. Local gameplay data remains until you clear it. There is no developer-hosted player-account database or player-account deletion process.

Depending on your location, you may have rights to access, correct, erase or restrict personal information, object to processing, withdraw consent, obtain portability, or complain to a data-protection authority. Contact the developer for information held through support; contact Google for information Google controls. Clearing app data or resetting an advertising ID does not necessarily delete Google's records or replace these rights. Services may process information outside your country under their applicable safeguards.

Changes

Material changes will be reflected in this policy and, where required, presented in the app. For child-privacy concerns or other privacy questions, contact Muhammad Kashif at the address above.