RogueWave Labs ("we," "our," or "us") operates the ReflexLab mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
By using ReflexLab, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
ReflexLab is designed with privacy in mind. All gameplay data is stored locally on your device by default. Cloud features are entirely optional.
1.1 Information Provided by You
If you choose to activate your Cloud Identity, we collect:
- Display Name: A custom name you choose to represent yourself on global leaderboards.
- Game Results: Your reaction times, streaks, and achievements are stored in Firebase Firestore to provide rankings and cross-device sync.
1.2 Information Collected Automatically
| Data Type | Source | Purpose |
|---|---|---|
| Anonymous User ID (UID) | Firebase Authentication | Identity management, Data syncing |
| Device identifiers (Advertising ID) | AdMob, Firebase Analytics | Advertising, Analytics |
| FCM Token | Firebase Cloud Messaging | Push notifications |
| Approximate location (IP-based) | AdMob, Firebase Analytics | Advertising, Analytics |
| App interactions and usage data | Firebase Analytics | Analytics, App improvement |
| Crash logs and diagnostics | Firebase Crashlytics | App stability, Bug fixes |
1.3 Information Stored Locally
Basic game settings, session history, and streak data are stored locally on your device. This data remains on your device until you choose to sync it with a Cloud Identity or delete the App.
2. Cloud Identity & Data Persistence
When you activate your Cloud Identity, a unique, anonymous identifier is generated for your device. This allows you to:
- Participate in Global Leaderboards and Daily Challenges.
- Secure your personal bests and records in the cloud.
- Protect your daily streaks from local data loss.
You can manage your identity settings, including changing your display name (subject to a 30-day cooldown), directly within the App settings.
3. Data Deletion & 'Scrub' Policy
We believe you should have total control over your data. You can exercise your 'Right to be Forgotten' at any time. For detailed step-by-step instructions, see our Data Deletion Guide.
Delete Data Action: Within the App's Profile settings, you can select 'DELETE DATA'. This action will instantly and permanently scrub your Cloud Identity, release your unique display name, and delete all associated game records from our servers.
Please note that once data is deleted via this method, it cannot be recovered.
4. Third-Party Services
ReflexLab uses the following third-party services that may collect information:
Google AdMob — Displays advertisements in the App. AdMob may collect device identifiers, IP address, and interaction data to serve personalized or non-personalized ads based on your consent.
Firebase Services — We use Firebase Analytics for usage tracking, Firebase Crashlytics for stability monitoring, Firebase Remote Config for app tuning, and Firebase Cloud Messaging for notifications. These services process anonymous identifiers and device telemetry.
Google Fonts API — The App dynamically loads certain fonts (such as those used in Stroop Mode) from Google's servers. Google may log your IP address and device information as part of this request.
5. How We Use Your Information
We use the collected information for the following purposes:
- To provide competitive features (Leaderboards, Daily Challenges)
- To display advertisements and support the free operation of the App
- To analyze app usage and improve user experience
- To identify and fix crashes, bugs, and technical issues
- To understand aggregate user behavior and preferences
6. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and United Kingdom, we process your data based on:
- Consent — For personalized advertising and analytics. You can manage your consent through the privacy settings within the App.
- Legitimate interests — For non-personalized ads (frequency capping, fraud prevention), essential crash reporting, and maintaining the integrity of Global Leaderboards.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have specific rights regarding your personal information:
- Right to Know: You can request information about the categories of personal information we have collected and the purposes for which we use it.
- Right to Delete: You can request that we delete personal information collected from you (easily accessible via the 'Delete Data' button in the App).
- Right to Opt-Out: You have the right to opt-out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.
We do not "sell" your personal information in the traditional sense. However, like many apps, we use third-party services (AdMob) that may process device identifiers for advertising purposes, which may be considered a "sale" or "sharing" under California law. You can exercise your right to opt-out via the App's privacy settings.
8. Data Retention
| Service | Retention Period |
|---|---|
| Cloud Identity Data | Until account deletion or 24 months of inactivity |
| Firebase Analytics | 14 months |
| Firebase Crashlytics | 90 days |
| Google AdMob | Per Google's data retention policy |
9. Data Sharing and Disclosure
We do not sell your personal information. Data may be shared with:
- Service providers — Google (AdMob, Firebase) as data processors to provide advertising and analytics services
- Global rankings — Your chosen display name and scores are visible to other players on the Global Leaderboard.
- Legal requirements — When required by law or to protect our rights
10. International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence, including the United States, where Google's servers are located. These transfers are protected by Standard Contractual Clauses and other appropriate safeguards.
11. Your Rights
Depending on your location, you may have the following rights:
- Access — Request information about data we process about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your data (available via 'Delete Data' in App)
- Restriction — Request limitation of processing
- Portability — Request a copy of your data in a portable format
- Objection — Object to processing based on legitimate interests
- Withdraw consent — Withdraw consent at any time through the App's privacy settings
How to Exercise Your Rights
- In-App: Access "Privacy Settings" in the App settings to manage consent and data deletion
- Advertising ID: Reset or disable your Android Advertising ID in your device settings (Settings → Google → Ads)
- Contact us: Email us at the address below for data access or other requests
- Uninstall: Uninstalling the App will stop all future data collection (but does not automatically delete your chosen display name from old leaderboards unless you use 'Delete Data' first)
12. Children's Privacy
ReflexLab is a general audience application and is safe for all ages. We do not knowingly collect personal information from children under the age of 13. While the app is rated 3+, we recommend that users under 13 use the Service under the supervision of a parent or guardian. If we discover that a child under 13 has provided us with personal information (beyond anonymous identifiers required for core app functions), we will take immediate steps to delete such data.
13. Data Security
All data transmitted between the App and third-party services is encrypted in transit using TLS (Transport Layer Security). While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.
15. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
RogueWave Labs
India
Email: contact@roguewavelabs.dev