Privacy policy

Zinance Inc. (“Company,” “we,” “us,” or “our”), a corporation organized under the laws of Ontario, Canada, is the controller of the personal information described here. This Privacy Policy explains what we collect, why, and what you can do about it.

It covers the Zinance mobile applications that link to this page from their settings screen, together with the zinance.app website (collectively, the “Services”). Some of our apps are published with their own privacy policy. Where an app links to its own policy, that policy governs that app and this one does not apply to it. Our Terms of Service govern your use of the Services.

We are committed to data minimization and collect only what we need to run the Services.

Online multiplayer

When you play an online game, your device connects to a game server we operate through our hosting provider. That connection carries the game code you joined with, any display name you choose, and the moves you make during the game, so that other players in your game can see them. It also necessarily discloses your device’s IP address to that server, which our hosting provider records in standard connection logs. We do not ask you for your real name, and you can enter whatever display name you like.

Camera

Some apps ask for camera access for a single purpose: reading a QR code so you can join a game quickly. The camera is only active on that scanning screen, the app reads the code from the live preview, and no photo or video is recorded, stored, or transmitted. You can decline camera access and join by typing the game code instead.

Purchases

Purchases are processed by Apple. Apple tells our app whether a subscription is active. We never receive or store your name, email, payment card, or billing address.

On your device only

Game progress, settings, and preferences are stored locally on your device and are not sent to us. Deleting the app removes them.

App Store analytics

Apple provides all developers with aggregated, anonymized usage statistics and crash reports for their apps, if you have enabled sharing in your device settings. We see only aggregate figures — we cannot identify you from them. You can turn this off under Settings › Privacy & Security › Analytics & Improvements.

This website

zinance.app sets no cookies, runs no analytics, and loads nothing from third-party servers — fonts and every other asset are served from our own domain. Our hosting provider, Cloudflare, records standard request logs including IP addresses to serve and protect the site.

What we don’t collect

We do not require accounts. We do not ask for your name, email address, phone number, or date of birth. We do not collect your contacts, photo library, location, or health data. We do not use advertising identifiers, we do not track you across other companies’ apps or websites, and we do not show ads. We do not use cookies or similar tracking technologies inside our mobile applications.

We keep our list of third parties deliberately short. These are all of them:

• Apple Inc. — app distribution, payments, and aggregated App Store analytics. Apple Privacy Policy
• Railway — hosting for the game servers that power online multiplayer. Railway Privacy Policy
• Cloudflare — hosting and protection for the zinance.app website. Cloudflare Privacy Policy

We do not sell or share personal information, and we have no advertising partners.

We use information for these purposes and no others. Where the EU or UK GDPR applies, the lawful basis for each is noted.

• Running the games you asked to play, including matching you to other players and relaying moves — performance of our contract with you.
• Keeping the Services working and secure, including diagnosing faults and preventing abuse and cheating — our legitimate interest in providing a functioning, fair service.
• Understanding aggregate usage so we can improve the games — our legitimate interest in improving our products, using data that does not identify you.
• Meeting legal obligations and enforcing our Terms of Service — legal obligation, or our legitimate interest in establishing and defending legal claims.

We do not use your information for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.

Our Services are designed for a general audience and are not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13.

Consistent with the Children’s Online Privacy Protection Act (“COPPA”) and similar laws:

• We do not require anyone to provide personal information in order to play;
• We do not show advertising and we do not conduct behavioral advertising or profiling;
• If we learn that we have inadvertently collected personal information from a child under 13, we delete it promptly.

If you are a parent or guardian and believe your child has provided us with personal information, contact us at the address in Section 11 (Contact Us) and we will delete it.

Depending on where you live, you have rights over your personal information. We honour these requests wherever you live, not only where the law requires it.

EEA, UK, Switzerland (GDPR)

• Right of access to your personal data;
• Right to rectification of inaccurate data;
• Right to erasure of your personal data;
• Right to restrict or object to processing, including processing based on legitimate interests;
• Right to data portability in a machine-readable format;
• Right to withdraw consent at any time, where we rely on consent;
• Right to lodge a complaint with your local data protection supervisory authority. You can do this without contacting us first, though we would like the chance to put things right.

Canada (PIPEDA and Quebec Law 25)

• Right to access the personal information we hold about you;
• Right to challenge its accuracy and completeness, and have it corrected;
• Right to withdraw consent to collection, use, or disclosure;
• Right to complain to the Office of the Privacy Commissioner of Canada, or to the Commission d’accès à l’information du Québec if you live in Quebec.

United States

• Right to know what personal information we collect, use, and disclose;
• Right to delete your personal information;
• Right to correct inaccurate personal information;
• Right to non-discrimination for exercising any of these rights;
• Right to opt out of sale or sharing. There is nothing to opt out of: we do not sell personal information and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA and comparable state laws.
• Right to appeal. If we refuse a request, you may appeal by replying to our decision. We will respond within 45 days with our reasoning, and will tell you how to contact your state Attorney General if you disagree.

How to make a request

Email us at admin@zinance.app with the app involved and what you would like us to do. We will acknowledge your request and respond within 30 days, or 45 days for requests under US state law, and we will tell you if we need longer. Because we do not operate accounts, we may need details that let us locate your data — such as the game code and display name you used — and we may not be able to identify your data without them. We never charge for a request unless it is manifestly unfounded or excessive.

We keep personal information only as long as we need it:

• Multiplayer game data (game code, display name, moves) exists for the duration of the session and is deleted shortly after the game ends.
• Server connection logs held by our hosting providers are retained for a short period for security and troubleshooting, then deleted in the ordinary course.
• Data stored on your device stays until you delete it or remove the app.
• Correspondence with us is kept only as long as needed to deal with your query and any follow-up.

Where we must keep something longer to meet a legal, accounting, or reporting obligation, we keep only what that obligation requires.

We implement appropriate technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

We operate from Canada, and our hosting providers operate servers in Canada, the United States, and elsewhere. If you use the Services from outside Canada, your information may be processed in those countries.

For transfers from the European Economic Area, the European Commission has decided that Canada provides an adequate level of protection for personal information handled by commercial organizations, so no additional transfer mechanism is required. Where our providers process data outside Canada or the EEA, they do so under the European Commission’s Standard Contractual Clauses or another approved safeguard.

We may update this Privacy Policy. If a change is material, we will update the version and effective date above and give you at least thirty (30) days’ notice before it takes effect, by notice in the app or by email where we have your address. Changes apply only going forward. If you do not agree to a change, you can stop using the Services and delete the app.

Questions, concerns, or requests about this policy or our practices? Reach the studio directly:

Zinance Inc., a corporation organized under the laws of Ontario, Canada
admin@zinance.app

Zinance Inc. is the controller of the personal information described in this policy. Email is the fastest way to reach us about any privacy matter. If you need a postal address in order to exercise a right or serve a notice, email us and we will provide it. Our registered office address is also on the public record with the Government of Ontario.

We have not appointed a Data Protection Officer, as we are not required to. Privacy requests are handled directly by the studio.