Privacy Policy

What data the game uses, and your choices.

Last updated: November 4, 2026

Naimic Studios ("we") makes MoneyFlow. This policy explains what data the Game uses, why, and the choices you have. We are the data controller. Contact: support@naimicstudio.com, E-120, Block F, North Nazimabad, Karachi, Pakistan.

1. The short version

We do not ask for your name, email, phone number, contacts, photos or precise location, and there is no login screen. On first launch we ask for a birthday and keep only whether you are under 13 or 13+, never the date. Your saved games and settings stay on your device. When you play online, an anonymous player account is created automatically so matches, reports and weekly leaderboards work (section 2b). Ads, online play and analytics are run by our partners Unity and Google (section 3), and you control personalised ads and analytics in the Privacy menu. Players under 13 get Child mode, which sends no personal data for advertising or analytics.

2. Data stored only on your device

Data Why
Age group (under 13 or 13+) from the birthday check — the date itself is never stored Turn on Child mode and the right privacy settings
Player names and colours you type in Show them on the board
Saved games, Ranks (fastest win, richest, fastest escape) Resume games and show records
Settings (sound, language, tips, quick chat on/off) Remember your choices
Parental controls and PIN (stored scrambled) Protect settings and purchases
Your privacy choices Respect them every launch

We cannot see this data. In Pass & Play and Vs Bots, quick chat stays on the device.

2b. Online play

When you play online, the Game uses Unity Gaming Services to run matches. We collect and process:

Data Why How long
Anonymous player ID (created automatically; no email, password or real name) Sign-in, matching, reports, leaderboards Until you use Delete my data
Player name (13+: chosen and word-filtered; under 13: generated) Shown to the players you play with and on weekly leaderboards Rooms: deleted shortly after a match starts. Leaderboards: until the weekly reset, or until you use Delete my data
Match moves and preset chat phrases or emotes Play the match; passed to other players through Unity's servers Not stored after the match
Weekly results (wins, fastest escape, richest) Online ranks Reset weekly
Reports: your player ID, the reported player's ID and name, the reason, match ID, app version and time Keep online play safe Up to 12 months
Restriction list: player ID and name of players we act against Force a new name or block online play Until the restriction is lifted
IP address and connection data Connect you to other players (Unity Relay) Processed by Unity; not stored by us

We do not collect real names, email, phone numbers, location, contacts or photos, and players cannot type messages to each other. We do not sell this data or use it for advertising or tracking. Online data is processed by Unity Technologies on our behalf and may be stored on servers outside Pakistan.

3. Data collected by our partners

Partner What it collects Why
Unity Ads and Unity LevelPlay (Unity Technologies) Advertising ID (Android AAID / Apple IDFA if you allow tracking), device model, OS, language, IP address and the approximate country it reveals, ad views and clicks Show ads, measure them, prevent fraud; personalise ads only if you agree
Google AdMob (Google LLC) Same kinds of data as above Same as above
Unity Analytics (Unity Gaming Services) A random install ID, device and OS info, approximate country, game events (e.g. game started, tutorial finished, game length) and crash info Understand how the Game is played and fix problems; only if you agree where consent is required
Google Play / Apple App Store Purchase details for No Ads Process and restore the purchase; we only get a receipt that says it was bought

Partner policies: Unity privacy policy · Google privacy policy · How Google uses data from partner apps.

Child mode (under 13): ad requests are tagged as child-directed in Unity LevelPlay, Unity Ads and Google AdMob, so only non-personalised, family-safe ads are shown and the advertising ID is not used for profiling or tracking. Unity Analytics is switched off. The Apple tracking (ATT) prompt is never shown. These partners may still receive technical data such as IP address and device type, which is needed to deliver an ad, as COPPA allows for "support for internal operations".

4. Legal bases (EEA / UK)

Consent for personalised ads and analytics. Legitimate interests for non-personalised ads, fraud prevention and security. Contract for processing your purchase.

5. Your choices

6. Delete my data

Settings › Delete my data erases everything on your device (saves, names, settings, PIN), deletes your online player account, player name, saved online data and leaderboard entries, sends a request to Unity to delete your analytics data, and resets your consent choices. You can also email us with the subject "Delete my MoneyFlow data" (include your player name if you can) and we will delete your online data within 30 days. Reports you made about other players may be kept without your player ID so we can still act on them. Uninstalling the Game deletes on-device data.

7. Children (COPPA and similar laws)

MoneyFlow is a mixed-audience game. We use a neutral birthday check to find players under 13 and put them in Child mode (section 3). For those players we do not knowingly collect personal information for advertising, profiling or analytics, and we do not ask for names, email, photos or location. Player names typed in Pass & Play stay on the device. Online play is off for children until a parent turns on "Allow online play" with the parent PIN; children get a generated online name and cannot type one. For children we collect online only the anonymous player ID and the match data needed to run the game, used only to run it and keep it safe (support for internal operations), never for advertising or profiling. Quick chat is off by default and only offers preset phrases. Purchases and links that leave the Game sit behind a parent gate.

Parents can review this policy, change settings in Parental controls, or erase all data with Settings › Delete my data. To ask us anything, or to request deletion of data a partner may hold, email support@naimicstudios.com and we will act within 30 days. In the EEA and UK, players under the local age of digital consent (13–16 depending on country) are also treated as children for consent purposes.

8. Your rights

Depending on where you live (for example the EEA, UK, Switzerland, California and other US states), you can ask to access, correct, delete or move your data, object to or limit its use, and withdraw consent. Californians: we do not sell personal data for money, but ad partners may use data for cross-context behavioural advertising, which California calls "sharing". Opt out in Settings › Privacy (turn off personalised ads). We will not treat you differently for using your rights. Email support@naimicstudios.com; we reply within 30 days. You can also complain to your local data protection authority.

9. Keeping and moving data

On-device data stays until you delete it. Partners keep data under their own policies. Our partners may process data outside your country, including in the United States, using legal safeguards such as standard contractual clauses.

10. Security

We keep the data that leaves your device to a minimum and only work with established partners. No method of transfer or storage is 100% secure.

11. Changes

We will update the date above and show a notice in the Game for important changes, such as new online features.

12. Contact

support@naimicstudios.com · naimicstudios.com