Draft: this policy takes effect when Bloomwilds launches.
The short version
- We collect what it takes to run the game: your progress, your purchases and some details about your device.
- Other players can see your gardener name, your garden, your squads and your Grove. Nothing else about you is public.
- An ad plays only when you tap to watch one. Ads are personalized only if you agree, and on iPhone and iPad the advertising ID is used only if you allow tracking.
- We never see your card details. Apple and Google handle payment.
- We don't sell your personal information.
- You can delete your account in the game, or from the delete your account page.
- Bloomwilds isn't meant for children under 13. A younger player sees no ads at all, and we use their information only to run the game.
Who we are
Bloomwilds is made by Grand Parks Labs Ltd., a company in Ontario, Canada (we, us). We're responsible for the personal information described here: in the game, on this website and when you write to us. Our contact details are at the end of this page.
What we collect
When you play
- Your account. The first time you open the game, it makes an account for you without asking for anything, and gives you a Player ID such as BW-7KQ2-M9XP. If you link Sign in with Apple or Google to keep your garden on another device, we get an ID from them and, if you share it, your email address. Apple lets you hide your real address.
- Your game. Your progress and everything in it: Bloomlings, cuttings, buildings, your garden's design, items, Gems and the other currencies, your Grove, duels, the charts, the gift codes you redeem and your in-game mail.
- What other players see. The name you give yourself or your Grove, your garden and showcase, the squads you send out and defend with, and your places on the charts.
- Purchases. What you bought, when, the price and currency, the store's country, and whether it was refunded. Your payment details stay with Apple or Google.
- Your device. Its model, operating system, language and time zone, the app's version, your IP address (and the rough region it points to), and IDs for this install of the app.
- How you play. Sessions, screens, progress, the offers you see and take, the ads you watch or close, and which version of a test you're in, so we can see what works and fix what doesn't.
- Crash reports. What was happening on the device when the game crashed.
- Security checks. Signals from Apple and Google that this is a genuine copy of the app on a genuine device, and whether the device is rooted or jailbroken, an emulator, or running tools that change apps.
- Notifications. If you allow them, a token that lets us send notifications to this device, for example when a jar is ready.
- Ads. When you choose to watch one: the device's advertising ID where you've allowed it, your IP address, device details, and what happened with the ad (shown, finished, rewarded).
When you write to us
Your email address, what you write, anything you attach, and your Player ID if you include it.
On this website
Our web host keeps short server logs (IP address, browser and the page asked for) to keep the site running and safe. The site has no ads and sets no advertising cookies. The web store and the gift code page ask for your Player ID, which we use only to deliver what you bought or redeemed, and the web store remembers it in your browser so you don't have to type it again.
What we don't collect
Your contacts, photos, precise location, microphone or camera. Bloomwilds has no chat.
Why we use it
For players in the EU, the UK and other places whose laws ask for one, the last column gives the legal basis.
| What for | What it uses | Legal basis |
|---|---|---|
| Running the game: your account, your garden on every device, Groves, visits, duels and the charts | Account, game, device | Our agreement with you (the terms) |
| Selling and delivering purchases, handling refunds, keeping tax records | Purchases, account | Our agreement with you; the law (tax) |
| Keeping the game fair and safe: stopping cheats, fake purchases and changed apps, and enforcing the rules | Account, game, device, security checks | Legitimate interests (a fair game for everyone) |
| Fixing bugs and making the game better | How you play, crash reports, device | Legitimate interests, or your consent where the law asks for it |
| Rewarded ads: playing the ad you chose and giving you the reward | Ads, device | Our agreement with you; your consent for personalized ads |
| Notifications | Notification token | Your consent |
| Answering you | Your messages, account | Our agreement with you; legitimate interests |
| Following the law and answering lawful requests | What the request needs | The law |
Our anti-cheat checks can flag an account on their own, but a person looks at it before any ban, and you can ask us to look again. We make no other automated decisions that affect you in a legal or similarly important way.
Ads
An ad plays only when you tap to watch one for a reward. Ads come through AppLovin MAX, which runs a quick auction between ad networks, including AppLovin, Google, Meta and Unity. The network that wins plays the ad and receives the ad details listed under What we collect.
- Your choice. In the European Economic Area, the UK and Switzerland, the game asks before ads can be personalized. Elsewhere it shows how ads work and how to opt out. You can change your answer at any time in Menu, then Privacy choices.
- iPhone and iPad. The advertising ID is used only if you tap Allow when the game asks. You can change that in Settings, then Privacy & Security, then Tracking.
- Android. You can reset or delete your advertising ID in your phone's settings, usually under Privacy, then Ads.
- Saying no costs you nothing: you get the same rewards, from ads that aren't based on your interests.
Each network has its own privacy policy: AppLovin, Google, Meta and Unity.
Who we share it with
Only with the companies that help us run Bloomwilds, under contracts that limit what they can do with it, and with other players for the parts of your game that are public.
| Who | What for |
|---|---|
| Google Firebase | Sign-in, the game server and its database, app checks (App Check), analytics, crash reports, notifications, settings and tests |
| Apple and Google | The app stores, payment, Sign in with Apple and Google, and the app integrity checks (App Attest, Play Integrity) |
| RevenueCat | Checks each purchase with Apple and Google and keeps track of refunds |
| AppLovin and the networks in its auction (Google, Meta, Unity) | Rewarded ads, measuring them and stopping ad fraud |
| Talsec | The app's security checks, which send it anonymous diagnostics about the app and the device |
| Cloudflare | This website, and forwarding email sent to us |
| Proton | Our inbox, and our replies to your emails |
| Oracle Cloud | Hosts our back-office tools: purchase and refund records, weekly numbers |
| Stripe | Payment, only if you buy on our web store |
| Other players | Your gardener name, garden, showcase, squads, Grove, duel results and places on the charts |
| Authorities | When the law requires it, or to protect players, the public or us |
| A new owner | If Bloomwilds or the company is sold or merged, your information goes with the game and stays under this policy |
We don't sell your personal information, and we don't share it for advertising except with the ad networks, as described under Ads. If we ever add a company to this list (for example to measure our own ads), we'll update this page first.
Where it's kept
We're in Canada. Our providers store and process data in Canada, the United States and other countries, so your information may be handled outside the place where you live. Where the law asks for it (for example for data from the EU, the UK or Quebec), we assess those transfers first and protect them with safeguards such as the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework.
How long we keep it
| What | How long |
|---|---|
| Your account and game | While you play. If you delete your account, it leaves the game straight away, our systems within 30 days and our backups within 90. |
| Purchase records | As long as tax law requires (in Canada, six years after the end of the tax year) |
| Analytics events | 14 months, then deleted (totals that can't identify anyone may be kept longer) |
| Crash reports | 90 days |
| Server logs | 30 days |
| Support email | Two years after the conversation ends |
| Bans for cheating or fraud | While the ban lasts, and two years after, so a banned player can't start over straight away |
Your rights and choices
Depending on where you live, you can ask us to:
- tell you what we hold about you and send you a copy, in a format you can take elsewhere;
- correct it;
- delete it (or do it yourself: see delete your account);
- stop or limit a use of it you object to.
You can also withdraw a consent you gave at any time, though that doesn't undo what was done before.
Some choices are yours to make straight away: Menu, then Privacy choices, for ads, and your device's settings for tracking and notifications.
To ask, write to us (see Contact). We answer within 30 days, and may ask for your Player ID or something else to check the request comes from you. Using your rights costs nothing and doesn't change how the game treats you.
You can also complain to a privacy authority: in Canada, the Office of the Privacy Commissioner (in Quebec, the Commission d'accès à l'information); in the EU, your country's data protection authority; in the UK, the ICO. We'd like the chance to put it right first.
California and other US states
Laws in California, Colorado, Connecticut, Virginia and other states give residents the right to know what personal information a business collects, to correct and delete it, and to opt out of its sale or of its sharing for targeted advertising. In the last 12 months we've collected identifiers (Player ID, device and advertising IDs), purchase history, game and app activity, approximate location from IP addresses and, if you wrote to us, your messages, for the purposes above. We don't sell personal information for money. Personalized ads count as sharing under California law, so you can opt out in Menu, then Privacy choices, or with your device's ad settings. Players under 16 get only ads that aren't personalized.
Children and teens
Bloomwilds isn't meant for children under 13. Before you play, the game asks for your age without hinting at an answer. Then:
- Under 13: the game shows no ads and never asks to track, your gardener name comes from a list instead of being typed, and we use your information only to run, secure and support the game.
- 13 to 15: ads are never personalized, and the game never asks to track.
If you're a parent or guardian and think your child gave us personal information, write to us and we'll delete it. Our page for parents explains purchases and how to turn them off.
Keeping it safe
Data travels encrypted and is encrypted where our providers store it. The game checks with Apple and Google that it's talking to a genuine app, only the people who need access have it, and we keep a written security program that we review every year. No system is perfect: if a breach puts you at risk, we'll tell you and the authorities as the law requires.
How we look after it
Our Privacy Officer is responsible for this policy and for how personal information is handled at Grand Parks Labs Ltd. We keep a record of what we collect and where it goes, check new features and new providers for privacy risks before they ship (transfers outside Quebec included), give access only to people who need it and teach them how to handle it, and keep a record of every incident. Complaints go to the Privacy Officer: we'll reply within 30 days and tell you how we resolved it.
Changes
When this policy changes, the date at the top changes too. If a change matters (a new use of your information, say), we'll tell you in the game before it takes effect, and ask for your consent where the law requires it.
Contact
- Company
- Grand Parks Labs Ltd.
- Where
- Ontario, Canada
- Privacy Officer
- Our founder and director, at privacy@bloomwilds.com
- Support
- support@bloomwilds.com
- EU and UK
- To fill in before launch: representatives in the EU and the UKA company outside Europe that offers a game to players there names a representative in the EU and one in the UK (article 27 of the GDPR and of the UK GDPR). Several services act as both for a yearly fee.