Privacy Policy

Arroway · Effective and last updated: August 13, 2026

The short version.

1. Who we are

Arroway (the "Game") is developed and published by EXO TECHNOLOGIES GLOBAL LIMITED ("we", "us", "our"), Hanoi, Vietnam. This policy explains how information is handled when you play the Game on an Android device. EXO TECHNOLOGIES GLOBAL LIMITED is the controller for any personal information described here.

2. Information the game handles

The Game asks you for nothing. There is no sign-up, no login, no profile, and no way to submit content to us from inside the Game. The only information involved is created by playing, and it stays on your device.

WhatExamplesWhere it lives
Game progress Current level, levels you have completed, remaining hints, dates of completed daily challenges On your device only
Preferences Sound on/off, vibration on/off, light/dark/system theme, daily-reminder switch, whether the ad-removal option has been unlocked On your device only
Email you choose to send us The message you write if you tap "Send feedback", which opens your own mail app Your mail provider and our inbox

We do not collect your name, email address, phone number, contacts, photos, precise or approximate location, or the contents of your device. The Game does not read or upload files.

3. How information is processed

All gameplay logic — level generation, the daily challenge, hints, sound, and vibration — runs entirely on your device. Progress and preferences are written to Android's local app storage (Jetpack DataStore) inside the Game's private storage area, which other apps cannot read.

In its current form the Game contains no network code and declares no internet permission, so it cannot send your gameplay information anywhere. The daily-challenge reminder is generated locally on your device by Android's scheduler; no notification is delivered from a server.

If you tap "Send feedback" in Settings, the Game hands off to whichever email app you have installed, with our address pre-filled. Nothing is sent unless you write and send the message yourself. When you do, we receive your email address and whatever you include in the message, and we use it only to answer you.

4. Purposes and legal bases

PurposeInformation usedLegal basis (GDPR)
Save your progress and settings so the Game reopens where you left off Progress and preferences on your device Performance of a contract — providing the Game you asked for
Send the daily-challenge reminder you switched on Your reminder preference, stored locally Consent, which you give by enabling the reminder and the notification permission, and can withdraw at any time
Answer support and feedback emails The email you send us Legitimate interests — responding to people who contact us
Show advertising once it is enabled (see section 5) Advertising identifiers and technical data processed by Google Consent where required, otherwise legitimate interests in funding a free game

5. Advertising

The version of the Game covered by this policy ships without any advertising SDK and shows no ads. We are preparing to add Google AdMob so the Game can stay free, and we are describing it here in advance so this policy is accurate the moment ads go live.

When AdMob is enabled in a future release:

We will update the date at the top of this page when advertising is actually enabled in a released version.

6. Service providers

Today the Game uses no third-party analytics, crash-reporting, attribution, messaging, or advertising service, and no cloud backend of ours. The only third parties involved in your use of the Game are:

7. Sharing and sale of personal information

We do not sell or share your personal information, and we have never done so. We do not disclose personal information for cross-context behavioural advertising, and we do not trade in personal information of any kind. We would disclose information only if legally compelled to do so — and for the Game itself there is nothing held by us to disclose.

8. Retention and deletion

Progress and preferences remain on your device until you delete them. Clearing the app's storage in Android settings, or uninstalling the Game, removes them permanently; we hold no copy and therefore cannot restore them. Emails you send us are kept only as long as needed to handle your request, and you can ask us to delete them at any time.

9. Security

The Game relies on Android's application sandbox: its stored data lives in private app storage that other applications cannot read. Because the Game holds no account and transmits no gameplay data, there is no server-side store of your information to be breached. No method of storage is perfectly secure, and you should keep your device software up to date and protected with a screen lock.

10. Device permissions

PermissionWhy the Game asksIf you decline
Vibration Haptic feedback when you move an arrow or finish a level Not applicable — Android grants it without a prompt, and you can switch vibration off in Settings
Notifications The optional daily-challenge reminder, generated on your device The Game works normally; you simply receive no reminder

The Game requests no other permissions. It does not access your camera, microphone, location, contacts, photos, or files.

11. Children

Arroway is a puzzle game suitable for a general audience. We do not knowingly collect personal information from anyone, including children under 13 (or the equivalent minimum age in your country). Because the Game collects nothing and requires no account, there is no children's data for us to hold. When advertising is enabled, we will configure it so that ads served in the Game are treated as directed to a general audience and are not personalised for users identified as children. If you believe a child has sent us personal information by email, contact us and we will delete it.

12. Your rights under GDPR and CCPA/CPRA

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to access, correct, delete, restrict, or object to the processing of your personal information, the right to data portability, the right to withdraw consent, and the right to lodge a complaint with your supervisory authority.

If you are a California resident, you have the right to know what personal information is collected and how it is used, the right to delete it, the right to correct it, the right to opt out of its sale or sharing, and the right not to be discriminated against for exercising these rights.

In practice, most of these rights resolve immediately: the Game stores its data only on your device, so you can inspect, change, or erase it yourself through the Game's settings, Android's app storage settings, or by uninstalling. For anything else — including emails you have sent us — write to the address in section 15 and we will respond. We do not charge for these requests and do not treat you differently for making one.

13. International transfers

EXO TECHNOLOGIES GLOBAL LIMITED is based in Hanoi, Vietnam. The Game itself transfers nothing internationally, because it transmits no gameplay data. If you email us, your message reaches our inbox in Vietnam and may pass through your own mail provider's infrastructure. When advertising is enabled, Google may process advertising data in countries other than yours under the safeguards described in Google's own documentation.

14. Changes to this policy

We update this policy when the Game's behaviour changes — notably when advertising is switched on in a released version. The effective date at the top always reflects the current version. Material changes will be reflected here before or at the time the corresponding release reaches Google Play.

15. Contact

Questions, requests, or complaints about this policy or your privacy:

EXO TECHNOLOGIES GLOBAL LIMITED
Hanoi, Vietnam
exostudio.feedback@gmail.com