Undercover — Privacy Policy

Last updated: 26 September 2026

This privacy policy explains how the Undercover mobile app ("the App", "we") handles information when you use it.

Summary

The App has no accounts, no login, and no user profiles. We never see your player names, the secret words you play with, or who the undercover was — that information stays on your device. The App does send anonymous usage statistics, crash reports and advertising requests to Google, described in detail below.

What Stays on Your Device

The following is stored only on your device, using the standard local storage of iOS (UserDefaults) or Android (SharedPreferences), and is never transmitted to us or to anyone else:

You can remove all of it at any time by deleting the App from your device.

Third-Party Services We Use

The App uses the following services, all provided by Google LLC:

ServicePurposeWhat it collects
Google AdMob Displays the ads that keep the App free Advertising identifier (on iOS the IDFA, only with your permission; on Android the Google Advertising ID, which you can reset or delete in your device settings), coarse location derived from IP address, device information, and your interactions with ads
Google Analytics for Firebase Anonymous usage statistics, so we can see which features are actually used and improve the game A randomly generated app instance identifier, device model, OS version, language and country, and in-app events such as starting or finishing a game, which word category was chosen, and which buttons were tapped
Firebase Crashlytics Reports crashes so we can fix them (iOS version only; the Android version does not include Crashlytics) Crash diagnostics: device model, OS version, app version, and the technical state of the App at the moment it crashed
Firebase Remote Config Lets us adjust app settings (such as how often ads appear) without releasing an update Sends a request for the current settings. It does not collect personal information.

None of these services receive your player names, your secret words, or the outcome of any game.

Advertising and Your Tracking Choice

Ads are served by Google AdMob. On first use you will be asked, through Apple's App Tracking Transparency prompt, whether the App may access your device's Advertising Identifier.

If you allow tracking, AdMob may use that identifier to serve you personalized ads and to measure ad performance across apps and websites.

If you do not allow tracking, AdMob serves only non-personalized ads. Limited information such as approximate location and basic device details is still used to fulfil ad requests, but it is not used to build a profile of you.

You can change this choice at any time in Settings → Privacy & Security → Tracking on your device.

On Android there is no tracking prompt. Ads are requested with your device's Google Advertising ID unless you have turned personalised ads off. You can reset or delete that identifier at any time in Settings → Google → Ads (on some phones Settings → Privacy → Ads); with the identifier deleted, AdMob serves only non-personalised ads. In the EEA, the UK and Switzerland the consent message described below applies on Android exactly as on iOS.

If You Are in the EEA, the UK or Switzerland

Before any personalised advertising takes place, the App shows a consent message that lets you accept or refuse, and lets you review individual advertising partners. You can reopen that form and change your answer at any time from inside the App: tap the globe icon on the home screen, then Privacy options (the same on iPhone and Android).

Under the GDPR you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to lodge a complaint with your local data protection authority. Because we hold no personal data ourselves, requests concerning data held by Google should be directed to Google using the links below, or to us at the contact address and we will assist.

Legal Bases for Processing

Data Retention

Analytics event data is retained for up to 14 months, after which it is deleted automatically. Crash reports are retained for up to 90 days. Data held by Google as an advertising provider is subject to Google's own retention periods.

Children's Privacy

The App is suitable for general audiences and is not directed specifically at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will act on it.

Google's Privacy Information

Changes to This Policy

If this policy is updated, the revised version will be posted at this URL with a new "Last updated" date.

Contact

Questions about this privacy policy: mohammad.sami.apps@gmail.com