Privacy Policy

Effective October 16, 2026 · Last updated October 17, 2026

Pimkim (“the app”) is a game for iPhone, iPad and Android published by Hemant Chaudhary · Sudofish Labs (“we”, “us”). This policy covers the app and the Pimkim pages on sudofish.com, including the Android beta sign-up.

The short version

There are no accounts. Your progress stays on your phone.
The free game shows ads through Google AdMob. Where the law requires it, we ask before ads are personalized, and you can change your mind in the app.
We use Firebase to see how the game is played and to fix crashes, and RevenueCat to handle the Pimkim Pro purchase.
If you sign up for the Android beta, we keep your email only to invite you, and delete it when the beta ends.
We don’t sell your personal information.

1. What stays on your device

Your progress and records (best score, best combo, the furthest chapter, the kinds you’ve discovered, your Pimkidex and how many times you’ve met each Pimkim) and your settings (music, sound effects, haptics) are saved only on your device. We don’t receive them. There’s no sign-in and no account.

Deleting the app deletes this data. Your phone’s own backups (iCloud or Google) may include it, under your Apple or Google settings.

2. What the app’s services collect

The app uses a few third-party services. They collect data from your device as described here, under their own privacy policies.

Google AdMob (ads)

The free version shows two kinds of ads: rewarded ads you choose to watch (Second chance and Mend a broken power) and full-screen ads between runs. No ad interrupts a run. To show and measure ads, Google may collect:

your device’s advertising identifier: the Android advertising ID, or on iPhone and iPad the IDFA, but only if you allow tracking;
your IP address, which is used to estimate your general location (such as your country or city);
device and app information, such as model, operating system, language and app version;
ad interactions, such as which ads were shown, watched or tapped.

Personalized and non-personalized ads. Personalized ads are chosen using what Google knows about your interests. Non-personalized ads are chosen from context, such as the app and your general location, but Google still uses some data to limit how often you see an ad, to report on ads and to fight fraud.

Your consent. In the European Economic Area, the UK and Switzerland, a consent form from Google asks whether ads may be personalized and whether data may be stored on your device. It appears after your first run, before any ad is requested. On iPhone and iPad, Apple’s tracking prompt asks whether Pimkim may use the IDFA; it also appears after your first run. You can change these choices at any time: see section 7.

Pimkim Pro. With Pimkim Pro, the app shows no ads: there are no ads between runs, and Second chance and Mend don’t need one.

Learn more in How Google uses information from sites or apps that use our services and Google’s Privacy Policy.

Firebase (analytics, crash reports and game settings)

Google Analytics for Firebase records how the game is used: for example runs started and finished, chapters reached, merges, powers used, ads watched and purchases. It also collects a random app-instance ID, the app version, device model, operating system, language and your general location from your IP address. In the EEA and the UK, analytics storage stays off until you allow it in the consent form.
Firebase Crashlytics collects crash reports: what the app was doing when it crashed, the device model, operating system and its state (for example free memory), and a random installation ID.
Firebase Remote Config and A/B Testing deliver game settings (such as how often ads appear) using a random installation ID, the app version, your country and language.

See Privacy and Security in Firebase.

RevenueCat, Apple and Google (Pimkim Pro)

Pimkim Pro is a one-time in-app purchase. Payments are handled by Apple’s App Store or Google Play under their terms; we never see your card or payment details. RevenueCat checks purchases for us and keeps track of who has Pro. It uses an anonymous ID created when you install the app (the Player ID in Settings) and purchase records (the product, price, currency, date, store transaction ID and store country), along with basic device and app information. See RevenueCat’s Privacy Policy.

3. Emails you send us

When you write to us, for example with Email support in the app’s Settings, we get your email address, your message and whatever you include, such as your Player ID, app version, device and screenshots. We use it to answer you and fix the problem, for example to restore Pimkim Pro.

When you join the Android beta on sudofish.com/pimkim, we store:

the email address you enter;
when you signed up;
where you signed up (this page) and the platform (Android).

We use your email only for the beta: to add it to Pimkim’s tester lists in Google Play Console, so Google lets that account install the test version, and to email you the invite and news about the beta. It isn’t used for marketing or added to any other list. The data is stored in a Cloudflare D1 database that Cloudflare runs for us.

To keep bots out, the form uses Cloudflare Turnstile. It checks signals from your browser and connection (such as your IP address and browser characteristics) and tells us only whether the check passed. It loads when you start using the form. See Cloudflare’s Turnstile privacy addendum.

Cloudflare also hosts this website and counts visits with Cloudflare Web Analytics, which doesn’t use cookies. See Cloudflare’s Privacy Policy.

5. Why we use data, and our legal bases

Where the GDPR or similar laws apply, we rely on these legal bases:

Purpose	Legal basis
Running the game, delivering game settings, and selling and restoring Pimkim Pro	Performing our contract with you (the terms of use)
Personalized ads, and storing or reading ad data on your device	Your consent, which you can withdraw at any time
Non-personalized ads, ad measurement and fraud prevention	Our legitimate interest in keeping the game free
Analytics to understand and improve the game	Your consent in the EEA and UK; elsewhere, our legitimate interest in improving the game
Crash reports	Our legitimate interest in keeping the game working
Answering your emails	Our legitimate interest in helping you, or our contract with you
Inviting you to the Android beta	Your consent, given when you sign up; you can withdraw it at any time
Keeping records the law requires	Legal obligation

We don’t sell your personal information for money. We share data only with the services named in this policy, which process it to provide their service, and when the law requires it (for example a valid legal request), or as part of a sale or transfer of the app.

Under California law (the CCPA, as amended by the CPRA) and similar US state laws, letting ad partners use data such as your advertising ID for ads based on your activity in other apps can count as “sharing” (and in some states, as a “sale”). You can opt out with Privacy choices in the app’s Settings, which appears where these laws apply, or with your device settings below.

7. Your choices

In the app: open Settings (the gear) and tap Privacy choices to change your ad and data choices. This row appears in the regions where it applies.
iPhone and iPad: Settings → Privacy & Security → Tracking controls whether Pimkim may track you.
Android: Settings → Privacy → Ads (or Settings → Google → Ads) lets you delete or reset your advertising ID.
Google: manage ad personalization in My Ad Center.
The beta: ask us to remove your email at any time; you can also leave the test from Google Play’s test page.

8. How long we keep data

Progress and settings: on your device until you delete the app.
Beta sign-up emails: until the Android beta ends, then deleted. Sooner if you ask.
Analytics: event-level Google Analytics data for up to 14 months.
Crash reports: about 90 days, then Firebase deletes them.
Purchase records: as long as you need Pimkim Pro to work and restore, and as long as accounting and tax laws require.
Support emails: as long as we need to help you, and no longer than two years after the conversation ends unless a dispute needs them.
Ads: Google keeps ad data under its own policies, linked above.

9. Your rights, and how to use them

Depending on where you live, you can ask to access, correct, delete or get a copy of your personal data, object to or restrict how we use it, withdraw consent, and opt out of “sales” or “sharing” for ads. We won’t treat you differently for using these rights. You can also complain to your local data protection authority.

To use a right, email [email protected]. For data about your copy of the app, include your Player ID: open Settings (the gear) and tap Player ID to copy it. Because there are no accounts, the Player ID is how we find your purchase records; analytics and crash data are tied to random IDs we can’t link to you. For the beta, write from the address you signed up with. We answer within one month. If you’re in a US state that offers appeals and we turn your request down, reply to our answer to appeal.

10. Children

Pimkim is meant for ages 13 and up and isn’t directed to children under 13. We don’t knowingly collect personal information from children under 13. If you think a child has given us personal information, for example through the beta sign-up, email us and we’ll delete it.

11. International transfers

We’re based in India. Google, Cloudflare and RevenueCat process data in the United States and other countries. Where the law requires, these transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses or the EU-US Data Privacy Framework.

12. Security

Data sent by the app and the sign-up form is encrypted in transit (HTTPS), and only we can reach the beta list. No method of storing or sending data is completely secure.

13. Changes to this policy

We’ll post any changes on this page and update the date at the top. If a change matters, we’ll also say so in the app or on the Pimkim page.

14. Contact

Hemant Chaudhary · Sudofish Labs
[email protected]