Privacy Policy

Last updated 4 November 2026

This policy explains what data Sprout Pop uses, why, who receives it and the choices you have.

Who we are

Sprout Pop is made by OmHuman AB ("OmHuman", "we", "us"), Brunnsgatan 3 b, 611 32 Nyköping, Sweden, organisation number 559585-3424. OmHuman AB is the controller of the personal data described in this policy.

For anything about privacy, email support@sproutpopgame.com.

The short version

• You don't need an account to play, and we never ask for your name, email or phone number in the game.
• Your progress, settings and collection are saved on your device. Your device's backup can keep a copy in your own Google account. We never get a copy.
• We don't sell your personal data for money. Some US state laws count sharing data with ad partners for targeted ads as selling or sharing it, and you can opt out of that, as Your rights describes.
• The game uses Google Analytics and Firebase Crashlytics to show us how levels are played and where the game crashes.
• Purchases are paid through Google Play. Unity, whose software the game uses to sell, gets a report of each purchase.
• The free game shows ads. Ad partners use device identifiers. Where the law requires it, we ask first whether ads may be personalised, and no ad network starts before you have answered.
• Sprout Club members don't see ads between levels. Videos you choose to watch for a reward stay optional.
• If you email us, we use your email address and message to answer you.

Data that stays with you

The game saves your levels, settings, power-ups, purchases, Daily Puzzle history, the hedgehog's garden and the animals and plants you have found on your phone or tablet. The saved game isn't sent to us. What the game does report is described further down.

So that your progress isn't lost, your device's backup can include the game's data if backup is turned on. On Android, your progress then comes back when you install the game again with the same Google account. We can't see that copy. Deleting the game deletes the data on your device, but not the copy in your device's backup.

Reminders, such as the one for the Daily Puzzle, are local notifications that your device schedules by itself. No data is sent to a server for them. You can turn them off under Settings in the game or in your device settings.

Data we and our partners process

Purchases

Purchases and subscriptions are handled by Google Play. We never see your card or payment details. The store tells the game what you bought, so that we can deliver it and restore it later.

The game sells through the store with Unity In-App Purchasing, software from Unity Technologies. It sends Unity a report when you start a purchase, when the purchase is paid or fails, and when the game has delivered it. A report can hold:

• what you bought and its price and currency, and once you have paid, the transaction ID and the store's receipt with the order details
• your device model, operating system, language settings, when your device was last started and its total storage
• the game's version and when and how the game was installed
• your IP address, as with any connection, from which Unity can tell your country

Unity handles the reports for us, and can also use transaction and billing records for its own financial reporting, auditing and fraud prevention, as Unity's privacy policy describes.

Ads

The free version of the game shows ads between levels, and videos you can choose to watch for extra moves or power-ups. They are delivered by advertising networks and an ad mediation service that picks which network shows each ad. To do that, these partners may collect:

• your device's Advertising ID
• your IP address and the rough location it shows, such as country or city
• your device model, operating system, language and the game's version
• which ads you saw and tapped

Whether ads are personalised is your choice:

• In the European Economic Area, the UK and Switzerland, the game asks you, with two equal answers, Don't allow and Allow. It asks at a calm moment after the tutorial, and always before the first ad. No ad network starts until you have answered. If you choose Don't allow, you still see ads, but they aren't personalised. Closing the question without answering never counts as a yes: the game asks again a few levels later, and no ad plays in the meantime.
• Everywhere else, the game doesn't ask, and ads are personalised until you turn them off.
• At any time, you can change your choice with Personalized ads under Settings in the game. It applies from the next ad. You can also reset or delete your advertising ID in your device settings.

The game works out whether you are in those countries from your device's SIM and network country, its region setting and its time zone. This happens on your device, and the game doesn't send those details anywhere.

Game analytics

To see how levels are played, the game uses Google Analytics. It sends Google an ID for your installation of the game, which isn't linked to your name, when you install, open and use the game, the store page or ad that led you to install it, the levels you play, how long they take, the moves and power-ups you use, what you buy, the ads you see, your choices about notifications and personalised ads, your answer to the game's rating question, your device model, operating system, language, game version and your approximate location, such as country and city. Google works the location out from your IP address and doesn't store the address. We use this data to balance the difficulty and fix problems.

Google Analytics can also use this data, together with your device's advertising ID, to personalise ads and to show us how any advertising of our own performs. This follows the same choice as for ads above. In the European Economic Area, the UK and Switzerland it only happens if you have allowed personalised ads. Elsewhere you can turn it off under Settings in the game.

Google describes how it uses data from apps that use its services at google.com/policies/privacy/partners.

Crash reports

If the game crashes or runs into an error, it sends a report to Firebase Crashlytics, a Google service. The report says what the game was doing at the time, such as which level was on screen, and it holds an ID for your installation of the game, your device model, operating system, game version and details such as free memory. Each time the game starts, Crashlytics is also told that a session has begun, with the same ID, so that we can see how many players play without a crash. We use this to find and fix faults.

Contacting us

If you email us, for example at support@sproutpopgame.com, we receive your email address, your name if you give it, and what you write or attach, such as screenshots or your device's advertising ID. We use it to answer you, to solve problems with the game and to keep a record of the conversation, also in case of a dispute. Our email is handled by Google Workspace, a Google service.

On iPhone and iPad

Sprout Pop is coming to Google Play first. When it comes to iPhone and iPad, this policy applies there too, with these differences:

• Purchases and subscriptions are handled by Apple's App Store instead of Google Play.
• The advertising ID is Apple's IDFA. The game asks for your permission before tracking, and if you decline, ads aren't personalised.
• Unity's purchase reports also hold an ID that Apple gives the game on your device.
• Apple receives the data it needs to handle purchases, under its own privacy policy.

Who receives data

• Google, which handles purchases and subscriptions through Google Play and provides Google Analytics, Firebase Crashlytics and Google Workspace, our email.
• Unity Technologies, whose purchasing software reports each purchase to Unity.
• Unity's ad mediation service LevelPlay and the ad networks ironSource Ads and Unity Ads, for the ads in the free game. We may add or change ad networks.
• Authorities, when the law requires it, and a buyer if the game or our company is sold.

Our partners may only use the data for the purposes in this policy or as their own privacy policies describe. Partners that decide for themselves how they use data, such as Google, Unity and the ad networks, are responsible for that use under their own privacy policies. Email us if you want the current list of partners.

Some partners process data outside the EU and EEA, for example in the United States. When they do, the transfer is protected by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

How long data is kept

• Data on your device stays until you delete the game.
• A copy in your device's backup is kept by Google or Apple under your account's settings.
• Analytics data that is linked to your installation of the game is kept for no more than 24 months and then deleted. Statistics that can't be linked to an installation, such as how many players finish a level, can be kept longer.
• Crash reports are kept for a limited time under Google's settings for Crashlytics, currently 90 days.
• Emails to us are kept for as long as we need them to help you, and for no more than 3 years after the conversation ended.
• Unity and our ad partners keep data according to their own policies.
• We may keep data longer where the law requires it, or where we need it to establish, exercise or defend a legal claim.

Children

Sprout Pop is made for a general audience and is meant for players aged 13 and over, as the game asks players to confirm before they play. It isn't directed at children under 13. We don't knowingly collect personal data from children under 13, or sell or share the personal data of anyone under 16. If you believe a child under 13 has given us personal data, email us and we will delete it.

Your rights

Depending on where you live, you can ask to see, correct, delete or move your personal data, object to how it is used or limit it, and withdraw any consent you have given. Withdrawing a consent doesn't affect what was done before. To use your rights, email us. We may need to confirm that a request is yours, and we can only act on data we can link to you. We don't know who you are, so include your device's advertising ID if you can. We reply within the time the law gives us, usually within one month. We may refuse a request, or charge a reasonable fee for it, if it is clearly unfounded or excessive, for example because it is repeated. We may also refuse or limit a request where the law allows it, for example when we must keep data by law or need it for a legal claim. If we do, we'll tell you why.

If you live in the EU, you can also complain to a data protection authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY), imy.se.

If you live in a US state with a privacy law, such as California, you may have the right to know what personal data we process about you, to have it corrected or deleted, and to opt out of targeted advertising. The game shares advertising IDs, device details and how you use the game with ad partners for targeted advertising, which these laws can count as selling or sharing personal data. To opt out, turn off Personalized ads under Settings in the game, or limit ad tracking on your device. We won't treat you differently for using these rights.

Security

The game sends data over encrypted connections, and we choose partners that commit to protecting the data they receive. No way of sending or storing data is completely secure, so we can't guarantee its security.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change affects how your data is used in a significant way, we'll also let you know in the game or on this page.