Privacy Policy

Effective Date: August 13, 2026

This Privacy Statement clarifies the protocols that Yimu Health Care (referred to interchangeably as "we," "our," or "us") observes to acquire, govern, and secure your personal information during your engagement with Lucky Neko Merge via Google Play. Our sole intent in handling this data is to furnish a premium digital entertainment experience while safeguarding your interactive sessions.

1. Information Acquisition Strategies

We deploy diverse methodologies to aggregate and manage your personal data, maintaining an unwavering commitment to cyber security. The subsequent clauses define the specific classifications of data we monitor and our corresponding processing protocols.

1.1 Data Classifications Monitored

Upon your initiation of Lucky Neko Merge, our infrastructure may log the following data categories:

• Infrastructure Logs: Hardware classifications, IP addresses, and exact connection timestamps.
• Device Specifications: Information regarding the manufacturer, device model, operating system (Android/Google OS variants), system language, and localized time zones.
• Unique Tracking Markers: Identifiers bound to your hardware, encompassing your Google Account ID, Google Play Games profile ID, Android Device ID, and the Google Advertising ID (GAID).
• Gameplay Analytics: Milestones achieved, overall progression, peak scores, and multiplayer engagement histories.
• Financial Records: Logs detailing virtual asset consumption, historical purchases, in-game currency acquisitions, and bespoke game preferences.

1.2 External Information Channels

Should you elect to authenticate using external ecosystem providers like Google Play Games Services, we will extract permissible profile data (e.g., public identifiers and usernames) in strict accordance with their authorization protocols. This action is contingent upon your prior acceptance of their data syndication rules.

You are encouraged to review the data governance frameworks of these providers:

• Google Play Games / Google Services: https://policies.google.com/privacy

By leveraging third-party authentication, you warrant that:

• Your engagement aligns with the prevailing Terms of Service of that external provider.
• You satisfy the statutory age thresholds mandated by the third party within your legal jurisdiction.

2. Objectives of Data Processing

We govern your personal data to fulfill the operational objectives outlined below, guaranteeing that all processing is anchored in a valid legal foundation:

• Operational Delivery and Client Support: To execute transactions, resolve inquiries, and sustain communication pathways; to power fundamental gameplay mechanics, customize user sessions, and deploy technical patches, security advisories, and support correspondences.
• Legal Foundation: Anchored in GDPR Article 6(1)(b) (contractual necessity), as this processing is indispensable for honoring our Terms of Service, maintaining digital infrastructure, and rolling out software iterations.
• Service Optimization and Promotions: To dispatch curated marketing collateral regarding Yimu Health Care or vetted affiliates; to archive your gameplay parameters; and to conduct analytical reviews aimed at conceptualizing new features and augmenting our software, marketing efficacy, and support systems.
• Legal Foundation: Authorized under GDPR Article 6(1)(f) (legitimate interests). We utilize this basis to satisfy our corporate interest in delivering optimized content and elevating product quality.
• Targeted Ad Serving: To project customized promotional content to users who have authorized our marketing network partners to access their device identifiers.
• Legal Foundation: Similarly justified by GDPR Article 6(1)(f), driven by our commercial interest in monetizing the platform through relevant digital advertising.

3. Data Storage Lifespan

Your personal details are archived solely for the duration indispensable to provision our gaming software, satisfy statutory mandates, and uphold or defend legal proceedings. For contingencies involving dispute arbitration, contract execution, infrastructure auditing, or legal compliance, we retain the authority to preserve specified data subsets for a legally defensible period.

Additionally, Usage Metrics are conserved for internal analytical evaluation. This data is generally purged after a brief cycle unless regulatory edicts demand extended preservation or it is required to fortify system integrity.

4. Information Syndication and Third-Party Transfers

In observance of your privacy entitlements and guided by GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may syndicate your collected data to specialized external entities under these parameters:

• Strategic Affiliates: For the delivery of integrated services, legal adherence, corporate restructuring, or any initiatives commanding your explicit authorization.
• Statutory Authorities: Should we detect a breach of our user policies, or if legal statutes compel disclosure to shield the intellectual property, safety, or legal rights of Yimu Health Care and the broader public.
• Community Members: When you participate in multiplayer environments, contribute to public discussion boards, or achieve rankings on global leaderboards.

4.1 Marketing Network Disclosures

Contingent upon your consent as defined in GDPR Article 6(1), we will syndicate your device markers to advertising conglomerates to facilitate tailored ad campaigns. Our roster of advertising associates includes:

• Applovin Corporation: https://www.applovin.com/privacy/
• AdColony: https://yandex.com/legal/international_ads_privacy_policy
• Amazon Publisher Services: https://www.amazon.com/privacyprefs
• Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/
• Google LLC: https://policies.google.com/privacy
• Google Admob: https://support.google.com/admob/
• Unity Technologies: https://unity3d.com/legal/privacy-policy
• IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf
• Vungle, Inc.: https://vungle.com/privacy/
• Fyber: https://www.fyber.com/privacy-policy/
• InMobi: https://www.inmobi.com/privacy-policy/

Notice: This Privacy Statement does not govern the independent data practices of these external corporations. We urge you to inspect their respective privacy policies to comprehend their data stewardship.

4.2 Infrastructure Processors

To maintain robust backend operations, we engage specialized data processors, encompassing hosting platforms, authentication gateways, and analytical software:

• Firebase (Google LLC): https://firebase.google.com/support/privacy
• Adjust: https://www.adjust.com/terms/privacy-policy/

5. Minors' Data Protection

Lucky Neko Merge is expressly not engineered for, nor marketed to, individuals under the age of 13. We enforce a strict policy against the intentional harvesting of personal data from this demographic. Upon verification that such information has been inadvertently recorded, we will execute immediate erasure protocols. Guardians discovering unauthorized data submissions by minors are instructed to contact us expeditiously for remediation.

6. Cyber Security Frameworks

We recognize the importance of your data and implement commercially rigorous security frameworks to defend your personal information. Nevertheless, users must acknowledge that no digital transmission or storage architecture guarantees absolute invulnerability. We, therefore, cannot warrant absolute immunity from data breaches.

7. Mobile Push Alerts

Subject to your explicit opt-in, we may broadcast essential game notifications, marketing alerts, and system updates directly to your Android/Google hardware. You retain the autonomy to rescind this authorization and disable such alerts globally via your device’s native OS settings.

8. User Privacy Entitlements

8.1 European Economic Area (EEA) Entitlements

We are dedicated to resolving privacy inquiries within one operational month. For submissions of profound complexity, GDPR Article 12 permits us to extend this window by an additional three months. We will proactively notify you of any such extensions and the underlying rationale.

• (1) Right of Access: Pursuant to GDPR Article 15, you may petition for granular details concerning your stored data, including processing rationales, data variants, recipients, and storage timelines. A digital artifact of this data can be requested, provided it does not violate intellectual property laws.
• (2) Right to Object: Authorized by GDPR Article 21, you may contest data processing justified by "legitimate interests" (Article 6(1)(f)). We will suspend processing unless we exhibit overriding legal justifications. The right to object to direct marketing processing remains absolute.
• (3) Right to Rectification: Under GDPR Article 16, you hold the right to mandate the correction of flawed or incomplete profile records.
• (4) Right to Restriction: Referencing GDPR Article 18, you may compel us to isolate and restrict the active processing of your data under strictly defined circumstances.
• (5) Right to Withdraw Consent: As outlined in GDPR Article 7, if our data utilization hinges on your consent, you may nullify it instantaneously. This action is not retroactive regarding previously executed processing.
• (6) Right to Data Portability: Enforced by GDPR Article 20, you possess the entitlement to extract your data in a standardized, machine-readable syntax and transfer it to alternate data controllers without interference.

8.2 California Resident Entitlements

• (1) Fulfillment Timeline: We target a 45-day turnaround for verifiable consumer requests. Should technical constraints necessitate up to 90 days, formal written notification will be issued detailing the delay.
• (2) Disclosure Boundaries: Data disclosures are strictly confined to information accrued within the 12-month window preceding your request, formatted for broad accessibility.
• (3) Right to Opt-Out: The CCPA guarantees your right to instruct us to halt the commercial sale of your personal data to external parties.
• (4) Right to Know: You are empowered to comprehend the specific data categories we extract and our foundational rationales, which are documented in this annually reviewed Statement.
• (5) Access Petitions: You may demand a comprehensive audit of the personal data captured over the trailing 12 months (an entitlement claimable twice per annum at no cost).
• (6) Right to Erasure: You may instigate the permanent deletion of personal data gathered over the past 12 months, subject to explicit statutory exemptions (e.g., critical service continuity, legal compliance, internal debugging).

9. Executing Data Erasure

When the retention of your personal data ceases to be operationally requisite, you may command its secure destruction. To initiate formal erasure protocols, please forward your directive to the contact email specified below.

10. Corporate Contact

For clarifications, compliance concerns, or formal privacy requests connected to this Privacy Statement, please direct communications to:

Contact Email: [email protected]