Privacy Policy — Latch & Swing

Latch & Swing has no account, no login and no social features. We never ask for your name, email, phone number, contacts, photos or precise location.

Two optional things can be collected, and both are switched off until you turn them on in Settings: anonymous gameplay statistics, and crash reports. Both go to Google Firebase, are tied to a random per-install identifier rather than to you, and are never used for advertising.

Your saved progress — best score, coins, cosmetics, streak — stays on your device.

1. Who we are

2. Information we collect

Two things can be collected, and both are off by default. Nothing leaves your device unless you switch one of them on in Settings → Privacy.

Gameplay statistics (Google Firebase Analytics). If enabled, the app sends anonymous event records: that a run started (with the random daily level seed); that a run ended, and its distance, score, multiplier, coins and duration; and that a boost was collected or a style bonus earned, with the distance at which it happened. Firebase adds a handful of its own routine events on top of ours — that the app was opened for the first time, that a session began, roughly how long you engaged with it, and that the app was updated or removed. Firebase also automatically attaches an app-instance ID — a random identifier created when you install the app and destroyed when you delete it — along with your device model, iOS version, app version, language, and the country Google infers from your IP address.

Crash reports (Google Firebase Crashlytics). If enabled, and the app crashes or hits an error, we receive the stack trace, error type, device model, iOS version, app version and a random installation identifier. Crashlytics also records basic device state at the moment of the error — free memory and storage, screen orientation, and whether the app was in the foreground — and tags the report with your data ID, so that a request to delete your data can reach your crash reports and not only your gameplay events.

Your data ID. This one is not a switch and is not sent anywhere on its own. The app creates a random identifier the first time it runs, whether or not you ever turn anything on, and keeps it on your device. If you do switch something on, it is attached to what is sent. It is a string of 32 random characters, not derived from you, your device or anything you do — its only purpose is to give you a way to point at your own records, since we know nothing else about you. You can read it at any time in Settings → Privacy → Your data ID.

We do not collect your name, email address, phone number, date of birth, precise location, contacts or photos. There is no sign-in, no user account, no chat and no user-generated content. We do not use the Advertising Identifier (IDFA), we have Google Signals and ad personalisation disabled, and we do not track you across other companies' apps or websites.

3. Information stored on your device

The game saves the following on your device using standard iOS app storage. We have no access to it:

Deleting the app removes this from your device. Note that iOS may include it in your iCloud or computer backups; restoring a backup can bring it back. We never receive this saved data.

Separately, some of the same kinds of figures — the distance, score and coins of an individual run — are sent as anonymous analytics events if you have enabled that. See section 2.

4. Crash reports and diagnostics

Crashlytics (Google). Described in section 2. This is separate from Apple's diagnostics setting and is not controlled by it. Turn it off any time in Settings → Privacy → Send crash reports.

Apple's own diagnostics. Independently, if you have turned on Share With App Developers (Settings → Privacy & Security → Analytics & Improvements), Apple may share aggregate crash and performance data with us through App Store Connect. That is a feature of iOS rather than of this app, Apple provides it to us in a form that does not identify you to us, and you can turn it off in that same screen.

On-device error log. The app keeps up to 20 recent error records on your device to help diagnose problems. Each holds the time, the error message cut off after 240 characters, and either the first three lines of the technical stack trace or the name of the app component that failed. It stays on your device, is overwritten as new errors arrive, and is removed when you delete the app.

5. Advertising and purchases

This version contains no advertising and no in-app purchases. It does include the optional analytics and crash reporting described in sections 2 and 4.

We intend to add optional rewarded advertising and cosmetic-only purchases in a future update. When that happens we will publish an updated policy before those features ship, ask for any consent the law requires, and — on iOS — show the App Tracking Transparency prompt, which you may decline. Purchases will only ever affect appearance, never gameplay.

6. Children

Latch & Swing is not directed to children and is not offered in the App Store Kids Category. Its age rating reflects the absence of violent or mature content, not an intention to target children.

We do not knowingly collect personal information from a child under 13, or under the higher age of consent that applies where you live. We do not ask for age. We do not build profiles, use behavioural advertising, or use analytics for any purpose beyond understanding how the game is played.

Analytics and crash reporting are off by default and can be turned off at any time. If you are a parent or guardian and believe your child's data has been collected, email us at the address in section 1 with the data ID shown in Settings → Privacy, and we will delete the associated records within 30 days. The ID stays on that screen after you switch collection off, so you can turn everything off first and still ask us to erase what was already sent.

7. Who receives your data, and where it goes

If you have enabled the features in section 2, we share that data with Google — Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and Google Ireland Limited — which provides Firebase Analytics and Crashlytics as our data processor under Google's Data Processing and Security Terms. Google processes it only on our instructions. Google is contractually bound to protect this data to a standard at least equal to that described in this policy and not to use it for its own purposes.

We do not sell your data, rent it, or share it with data brokers, advertising networks or anyone else.

International transfers. Google processes this data on servers in the United States and other countries. For users in the EEA, transfers rely on Google LLC's certification under the EU–US Data Privacy Framework and, as a further safeguard, on the European Commission's Standard Contractual Clauses incorporated into Google's terms. For UK users, the UK Extension to the Data Privacy Framework and the UK International Data Transfer Addendum apply. For Brazilian users, transfers rely on the standard contractual clauses approved by the ANPD or another mechanism permitted by Articles 33–35 of the LGPD. For Saudi Arabian users, transfers are made under the mechanisms permitted by the Personal Data Protection Law and SDAIA's Data Transfer Regulations. You can request a copy of the relevant safeguards from the contact address in section 1.

If we ever receive a legal demand for user data, we will challenge requests that appear overbroad and will notify affected users where the law permits.

8. Our legal basis (EEA and UK users)

What	Why	Legal basis
Saved progress on your device	So the game remembers your score, coins and cosmetics	Necessary to provide the service you asked for (Art. 6(1)(b)); stored on your device with your consent under national ePrivacy rules
Gameplay statistics	To understand how the game is played, and improve difficulty and pacing	Your consent (Art. 6(1)(a))
Crash reports	To find and fix faults	Your consent (Art. 6(1)(a))

You can withdraw consent at any time in Settings → Privacy, without affecting the lawfulness of anything done before. Withdrawing is as easy as giving it — the same switch.

There is no automated decision-making or profiling that produces legal or similarly significant effects. We are not required to appoint a Data Protection Officer under GDPR Article 37.

9. Your rights

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to its use, receive a copy in a portable format, withdraw consent, and not be treated differently for exercising any of these.

Because we identify you only by a random ID, we usually cannot connect a request to your data unless you give us that ID. You will find it in Settings → Privacy → Your data ID, and it stays there whether or not collection is switched on. Email it to us at the address in section 1 and we will act within 30 days (one month where GDPR applies).

You can also act without us at any time: turning the switches off in Settings stops collection, and deleting the app removes everything stored on your device.

California. The categories of personal information we collect are identifiers (three random per-install IDs — your data ID, and one each from Firebase Analytics and Crashlytics; an IP address, used to infer country and not stored by us) and internet or other electronic network activity information (gameplay events, crash diagnostics, device model, OS version). We collect these to operate and improve the game and to diagnose faults. We do not collect sensitive personal information as defined in §1798.140(ae), and we do not use personal information for automated decision-making or profiling. We do not sell or share personal information as those terms are defined by the CCPA/CPRA. If we introduce advertising in a future version, we will update this section, provide a "Do Not Sell or Share My Personal Information" control in the app, and honour opt-out preference signals.

Quebec. The person responsible for the protection of personal information is Youssef Idrees, reachable at the address in section 1. Analytics and crash reporting are off until you switch them on, and can be switched off again at any time.

Australia. Complaints may be sent to the address in section 1. We will acknowledge within 7 days and respond substantively within 30 days. If you are unsatisfied you may complain to the Office of the Australian Information Commissioner.

Complaints elsewhere. EEA and UK users may complain to their national supervisory authority (see edpb.europa.eu, or ico.org.uk in the UK). Users in Brazil may complain to the ANPD; in Canada to the Office of the Privacy Commissioner or the Commission d'accès à l'information du Québec; in South Korea to the PIPC; in Japan to the Personal Information Protection Commission; and in Saudi Arabia to SDAIA.

10. How long data is kept

11. Security

Data stored on your device is protected by your device's own security, including your passcode and Apple's file encryption. Data in transit to Google is encrypted.

12. Changes to this policy

If we change this policy in a way that materially affects your privacy — new categories of data, a new recipient, a new purpose, or the introduction of advertising or purchases — we will publish the change before it takes effect and show you a notice in the app. Where the change requires your consent we will ask for it. We will not treat continued use of the app as consent.

13. Contact

This document was prepared to describe the app's actual behaviour accurately. It is not legal advice. Privacy law varies by country and changes over time, and a qualified lawyer should review it before publication — particularly before advertising or purchases are added, since those materially change what data is collected and by whom.