The mobile game includes optional Google AdMob rewarded videos. Availability depends on the build, region and ad delivery settings; testing uses demo ads. There are no in-app purchases and no advertising on this website.
1. Who is responsible
Sunleaf Quest is operated by Kinzi Workspace LLC, trading as Kenzi.ai, based in Sharjah Media City, United Arab Emirates. Contact [email protected] for support or privacy requests.
2. Information used by the game
The game creates a guest profile rather than asking for a real name, email address or telephone number. An installation or guest identifier can still be personal data even when it does not include your name.
- Installation and player identifiers, and a security credential used to authenticate the installation. These are not advertising identifiers.
- Platform, app version, language/locale and approximate country information derived from connection or locale information, not GPS location.
- Game saves: current and completed levels, checkpoints, scores, coins, Diamonds, hearts, defeated enemies, power-ups, elapsed play time and game settings.
- Connection and operational information needed to deliver and protect online services, such as IP address, request time, errors and app activity.
3. Local saves and online features
Game progress and preferences are stored on your device. When online services are available and enabled in the build, the game can register the installation and synchronize progress and scores with our game service. A new game or reinstall is not necessarily a request to delete server records.
When the standings feature is available, other players may see your generated Guest alias, points and rank. We do not display your installation credential, email address or IP address on standings. A guest save does not guarantee recovery or transfer between different devices.
4. Website visits and support
Public visitors do not need a website account. We do not install advertising pixels or marketing analytics. Images, fonts and browser assets are delivered through Bunny CDN.
Our hosting and delivery providers, including Cloudflare and Bunny, process network information such as IP address, browser details, requested files and timestamps to deliver pages and help prevent abuse. Essential security technologies may operate even though we do not set marketing cookies.
The private studio dashboard uses essential authentication and request-security cookies. Authorized staff can view installation records, current progress and scores to operate the game; those reports are not public.
If you email us, we receive your email address, message and any attachments you choose to send. Send only what is necessary; do not send passwords, device tokens, payment-card details or unnecessary information about a child.
5. Why we use information
We use information to run the game, keep progress, calculate scores, provide online features, maintain security, investigate technical problems, answer requests and meet legal obligations.
Where a legal basis is required, we rely on providing the service you request, legitimate interests in operating and protecting the service where appropriate, legal obligations, and consent for optional processing when required. Local rules and safeguards for children may require a different basis or parental involvement.
6. Service providers and sharing
Hosting, content-delivery, security and support providers may process information for these purposes. Information may be disclosed when legally required, to protect rights and safety, or as part of a business transfer with appropriate safeguards.
We do not currently sell personal information or share it for cross-context behavioral advertising. External Apple, Google or Kenzi.ai links lead to services with their own privacy policies.
7. Optional video rewards
Choosing Watch video after Game Over requests an ad from Google AdMob. Completing an available video can restore three hearts at your checkpoint. Restarting the level or returning to the menu does not require an ad. Ad requests are not made automatically when the game opens.
Google’s advertising SDK may process your IP address and approximate location, device or app identifiers, ad interactions and diagnostic information to deliver, measure and protect ads. Our current configuration requests non-personalized ads with child-directed treatment and a General Audiences content limit. Android advertising-ID permissions are removed; the game does not request Apple tracking permission. These safeguards do not mean no information is processed.
Our reward ledger records an installation identifier, level, reward-session identifier, completion and claim status, timestamps, Google verification transaction and estimated impression revenue where supplied. A random, single-use verification value is sent with the ad request; your saved game and device login credential are not sent as reward-verification data. Test activity is separated from production earnings.
Google’s User Messaging Platform checks whether ads may be requested. If the privacy check fails or cannot allow an ad, no video is requested. The current child-directed configuration does not ask children to consent to personalized advertising.
8. Children and families
The current game does not provide chat, player-uploaded photos, or a real-name registration form. Installation identifiers and online progress still require privacy protection; a child-friendly design does not mean that no data is processed.
Parents and guardians can contact us to ask about or request deletion of information associated with a child’s installation. We may need proportionate verification and enough information to locate the correct record. If we discover information collected in a way that requires parental consent or another safeguard that was not provided, we will take appropriate action, including deletion where required.
9. Retention, security and international processing
We keep game records as needed to provide saved progress and online features, unless you make a verified deletion request or a shorter retention period is required. Operational logs, support records and backups may have different retention periods based on security, recovery and legal needs. We do not promise a fixed deletion deadline that our systems cannot meet.
We use access controls and encrypted transport for online services. No system is completely secure. Providers may process data outside your country; where required, appropriate transfer safeguards apply. Contact us for information about a particular transfer or retention period.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete or receive a copy of your information, restrict or object to processing, withdraw consent, and complain to your local data-protection authority. Withdrawing consent does not affect earlier lawful processing.
Email [email protected] with “Sunleaf Quest privacy” in the subject. We will respond in accordance with applicable law and may ask for limited verification. You do not need to provide an identity document by default. Resetting progress or removing the app does not by itself guarantee deletion of server data.
11. Changes to this policy
We will update the date when this policy changes. Material changes, including enabling advertising or changing data use, will be communicated as required before they take effect.