Privacy policy for Yum Studio 3D

Who we are and what this covers

This policy explains how Yum Studio 3D (Android package com.zylos.yumstudio3d) handles information. The app is published by Zylos TechSolutions LLP (“we”, “us”) as part of the Zylos family of games. Yum Studio 3D is a 3D cooking game: take an order, then chop, mix, cook, sauce and top the dish in a cosy kitchen, and keep your best plates in a gallery.

Available for Android only. This is the 3D edition, a separate app from the original Zylos game.

Information the app uses on your device

The app needs the following information to work. It is read, processed and stored on your device. It reaches us only if the table or “Your Zylos account and cloud backup” below says so.

• The game reads no photos, camera, microphone, contacts or location: every scene is drawn by the game from its own 3D art.

Your Zylos account and cloud backup (optional)

• Optional. Every feature works without an account. After the first-run tour, or later in Settings → Account, you can continue with Google or play as a guest. A guest account can be linked to Google later and keeps its backup.
• What we receive when you sign in: a user ID (a random identifier from Firebase Authentication). With Google sign-in, also your name, email address and profile-photo link from your Google account. A guest gets an anonymous user ID only, with no name or email. We record the sign-in method and when your profile was last updated.
• Cloud backup (only while you are signed in): your save file: settings, progress (coins, unlocks, streak, finished count), kitchen progress (levels, shifts, recipe stats, favourites), your saved dishes and first-run flags (as long as it fits in 32 KB). It is saved to your account so you can restore it on another phone. Uploads happen only when this data changed, at most every 10 minutes while the app is open and when it goes to the background; one backup per app, at most 32 KB.
• Never backed up: ad timing; scheduled tips.
• Where it is stored. Firebase Authentication and Cloud Firestore, run by Google LLC as our service provider (Firebase project zylos-unity-tsl; Firestore region asia-south1 (Mumbai, India)). Security rules let only the signed-in owner read or write their profile and backups.
• One Zylos account works across the Zylos 3D games; each app keeps its own separate backup.
• Deleting. Open unity.zylostechsolutions.com/delete-account (also linked from the game's Settings as “Delete account and data”) and sign in with the same Google account: this removes your sign-in, your profile and every Zylos backup at once. A guest account has no Google sign-in, so link it to Google first (Settings → Account → Link Google account), then delete it there, or email us. Signing out keeps your backup for the next sign-in; a guest account can't be recovered after signing out.

Push notifications

• The app uses Firebase Cloud Messaging (Google) to receive occasional announcements, such as new features or tips. To do this, Firebase gives the app a registration token (a random device identifier).
• Messages are sent from the Firebase console to topics only — everyone with any Zylos app or game, everyone with a Zylos game, or everyone with this game — never to a person picked by name, email or behaviour. No personal data is used to target them.
• A message may include a link to a screen in the app, which opens when you tap it. Messages that arrive while the game is open are shown as a normal notification.
• On Android 13 and later, the app asks for notification permission once, never before your third launch, and not again if you say no. You can turn notifications off at any time in your device's settings.

Information that leaves your device

• Advertising. The Google Mobile Ads SDK contacts Google to request and show ads; through AdMob mediation, the ad networks named under “Advertising and consent” may also receive ad requests and show ads. See that section below.
• Your Zylos account and backup, only if you sign in — see above.
• Remote Config (Firebase, Google) — see “App configuration”.
• Push notifications (Firebase Cloud Messaging) — see above.
• We run no servers of our own. Firebase and AdMob are Google services; Firebase processes data for us as a service provider. Apart from Google and the ad networks named under “Advertising and consent”, we don't share your information with anyone, and we never sell it.

What we never collect

We never sell your information. Without signing in, nothing you create in the app reaches us. In particular, the app never uploads:

• your progress, unless you sign in to a Zylos account (then only as your backup)
• photos, camera images, voice, contacts or location (the game can't access them)
• your name and email, unless you sign in with Google
• usage analytics or crash reports (the game has no analytics or crash-reporting SDK)

Permissions and why they are needed

Android asks for your permission where the system requires it. You can change any permission at any time in your device settings; the app keeps working without the optional ones and explains what stops working.

Permissions present in every Zylos 3D game

Not requested: camera, microphone, storage and media, location, contacts, phone state, overlay and all-files access.

Advertising and consent (Google AdMob)

• The app is free and shows ads from Google AdMob, provided by Google LLC (Google Ireland Limited for users in the EEA and Switzerland).
• Consent first. Before ads load, the app uses Google's User Messaging Platform (UMP). Where the law requires it (for example in the EEA, the UK and Switzerland, and in US states with privacy laws), you see Google's consent form and can accept, reject or customise. Where Google tells the app that privacy options are required, Settings → Privacy options lets you change your choice at any time.
• What Google collects. When ads are requested or shown, the Google Mobile Ads SDK collects information such as your device's advertising identifier (on Android), IP address, app and device information, ad interactions and diagnostic data. Google uses it to show ads (personalised only if you consent), measure them, and prevent fraud and abuse. This happens under Google's own policies: How Google uses information from sites or apps that use its services and the Google Privacy Policy.
• Other ad networks (AdMob mediation). To fill an ad request, AdMob may let these networks bid, and the winner shows the ad: Liftoff Monetize (Vungle), Meta Audience Network, Mintegral, Unity Ads. Their SDKs are part of the app. When a network requests or shows an ad, it receives information such as your device's advertising identifier, IP address, app and device information and ad interactions, and uses it under its own privacy policy (linked above) to show and measure ads and prevent fraud. They receive your choice from Google's consent form (IAB consent and US privacy signals) and show personalised ads only where you allowed it.
• Which ads. The ad formats and how often ads appear can be adjusted remotely (Firebase Remote Config, below), within fixed limits built into the game. Your account and backup are never given to ad networks.
• iPhone and iPad. This app is not offered on the App Store.
• Your controls. On Android you can reset or delete your advertising ID in Settings → Privacy → Ads (wording varies by phone). You can also manage Google ad personalisation at adssettings.google.com.
• Ads are limited to content suitable for a general audience (maximum ad content rating “PG”), and ad requests are not tagged as directed to children because the game is made for players aged 13 and over. Banners appear at the bottom of the home screen, lists, the result screen and the kitchen (outside the work area). A full-screen ad may appear only when you leave a result screen: none in levels 1–2, then at most every second level, and every level from level 6, at least 60 seconds apart, none in your first 45 seconds and at most 10 per session. An app-open ad may appear on a cold start (never the first launch) or when you come back after at least 30 seconds away, at most once per 30 minutes and never over a level in progress. Rewarded ads play only when you tap a “Watch ad” button (double coins, double daily bonus, shop unlocks, finish a step, a super tool for one level, a mystery gift). The feature tour may include one page labelled “Sponsored”.

App configuration (Firebase Remote Config)

• Firebase Remote Config (Google): when the game starts, and while it is open, it downloads settings such as which ad formats are on, how often ads may appear and whether sign-in is offered. The request carries a Firebase installation ID and app and device information, but no personal information.
• The game does not include Firebase Analytics, Firebase Crashlytics or any other analytics or crash-reporting SDK, so we receive no usage statistics or crash reports from it. (Google's ad SDK collects its own data for ads, described above.)
• See Firebase privacy and security.

Children

This game is made for teens and adults (13 and over) and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created a Zylos account, contact us and we will delete it, or delete it at the link above.

Keeping and deleting your information

• Everything the app stores on your device lives in its private storage. Uninstalling the app deletes it. You can also use Android's Settings → Apps → Yum Studio 3D → Storage → Clear storage.
• Android cloud backup of the app's data is turned off, so no copy is made in your Google account by Android.
• Your Zylos account and backups are kept until you delete them (at unity.zylostechsolutions.com/delete-account). Deleting removes them from Firebase right away; copies in Google's encrypted system backups expire within Google's standard backup cycle.
• Information collected by Google for ads is retained and deleted under Google's policies; see the links above.

Security

• All connections to Firebase and to Google's ad services use encryption in transit (HTTPS/TLS). Google encrypts stored Firebase data at rest.
• Firestore security rules allow only the signed-in owner to read or write their profile and backups; nobody else, including other users, can read them.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, India's DPDP Act or US state privacy laws), you may have rights to access, correct, export or delete your personal information, to object to or restrict its processing, and to withdraw consent. You can delete your account and backups yourself at the web link above, see your account details in Settings → Account, and change your ad consent in the app. For anything else, including a copy of your account data, contact us at the address below. You may also complain to your local data-protection authority.

Changes to this policy

If the app's data practices change, we will update this page and the date at the top before the change ships. Significant changes will also be noted in the app's release notes.

Contact

Questions or requests: support@zylostechsolutions.com. If you email us, we receive your email address and whatever you write. We use it only to reply and delete it when the conversation is finished.

Help and frequently asked questions: Yum Studio 3D support. Terms for using the game: terms of use.

Publisher: Zylos TechSolutions LLP.