Privacy Policy

Effective Date: September 18, 2026

This User Data Sovereignty & Protection Protocol formulates the exact rules Yimu Health Care (hereby noted as "we," "our," or "us") observes to assimilate, compute, and fortify your personal telemetry whenever you interact with the Cat Colors: Color Sudoku application distributed on Google Play. Our singular imperative in managing this digital footprint is to engineer a frictionless gaming environment while rigorously shielding your privacy.

1. Data Assimilation Mechanics

We implement methodical ingestion pipelines to catalogue and oversee your personal data, governed by strict cyber-hygiene principles. The subsequent categories break down the exact telemetry we record and our operational handling.

1.1 Direct Telemetry Recording Upon launching Cat Colors: Color Sudoku on your hardware, our network nodes are programmed to automatically catalogue these specific data vectors:

Network & Routing Vectors: Your IP routing address, precise timestamps of server handshakes, and broad hardware family classes.

Hardware Topography: The device maker, distinct hardware model, base operating system (Android/Google OS variants), UI language parameters, and geographic time zone variables.

Persistent Hardware Keys: Unique alphanumeric strings anchored to your device. This incorporates the Google Advertising ID (GAID), Android Device ID, Google Play Games ID, and the primary Google Account token.

Interactive Milestones: Your chronological game progression, maximum score outputs, digital achievement unlocks, and raw multiplayer networking payloads.

Economic Transcripts: Databases logging fiat microtransactions, depletion of virtual currencies, local UI states, and ledger balances for digital assets.

1.2 Third-Party Identity Federation Should you elect to bypass native login routines in favor of a federated hub like Google Play Games Services, our backend will synchronize allowable profile vectors (e.g., public monikers) utilizing their secure APIs. This bridging is unconditionally reliant upon your prior authorization of the external provider's data manifest. Users are mandated to inspect the privacy architectures of these federated networks:

Google Play Games / Google Services: https://policies.google.com/privacy

By utilizing federated authentication, you legally affirm that:

Your usage aligns flawlessly with the external hub's active Terms of Service.

You have attained the legal age threshold required by that specific platform in your regional jurisdiction.

2. Legal Imperatives for Computation

We subject your personal telemetry to computation exclusively for the distinct operational mandates below, anchoring every process to recognized statutory bases:

Service Continuity & Issue Mitigation: To process in-game purchases, answer helpdesk queries, and sustain server-to-client connections; to execute the core game loop, inject your saved configurations, and broadcast software patches or security advisories.

Statutory Basis: Rooted in GDPR Article 6(1)(b) (contractual necessity). This computational effort is structurally unavoidable to uphold our Terms of Service and maintain software availability.

Iterative Refinement & Promotional Ecosystems: To distribute tailored marketing intelligence regarding Yimu Health Care or vetted alliances; to cache your interaction habits; and to deploy heuristic analysis to invent new game mechanics and elevate our promotional and support capabilities.

Statutory Basis: Authorized via GDPR Article 6(1)(f) (legitimate interests). We lean on this to fulfill a valid corporate drive to refine our digital entertainment and optimize user retention.

Programmatic Ad Projection: To broadcast highly relevant commercial advertisements to users who have positively affirmed our ad-tech partners' rights to read their hardware keys.

Statutory Basis: Also validated by GDPR Article 6(1)(f). This ensures our legitimate commercial requirement to monetize the application through optimized ad placements.

3. Archival and Sunset Thresholds

Your personal footprint remains active within our servers solely for the lifecycle mandated to provide the game, clear statutory audits, and navigate judicial inquiries. In specialized edge cases—such as legal disputes, infrastructure forensics, or regulatory compliance holds—we reserve the right to quarantine specific data clusters in cold storage for a legally extended epoch. Concurrently, stripped and aggregated usage metrics are utilized for high-level ecosystem auditing. This anonymous data is generally purged via routine database flushes, unless a severe security mandate demands a prolonged retention cycle.

4. Authorized Information Routing

Respecting your data sovereignty and acting strictly under GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may open secure pipelines to route your data to vetted external entities in these contexts:

Strategic Alliances: For the execution of integrated technical features, legal compliance workflows, corporate mergers, or any scenario where you have supplied explicit consent.

Judicial & State Authorities: Should we detect a severe policy violation, or if binding subpoenas force us to expose records to protect the IP, physical safety, or legal rights of Yimu Health Care and the general public.

Global Player Network: Triggered by your active participation in server-side matchmaking, digital forums, or global high-score ladders.

4.1 Ad-Tech Coalitions Subject to registering your active consent pursuant to GDPR Article 6(1), we will route your hardware keys to advertising coalitions to power precision ad targeting. Our integrated roster of ad-tech collaborators includes:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Notice: This Protocol does not govern the independent algorithmic handling of these external firms. Please navigate to their respective privacy portals to audit their internal mechanics.

4.2 Infrastructure Sub-Processors To preempt server bottlenecks and guarantee networking stability, we lease processing power and analytic dashboards from specialized enterprise vendors:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

5. Minor Shielding Directives

The Cat Colors: Color Sudoku software is strictly not engineered for, nor commercially aimed at, audiences younger than 13. We maintain an absolute zero-tolerance filter against the intentional assimilation of personally identifiable information (PII) from this demographic. Upon verification that restricted data has circumvented our safeguards, rapid database eradication scripts will be executed. Custodians who identify an unauthorized data leak from a minor must ping our support desk for an immediate purge.

6. Cybersecurity Perimeter

We prioritize your trust and deploy commercially resilient cryptographic barriers to encapsulate your personal records. Nevertheless, the digital community must accept the reality that no cloud infrastructure or internet transmission is flawlessly impenetrable. Therefore, we cannot issue an absolute legal warranty against unauthorized zero-day exfiltration.

7. OS-Level Payload Pushes

Conditioned strictly upon your opt-in flag, we may push system-level payloads, encompassing game alerts, promotional offers, and maintenance logs, directly to your Android/Google interface. You wield absolute authority to kill this authorization and block these payloads via the native notification manager inside your device’s OS settings.

8. Statutory Privacy Privileges

8.1 European Economic Area (EEA) Protections We commit to a standard 30-day (one month) Service Level Agreement (SLA) for privacy resolutions. For highly fragmented inquiries, GDPR Article 12 grants us the legal flexibility to push the resolution deadline by an extra two months. We will proactively transmit an explanatory alert regarding any such delay.

(1) Access Entitlement: Governed by GDPR Article 15, you may petition for a granular readout of your retained records, processing motives, external recipients, and archival lifespans. A digital payload can be extracted, barring intellectual property conflicts.

(2) Processing Objection: Under GDPR Article 21, you can contest processing tied to "legitimate interests" (Article 6(1)(f)). We will kill the active processing threads unless we establish overriding legal justifications. Objecting to direct marketing data usage remains an absolute, unconditional right.

(3) Data Rectification: Under GDPR Article 16, you wield the authority to compel the overwrite of corrupted, inaccurate, or partial database records.

(4) Processing Restriction: Per GDPR Article 18, you may mandate a system-level quarantine on the active processing of your data under narrowly defined legal parameters.

(5) Consent Revocation: Dictated by GDPR Article 7, if a specific workflow hinges upon your consent, you may nullify that consent instantly. This revocation is forward-looking and does not invalidate prior computational actions.

(6) Data Portability Extraction: Under GDPR Article 20, you have the clearance to extract your personal files in a standardized, machine-readable format and route them to an alternate data controller without systemic friction.

8.2 California Resident Privileges (CCPA)

(1) Execution Timeline: We target a 45-day statutory turnaround for verifiable consumer inquiries. If technical complexities necessitate a prolongation (up to a 90-day absolute ceiling), a formal written status log will be dispatched.

(2) Retroactive Lookback: Evidentiary data disclosures provided to you are strictly limited to the 12-month trailing window preceding your formal inquiry.

(3) Opt-Out Directive: The CCPA enshrines your undeniable right to set a "Do Not Sell" command regarding your personal telemetry.

(4) Right to Know: You are granted full transparency regarding the exact data vectors we assimilate and our operational motives, as transparently hardcoded in this Protocol.

(5) Access to Ledgers: Twice every calendar year, completely free of charge, you may execute a demand for a comprehensive audit of the personal information logged over the trailing 12 months.

(6) Deletion Command: You can issue a mandate for the permanent wiping of personal data collected over the preceding 12 months, provided it does not trigger statutory exemptions (e.g., critical bug fixing, legal compliance, or security auditing).

9. Triggering Data Eradication

Should your personal records no longer serve a functional requirement for our services, you possess the authority to mandate a permanent data purge. To trigger this systemic erasure protocol, please route your formal directive to the designated compliance email below.

10. Compliance Hub

For regulatory clarifications, security feedback, or the execution of your formal privacy rights, direct all correspondence to: Contact Email: sisknxbxxt78902@gmail.com