Privacy Policy

RogueWave Labs ("we," "our," or "us") operates the ReflexLab mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using ReflexLab, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

ReflexLab is designed with privacy in mind. Your gameplay data is stored locally on your device and stays there. The only optional cloud feature is the weekly leaderboard, which publishes a display name and a score.

1.1 Information Provided by You

If you choose to activate your Cloud Identity, we collect:

• Display Name: A custom name you choose to represent yourself on global leaderboards.
• Leaderboard Score: When you finish a session, your best score for that game mode is published to that week's leaderboard in Firebase Firestore, alongside your display name. Nothing else is uploaded — your session history, personal bests, streaks and Daily Challenge results never leave your device.

1.2 Information Collected Automatically

1.3 Information Stored Locally

Your game settings, session history, personal bests, streaks and Daily Challenge progress are stored only on your device. They are never uploaded.

2. Cloud Identity

When you activate your Cloud Identity, a unique, anonymous identifier is generated for your device. This allows you to:

• Publish a display name that other players can see.
• Post your scores to the weekly Global Leaderboards.

That is the full extent of it. Cloud Identity is not an account and not a backup. It does not store, sync or restore your session history, personal bests, streaks or Daily Challenge progress, it does not carry anything between devices, and it does not survive a reinstall — the identifier itself is regenerated when the App is installed again.

You can manage your identity settings, including changing your display name (subject to a 30-day cooldown), directly within the App settings.

3. Data Deletion & 'Scrub' Policy

We believe you should have total control over your data. You can exercise your 'Right to be Forgotten' at any time. For detailed step-by-step instructions, see our Data Deletion Guide.

Please note that once data is deleted via this method, it cannot be recovered.

Because your Cloud Identity is anonymous and tied to the installation, you must use 'DELETE DATA' before uninstalling the App. Once the App is removed the identifier is gone for good, and neither you nor we can locate or delete the leaderboard entries associated with it.

4. Third-Party Services

ReflexLab uses the following third-party services that may collect information:

5. How We Use Your Information

We use the collected information for the following purposes:

• To provide competitive features (Leaderboards, Daily Challenges)
• To display advertisements and support the free operation of the App
• To deliver, verify and restore your ad-free purchase
• To analyze app usage and improve user experience
• To identify and fix crashes, bugs, and technical issues
• To understand aggregate user behavior and preferences

6. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your data based on:

• Consent — For personalized advertising and analytics. You can manage your consent through the privacy settings within the App.
• Legitimate interests — For non-personalized ads (frequency capping, fraud prevention), essential crash reporting, and maintaining the integrity of Global Leaderboards.
• Performance of a contract — For processing, verifying and restoring your ad-free purchase, which we cannot deliver to you without it.

7. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights regarding your personal information:

• Right to Know: You can request information about the categories of personal information we have collected and the purposes for which we use it.
• Right to Delete: You can request that we delete personal information collected from you (easily accessible via the 'Delete Data' button in the App).
• Right to Opt-Out: You have the right to opt-out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising.

We do not "sell" your personal information in the traditional sense. However, like many apps, we use third-party services (AdMob) that may process device identifiers for advertising purposes, which may be considered a "sale" or "sharing" under California law. You can exercise your right to opt-out via the App's privacy settings.

8. Data Retention

9. Data Sharing and Disclosure

We do not sell your personal information. Data may be shared with:

• Service providers — Google (AdMob, Firebase, Google Play Billing) and RevenueCat, as data processors providing advertising, analytics and purchase management
• Purchase history — Your purchase receipt and entitlement status are shared with RevenueCat so the App can tell whether you own the ad-free upgrade
• Global rankings — Your chosen display name and scores are visible to other players on the Global Leaderboard.
• Legal requirements — When required by law or to protect our rights

10. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence, including the United States, where Google's servers are located. These transfers are protected by Standard Contractual Clauses and other appropriate safeguards.

11. Your Rights

Depending on your location, you may have the following rights:

• Access — Request information about data we process about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data (available via 'Delete Data' in App)
• Restriction — Request limitation of processing
• Portability — Request a copy of your data in a portable format
• Objection — Object to processing based on legitimate interests
• Withdraw consent — Withdraw consent at any time through the App's privacy settings

How to Exercise Your Rights

• In-App: Access "Privacy Settings" in the App settings to manage consent and data deletion
• Advertising ID: Reset or disable your Android Advertising ID in your device settings (Settings → Google → Ads)
• Contact us: Email us at the address below for data access or other requests
• Uninstall: Uninstalling the App will stop all future data collection (but does not automatically delete your chosen display name from old leaderboards unless you use 'Delete Data' first)

12. Children's Privacy

ReflexLab is a general-audience application intended for players aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal information from them. The app carries a 3+ content rating, which describes its content — it does not mean the app is aimed at young children. Because ReflexLab displays third-party advertising and uses an advertising identifier, it is not configured as a child-directed service.

If we discover that a child under 13 has provided us with personal information (beyond the anonymous identifiers core app functions require), we will take immediate steps to delete such data. Parents and guardians with questions can reach us at the address below.

13. Data Security

All data transmitted between the App and third-party services is encrypted in transit using TLS (Transport Layer Security). While we implement reasonable security measures, no method of electronic transmission or storage is 100% secure.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.