Privacy Policy

Last updated: 10 November 2026

This policy explains how your information is handled when you play the mobile game Cozy Flower Shop (the "App"), visit this website or contact us.

1. Who is responsible
2. In short
3. Information the App uses
4. Advertising
5. Why we use it (legal bases)
6. Service providers
7. International transfers
8. How long it is kept
9. Your choices
10. Your rights
11. Children
12. This website and security
13. Changes

1. Who is responsible

The controller of the personal data described here is:

"We" and "us" in this policy mean this business. Use the email address above for support, privacy questions and any request about your data.

2. In short

• There is no account and no sign-up. We never ask for your name, phone number, contacts or location.
• Your game progress stays on your device. A transfer code lets you move it yourself; it never passes through us.
• Purchases are paid to Apple or Google. We never see your payment details.
• The App sends gameplay analytics tied to a random identifier, not to your name or advertising identifier.
• Ads are only shown when you choose to watch one, and are served by Google AdMob. Where the law requires it, Google's consent form and Apple's tracking prompt let you refuse personalised ads.
• Notifications are scheduled on your device. There is no push server.
• The Contact form is optional. Your email address is only collected if you type it in.

3. Information the App uses

Game progress and settings, on your device

Your shops and cities, money, beds, upgrades, flowers and Flower book, decor, Essence and perfumes, orders and customers, event progress, statistics (such as the number of sessions and the times you opened and left the game, which the App needs to compute what your shop sold while you were away), the shop name you choose, your settings (sound, music, vibration, notifications, language, number format), which tips and offers you have seen, and the store transaction identifiers already credited are saved only on your device. We have no copy and there is no cloud save. Your device's own backup (iCloud backup, Android backup) may include them, under Apple's or Google's terms.

The transfer code in Settings → Your data is a compressed copy of that progress, made on your device. It only leaves your device if you copy it and paste it somewhere yourself, and we never receive it. Anyone who has your code can load your progress, so keep it to yourself.

Purchases

Payments are processed by Apple (App Store) or Google (Google Play) with your store account. We never receive your card details, store password or billing address. Our purchase service, RevenueCat, receives the store's records of your purchases (product, transaction identifiers, date, price, currency, store country, status) together with a random customer identifier that the App creates on its first launch, plus basic app, device and platform information. It uses them to confirm a purchase, deliver it, and restore the one-time purchases (Shop Owner pass, Starter pack, Golden set, decor packs, and the event pass of the event it was bought for). Although RevenueCat calls this identifier "anonymous", it links your purchases over time, so we treat it as pseudonymous personal data.

Gameplay analytics

To see how players progress and improve the game, the App sends our analytics service, Mobiqo, events about how it is used: the welcome slides and the tour; flower beds built and upgrade milestones reached; cities opened and flowers discovered; bouquet orders completed; how long you were away when you come back; rewarded ads offered, started, completed or unavailable; Store visits and the products viewed; when a "not enough coins" message is shown; purchase attempts and their outcome (without the price, which RevenueCat reports); restores; decor bought; distilling; seasonal event rewards; whether you accepted notifications and which notifications you opened; when the App asked the store for a rating prompt; that a Contact form message was sent (not its content); a save recovered after a problem; and unexpected errors. Mobiqo also receives session start and activity times, your device model and the RevenueCat customer identifier above, and, like any server, your IP address, from which it may derive your approximate country. Analytics are never tied to your name, your email address or your advertising identifier. The App works offline; events from an offline session are not sent.

Messages to us

If you use Settings → Contact the developer in the App, we receive the message you write, the email address you enter (optional: leave it empty if you don't need a reply), and, to answer and investigate problems: a device identifier (Apple's identifier for vendor on iOS, the Android ID on Android), the RevenueCat customer identifier, your device model, operating system and version, the App version and the App's language. The form goes to a support endpoint hosted on Google Cloud (Firebase) in the United States, which also logs connection details such as your IP address. The message is delivered to our support inbox, and we are notified of it through a messaging app (Telegram).

If you email us directly, we receive your email address, your message and anything you attach, without the device details. Please don't send passwords, payment card details or other sensitive information.

Notifications

The App asks whether you want notifications with a short card first, and only shows your device's permission prompt if you say yes. If you allow them, the App schedules notes on your device when you leave it (your shop is full, a new flower or city is within reach, a customer is waiting, a seasonal event has started, or a gentle reminder after a long time away): three a day at most and never between 22:00 and 08:00. There is no push notification server and no push token. Choose which ones you get in Settings → Notifications, or turn them off in your device settings.

Ratings

At a few happy moments (opening a new city, completing a city in the Flower book, your first perfume), and no more than three times a year, the App may ask Apple or Google to show their rating prompt. They decide whether it appears, and we never learn who rated the App or how. The App never rewards a rating.

4. Advertising

The App is free and shows rewarded videos only, served by Google AdMob: a video plays only when you tap a button to watch one for a bonus (doubling what your shop sold while you were away, a profit boost, a big order, a tripled order, the daily rare seed). There are no ads between screens, no banners and no ads when the App opens. Google (Google Ireland Limited for users in the European Economic Area and Switzerland, Google LLC elsewhere) decides how it uses the data for its ad services, as an independent controller. To serve, cap, measure and protect ads against fraud, and to personalise them where you allow it, Google may collect:

• your device's advertising identifier: on iOS only if you allow tracking; on Android the advertising ID, which you can reset or delete in your device settings,
• your IP address and the approximate location derived from it,
• information about your device (model, operating system, language) and the App,
• ad interactions (ads shown and clicked) and diagnostics.

The App asks Google for ads suitable for all audiences.

Consent. In the European Economic Area, the United Kingdom and Switzerland, Google's consent form asks for your choices when you first open the App, before any ad is loaded. You can change them at any time with Settings → Privacy choices in the App. On iOS, at the start of your second session, a short card in the App explains why it asks, and Apple's App Tracking Transparency prompt then asks whether the App may track you; change your answer in iOS Settings → Privacy & Security → Tracking. If you refuse, the rewarded videos still work, but their ads are not personalised.

Shop Owner pass. With the Shop Owner pass, every reward is given without a video. The Google Mobile Ads software stays in the App, as it does for every player.

Learn more about how Google uses information from apps that use its services at policies.google.com/technologies/partner-sites and in Google's Privacy Policy.

5. Why we use it (legal bases)

Where the EU or UK General Data Protection Regulation (GDPR) applies:

• Providing the App and your purchases (delivering and restoring purchases, answering questions about them): performance of our contract with you.
• Improving the game and keeping it working (analytics, error reports, preventing abuse): our legitimate interest in understanding how the game is played and fixing problems. You can object at any time (see Your rights). Where the law requires consent for this, we ask for it.
• Answering support messages: our legitimate interest in helping you, or our contract with you when the question is about a purchase.
• Personalised ads, and storing or reading ad information on your device: your consent, given through Google's consent form and, on iOS, Apple's tracking prompt. Where the law allows it without consent, non-personalised ads rely on our legitimate interest in funding the free game with ads.
• Notifications: your permission, given in your device's notification prompt.
• Legal obligations and claims: complying with the law (for example accounting rules) and our legitimate interest in establishing or defending legal claims.

We make no decisions about you based solely on automated processing that have legal or similarly significant effects.

6. Service providers

We share information only with the services that run the App, each for the purposes described above:

• Apple and Google: app distribution, payments, refunds, rating prompts, notification permissions and device backups, under their own privacy policies.
• RevenueCat, Inc. (United States): purchase validation, delivery and restore (privacy policy).
• Mobiqo: gameplay and purchase analytics, hosted on Google Cloud in the United States. RevenueCat sends it the purchase records described above, so purchases can be counted with the gameplay.
• Google AdMob: advertising, as described in section 4.
• Google Cloud (Firebase), Telegram, and our email and website hosting providers: receiving, notifying and answering support messages, and hosting this website.

We may also disclose information when the law requires it, to protect rights and security, or to professional advisers bound by confidentiality. If the App or the business is transferred, the related information may be transferred with it, under this policy.

7. International transfers

We are based in Slovenia (EU). Some providers process information outside the European Economic Area, mainly in the United States: the support endpoint and Mobiqo run in a US Google Cloud region, and RevenueCat and Google process data in the US. These transfers rely on a European Commission adequacy decision (such as the EU-U.S. Data Privacy Framework, for certified recipients) or on Standard Contractual Clauses. Contact us for details about the safeguards that apply to your data.

8. How long it is kept

• Game progress and settings: on your device until you delete the App (or a backup or a transfer code restores them).
• Purchase records: as long as needed to deliver and restore purchases and meet legal, accounting and dispute requirements. Apple, Google and RevenueCat also keep their own records.
• Analytics: only as long as they are useful to understand and improve the game; then deleted or anonymised.
• Support messages: while we handle your request and any reasonable follow-up, then deleted, unless we need them to defend a legal claim.
• Technical logs: for the short time needed to run and secure the services.
• Advertising data: according to Google's retention policies.

Deleting the App removes the game data from your device and stops all collection, but does not delete what we or our providers already hold. Ask us to delete it (see below).

9. Your choices

• Ads: you only see an ad when you choose to watch one. For personalisation: Settings → Privacy choices in the App (where Google's consent applies), iOS Settings → Privacy & Security → Tracking, and your device's advertising ID settings on Android.
• Notifications: Settings → Notifications in the App, or your device's notification settings.
• Analytics: there is no switch in the App yet. Email us to object and we will delete the analytics linked to your identifier and stop processing them.
• Support: contacting us is optional, and the email address in the form is too.

10. Your rights

Under the GDPR you can ask for access to your personal data, its correction or deletion, the restriction of its processing, or a copy in a portable format. You can object to processing based on our legitimate interests, and withdraw a consent at any time without affecting earlier processing.

Write to alexandre@pishko-tech.com. As there is no account, we can only find your records through the identifiers the App uses: the easiest way is to send your request with Settings → Contact the developer in the App, which includes them. We may ask for reasonable information to confirm the request is yours. We answer within one month, and will explain within that month if a complex request needs more time. For the data Google processes for ads, you can also use Google's own tools.

You can complain to the Slovenian supervisory authority, the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana), or to the authority of the country where you live or work. You don't have to contact us first. Depending on where you live, local law may give you similar rights, and we will honour them.

11. Children

The App is not directed to children under 13, and we do not knowingly collect personal data from them. A store age rating is not the age at which a child can consent to data processing: where the law of your country requires a parent's consent, it must be given. If you believe a child has sent us personal data, contact us and we will delete it.

12. This website and security

This website sets no cookies, has no analytics or advertising, and loads nothing from third parties (its fonts are served from this site). The hosting provider receives the usual request information (IP address, browser, pages requested, time) to deliver and protect the site. Links to the App Store, Google Play or other sites lead to services with their own privacy policies.

The App's connections use encryption in transit (HTTPS). No system is perfectly secure, so please avoid sending sensitive information in support messages.

13. Changes

We will update this policy when the App or the services it uses change. The date at the top shows the current version. If a change needs your consent, we will ask for it in the App.