Shiftgram / Privacy Policy
Shiftgram Privacy Policy
Last updated: November 4, 2026
Who we are
Shiftgram is a picture-logic puzzle game for iPhone and Android, made by Novvot Labs LLC ("Novvot Labs", "we" or "us"). This policy explains what data the game collects, why, who handles it and what choices you have. Our studio privacy policy covers this website and email; this page covers the game.
Questions go to privacy@novvot.com.
What we collect
You can play without an account, and we only receive your name and email address if you choose to sign in. Your game itself stays on your phone unless you sign in.
| Data | What it is | Who it applies to |
|---|---|---|
| Player ID | A random ID from anonymous sign-in. It runs Leagues and downloads new levels | Everyone |
| League data | Your generated name, chosen picture, points, tier and weekly results | Players in a League |
| Name, email address and profile photo link | Sent by Google or Apple when you sign in. The game doesn't read or show them | Players who sign in |
| Saved game | An online copy of your progress: coins, levels, stars, boosters and settings, and whether you bought Remove ads or the Starter pack | Players who sign in |
| Gameplay activity | What you do in the game, such as levels started and won, moves, screens viewed and sessions | Everyone |
| Purchase history | The product, its name and price, the store's transaction ID and receipt, where in the game you bought it and your level at the time. Apple or Google takes payment, and we never see your card details | Players who buy something |
| Purchase device details | Your device's model, system version, languages, boot time and disk size, when you installed the game and, on iPhone, the ID Apple gives one app maker's apps on your device. Unity receives these with each purchase | Players who start a purchase |
| Install IDs | IDs for this installation, used for analytics and crash reports | Everyone |
| Advertising ID | Your device's IDFA or Android advertising ID, and Android's app set ID, used by Google AdMob | iPhone players who allow it, and Android players who haven't deleted it |
| Advertising data | The ads you see, your taps and video views, and how the ad software performs, handled by Google AdMob | Players who see ads |
| Approximate location | Your country, language and time zone, and a rough location worked out from your IP address | Everyone |
| Crash and diagnostic data | What happened in a crash, the state of the game and details of your device | Everyone |
| IP address | Carried by every request to our servers. Our code doesn't store it, but Google Cloud's request logs may record it | Everyone |
We don't link analytics or crash reports to your Player ID, name or email address.
We don't collect your contacts, photos, precise location, health data, messages or browsing history.
Reminders are scheduled on your phone, stay off until you turn them on and send nothing to us. If you share a picture from the Album, it goes only to the app you choose.
Why we use it
We use your data to run the game, keep it stable, improve it and show ads. We don't sell your name, email address or saved game.
| Purpose | Data used | Legal basis in the EEA and UK |
|---|---|---|
| Run Leagues, events and new levels | Player ID, League data | Providing the game you asked for |
| Back up and restore your game | Name, email address, profile photo link, saved game | Providing the game you asked for |
| Process and restore purchases | Purchase history | Providing the game you asked for |
| Fix crashes and keep the game stable | Crash and diagnostic data, install IDs | Our legitimate interest in a working game |
| Understand how the game is played and improve it | Gameplay activity, purchase history, install IDs, approximate location | Our legitimate interest in improving the game |
| Show ads, and personalise them if you allow it | Advertising ID, advertising data, approximate location | Your consent for personalised ads, otherwise our legitimate interest in funding the game |
| Prevent abuse and cheating | Player ID, League data, IP address | Our legitimate interest in fair and secure play |
Who handles it for us
We use a few companies to run the game. This is what each one does and handles.
| Company | What it does | Data it handles | Its privacy information |
|---|---|---|---|
| Google (Firebase) | Runs Leagues, online saves, sign-in, new levels, analytics and crash reports | Player ID, League data, sign-in details, saved game, gameplay activity, install IDs, approximate location, crash data | Firebase, Google |
| Google or Apple sign-in | Confirms who you are when you choose to sign in | Name, email address, profile photo link | Google, Apple |
| Google AdMob | Chooses and shows ads | Advertising ID, advertising data, IP address, approximate location | |
| Apple and Google stores | Take payment and keep purchase records | Purchase details, under your store account | Apple, Google |
| Unity | Provides the software that connects the game to store purchases, and receives a report of each purchase, whether or not it completes | Purchase details, the store's transaction ID and receipt, purchase device details | Unity |
Google may also use advertising data, and Unity some purchase data, under their own policies, so please read those too. We may also disclose data if the law requires it, to protect our rights or players, or as part of selling or reorganising our business.
Ads and your consent
The game asks for your choices before it requests its first ad. Where the law requires it, you're asked to consent to personalised ads, and on iPhone you also see Apple's tracking prompt.
- If you say no: you may still see ads, but they're less tailored to you. The game only uses your iPhone's IDFA if you allow tracking.
- Changing your mind in the game: go to Settings > Privacy choices, which appears where your region requires it.
- Changing your mind on iPhone: go to Settings > Privacy & Security > Tracking.
- Changing your mind on Android: use your device's ad settings to reset or delete your advertising ID. The exact menu varies by phone.
- Choosing which ads you watch: full-screen ads can appear between levels from level 16. Rewarded videos only play when you tap to watch one.
- Removing ads: the Remove ads purchase stops full-screen ads. Rewarded videos stay available if you choose to watch them.
Firebase Analytics doesn't read your advertising ID. Only Google AdMob uses it.
What other players can see
In a League, up to 29 other players in your group can see your generated name, your chosen picture, your points, your tier and your rank.
They never see your real name, email address, Google or Apple profile photo, or saved game. League names are made from a fixed word list, such as an adjective and an animal, and players can't type their own. Your picture is one you've collected in the Album.
How long we keep data, and deleting it
You can delete your account and online data from inside the game at any time. Your game stays on your phone when you do.
| Data | How long we keep it | How to delete it |
|---|---|---|
| Your game on your phone | Until you uninstall the game. Your phone's own backup may keep a copy, depending on its settings | Uninstall the game |
| Sign-in details, online save and League profile, if you signed in | Until you delete your account, or 12 months after you stop playing. Firebase then removes sign-in details from its live and backup systems within 180 days | Settings > Backup and account > Delete account |
| League profile, if you didn't sign in | Until you reset it, or 12 months after you stop playing. Uninstalling doesn't remove it | Settings > Reset league profile, before you uninstall |
| Player ID, if you didn't sign in | 12 months after you stop playing | Email us |
| Gameplay activity | 12 months | Email us |
| Crash data | 90 days, then Firebase starts removing it | It's removed automatically |
| IP addresses in sign-in logs | A few weeks | They're removed automatically |
| Advertising data | Under Google's policies | Ask Google, or change your ad settings |
| Purchase records | Under Apple's, Google's and Unity's policies, and any records we must keep by law | Ask Apple or Google. For Unity's copy, email us, or ask Unity about the data it uses for its own purposes |
Firebase's periods come from its privacy information. You can also ask us to delete your account by following our account deletion page or by emailing support@novvot.com.
Your choices and rights
You can control most of this in the game, and you can email privacy@novvot.com to ask for anything else. Your Player ID is random, so we may need details from you to find your data.
In the game
- Choose whether to sign in. You can play without signing in.
- Delete your account, or reset your League profile.
- Change your ad choices, as described under Ads and your consent.
- Turn reminders on or off.
If you're in the EEA or UK, you can ask to access, correct, delete, restrict or move your data, and you can object to how we use it. You can withdraw consent at any time, and you can complain to your local data protection authority.
If you're in California or another US state with a privacy law, you can ask to know, correct or delete your data. You can also opt out of the "sale" or "sharing" of data for targeted ads through your ad choices. We won't treat you differently for using these rights.
Children
Shiftgram isn't directed at children under 13, and we don't knowingly collect their data. If you think a child has given us data, email privacy@novvot.com and we'll delete it.
Security and international transfers
Data sent between the game and our services is encrypted in transit, but no system is completely secure. Our Firebase data is stored in the United States, and our providers may process data in other countries. Where the law requires, transfers from the EEA and UK rely on safeguards such as Standard Contractual Clauses.
Changes and contact
If we change this policy, we'll post the new version here with its new date, and we'll tell you in the game if the change is significant.
To contact us, email privacy@novvot.com or write to Novvot Labs LLC.