DRAFT for Austin's review. Not legal advice. Written by Claude, which is not a lawyer. Written to match the "Store build (planned)" column of legal/data-inventory.md (v0.2, 2026-10-31) and nothing more. Every [BRACKETED PLACEHOLDER] needs an answer before this goes live. If the build changes, change the inventory first, then this page.

Privacy policy

Last updated: 2026-10-31 (draft)

How Takeoff Tycoon handles your data on iOS and Android.

Effective date: [EFFECTIVE DATE]

Who we are

Takeoff Tycoon is made by Take0 ("Take Zero"), a one-person studio. Take0 is a sole proprietorship run by [AUSTIN'S LEGAL NAME, as shown as the seller on the App Store and the developer on Google Play] in Louisiana, USA. "We" and "us" on this page means Take0.

Questions about privacy: [support@takeofftycoon.com]

The short version

The game keeps your save on your phone. We don't run a server and we don't have your save.
There are no accounts, and we don't use analytics.
Purchases go through Apple or Google. We never see your payment details.
Ads are optional. If you choose to watch one, Google's ad service collects some device data to show and measure it. Buying Full Access removes ad prompts.
We don't sell your data. We don't have any to sell.

What the game stores on your device

The game saves your progress (your lab, money, research, settings, and so on) on your phone or tablet. It also remembers whether you've bought Full Access or other unlocks, so it knows what to show.

This stays on your device. It isn't sent to us. If you delete the game, the save on your device goes with it (unless you've turned on cloud save, below).

Purchases

Full Access and any small unlocks are bought through the App Store (Apple) or Google Play (Google). They handle the payment. We never see or store your card number, your name, or your billing details.

The store tells the game which items you own, and the game stores that on your device. "Restore Purchases" in Settings asks the store again, for example on a new phone.

Apple's and Google's own privacy policies cover what they do with your purchase:

Apple: [LINK: https://www.apple.com/legal/privacy/]
Google: [LINK: https://policies.google.com/privacy]

Optional rewarded ads

Some screens offer a button to watch a short ad for a stated in-game reward. You never have to press it. The game is fully playable without watching any ad.

Who shows the ads. Ads are served by [AD SDK: Google AdMob (planned)], an ad service run by Google. Google is a separate company and handles this data under its own policies, not ours.

What the ad service collects. When the ad service runs, it may collect, per Google's own disclosure:

your device's advertising ID (if allowed, see below) or other app-level IDs
your IP address, which can give a rough idea of where you are (city or region, not your exact location)
how you interact with ads (which ads you saw, taps, video views)
basic app and device diagnostics (for example app launch time and crashes in the ad code)

Google uses this to show ads, measure them, and prevent fraud. We don't receive this data in a form that identifies you; we only see totals in our AdMob reports (for example, how many ads were watched).

[DEV CONFIRM: Does the game start the ad service for players who own Full Access? Recommended answer: no. If no, add: "If you own Full Access, the game does not start the ad service at all."]

The advertising ID. [DEV CONFIRM: will the game use the device advertising ID? The text below assumes yes.] Your phone has an advertising ID that ad services can use to personalise ads. You control it:

iPhone and iPad: the first time it matters, the game shows Apple's "Allow tracking?" prompt. If you tap "Ask App Not to Track", the ad service doesn't get your advertising ID, and rewarded ads still work (they're just less personalised). You can change this any time in Settings > Privacy & Security > Tracking.
Android: you can reset or delete your advertising ID in your phone's Settings (usually Settings > Privacy > Ads, or Settings > Google > Ads).

If you're in the EEA, the UK or Switzerland. Before any ad is loaded, the game shows a consent screen from Google's consent tool. It lets you choose whether your data may be used for personalised ads. You can change your choice any time from [IN-GAME LOCATION, e.g. Settings > Privacy options]. If you say no, you may still see non-personalised ads, which use less data.

More about how Google uses this data:

How Google uses information from sites or apps that use its services: [LINK: https://policies.google.com/technologies/partner-sites]
Google's privacy policy: [LINK: https://policies.google.com/privacy]
Google's ad settings: [LINK: https://myadcenter.google.com]

To stop ad prompts entirely, buy Full Access. Or just don't tap the ad buttons; nothing is shown unless you do.

Optional cloud save

[DEV CONFIRM: is cloud save in version 1.0? If not, remove this section until it ships.]

You can choose to back up your save to the cloud so it moves with you to a new device. It's off unless you turn it on.

iPhone and iPad (iCloud): your save is stored in your own iCloud account, run by Apple. The game doesn't ask you to sign in; it uses the Apple account already on your device. We can't see it. Apple's privacy policy applies.
Android (Google Play Games): this needs you to sign in to Google Play Games, which is a Google account, not a Take0 account. Your save is stored in your Play Games account, run by Google. When you're signed in, Play Games also handles your gamer name and avatar, and collects its own diagnostics, under Google's privacy policy. We can't see your save. [DEV CONFIRM: sign-in is optional and the game works fully without it; confirm how Play Games v2 automatic sign-in behaves in our build.]

To delete a cloud save: [DEV CONFIRM wording, e.g. "use Settings > Delete cloud save in the game", or remove it through your iCloud or Google Play Games settings].

Emailing us

If you email us for support, we get your email address and whatever you write (and anything you attach, like a screenshot or a save file). We use it only to answer you and fix the problem. Email to our address is passed through Cloudflare's email forwarding to a Gmail inbox, run by Google.

We keep support emails for [RETENTION PERIOD, e.g. 2 years] and then delete them. You can ask us to delete your emails sooner.

[DEV CONFIRM: if any feedback form stays inside the store build, list here exactly what it sends and to whom. Data inventory currently says: mail link only.]

What we don't do

No accounts. You never sign up with us.
No analytics. We don't track how you play.
[DEV CONFIRM: crash reporting. Inventory says "tbd". If none: "No crash reporting tool of our own." If added, name it and what it sends.]
No Take0 server. Nothing about your game is sent to us.
We don't sell or rent personal data, and we don't share it with data brokers.
We don't use your data for anything other than what this page says.

Children

Takeoff Tycoon is rated for ages 13 and up and isn't designed for or aimed at children. We don't knowingly collect personal information from children under 13. If you think a child under 13 has sent us information (for example, by email), contact us and we'll delete it.

Your choices and rights

Ads: don't tap the ad buttons, buy Full Access, deny tracking on iOS, reset your ad ID on Android, or change your consent choice (EEA/UK/Switzerland) in [IN-GAME LOCATION].
Your save: it's on your device. Deleting the game deletes it. Cloud saves can be deleted as described above.
Data we hold: the only personal data we hold is email you've sent us. You can ask to see it, correct it, or delete it by emailing [support@takeofftycoon.com]. We'll answer within [30] days.
Data held by Apple or Google (purchases, iCloud, Play Games, ads): ask them directly, using the links above. We can't access or delete it for you.
EEA/UK users: you have rights under data protection law, including to complain to your local data protection authority. Where we rely on your consent (personalised ads), you can withdraw it any time. [LAWYER CHECK: confirm whether a fuller GDPR section is needed if the game is offered in the EEA/UK, or whether to limit launch countries.]

Keeping data safe

We keep as little as possible. The game doesn't send your save or play data to us. The ad service and the stores send data over encrypted connections, per their own documentation. Our email account is protected with a strong password and two-step sign-in.

Third parties

The only outside companies involved are Apple, Google (stores, ads, Play Games, Gmail) and Cloudflare (email forwarding). We chose them because they publish their own privacy commitments; their policies, linked above, govern what they do with data. We don't share your data with anyone else.

Changes to this policy

If what the game does with data changes, we'll update this page and the date at the top before the new version ships. If the change is significant (for example, a new kind of data), we'll also say so in the update notes.

Contact

Take0, [AUSTIN'S LEGAL NAME], Louisiana, USA

Email: [support@takeofftycoon.com]

[OPTIONAL: mailing address, if a lawyer advises one is needed]

Internal draft appendix — remove before publishing

[DATA SAFETY / APP PRIVACY MAPPING]

Draft for Phase 2. Not for publishing. Remove this appendix from the public page. Fill the store forms from the final SDK versions' own disclosure pages; Google says the developer alone is responsible for the answers. Assumes AdMob, ad ID used, no crash reporting, no analytics, cloud save in 1.0.

Data	Who collects	Apple App Privacy label	Linked to user? (Apple)	Used to track? (Apple)	Google Data safety category	Collected / shared (Google)	Purpose
Game save, settings, entitlements on device	Game	Not collected (on device only)	n/a	n/a	Not declared (on device only)	n/a	App functionality
Payment details	Apple / Google	Not collected (store handles payment)	n/a	n/a	Not declared	n/a	n/a
Advertising ID / app-level IDs	AdMob SDK	Identifiers > Device ID	[CHECK] likely yes	Yes, if ATT allowed	Device or other IDs	Collected + shared	Advertising, analytics, fraud prevention
IP address (rough location)	AdMob SDK	Location > Coarse Location	[CHECK]	[CHECK]	Location > Approximate location [CHECK: AdMob's page lists "IP address"]	Collected + shared	Advertising, fraud prevention
Ads seen	AdMob SDK	Usage Data > Advertising Data	[CHECK]	[CHECK]	App activity > App interactions	Collected + shared	Advertising, analytics
Taps, launches, video views	AdMob SDK	Usage Data > Product Interaction	[CHECK]	[CHECK]	App activity > App interactions	Collected + shared	Advertising, analytics
Crash logs (ad code)	AdMob SDK	Diagnostics > Crash Data	Not linked (per Google)	No	App info and performance > Crash logs	Collected	Analytics, advertising
Performance (launch time, hang rate)	AdMob SDK	Diagnostics > Performance Data	[CHECK]	[CHECK]	App info and performance > Diagnostics	Collected + shared	Analytics, advertising
Cloud save (iCloud)	Apple	Not collected by us [CHECK: stored in user's own iCloud, not accessible to developer]	n/a	n/a	n/a	n/a	App functionality
Cloud save + gamer identity (Play Games)	Play Games SDK	n/a	n/a	n/a	Personal info > User IDs / App activity > Other user-generated content [CHECK against PGS data-collection page]	Collected	App functionality
Play Games diagnostics / analytics	Play Games SDK	n/a	n/a	n/a	App info and performance > Diagnostics	Collected	Analytics (Google's SDK improvement)
Support email (address + message)	Take0 via email	Not collected in the app (user emails outside the app) [CHECK]	n/a	n/a	Not declared if only via mail link outside the app [CHECK]	n/a	Customer support