Privacy Policy

This Privacy Policy (the “Policy”) explains how SIA “Explovis” processes the personal data of users of the mobile game “One Day It Blooms” (the “Game”) and of visitors to the official web pages of the Game.

The Policy has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, the “GDPR”) and the Personal Data Processing Law of the Republic of Latvia. The terms “personal data”, “processing”, “controller” and “processor” have the meanings given to them in Article 4 of the GDPR.

The Policy does not govern processing carried out by Google as an independent controller, including in Google Play and Google Play Games. Such processing is governed by the privacy policies of those services (Clause 6.1(b)).

The controller of your personal data is SIA “Explovis”, a limited liability company (sabiedrība ar ierobežotu atbildību) registered in the Commercial Register of the Republic of Latvia (the “Company”, “we” or “us”):

1. registration number: 40203786029;
2. legal address: Riga, Terbatas iela 68 - 3, LV-1001, Latvia;
3. email: support@explovis.com;
4. website: explovis.com.

The Company has not designated a data protection officer, as it is not required to do so under Article 37 of the GDPR. Questions and requests concerning personal data may be sent to the email address indicated in Clause 2.1.

We process only the personal data required to provide the Game, keep it secure and stable, provide support and comply with our legal obligations, as well as optional data that you have agreed to provide.

The Game does not display advertising, does not contain advertising software development kits and does not access the advertising identifier of your device. We do not sell personal data and do not use it to build advertising profiles.

We advertise the Game on social networks. If you install the Game through such an advertisement, Google Play passes the campaign parameters of the link to the Game. We use these parameters only as part of the gameplay statistics described in Section 4 and do not transfer any data to social networks or advertisers.

The Game does not access your location, contacts, camera, microphone or photo library. Pictures taken in the photo mode are saved on your device at your request.

Payments are processed by Google. We do not receive your payment card or bank account details.

You are under no statutory obligation to provide personal data. The player ID is, however, necessary for the performance of the contract: without it the online features of the Game, purchases and the leaderboard cannot be provided.

Our web pages are hosted by GitHub, Inc. and do not use cookies, analytics or advertising tools. When you open them, your browser sends GitHub your IP address and the technical data of the request, and GitHub logs IP addresses for security purposes as an independent controller (GitHub Privacy Statement). We do not receive these logs. The trailer on the page of the Game is loaded from YouTube only after you click it. From that moment Google receives your IP address and the technical data of your device and may store information on your device, as an independent controller (Google Privacy Policy).

We process personal data on the following legal bases under Article 6(1) of the GDPR:

1. performance of a contract (point (b)), where the processing is necessary to provide the Game and its features under the Terms of Use;
2. consent (point (a)), for optional data that you have switched on; you may withdraw your consent at any time;
3. compliance with a legal obligation (point (c)), for accounting records, evidence of consent and the protection of children;
4. legitimate interests (point (f)), namely the security and stability of the Game, the prevention of abuse and fraud, and the handling of reports and correspondence.

The categories of personal data, their sources, the purposes of processing and the legal bases are set out in the table below. Where a row indicates two legal bases, each of them applies to the corresponding purpose.

Where we rely on legitimate interests, we have assessed that those interests are not overridden by your interests or fundamental rights and freedoms. You may request information on this assessment at the email address indicated in Clause 2.1.

The local copy of your save and settings, your year of birth, pictures taken in the photo mode and scheduled reminder notifications are stored on your device only and are not transmitted to us. They are removed when you uninstall the Game or clear its data.

You may switch reminder notifications off in the settings of the Game or of the Android operating system.

We disclose personal data only to the following recipients and only to the extent required for the purposes set out in Section 4:

1. Unity Technologies (Unity Gaming Services: Authentication, Cloud Save, Cloud Code, Economy, Leaderboards, Remote Config and, where you have consented, Analytics; Unity Diagnostics), which processes personal data on our behalf as a processor under Unity’s data processing terms (Unity Privacy Policy);
2. Google (Google Play, Google Play Billing, Google Play Games, Google Play Console), which acts as an independent controller in respect of downloads, payments, refunds, sign-in with Google Play Games and reviews (Google Privacy Policy);
3. Discord, the messaging service through which notifications of new bug and crash reports are delivered to the private channel of the Company; a notification contains the type, category and text of the report, the error message and stack trace, the device model and memory size, the versions of the Game and of the operating system, the language, whether the sender is under 13 and the state of the game, but not the email address, the player number or player ID, the log lines or the screenshot, which remain in our server storage;
4. Hostinger, our email service provider;
5. pats.lv, our accounting software provider, which stores our accounting records on our behalf; these records may contain purchase records from Google Play reports (order number, product, price, currency, date, country) but contain no names or payment details;
6. contractors engaged in the development or support of the Game, only where their work requires access to personal data and only under a written agreement obliging them to keep the data confidential and to process it solely on our instructions;
7. legal and tax advisers bound by professional secrecy, to the extent necessary for their advice;
8. state authorities and courts, where required by law or necessary for the establishment, exercise or defence of legal claims;
9. a purchaser of the Game or a successor of the Company in the event of a sale of the Game or a sale, merger or reorganisation of the Company; the recipient shall continue to apply this Policy or inform you of any change in advance.

Other players can see your nickname, score and position on the leaderboard. When you enter the friend code of another player, that player is informed that the invitation has been used.

We do not sell or rent out personal data.

Unity, Google, the messaging services and, where applicable, our contractors may process personal data outside the European Economic Area, including in the United States.

Such transfers take place on the basis of an adequacy decision of the European Commission, including the EU-U.S. Data Privacy Framework in respect of certified recipients (Article 45 GDPR), or the standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR), as provided in the data protection terms of the respective recipient. You may request information on these safeguards at the email address indicated in Clause 2.1.

We keep personal data only for as long as necessary for the purposes for which it is processed, as set out below. At the end of the retention period the data is deleted or anonymised.

If you withdraw your consent to crash reports, no further reports are sent. Reports already received are deleted at the end of the period indicated above, or earlier at your request. When you delete your data in accordance with Section 9, the reports kept in our server storage are deleted immediately, and the notifications of them in our private channel are deleted at the end of the period indicated above.

You may delete your data at any time and free of charge in the Game: Settings → Privacy & data → Delete my data. After your confirmation the Game deletes from our servers your account, garden, Petals, Dew, items, nickname, leaderboard entries, invitations and the reports kept in our server storage, deletes the game data stored on your device and requests Unity to delete your gameplay statistics. If you received the pre-registration reward, we keep only a note that its Google Play receipt has been used, without any link to your account, so that the same reward cannot be received again. The records of your Google Play orders are also kept without any link to your account (Section 8). An internet connection is required.

If you no longer have access to the Game, you may send a request to support@explovis.com with the subject “Delete my One Day It Blooms data”, stating your player number (Settings → Your ID) or nickname and, if you made purchases, the order number from your Google Play receipt, so that we can verify that the account belongs to you. We shall delete the data within one month and confirm the deletion by email.

Deletion is irreversible: the garden and unused Dew cannot be restored. Purchase records required by law are retained in accordance with Section 8. Uninstalling the Game does not delete the data stored on our servers.

If you signed in with Google Play Games, you may also revoke the access of the Game in the settings of your Google account.

Subject to the conditions laid down in the GDPR, you have the right to:

1. access your personal data and obtain a copy of it (Article 15);
2. have inaccurate personal data rectified (Article 16);
3. have your personal data erased (Article 17; Section 9);
4. restrict the processing of your personal data (Article 18);
5. receive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller (Article 20);
6. object to processing based on legitimate interests (Article 21);
7. withdraw your consent at any time by switching off crash reports or statistics in Settings → Privacy & data, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7(3)).

Requests shall be sent to support@explovis.com. We shall respond within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests; in that case we shall inform you of the extension and the reasons for it within one month. Requests are free of charge unless they are manifestly unfounded or excessive (Article 12(5) GDPR).

Where we have reasonable doubts concerning the identity of the person making a request, we may ask for additional information, such as the player number or the order number of a purchase, to confirm it.

You have the right to lodge a complaint with the Data State Inspectorate of the Republic of Latvia (Datu valsts inspekcija) or with the supervisory authority of the EU Member State of your habitual residence or place of work (Article 77 GDPR).

The Game is intended for a general audience. On first launch the Game asks for the year of birth of the player on a neutral screen without a pre-selected answer. The year of birth is stored on the device only.

The features of the Game depend on the age of the player:

1. under 13: the Game is played as a guest only. Sign-in with Google Play Games, a custom nickname (the Game assigns one), the email field, the screenshot and the technical details of the bug report form and optional data are not available, and the player number is not shown in the notifications of their bug reports. The online features use only the random player ID and player number required to save the garden, to operate the shop and the leaderboard and to handle bug reports, which constitutes support for the internal operations of the Game and not advertising or profiling;
2. 13 to 15: sign-in with Google Play Games and a custom nickname are available; optional data is not offered;
3. 16 and over: crash reports and gameplay statistics may be switched on.

The age of 16 is the highest age from which a child may consent to information society services under the law of any Member State of the European Union (Article 8(1) GDPR).

Players under 18 require the permission of a parent or guardian to make purchases. Parents may require approval of every purchase in the family settings of Google Play.

A nickname should not contain the real name or other personal details of the player. If you believe that a child has provided us with personal data that we should not hold, you may notify us at support@explovis.com and we shall delete that data.

Our server automatically rejects invalid purchase receipts and implausible scores. When Google informs us that a payment for Dew was refunded or reversed, our server automatically removes the Dew received for it and records any part of it that was already used as owed, as provided in the Terms of Use; the Game tells you about it, and you may contact us at support@explovis.com if you believe this was a mistake. We do not take decisions based solely on automated processing which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 of the GDPR.

Data is transmitted between the Game and Unity services over encrypted connections and stored on the secured infrastructure of Unity. Access to the developer accounts of the Company at Unity and Google Play is limited to persons authorised by the Company and is protected by two-factor authentication. The channels in which reports are received are private.

In the event of a personal data breach we shall notify the Data State Inspectorate without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the breach is unlikely to result in a risk to the rights and freedoms of natural persons (Article 33 GDPR). Where the breach is likely to result in a high risk to your rights and freedoms, we shall also inform you without undue delay (Article 34 GDPR).

We may amend this Policy when the Game or the applicable law changes. The current version of the Policy and its effective date are indicated at the top of this page.

We shall announce material amendments in the Game or on the Google Play page of the Game before they take effect. Where an amendment concerns processing based on your consent, the Game shall ask for your choice again.