Skip to content
Arrow Exit · Legal

Privacy Policy

What Arrow Exit collects, why, who processes it, and the choices you have.

Effective date: October 09, 2026

Last updated: October 09, 2026

This Privacy Policy explains how Zappsco (“Zappsco”, “we”, “us”) handles information when you play Arrow Exit(the “App” or the “Game”) on iOS or Android.

Arrow Exit is a relaxing puzzle game: you clear a board of arrows by tapping each one in the right order. You can play the whole game without an account. If you choose to sign in, the App backs up and syncs your progress across your devices.

We have tried to keep this policy short and in plain language. If anything is unclear, contact us at support@zappsco.com.

1. Summary

  • An account is optional. Without one, your progress stays on your device.
  • Sign-in uses Apple or Google only. We never see or store a password.
  • When you sign in, your game progress is saved to Google Firebase so it can sync between your devices.
  • The App shows ads (Google AdMob, with Unity Ads through AdMob mediation) unless you buy Premium. Where the law requires it, the App asks for your consent before showing personalized ads. On iOS, it asks for your tracking permission.
  • We use Firebase Analytics and Crashlytics to understand how the game is played and to fix crashes. We do not send your name or email with these events.
  • You can delete your account in the App at any time. That deletes your cloud progress and your sign-in account.
  • We do not sell your personal information, and the App does not send push notifications.

2. Information we collect

2.1 Information stored on your device

The App saves the following on your device so the game works offline and remembers where you left off:

  • Game progress: your current level, the state of a level you have not finished (arrows cleared, hearts left, zoom and position), Challenge stars, unlocked features, achievements and whether you claimed them, and booster counts (Hints, Erasers, Rulers).
  • Gameplay statistics used for achievements, such as levels completed, arrows cleared, streaks, boosters used and zoom use.
  • Settings: sound, music, vibration, dark mode, language, zoom controls, and whether you have seen the zoom tutorial.
  • Purchase and ad state:whether Premium is active (a cached copy of the store’s answer), and counters that control how often full-screen ads appear.
  • Account link: if you have signed in, the ID of the account whose progress is on the device.

This information is stored in the App’s private storage. It does not leave your device unless you sign in (see 2.2) or it is part of the third-party processing described in section 3.

2.2 Account information (optional sign-in)

You can sign in from Settings → Account → Cloud Save with Sign in with Apple (on Apple devices) or Google Sign-In. Sign-in is handled by Firebase Authentication, a Google service.

When you sign in, Firebase Authentication receives and stores:

  • A unique user ID that Firebase creates for you.
  • Details from the provider you chose: your provider account identifier and, where the provider shares them, your name, email address and profile picture link. With Sign in with Apple, the App does not request your name or email, but Apple may still provide an email address, which can be a private relay address if you chose to hide yours.
  • Technical sign-in records kept by Firebase, such as account creation and last sign-in times.

The App shows your name or email on the Account screen so you can see which account is signed in. We do not use your email to send you marketing.

2.3 Game data synced to the cloud (signed-in players only)

While you are signed in, the App stores one document linked to your Firebase user ID in Google Cloud Firestore. It contains:

  • Your current level.
  • Your synced settings (sound, music, vibration, dark mode, language, zoom controls).
  • Unlocked features, achievements (with the date earned and whether you claimed them) and Challenge stars.
  • Gameplay statistics and booster inventory.
  • A flag showing whether ads were removed on any of your devices, and timestamps used to merge changes between devices.

This document does not contain your name, email address or payment details. The App syncs when it starts, after you complete a level, when it goes to the background, and when you sign in. The Firestore SDK may also keep a cached copy on your device so sync works offline.

If you sign out, your progress stays on the device and the cloud copy stays in your account until you sign back in or delete the account.

2.4 Information collected automatically by third-party SDKs

The App uses third-party software development kits (SDKs) that collect some technical information automatically. See section 3 for details. Depending on the SDK, this can include:

  • Device and app details: device model, operating system and version, app version, language and region settings.
  • Identifiers: app-instance and installation IDs. For advertising, the device’s advertising identifier (Google Advertising ID on Android; on iOS, the IDFA only if you allow tracking).
  • IP address, which these services use to estimate a coarse location (country or region). The App does not request precise location.
  • Usage and ad-interaction data, such as ads shown and ads clicked.
  • Crash and diagnostic data (see 3.3).

2.5 Purchases

The App offers one optional, one-time purchase (Premium). Payment is handled entirely by the Apple App Store or Google Play. We never receive your card or payment details. We use RevenueCat (see 3.4) to check whether you own Premium.

2.6 Support emails

If you tap Write Us in Settings, your email app opens with a pre-filled message that includes the App version, your operating system and version, your device model and your current level, to help us answer. Nothing is sent until you send the email yourself. When you do, we receive your email address and whatever you write.

2.7 What we do not collect

The App does not ask for or access your contacts, photos, camera, microphone or precise location, and it does not send push notifications. There is no chat, public profile, or other feature where players share content with each other.

3. Third-party services

We use the following services to run the App. Each one processes data under its own privacy policy.

3.1 Google Firebase (Authentication, Cloud Firestore)

Used for optional sign-in and to store and sync your game progress (sections 2.2 and 2.3).
Privacy: https://firebase.google.com/support/privacy

3.2 Google Analytics for Firebase

Used in release builds to understand how the game is played, so we can improve difficulty, features and performance. The App records game events only: level started, completed or failed; completion time; hearts left; boosters used; zoom use; restarts and revives; feature unlocks; achievements earned and claimed; Challenge starts, completions and stars; and purchase or restore events. These events do not include your name, email or Firebase user ID. The Firebase SDK adds standard technical information such as an app-instance ID, device model, OS version, app version and approximate region.
Privacy: https://policies.google.com/privacy

3.3 Firebase Crashlytics

Used in release builds to receive crash reports and fix bugs. A report can include the crash stack trace, device model, OS version, app version, a Crashlytics installation ID, and short technical log messages from the moments before the crash. We do not attach your name, email or user ID to crash reports.
Privacy: https://firebase.google.com/support/privacy

3.4 RevenueCat

Used to manage the Premium purchase and restores. RevenueCat receives purchase and receipt information from the App Store or Google Play, together with an app user ID. If you are signed in, that ID is your Firebase user ID, so Premium can follow you across devices. RevenueCat also receives basic device and app information.
Privacy: https://www.revenuecat.com/privacy

3.5 Google AdMob and Unity Ads (advertising)

If you have not bought Premium, the App shows banner ads, occasional full-screen ads between levels, and optional rewarded ads (for example, to get a booster or revive). Ads are served by Google AdMob, which can also fill requests from Unity Adsthrough mediation. These networks may collect your device’s advertising identifier, IP address, device and app information, and ad interactions. They use this to show, measure and, where permitted, personalize ads, and to prevent fraud.

  • Consent (EEA, UK, Switzerland and other regions where required): before ads load, the App shows Google’s consent form (Google User Messaging Platform). You choose whether your data may be used for personalized ads.
  • iOS tracking:the App asks for permission under Apple’s App Tracking Transparency before any tracking. If you decline, the advertising identifier (IDFA) is not shared and ads are non-personalized.
  • Buying Premium turns off all ads in the App.

Privacy: Google — https://policies.google.com/technologies/ads; Unity — https://unity.com/legal/game-player-and-app-user-privacy-policy

3.6 Apple and Google sign-in, stores and in-app review

Sign in with Apple and Google Sign-In authenticate you under Apple’s and Google’s own terms and privacy policies. Purchases, and the in-app review prompt behind Rate Us, are handled by the App Store or Google Play.

4. How we use information

We use the information above to:

  • Run the game, save your progress and restore it on your devices.
  • Let you sign in, sync progress across devices, and delete your account.
  • Provide and restore Premium.
  • Show ads, and respect your consent and tracking choices.
  • Understand how the game is played so we can improve levels, difficulty and features.
  • Find and fix crashes and bugs.
  • Answer your support requests.
  • Prevent fraud and abuse, and meet legal obligations.

We do not sell your personal information, and we do not use your account email for marketing.

Legal bases (EEA/UK users). We process data to provide the service you asked for, such as sync and Premium (performance of a contract). We process analytics and crash data to improve and secure the game (our legitimate interests). Personalized advertising relies on your consent, and we keep data where the law requires it (legal obligations).

5. How information is stored and protected

  • Data sent between the App and Firebase, RevenueCat and the ad networks is encrypted in transit (HTTPS/TLS).
  • Your cloud progress is stored in Google Cloud Firestore, linked to your Firebase user ID. Access is restricted to authenticated requests for that account.
  • Google, RevenueCat and Unity may process data on servers in the United States and other countries. Where required, these providers use recognized safeguards for international transfers, such as Standard Contractual Clauses.
  • Data stored on your device is kept in the App’s private storage and protected by your device’s security.

No system is perfectly secure, but we take reasonable steps to protect your information.

6. Data retention

  • On your device: kept until you delete the App, clear its data, or delete your account (see section 7).
  • Cloud progress (Firestore): kept while your account exists. It is deleted when you delete your account in the App.
  • Firebase Authentication account: kept until you delete your account in the App.
  • Analytics and crash data:kept by Google under the retention settings of our Firebase project and Google’s policies. It is not linked to your account.
  • Purchase records: kept by Apple or Google and by RevenueCat as needed to provide and restore purchases and to meet legal and accounting obligations.
  • Advertising data: kept by the ad networks under their own policies.
  • Support emails: kept as long as needed to handle your request and any follow-up.

7. Deleting your account

You can delete your account directly in the App:

Settings → Account → Cloud Save → Delete account, then confirm.

To protect your account, you may be asked to sign in with Apple or Google again first. When deletion succeeds:

  1. Your cloud game data is deleted. The App deletes your progress document from Cloud Firestore.
  2. Your sign-in account is deleted. Your Firebase Authentication account, including the name, email and provider details linked to it, is deleted.
  3. Sign in with Apple is disconnected.If you used Sign in with Apple, the App asks Apple to revoke the App’s access to your Apple ID.
  4. Your game progress on that device is reset. Your level, unfinished level, achievements, unlocked features, Challenge stars, statistics and boosters are cleared. Device preferences (such as sound, music and dark mode) and the cached Premium status stay on the device.
  5. You are signed out.

This cannot be undone. Your progress cannot be recovered after deletion.

Deletion needs an internet connection. If the App cannot reach the server, nothing is deleted and you will see a message asking you to try again. If the cloud data cannot be deleted, your account is left in place so you can retry.

What deletion does not remove:

  • Premium. Your purchase belongs to your Apple or Google store account, not to your Arrow Exit account. You can get it back with Restore Purchases. Purchase records held by Apple, Google and RevenueCat are not deleted by the in-app deletion. RevenueCat may keep a customer record linked to your former user ID.
  • Analytics, crash and advertising data. This data is not linked to your account, so account deletion does not remove it. It expires under the retention periods in section 6.
  • Other devices. Progress already stored locally on another device stays there until you remove it from that device (for example, by uninstalling the App).
  • Support emails you sent us.

If you cannot use the in-app option, or you want us to delete data held by RevenueCat or in our support mailbox, email support@zappsco.com from the address linked to your account. Include your request and tell us which sign-in method you used.

If you never created an account, all your data stays on your device. Uninstalling the App removes it.

8. Your rights and choices

  • Play without an account. Nothing about your progress leaves your device.
  • Sign out at any time in Settings → Account → Cloud Save. Your progress stays on the device.
  • Delete your account in the App (section 7).
  • Ad personalization:in regions where Google’s consent form applies, you choose at launch. On iOS, you can change tracking permission at any time in Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID in your device’s Google or Privacy settings. Buying Premium removes all ads.
  • Device storage: you can delete the App, or clear its data in your device settings, to remove everything stored locally.

Depending on where you live (for example, the EEA, UK, or US states such as California), you may have the right to access, correct, delete or get a copy of your personal information, to object to or restrict some processing, and to withdraw consent. We do not sell personal information or share it for cross-context behavioral advertising, except through the advertising SDKs described in section 3.5, which you control with the consent and tracking choices above. To exercise any right, email support@zappsco.com. We may need to verify your request. You also have the right to complain to your local data protection authority.

9. Children's privacy

Arrow Exit is a general-audience game and is not directed at children. We do not knowingly collect personal information from children under 13, or under the minimum age set by the law where you live. If you believe a child has given us personal information, for example by creating an account, contact support@zappsco.com and we will delete it.

10. Changes to this Privacy Policy

We may update this policy when the App or the law changes. We will post the new version at https://www.zappsco.com/arrow-exit/privacy and update the “Last updated” date. If the changes are significant, we will take reasonable steps to let you know, for example with a notice in the App.

11. Contact us

Questions, requests or concerns about your privacy:

Zappsco

Email: support@zappsco.com

Website: https://www.zappsco.com

Terms & Conditions: https://www.zappsco.com/arrow-exit/terms