PlayGo Privacy Policy
The short version.
- You can play PlayGo without signing up. We create a guest account automatically.
- Signing in with Google or Apple (or Facebook or an email code, where offered) is optional and is used to keep your progress and purchases.
- We collect gameplay and device diagnostics to run and improve the App. We do not collect your location, contacts or photo library. The App only uses your photos when you choose a profile picture, and only saves to your photos when you tap Download on a share image.
- Payments, including PlayGo Premium subscriptions, are handled by Google Play or the App Store. We never see your card details.
- If you allow notifications, we send a few reminders (at most two a day, never at night) through Apple’s and Google’s push services. You can turn them off at any time.
- Optional rewarded video ads are provided by Google AdMob, which collects data under Google’s own policies. On iPhone we do not ask to track you.
- You can delete your account at any time in the App, or request deletion on the web.
- Questions or requests: use Help & Support in the App or our contact form.
1. Who we are
PlayGo (“PlayGo”, the “App”) is a mobile app for discovering and playing short games. It is operated by Donuts Design Pte. Limited, a company registered in Singapore (“we”, “us”). Website: donutsdesign.sg.
We are the organisation responsible for (the “controller” of) the personal data described in this policy. This policy applies to the App and to the web pages we operate for it: game share pages (/g/…), the account deletion page, the contact form and this page.
Company registration number (UEN): 202003634G · Registered address: 22 Sin Ming Lane, #06-76, Midview City, Singapore 573969
2. Information we collect
2.1 Information created automatically when you start the App
- Guest account. The first time you open the App we create a guest account with a numeric guest ID. There is no sign-up form.
- App-generated device identifier. The App generates a random identifier on first launch and stores it on your device, so that we can recognise the same guest account when you come back. On iPhone it is kept in the device’s Keychain (not synced to iCloud), so it survives deleting and reinstalling the App on the same phone; on Android it is included in your Google device backup, if you have backup turned on, so it can be restored when you reinstall. It is not your phone’s hardware identifier (such as IMEI or serial number) and not your advertising ID.
- Android device code (Android only). On Android the App also sends a one-way hash (SHA-256) of the Android ID, a value Android gives each app on your phone that stays the same when you reinstall the App. The App never sends the Android ID itself. We use the hash only to stop the same phone from claiming new-user invite rewards more than once (see Section 2.7). It is not your advertising ID and is not used for ads or tracking.
- Platform and app version (for example “android”, “1.0.0”).
- Time zone. The App sends your phone’s time zone setting (for example “Asia/Singapore”) so that daily rewards, check-ins and daily limits reset at your local midnight. We store it with your account.
- Last activity time. We record when you last used the App (to within a few minutes), so that we can tell whether you have come back before sending a reminder (see 2.2).
2.2 Information you choose to give us
- Sign-in (optional). If you choose to sign in:
- Sign in with Google: we receive a Google account identifier, your email address and, if available, your Google profile name and profile photo. If you don’t have a PlayGo profile picture yet, we copy your Google profile photo and use it as your PlayGo profile picture.
- Sign in with Apple (iPhone only): we receive an Apple account identifier and, if you choose to share them, your email address (which may be an Apple private relay address) and your name.
- Facebook Login (only where this option is offered in the App): we receive a Facebook account identifier that is specific to PlayGo and your Facebook name, which we use as your initial PlayGo nickname. We do not store your Facebook email address or photo, and we do not access your friends list or post anything to Facebook.
- Email code (only where this option is offered in the App): your email address. We send a one-time 6-digit code to it and store only a keyed hash of the code, which expires after 10 minutes.
- Profile. A nickname and a profile picture (one you pick from your photo library, or your Google photo as described above). We resize the picture to 512×512 pixels and store it on our servers. Your nickname and picture are not shown to other users.
- Messages to us. If you contact us through Help & Support in the App, we store the category you chose, your message, your app version and platform, linked to your account. If you use our web contact form, we store the category, your message, any reply contact you choose to give, any account details you give us (how you signed in and the email address of that account), your browser’s language and the time. The web form is not linked to your account automatically, and we do not store your IP address with it.
- Account deletion reason. When you delete your account in the App you may choose a reason. We store that reason without any information that identifies you.
- Notification settings (notifications on or off, and on or off for each type of reminder).
- Push notification token (only if you allow notifications). Your phone gives the App a device push identifier issued by Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android). We store it with your account, together with the App language you use and, on iPhone, whether the App is a test build, so that we can send you reminders: when your Lives have refilled, a daily check-in reminder, when your check-in streak is about to end, and a reminder after a few days away. We also keep a record of which reminders we sent you and when, so that we never send the same one twice. We send at most two reminders a day and none between 22:00 and 09:00 your local time.
2.3 Gameplay and in-app activity
- Your in-app balances and progress: Lives, Coins, unlimited-Lives periods, daily check-ins, welcome gifts, tasks, likes, favorites, recently played games, and which games have already been shown to you.
- Game sessions: which game you opened, when, how long it was in the foreground, rounds started and ended, your score, the highest level you reached in a game, and Lives or Coins spent.
- In-game revives and item purchases with Coins: the game, the item identifier the game sends, the price in Coins, and whether the item was delivered or the Coins were returned.
- Usage events (analytics): for example screens viewed, games shown and opened, video previews watched, buttons tapped, ads watched, shares, purchases started and completed. Each event is stored with a timestamp and a session identifier.
The games inside PlayGo run on your device. From inside a game we only receive the signals listed above (round start and end, score, level reached, and requests to revive or to buy an item with Coins). Games do not send us anything else about you.
2.4 Device, diagnostics and crash information
To keep the App working on a wide range of phones, analytics events include: device model, operating system and version, total device memory (RAM) and whether the device is considered low-end, network type (Wi-Fi / mobile / none), app version and build number, the language and country/region code from your phone’s language settings, and performance measurements such as loading times, video start times and frame drops. On Android, the App also records how it was installed (the install source, such as the ad campaign, ad group and ad creative a Google Play link was tagged with, or “organic”), as passed to the App by Google Play when you first open it; we use this only to measure which of our marketing campaigns bring players. If you installed PlayGo from an ad on Facebook or Instagram, Meta includes encrypted details of that ad (the campaign, ad set and ad) in the install source; the App sends the install source to our server, which decrypts it, and we use those details to measure our ads and to show the game featured in that ad first when you open the App for the first time. When the App encounters an error, it sends the error message and technical details to our own servers. We do not use a third-party analytics or crash-reporting service.
When the App sends usage events to our servers, we determine the country only from the IP address of the request, using an offline IP-to-country database (DB-IP), and store that country with the events. We do not store your IP address with your events, and we do not determine your city or any more precise location. The country/region code from your phone’s language setting is also kept with the events. We do not use GPS or other location services.
2.5 Purchases and subscriptions
If you buy Lives, Coins, a starter pack or a PlayGo Premium subscription, the payment is processed by Google Play or the Apple App Store. We receive and store: the product you bought, the store’s transaction or order ID and purchase token, the platform, the time, whether the store confirmed it as valid, what we delivered to your account, and a pseudonymous account reference (your guest ID) that we attach to the purchase so it can be credited to the right account. For subscriptions we also store the expiry date, whether auto-renew is on, the subscription plan, and whether it started with a free trial or an introductory offer.
Google Play and the App Store send our server notifications about refunds and subscription changes (for example renewal, cancellation or expiry), which we use to keep your account up to date. We do not receive your card number or other payment details.
2.6 Rewarded ads
If you choose to watch a rewarded video ad, we record that you watched it, for which reward, and whether Google confirmed the view, so that we can grant your reward and apply the daily limits. See Section 4 for what Google AdMob collects.
2.7 Sharing games
- When you share. When you tap Share, we create a link of the form
https://api.playgo.donutsdesign.sg/g/<game>?ref=<code>. The code is random and is linked to your account and that game on our side; it does not contain your guest ID. We record each share (game, language, time). You choose where to send the link (for example WhatsApp, Facebook, SMS or your phone’s share sheet); we do not see who you send it to and we do not read your contacts. - Saving a share image. If you tap Download in the share panel, the App saves the share image to your photo library. For this the App only asks for permission to add photos; it does not read your library.
- When someone opens a shared link. If the person you shared with doesn’t have PlayGo, the link opens a web page. We record that the page was opened: the game, the share code (only if it is a valid code for that game), the type of device (iPhone, Android, computer or other) and, if our network provider supplies it, the country. This lets us count how many people opened the links you shared. We do not store the visitor’s IP address in our database; we use it only briefly in our server’s memory so that the same visitor opening the same link several times within 5 minutes is counted once. Requests from link-preview bots (such as the one WhatsApp uses to build the preview) are not counted.
- Opening the App from a link. If PlayGo is installed, the link opens the game in the App. If you open a friend’s link and your PlayGo account is new, the App sends the share code to us so that we can credit the invite (next item).
- Invite rewards. When a new player joins through your link (or, on Android, installs PlayGo from Google Play after opening your link, in which case Google Play passes the share code to the App) and then plays a full round, both of you receive a reward. To make sure each new player and each phone is counted only once, and to stop abuse, we record: who invited whom, how the invite arrived (link, Google Play or code), the new player’s device identifier and Android device code (Section 2.1), the first part of the new player’s IP address (the last part removed, for example 203.0.113.x), the time, and whether the invite qualified and was rewarded. We tell the inviter that a friend joined; we do not show the inviter anything else about the new player.
2.8 Server logs
Like most online services, our web server automatically records technical request logs, which include your IP address, the time, the requested address (which may include a share code), your browser or app’s user agent and the response status. We use them for security, abuse prevention and troubleshooting.
The web contact form limits how many requests can be sent from the same IP address per hour. For this, the IP address is held only in our server’s memory for up to one hour and is not stored with your request.
When the App sends usage events, we check whether the request comes from an IP address on Google’s own network (as published by Google, excluding Google Cloud customer addresses). Google uses such addresses for the automated test devices that check new versions of apps before release. If it does, we mark that device as an automated test device so that it is left out of our usage statistics. The IP address is used only while handling that request and is not stored with your events or device record.
2.9 Information we do not collect
Apart from the country determined from your IP address (Section 2.4), we do not collect precise or approximate location from your device, contacts, SMS or call logs, calendar, health data, files, audio, browsing history, or the list of apps installed on your phone. PlayGo has no chat, comments, messaging between users or friend lists.
2.10 Permissions the App may ask for
- Photos – to pick a profile picture, and (add-only) to save a share image when you tap Download. On older Android versions (9 and below) saving an image uses the storage permission.
- Notifications – we first explain why and only then ask (when you tap the notification bell, after you finish your first game, or when you turn on notifications in Settings). If you allow it, we may send the reminders described in 2.2. You can stop them at any time with Settings › Notifications in the App, where you can turn off all reminders or only some types (Lives refilled, daily reward reminders, and reminders after a few days away), or in your phone’s settings. On Android 12 and earlier, the phone allows notifications by default; you can turn them off in the same places.
The App does not ask for location, camera, microphone, contacts or App Tracking Transparency permission.
3. How we use information
| Purpose | Information used | Legal basis (where GDPR/UK GDPR applies) |
|---|---|---|
| Provide the App: create and recognise your account, show games, keep your balances, progress and daily rewards | Guest ID, app-generated device identifier, time zone, gameplay data, profile, sign-in data | Performance of our contract with you |
| Process purchases and subscriptions, deliver what you bought, handle refunds and prevent the same receipt being used twice | Purchase and subscription records, guest ID | Contract; legal obligations (accounting); legitimate interests (fraud prevention) |
| Grant rewards for ads and enforce daily limits | Ad reward records, guest ID | Contract; legitimate interests (fraud prevention) |
| Sign-in and account recovery | Email address, Google/Apple/Facebook account identifier | Contract |
| Sharing: create share links and pages, count shares and link opens | Share codes, share and click records | Contract (providing the share feature); legitimate interests (understanding which games people share) |
| Send reminder notifications (Lives refilled, daily check-in, check-in streak, come back after a few days) | Push notification token, App language, time zone, last activity time, Lives and check-in status, notification settings, record of reminders sent | Your consent, given through your phone’s notification permission (you can withdraw it at any time, see 2.10) |
| Analytics: understand how the App is used, fix bugs, improve loading speed and decide which games to show | Usage events, device and diagnostics data | Legitimate interests (operating and improving the App) |
| Answer your messages and requests, including privacy and deletion requests | Help & Support messages, web contact form submissions, account data | Contract; legal obligations; legitimate interests |
| Security and abuse prevention | Server logs, device identifier, account data | Legitimate interests |
| Invite rewards: credit the inviter and the new player, and count each new player and each phone only once | Invite records, device identifier, Android device code, shortened IP address | Performance of our contract with you; legitimate interests (preventing reward abuse) |
| Show rewarded ads | See Section 4 | Consent where required by law; otherwise legitimate interests |
We do not use your information to make decisions that produce legal or similarly significant effects about you based solely on automated processing. We do not sell your personal information for money.
4. Advertising (Google AdMob)
PlayGo shows rewarded video ads only, and only when you tap to watch one (for example to get a free Life, a short period of unlimited Lives, or a revive in a game). There are no banner, interstitial or app-open ads. Ads are served by Google AdMob. PlayGo Premium subscribers don’t need to watch ads to get these rewards.
When an ad is requested and shown, the Google Mobile Ads SDK in the App collects information directly, which may include your IP address, device and app information, ad interaction data and, on Android, your device’s advertising ID. Google uses this to deliver and measure ads, to prevent fraud and, where allowed, to personalise ads. Google acts under its own privacy policy: see How Google uses information from sites or apps that use its services and the Google Privacy Policy.
iPhone. PlayGo does not ask for App Tracking Transparency permission, so neither the App nor the Google Mobile Ads SDK can access your iPhone’s advertising identifier (IDFA).
To confirm that an ad was watched before we grant a reward, we pass your guest ID and a random one-time code to Google with the ad request, and Google sends them back to our server in a signed confirmation.
Your choices. Where required by law (for example in the European Economic Area, the United Kingdom and Switzerland), the App asks for your consent through Google’s consent tool before ads are requested, and you can change your choice at any time in Settings › Privacy Options (this option appears where it is required). If consent is not given or cannot be collected, rewarded ads are not shown, but the rest of the App works normally. On Android you can also reset your advertising ID or opt out of personalised ads in your phone settings (Settings › Google › Ads, or Settings › Privacy › Ads).
5. How we share information
We share personal information only as follows:
- Service providers that process data on our behalf and under our instructions:
- Cloud hosting for our servers and database: DigitalOcean, data centre in Singapore.
- Google and Apple, to verify and manage purchases and subscriptions (Google Play Developer API, App Store Server API and their notifications), to verify sign-in, to fetch your Google profile photo when you sign in with Google, and as the ad network (Google AdMob, see Section 4).
- Meta (Android only), to measure and improve our ads on Facebook and Instagram. The Facebook SDK in the App sends Meta an event when the App is installed, each time it is opened, when you buy something in the App (the item and price) and when you have played your 1st, 3rd and 5th game round (only that milestone, not which game or how you played), together with device and app information (such as device model, operating system version, app version and your IP address) and your device’s advertising ID. We do not send Meta your guest ID, name, email address, which games you play or any other gameplay details. Meta processes this data under its own Privacy Policy. You can reset or delete your advertising ID in your phone settings (on most Android phones: Settings > Google > Ads, or Settings > Privacy > Ads). On iPhone the App does not send these events to Meta.
- Apple and Google push services (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android), to deliver reminder notifications to your phone. We send them your push notification token and the text of the notification. They do not receive your guest ID, name or email address from us.
- The apps you share to. When you share a game, the link and share image go to the app and people you choose.
- Legal reasons: if required by law, court order or a government authority, or to protect the rights, safety and property of our users, us or others.
- Business transfers: if we are involved in a merger, acquisition or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
Your nickname and profile picture are not visible to other users. We do not publish leaderboards containing your personal information.
6. How long we keep information
| Information | How long |
|---|---|
| Account data (guest ID, device identifier, time zone, last activity time, profile, sign-in identities, balances, progress, subscription status, favorites, notifications, record of reminders sent, Help & Support messages, revive and item records) | Until you delete your account. Deletion in the App is immediate (see Section 7). |
| Push notification token | Until you sign out (for a signed-in account), delete your account, or Apple or Google tell us the token is no longer valid (for example after you uninstall the App). If another account later uses the App on the same phone, the token moves to that account. |
| Usage analytics events (including device and diagnostics data) | Up to 90 days, then automatically deleted. |
| A first-use record for each device (the App-generated device identifier, the date it first opened the App, app version, platform and region code), used to count new installs | Until the device has not used the App for 24 months, then automatically deleted; deleted earlier together with your account if you delete it. |
| Email sign-in codes | Codes expire after 10 minutes and are stored only as a keyed hash. Unused code records, including the email address, are deleted within 2 days. |
| Purchase records | Kept after account deletion, but no longer linked to your account, for as long as needed to prevent the same receipt being redeemed again and to meet accounting and legal requirements. |
| Share records (shares and link opens) | Kept for statistics. When you delete your account, they are no longer linked to you and your share codes stop being linked to anyone. |
| Invite records (who invited whom, device identifier, Android device code, shortened IP address) | Until the invited player’s account is deleted; if the inviter deletes their account, the record is no longer linked to them. After the invited player deletes their account we keep only a one-way hash of the phone’s device identifier and Android device code, not linked to any account, so that the same phone cannot claim the new-player reward again. |
| Web contact form requests | Until we have handled the request, and then for up to 12 months as a record that we handled it. |
| Account deletion reason | Kept without any information that identifies you. |
| Server request logs (including IP address) | Up to 30 days. |
| IP addresses held in server memory (contact form rate limit, limit on creating new guest accounts, share link counting, detecting automated test devices) | Only briefly; never written to our database. |
| Backups | Database backups are kept for up to 14 days, after which deleted data is also removed from backups. |
7. Deleting your account
You can delete your account at any time, including a guest account:
- In the App (immediate): go to My Games › Settings. Guests tap Account › Delete Account; signed-in players tap their profile card › Edit Profile › Want delete account?. Then confirm with Delete Permanently.
- If you can’t open the App: follow the instructions at api.playgo.donutsdesign.sg/account/delete and send a request with our account deletion request form, telling us how you signed in (Google, Apple or email code) and the email address of that account. Before deleting anything we will verify that the request comes from the account holder (for example by contacting that email address), and we will complete verified requests within 30 days. Guest accounts that were never signed in cannot be matched to a request, so please delete those in the App.
When you delete your account we immediately and permanently delete your guest ID, sign-in identities, email address, nickname, profile picture, time zone, Lives, Coins, progress, subscription status on our side, favorites, notifications, push notification tokens, record of reminders sent and Help & Support messages. This cannot be undone. Any remaining Lives, Coins, unlimited-Lives time and Premium benefits are lost.
Deleting your account does not cancel a PlayGo Premium subscription. The store will keep charging you until you cancel it in your Google Play or App Store subscription settings, even though the deleted account no longer receives the benefits.
The following are kept as described in Section 6: purchase records (no longer linked to your account), share records (no longer linked to you), usage analytics events (deleted automatically within 90 days), and an anonymous deletion reason.
8. Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy of it;
- correct inaccurate information (you can change your nickname and picture in the App);
- delete your information (see Section 7);
- object to or restrict certain processing, including processing based on legitimate interests;
- receive your information in a portable format;
- withdraw consent at any time where we rely on consent (this does not affect processing before withdrawal);
- complain to a data protection authority.
To exercise these rights, use our contact form and select “Privacy / data request”, or write to us from Help & Support in the App (requests sent from the App are already linked to your account). We may need to verify that the request comes from the account holder. We will respond within the time required by applicable law.
8.1 Singapore (PDPA)
We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012. You may request access to or correction of your personal data, and you may withdraw consent for its collection, use or disclosure, by contacting our Data Protection Officer through the contact form, selecting “Privacy / data request”. If you withdraw consent, we may no longer be able to provide some or all of the App to you. You may also contact the Personal Data Protection Commission of Singapore.
8.2 European Economic Area, United Kingdom and Switzerland
If GDPR or UK GDPR applies to you, the legal bases we rely on are listed in Section 3. You have the rights listed above and may lodge a complaint with the supervisory authority in your country of residence.
8.3 United States (including California)
We do not sell personal information for money. However, when the Google Mobile Ads SDK collects your advertising ID and related data to show and personalise ads (Section 4), or when the Facebook SDK on Android sends Meta app install, open, purchase and game-round milestone events with your advertising ID to measure our ads (Section 5), this may be considered “sharing” for cross-context behavioural advertising under some U.S. state laws. You can limit this by opting out of personalised ads in your phone settings, as described in Section 4. California and other state residents may request access, correction or deletion as described above. We will not discriminate against you for exercising your rights. We do not knowingly sell or share the personal information of consumers under 16.
9. Security
All communication between the App and our servers is encrypted with HTTPS. Access tokens are signed, sign-in codes are stored only as keyed hashes, and our database is not exposed to the internet. Only a small number of our staff can use our internal admin tools, each with a personal account and password; staff actions are logged. These tools show staff the messages and requests you send us and aggregated statistics; they do not show your gameplay history. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information and will notify you and the authorities of a data breach where required by law.
10. Where we store information
Our servers and database are hosted by DigitalOcean in Singapore. Google and Apple may process data in other countries under their own terms. Where we transfer personal data outside your country, we take steps required by applicable law to ensure it receives a comparable standard of protection.
11. Children
PlayGo is intended for users aged 13 and over and is not directed to children. We do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you believe a child has provided us with personal information, please tell us through the contact form and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. If the changes are significant, we will give you notice in the App before they take effect.
13. Contact us
Donuts Design Pte. Limited
In the App: My Games › Settings › Help & Support
On the web: api.playgo.donutsdesign.sg/contact (select “Privacy / data request” to reach our Data Protection Officer)
Address: 22 Sin Ming Lane, #06-76, Midview City, Singapore 573969