1. Who is responsible
BeeBee Tones AB, org. no. 559589-2323, Sweden, is the data controller for Bloomsprite and its pages on beebeetones.com. Contact us at [email protected].
2. Your game stays on your device
Your garden, crops, goods, gold, gems, pets and the names you give them, decor, badges, settings and progress are saved in files on your device. They are not sent to us or to anyone else. Bloomsprite has no accounts and no game server, so we cannot see, restore or move your progress.
Deleting the app deletes your saved game. If you back up your device with iCloud or a computer, Apple’s backup may include the game’s files under Apple’s own terms.
3. No ads or tracking
Bloomsprite contains no advertising, no gameplay analytics or crash-reporting tools and no tracking, and it never asks for permission to track you. It does not use your camera, microphone, photos, contacts or location, and it sends no notifications. The game connects only to Apple’s App Store, for prices and payments, and to RevenueCat, to confirm purchases and check whether a pass is active (section 4). Its Terms of Use and Privacy Policy links open in your browser.
4. Purchases
Gem packs, bundles and the Honey Pass and Royal Pass are bought through Apple’s App Store. Apple processes your payment and Apple ID details under its own privacy policy. We never receive your name, email address or card details.
We use RevenueCat (RevenueCat, Inc., USA) to handle purchases for us. The first time the game starts, it creates a random ID on your device that does not contain your name or your Apple ID. Each time the game starts, and whether or not you ever buy anything, it contacts RevenueCat with that ID to check whether a pass is active and whether a purchase is still waiting to be delivered. Prices come from Apple’s App Store. When you buy or restore something, Apple’s signed confirmation goes to RevenueCat, which checks it and keeps a record under that random ID: what was bought, when, the App Store transaction number, the price and currency, and whether a pass is active. Every time the game contacts RevenueCat, RevenueCat also receives your IP address and technical details such as the device model, the iOS and app versions, and the identifier Apple gives the app on your device (the identifier for vendor).
The game uses these records to pay out each purchase once and to know whether your pass is active. We can see the records in RevenueCat’s dashboard. We use them to answer your questions about a purchase and, without any gameplay data, to see how the shop is doing (for example, how many passes renew). We never use them to build a profile of you or to show you ads. Apple also gives us sales and financial reports that do not identify you.
5. Children
Bloomsprite is made for players aged 8 and up and is not directed at younger children. The game asks for no personal information. The only data it involves is what RevenueCat receives (section 4): the random ID, the technical details sent each time the game contacts it, and a record of any purchase. This is the same for every player, whatever their age. Parents can switch on an optional grown-up check in Settings, which asks a times-table question before every real-money purchase. Apple’s Ask to Buy and Screen Time settings also apply.
6. These web pages
The Bloomsprite pages on beebeetones.com set no cookies and use no analytics. Our host, Cloudflare, processes your IP address and technical request data to deliver the pages and protect the site against abuse, and keeps these logs for a short period, up to 30 days.
If you email us, we use your email address and message only to answer you.
7. Legal bases (GDPR Article 6)
- Handling purchases: performance of a contract (Art. 6(1)(b)). RevenueCat confirms each purchase and the state of your pass so the game can deliver what you bought.
- Checking for a pass and waiting purchases: legitimate interests (Art. 6(1)(f)). Each time the game starts, RevenueCat receives the random ID and technical details described in section 4. Our interest is a shop that gives members their perks and delivers every purchase.
- Purchase reports and support: legitimate interests (Art. 6(1)(f)). Our interest is to help players with their purchases and to understand how the shop is doing. The reports contain no gameplay data, and we never use them to profile you.
- Delivering these pages: legitimate interests (Art. 6(1)(f)). Cloudflare processes request data to serve the pages and keep the site secure. Our interest is a working, secure website. We never build profiles from it.
- Answering your email: legitimate interests (Art. 6(1)(f)). Our interest is to help you when you contact us.
We do not use automated decision-making or profiling that produces legal or similarly significant effects (Art. 22).
8. How long we keep data
- Your saved game stays on your device until you delete the app.
- RevenueCat records (the random ID, the record of your purchases and pass, and the details RevenueCat keeps with them, such as the app version and your country) are kept while we use RevenueCat for Bloomsprite, because they are needed to check purchases and passes. When we stop, we ask RevenueCat to delete them, subject to RevenueCat’s backup and archival practices. According to its documentation, RevenueCat uses your IP address to work out your country and does not keep the address itself.
- Delivery and security logs are kept by Cloudflare for up to 30 days.
- Emails are kept while we need them to answer you and handle your question, and then deleted.
9. International transfers
RevenueCat and Cloudflare are based in the United States and may process data outside the EU/EEA. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (SCCs), with supplementary measures where needed.
10. Your rights and complaints
Under the GDPR you have the right to access, rectification, erasure, restriction, objection and data portability. A parent or guardian may exercise these rights on a child’s behalf. Email [email protected]. We respond within one month, free of charge in ordinary cases.
You can also lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se, or with the supervisory authority where you live.
11. Changes
If we change how Bloomsprite handles data, we update this page and its date before the change takes effect.