1. Who we are
Crumbtown is a cozy storybook bakery game for iPhone, published under the Inovy brand (“we”, “us”). The controller of the personal data described here is Oğuzhan Aktay (individual developer, brand: Inovy), Türkiye. Postal address: Cumhuriyet Mah., Diyar Sk. No: 5, 16400 İnegöl, Bursa, Türkiye. Privacy contact: privacy@inovy.dev.
2. The short version
- No sign-up needed.Crumbtown starts with a random, anonymous ID. You can optionally link Sign in with Apple (and Google, where offered) to keep your bakery across devices.
- Your bakery name stays yours.The name you give your bakery is part of your save. It is never sent to analytics, crash reports or session replay.
- Crash reports are always on, and scrubbed.They contain technical details only. Turning off analytics never turns them off.
- You decide on analytics.Product analytics, session replay and Meta advertising measurement start only after you agree, and you can switch them off in Settings at any time.
- Delete in the app.Settings → “Delete account” removes your data from our servers. Details below.
We do not sell your personal data. Crumbtown is not directed at children.
3. Data we process
- Anonymous ID and profile. On first launch Crumbtown signs in anonymously to our backend (Supabase, EU, Ireland) and receives a random user ID. We keep a small profile: your language setting, the app version and when you last used the app.
- Your save. Your progress (bakery, stations, recipes, crew, stamps, currencies, settings and the bakery name you chose) is stored on your iPhone and, so that it survives a new device, synced to our servers under your anonymous ID.
- Sign in with Apple (and Google, where offered). If you link an account, Apple or Google gives us a stable account identifier and, if you choose to share it, your email address or first name. We use it only to link your save to you. Linking is optional.
- Purchases and subscription status. Seals, bundles, “Remove ads” and the Masal Kulübü subscription are bought through the Apple App Store; we never see your payment details. Adapty manages purchases and subscription status and receives your anonymous ID, purchase receipts and technical device data. Our server keeps your entitlement (Club, Remove ads and when the subscription ends).
- Analytics (consent-gated). Mixpanel (EU data residency) receives product events such as onboarding steps, permission answers, paywall views, upgrades and builds, offline earnings collected, daily rewards, quests, stamps and rewarded-ad completions. Events contain identifiers and counts only, never typed text such as your bakery name. Nothing is sent before you agree.
- Session replay (consent-gated, masked). Microsoft Clarity records how screens are used (taps, scrolling and layouts) so we can find confusing spots. It is off by default, starts only after you agree, records only a short list of game screens, and masks or pauses on screens that could show personal data (your name, your account, feedback and payment screens).
- Advertising measurement (Meta, consent-gated). The Meta SDK (Meta Platforms) receives install and app-open events so we can measure our advertising. It does not start until you have agreed in the consent step, and it collects the full set of signals (including the advertising identifier) only if you also allow tracking in Apple’s App Tracking Transparency prompt; otherwise it runs in a limited mode without it. Automatic event logging and advertiser-ID collection are switched off by default. Crumbtown sends no purchase events from the app to Meta, and no names or typed text. If you decline, Meta receives nothing from the app.
- Crash reports (always on, scrubbed). Sentry (EU, Germany) receives crash and error reports with technical details: device model, iOS and app version, error codes and stack traces. Free-form text is removed before a report leaves your iPhone, no user profile is attached, and reports are not tied to your identity. This stays on even if you switch off analytics, because it keeps the game stable.
- Ads (only while ads are turned on). Crumbtown can show optional rewarded ads (for example to triple your offline earnings) and occasional full-screen ads using Google AdMob, but only while ads are switched on in our configuration; they are off by default. When they are on, Google’s consent form (UMP) asks for your choices where required, and Apple’s App Tracking Transparency prompt asks whether ads may be personalised. AdMob receives your device’s advertising identifier only if you allow tracking, and derives an approximate location (such as your country) from your IP address. To grant a rewarded-ad reward, Google sends a signed confirmation to our server that includes your anonymous ID and the reward type; the reward is recorded against your ID. Club members and people who bought “Remove ads” never see full-screen ads.
- Feedback. If you use Settings → Feedback, we receive the category, your message and, only if you add it, your email address. If “Include technical info” is on, we also receive the app version and build, iOS version, device model and language, never anything you typed in the game. Feedback is stored with your anonymous ID.
- Reminder notifications. Reminders (for example that your ovens are full) are local notifications scheduled on your iPhone after you allow notifications during onboarding. They never include your bakery name. We do not use push notifications and do not collect a push token.
- Email. If you write to us, we receive your email address and what you write.
4. How we use it, and why we may
We use this data to run Crumbtown (your save, rewards, purchases and daily features), to understand how the game is used and improve it, to find and fix crashes, to show optional ads where they are enabled and you have agreed, to send the reminders you allow, and to answer your messages.
Our legal bases are: the contract with you for the app, purchases and feedback; your consent for product analytics, session replay, Meta advertising measurement, tracking and personalised ads; and our legitimate interest in keeping Crumbtown stable (crash reports) and preventing abuse (reward limits). Where we rely on your consent you can withdraw it at any time in Settings (analytics) or in iOS Settings (tracking).
5. Who processes it for us
- Supabase (EU, Ireland): anonymous sign-in, database and server functions (profile, save, entitlements, rewards, feedback).
- Apple: App Store payments, Sign in with Apple, local notifications, App Tracking Transparency.
- Adapty: purchase and subscription management.
- Mixpanel (EU): product analytics, after you agree.
- Microsoft Clarity: masked session replay, after you agree.
- Meta Platforms: advertising measurement, only after you agree (full mode only with your tracking permission).
- Sentry (EU, Germany): scrubbed crash reports.
- Google: AdMob and the User Messaging Platform, only while ads are turned on; Google sign-in, where offered.
Commands and data from the game never go to any other company than those listed here.
6. Your choices
Analytics and replay. You can agree or decline during onboarding and change your mind in Settings → Share usage analytics. Switching it off stops Mixpanel and Clarity and resets your analytics identity. It never switches off crash reports, which are scrubbed and contain no personal content.
Tracking, Meta and ads. Tracking stays off unless you allow it; change it in iOS Settings → Privacy & Security → Tracking. Switching off analytics in Settings also stops Meta measurement. Where consent is required, Google’s consent form lets you make your choices.
Notifications. Reminders can be turned off in Crumbtown’s Settings and in iOS Settings.
Sign-in. Linking Apple or Google is optional; the game works with the anonymous ID.
7. Retention and deleting your data
On your iPhone. Your save and settings are stored in the app and removed when you delete Crumbtown. The credential that keeps you signed in is stored encrypted on your iPhone. If you reinstall Crumbtown without linking an account, it starts with a new anonymous ID.
On our servers. Data linked to your ID (profile, save, entitlements, reward records and feedback) is kept while you use Crumbtown and until you delete your account or ask us to delete it.
Deleting it yourself. Open Settings → Delete account and confirm. This deletes your profile, save, entitlement record, reward records and feedback from our servers and wipes the game data on your device. If you have no other Inovy app account, your sign-in identity is deleted too. Apple subscriptions stay with your Apple ID and come back with Restore purchases; deleting your account does not cancel a subscription (cancel it in your Apple ID’s subscription settings). Step by step: Delete your Crumbtown data.
By email. Write to support@inovy.dev from the address you used in feedback, or include the “Your ID” value shown in Settings, so we can find your data. We delete what we can match and reply within 30 days.
Purchase records held by Apple and Adapty, and analytics, replay and crash data already received by Mixpanel, Microsoft, Meta, Sentry and Google, stay with those providers under their own retention periods.
8. International transfers
Our database is in the EU (Ireland), and Mixpanel and Sentry process data in the EU. Some providers, such as Adapty, Microsoft, Meta and Google, may process data in the United States or other countries. Where a transfer needs safeguards, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
9. Your rights
Depending on where you live, including under the GDPR and Türkiye’s KVKK, you can ask for access to your data, a copy of it, correction, deletion or restriction, object to processing, and withdraw consent at any time without affecting earlier processing. Write to privacy@inovy.dev; because Crumbtown can be used without an account, we may ask you for the “Your ID” value in Settings so we can match the request to your anonymous ID. You can also complain to your local data protection authority.
10. Children
Crumbtown is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, contact privacy@inovy.dev and we will delete it.
11. Changes
If we change this policy, we update the effective date above and, for important changes, tell you in the app.
12. Contact
Privacy questions and requests: privacy@inovy.dev. Help with the app: support@inovy.dev.