Privacy Policy

ZOMIX GAME LABS LIMITED_Privacy Policy_20260920

This Privacy Policy explains how ZOMIX GAME LABS LIMITED ("ZOMIX", "we", "us", "our") collects, uses, shares, and protects personal information when you use our website at https://www.zomixstudio.com, our casual mobile game applications, and any related services (collectively, the "Services").

ZOMIX is the controller responsible for deciding how your personal information is processed. If you have questions about this Policy or your privacy rights, contact us at publish@zomixstudio.com. If you do not agree with our practices, please do not use the Services.

KEY POINTS AT A GLANCE

• What we collect: Information you provide directly (e.g., when contacting us), information collected automatically from your device (e.g., IP address, device identifiers, usage data), and aggregated analytics from advertising partners for campaign measurement. We do not require account registration.
• Sensitive information: We do not collect sensitive personal information (such as health data, biometric data, or information about racial or ethnic origin, religious beliefs, or sexual orientation).
• How we use it: To run and improve our games, process purchases through app stores, deliver and measure advertising, keep the Services secure, and comply with the law.
• Sharing: We share data with the advertising, analytics, and attribution SDKs listed in Section 6, and with app stores that process your payments. We do not sell personal information for money, but sharing device advertising IDs for personalized ads may be considered a "sale" or "sharing" under some US state laws, and you can opt out.
• Your rights: Depending on where you live, you may have rights to access, correct, delete, or port your data, and to opt out of targeted advertising. See Sections 13–15.
• Contact: publish@zomixstudio.com

INFORMATION WE COLLECT

2.1 Information you provide to us

• Contact and support communications. If you email us or otherwise contact us, we collect your name, email address, and the content of your message.
• Feedback. If you participate in surveys or provide feedback, we collect what you submit.
• Payment information. Purchases are processed entirely by Apple (App Store) and Google (Google Play). We do not receive or store your full payment card details; payment data is handled by the stores under their own privacy policies: https://www.apple.com/legal/privacy/ and https://policies.google.com/privacy.
• Push notifications. With your permission, we may send push notifications about game updates or features. You can disable them at any time in your device settings.

You must ensure any information you provide is accurate, and let us know if it changes.

2.2 Information collected automatically

When you visit or use the Services, we and our service providers automatically collect technical and usage information, including:

• Device and app data: device model and manufacturer, operating system and version, device and application identifiers (including mobile advertising IDs), browser type, language, network/carrier information, and IP address.
• Log and usage data: date/time stamps, pages or screens viewed, features used, session duration, crash reports ("crash dumps"), system activity, and hardware settings.
• Approximate location: derived from your IP address at country or city level, for analytics and advertising. We do not collect precise GPS location. You can disable location access in your device settings, though some features may then be unavailable.

2.3 Information from third parties

We do not actively collect personal information from third-party sources. We may receive aggregated, de-identified analytics data from advertising partners (such as AppLovin and Google Ads) to measure campaign performance.

2.4 Google APIs

Our use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

HOW WE USE YOUR INFORMATION

We process personal information for the following purposes:

• To provide and operate the Services (including delivering game content and app functionality);
• To process and manage in-app purchases and orders (via the app stores);
• To respond to inquiries and provide support;
• To send service-related notices (such as changes to our Terms or this Policy);
• To deliver, personalize, and measure advertising, including targeted advertising based on your interests and approximate location;
• To analyze usage trends and improve our games and user experience;
• To maintain security, monitor for fraud, and prevent abuse;
• To comply with legal obligations, respond to lawful requests, and protect our legal rights; and
• With your consent, for any other purpose we disclose at the time of collection.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects.

LEGAL BASES FOR PROCESSING (EEA/UK/SWISS USERS)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract: processing necessary to provide the Services you request or to take steps before entering a contract with you;
• Legitimate interests: operating and improving our Services, delivering and measuring advertising, diagnosing problems, and preventing fraud — where these interests are not overridden by your rights;
• Consent: where required, e.g., for certain tracking technologies or push notifications. You may withdraw consent at any time without affecting the lawfulness of prior processing;
• Legal obligation: compliance with laws, regulations, court orders, or law enforcement requests; and
• Vital interests: to protect someone's safety.

If you are in Canada, we process your information with your express or implied consent, which you may withdraw at any time. In limited circumstances permitted by Canadian law (e.g., fraud prevention, legal compulsion, protecting an individual's interests), we may process information without consent.

COOKIES AND TRACKING TECHNOLOGIES

We and our partners use cookies and similar technologies (web beacons, pixels, SDKs) for security, bug fixing, analytics, and advertising, including showing you ads tailored to your interests on our Services or elsewhere.

Managing your choices:

• iOS: Settings > Privacy & Security > Tracking (App Tracking Transparency), and Settings > Privacy & Security > Apple Advertising.
• Android: Settings > Google > Ads > Opt out of ads personalization / Reset advertising ID.
• Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout.

Where these technologies constitute a "sale" or "sharing" under US state laws (see Section 14), you may opt out as described there. We do not respond to browser Do-Not-Track signals, as no industry standard has been finalized; however, we do honor Global Privacy Control (GPC) signals from California users as valid opt-out requests.

WHEN AND WITH WHOM WE SHARE YOUR INFORMATION

6.1 Service providers. We share personal information with third-party vendors who perform services on our behalf (advertising, analytics, attribution). We have contracts in place requiring them to process data only on our instructions, to protect it, and not to share it with others except as needed to serve us.

The SDKs currently integrated in our games are listed below. This list may change as we add or remove providers — please check back periodically.

6.2 Other sharing situations

• Business transfers: we may share or transfer information in connection with a merger, acquisition, financing, or sale of all or part of our business.
• Legal requirements: we may disclose information where required by law, regulation, legal process, or to protect rights, safety, and security.

THIRD-PARTY WEBSITES AND SERVICES

The Services may contain links to or advertisements from third-party websites, services, or apps that we do not control. Their data practices are governed by their own privacy policies, not this one. We are not responsible for the content, privacy, or security practices of any third party. Review their policies before providing them with your information.

INTERNATIONAL DATA TRANSFERS

We and our service providers may transfer, store, and process your personal information in countries other than the one in which you reside. These countries may have data protection laws that differ from those of your jurisdiction, and in some cases may not provide the same level of protection.

Where we transfer personal information originating from the European Economic Area, the United Kingdom, or Switzerland to a jurisdiction that has not received an adequacy decision, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs), together with any supplementary measures required by applicable law. Our third-party service providers have implemented comparable safeguards for the data they process on our behalf.

You may request further information about the safeguards we use by contacting us at

publish@zomixstudio.com.

DATA RETENTION

We keep personal information only as long as needed for the purposes described in this Policy, or as required by law (e.g., tax, accounting, or legal claims). When information is no longer needed, we delete or anonymize it; where deletion is not immediately possible (e.g., backup archives), we securely isolate it until deletion is feasible.

DATA SECURITY

We implement reasonable technical and organizational measures to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute protection against unauthorized access, theft, or modification. You use the Services at your own risk and should access them from a secure environment.

CHILDREN'S PRIVACY

The Services are not directed at children under 13 (or the higher minimum age in your jurisdiction, such as 16 in the EU/UK), and we do not knowingly collect personal information from them. If you are a minor, use the Services only with the consent and supervision of a parent or guardian. If we learn we have collected information from a child under the applicable age, we will promptly delete it. Parents who believe their child has provided us information may contact publish@zomixstudio.com.

YOUR PRIVACY RIGHTS (EEA/UK/SWITZERLAND/CANADA/AU/NZ/SOUTH AFRICA)

Depending on your location, you may have the right to:

• access your personal information and receive a copy;
• correct inaccurate information;
• request deletion of your information;
• restrict or object to certain processing;
• data portability (receive your data in a structured, machine-readable format);
• withdraw consent at any time (without affecting prior lawful processing); and
• not be subject to automated decision-making with significant effects.

To exercise these rights, email publish@zomixstudio.com. We will verify your identity and respond within the time required by applicable law. You may also lodge a complaint with your local data protection authority:

• EU: your national data protection authority
• UK: Information Commissioner's Office (ICO)
• Switzerland: Federal Data Protection and Information Commissioner (FDPIC)
• Australia: Office of the Australian Information Commissioner (OAIC)
• New Zealand: Office of the New Zealand Privacy Commissioner
• South Africa: The Information Regulator (enquiries@inforegulator.org.za; complaints via POPIA/PAIA form 5 at PAIAComplaints@inforegulator.org.za and POPIAComplaints@inforegulator.org.za)

Australia/New Zealand residents: if you do not provide information needed for a given purpose, we may be unable to provide the relevant products, services, or support.

DO-NOT-TRACK AND GLOBAL PRIVACY CONTROL

We do not currently respond to browser DNT signals, as there is no uniform industry or legal standard for them (including under California law). We do recognize Global Privacy Control (GPC) signals as a valid opt-out method for California residents regarding the sale or sharing of personal information.

UNITED STATES STATE PRIVACY RIGHTS

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another state with a comprehensive privacy law, you may have some or all of the following rights:

• to know/access the personal data we process about you, including categories of data and, where applicable, categories of third parties to whom it was disclosed;
• to correct inaccurate personal data;
• to delete your personal data;
• to obtain a copy of personal data you previously provided (data portability);
• to opt out of targeted advertising, the sale of personal data, and profiling with significant effects; and
• to non-discrimination for exercising your rights.

14.1 Categories of personal information collected

The categories below describe the personal information we collect through the Services (for a full description, see Section 2). As our Services are newly launched, we have not collected personal information in the twelve (12) months preceding the effective date of this Policy.

We may also collect other personal information when you interact with us directly (e.g., through customer support, surveys, or contests).

14.2 How to exercise your rights

Email publish@zomixstudio.com with your request. You may also opt out of personalized advertising directly on your device (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads > Opt out of ads personalization).

You may designate an authorized agent to submit a request on your behalf; we may require proof of valid authorization. We will verify your identity using information already in our records and may request additional information for security or fraud-prevention purposes.

14.3 Appeals

If we decline your request, you may appeal by emailing publish@zomixstudio.com. We will respond in writing with our decision and reasons. If your appeal is denied, you may contact your state attorney general.

14.4 California "Shine the Light"

California residents may request, once per year and free of charge, the categories of personal information disclosed to third parties for direct marketing purposes in the preceding calendar year, and the names and addresses of those third parties. Submit requests to publish@zomixstudio.com.

14.5 Our stance on "sale"

We do not sell personal information for monetary consideration. However, sharing device advertising identifiers with advertising partners (such as AppLovin and Meta) to deliver personalized ads may constitute "sharing" (targeted advertising) under California's CPRA, for which you may opt out as described above.

CHANGES TO THIS POLICY

We may update this Policy from time to time. The "Effective date" at the top reflects the latest version. For material changes, we will post a prominent notice on the Services or notify you directly where feasible. Continued use of the Services after an update means you accept the revised Policy.

HOW TO REVIEW, UPDATE, OR DELETE YOUR DATA

To access, correct, update, or delete your personal information, or to withdraw consent, email us at publish@zomixstudio.com. We will act on your request in accordance with applicable law.

CONTACT US

ZOMIX GAME LABS LIMITED

WORKSHOP X34, 8/F VALIANT IND CTR, 2-12 AU PUI WAN ST, FO TAN, HONG KONG

Email: publish@zomixstudio.com

Website: https://www.zomixstudio.com