Privacy Policy

Kiyoo Studio Inc (“Kiyoo Studio,” “we,” “our,” or “us”) respects the privacy of individuals who visit our website, play our games, or otherwise interact with our online services. This Privacy Policy explains how we collect, use, disclose, and protect personal and technical information in connection with the Tiny Galaxies mobile game (the “Game”), our website at [www.kiyoostudio.com] (the “Website”), and any related services or communications (collectively, the “Services”).

This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Alberta Personal Information Protection Act (PIPA), and, where applicable, the General Data Protection Regulation (GDPR), UK Data Protection Act 2018 (UK GDPR), and California Consumer Privacy Act (CCPA/CPRA). It also reflects general principles under other international privacy regimes.

By accessing or using any part of our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, you should discontinue use of our Services immediately.

For the purposes of this Privacy Policy:

(a) “Personal Information” means information about an identifiable individual, including names, contact details, device identifiers, and any data that can reasonably be linked to a specific person.
(b) “Device Data” means technical information automatically collected from your device when you use our Services, such as IP address, device type, operating system, model, language, and advertising identifiers.
(c) “Processing” means any operation performed on data, including collection, storage, use, disclosure, or deletion.
(d) “Controller” means Kiyoo Studio Inc, which determines the purposes and means of Processing Personal Information.
(e) “Third Party” refers to external service providers or partners that perform certain operations on behalf of Kiyoo Studio, such as advertising, analytics, or hosting.
(f) “Applicable Law” means privacy and data protection laws that apply based on your location, including PIPEDA, PIPA (Alberta), GDPR, and similar international frameworks.

We collect information to operate, maintain, and improve our Services. The types of data we collect include:

(a) Information You Provide Voluntarily:
When you contact us via email or feedback forms, we may collect your name, email address, and any other details you choose to provide.
(b) Automatically Collected Data:
When you use our Game or Website, we automatically collect certain technical information, including your device model, operating system, IP address, language preference, and general geographic region. This information is collected through SDKs such as Unity Ads and Firebase Crashlytics for advertising and crash reporting purposes.
(c) Usage Data:
We collect information about how you interact with our Game, including session length, gameplay metrics, leaderboard participation, and ad interactions.
(d) Transactional Data:
If you make in-app purchases, we receive limited transactional metadata (such as purchase identifiers and item details) from Apple App Store or Google Play. We do not process or store payment card details; such information is handled exclusively by the respective platform.
(e) Website and Cookie Data:
Our Website may collect anonymous usage statistics, log files, and cookie-based identifiers for functionality and analytics.

Our collection and use of Personal Information are based on one or more of the following legal grounds, depending on your jurisdiction:

(a) Consent: We rely on your consent for certain forms of data processing, such as the use of cookies or personalized advertising where applicable.
(b) Contractual Necessity: Processing that is necessary to provide, maintain, and support the Game or Services you request.
(c) Legitimate Interests: Processing required for analytics, performance monitoring, and improving gameplay experience, provided such interests are not overridden by your privacy rights.
(d) Legal Obligation: Processing required to comply with applicable legal or regulatory requirements.
(e) Vital Interests and Security: Processing necessary to detect fraud, protect system integrity, or ensure safety of the Services.

We use the information collected for the following purposes:

(a) To operate, maintain, and improve the Game and Website, including debugging and crash analytics.
(b) To provide advertising through Unity Ads and measure ad performance.
(c) To record leaderboard results and other in-game public information.
(d) To respond to user inquiries and provide technical support.
(e) To protect against fraud, abuse, and unauthorized activity.
(f) To comply with our legal obligations under applicable privacy and consumer laws.
(g) To develop new products, features, and updates to enhance player experience.

We do not sell, rent, or trade Personal Information.

Kiyoo Studio integrates trusted third-party technologies within its Services. These providers may collect or process limited categories of data as necessary for their respective purposes:

• Unity Ads (Unity Technologies): Used for ad delivery, frequency capping, and performance tracking. Data collected may include IP address, device identifiers, and ad engagement metrics.

• Firebase Crashlytics (Google LLC): Used to identify and diagnose application crashes and performance issues.

• Platform Providers (Apple and Google): Process in-app purchases and related metadata.

Each third party operates under its own privacy policy, which governs how it processes user data. Kiyoo Studio does not control, and is not responsible for, their independent data practices.

We may also share data:
(a) With service providers under contractual obligations to process data only on our behalf;
(b) As required by law or in response to lawful requests;
(c) In connection with a merger, acquisition, or other corporate transaction, where permitted by law.

Our Website uses cookies and similar technologies to improve usability, analyze traffic, and ensure site functionality. Cookies are small text files stored on your device that help us recognize repeat visitors and optimize performance.

We categorize cookies as:

• Essential Cookies: Necessary for basic functionality and security.

• Performance Cookies: Used for analytics and website measurement.

• Advertising Cookies: Used by Unity Ads and partners for ad relevance (subject to consent where required).

You can manage or disable cookies through your browser settings; however, some features of the Website may not function properly if cookies are disabled.

Kiyoo Studio retains Personal Information only for as long as necessary to fulfill the purposes for which it was collected, or as otherwise required by Applicable Law. Data retention periods are determined based on:

(a) The duration of your use of the Game or Services;
(b) Legal, regulatory, or contractual obligations;
(c) The resolution of disputes or enforcement of agreements; and
(d) Legitimate business interests such as fraud prevention and service improvement.

Once data is no longer required, Kiyoo Studio will securely delete, anonymize, or aggregate it so that it can no longer be associated with an identifiable individual. Backup copies may persist temporarily within archival systems until purged in accordance with our data retention schedule.

Kiyoo Studio employs appropriate technical and organizational measures to safeguard Personal Information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. Such measures include encryption, secure transmission protocols (HTTPS/TLS), restricted access controls, and internal security audits.

While Kiyoo Studio takes reasonable steps to protect data, no electronic transmission or storage mechanism is infallible. Users acknowledge that they provide information at their own risk and that Kiyoo Studio cannot guarantee absolute security of data transmitted through the internet or stored on third-party systems such as Unity or Firebase.

Kiyoo Studio operates from Canada, and data collected through its Services may be transferred to or processed in jurisdictions other than your country of residence, including the United States or the European Economic Area (EEA), where Unity Ads and Firebase maintain servers and data centers.

Where such transfers occur, Kiyoo Studio takes steps to ensure that Personal Information receives an adequate level of protection consistent with the requirements of Applicable Law. For transfers involving residents of the European Union, this may include reliance on Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent safeguards recognized under the GDPR.

By using our Services, you acknowledge and consent to the potential cross-border transfer of your Personal Information in accordance with this Policy.

Kiyoo Studio does not knowingly collect, use, or disclose Personal Information from children under the age of thirteen (13) years, nor does the Game or Website target users under that age. The Tiny Galaxies mobile game and related Services are expressly intended for individuals eighteen (18) years of age or older.

If Kiyoo Studio becomes aware that it has inadvertently collected Personal Information from a child under thirteen without verifiable parental consent, such information will be promptly deleted. Parents or guardians who believe that their child has provided data to us should contact support@kiyoostudio.com to request its removal.

Depending on your jurisdiction and applicable data protection laws, you may have certain rights in respect of your Personal Information, including:

(a) Access and Portability: You may request confirmation as to whether we hold Personal Information about you and obtain a copy in a structured, machine-readable format.
(b) Correction: You may request that inaccurate or incomplete Personal Information be rectified.
(c) Deletion: You may request the deletion of your Personal Information, subject to legal or contractual retention obligations.
(d) Withdrawal of Consent: Where Processing is based on consent, you may withdraw such consent at any time, without affecting the lawfulness of Processing conducted prior to withdrawal.
(e) Restriction and Objection: You may request to limit or object to Processing under certain circumstances.
(f) Opt-Out of Sale or Sharing (California Residents): In accordance with the CCPA/CPRA, California residents may opt out of any “sale” or “sharing” of Personal Information, as defined by that legislation.

Requests to exercise any of these rights must be submitted in writing to support@kiyoostudio.com. We may require verification of identity prior to processing any request and reserve the right to decline requests that are manifestly unfounded, excessive, or prohibited by law.

Kiyoo Studio may disclose Personal Information when required to do so by law, regulation, legal process, or governmental request, including for the purpose of responding to lawful subpoenas, warrants, court orders, or regulatory inquiries.

Where legally permissible, we will use reasonable efforts to notify affected users of such requests prior to disclosure. Kiyoo Studio may also disclose Personal Information when necessary to enforce our rights, prevent fraud or abuse, protect the safety of users, or comply with applicable legal obligations.

Kiyoo Studio maintains internal policies and procedures for identifying, assessing, and mitigating potential data breaches. In the event of an actual or suspected breach involving Personal Information, we will act promptly to contain the incident, investigate its scope, and determine the appropriate remedial measures.

If the breach creates a real risk of significant harm to individuals, Kiyoo Studio will provide notification in accordance with Applicable Law — including requirements under PIPEDA and GDPR to notify affected individuals and the relevant supervisory authorities within mandated time frames.

Notifications will describe, to the extent known, the nature of the breach, the categories of affected information, steps taken to mitigate harm, and recommendations for user protection.

Our Website and Services may contain links to external websites, platforms, or social media channels operated by third parties. These links are provided for convenience and informational purposes only. Kiyoo Studio does not control, endorse, or assume responsibility for the content, privacy policies, or practices of any third-party websites or services.

When you follow a link to a third-party platform—such as an app store or external advertisement—you are subject to the privacy practices and terms of that third party. We strongly encourage you to review their policies before providing any personal or financial information. Kiyoo Studio disclaims all liability arising from your access to or interaction with any third-party content or service.

Kiyoo Studio reserves the right, at its discretion, to amend or update this Privacy Policy at any time to reflect changes in legal requirements, technological developments, or our business operations. Any modifications will be effective upon posting of the updated version on [www.kiyoostudio.com], unless otherwise required by law.

We may, where appropriate, provide additional notice of material changes—such as by displaying an in-game notification, updating the “Effective Date” above, or sending an email to users who have provided contact information. Your continued use of our Services following any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage users to review this Policy periodically to remain informed about how we protect and handle personal data.

Questions, comments, or concerns regarding this Privacy Policy or Kiyoo Studio’s privacy practices should be directed to our designated Privacy Officer:

Kiyoo Studio Inc
Attn: Privacy Officer
Email: support@kiyoostudio.com

If you reside within a jurisdiction that provides statutory rights of complaint (such as under PIPEDA or GDPR), you may also contact your local data protection authority regarding concerns about our processing of your personal information.

This Privacy Policy is effective as of 8th October 2025 and supersedes all prior versions. Kiyoo Studio may maintain archived copies for compliance and audit purposes.

By continuing to use our Website, Game, or related Services after this date, you acknowledge that you have read, understood, and consent to the collection, use, and disclosure of your information as described herein.