Privacy Policy

Last updated: May 18, 2025

Your privacy matters to us. This policy explains exactly what data we collect, why we collect it, and how you can control it. We comply with GDPR, COPPA, CCPA, and Vietnam's data protection laws.

1. Introduction

SolidStudio ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, games, mobile applications, and related services (collectively, the "Services"). Please read this policy carefully. If you disagree with its terms, please discontinue use of our Services. This policy complies with applicable data protection laws including GDPR (EU), CCPA (California), COPPA (Children's Online Privacy Protection Act), and Vietnam's Law on Cybersecurity and Personal Data Protection. Not every practice described in this Privacy Policy applies to every app, game, or service we offer. The specific permissions, data types, and features used by a particular app are described within that app and on its App Store product page.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: username, email address, password, date of birth • Profile information: display name, avatar, bio • Payment information: billing address, payment method (processed securely by third-party providers — we do not store card details) • Communications: messages you send us via contact forms, support tickets, or email • User-generated content: in-game content, reviews, comments For community apps, content you submit — such as chord charts, lyrics, and comments — together with your display name may be publicly visible to other users as soon as you post it.

2.2 Information Collected Automatically

• Device information: device type, operating system, browser type and version, device identifiers (IDFA, GAID) • Log data: IP address, access times, pages viewed, referring URLs, crash reports • Gameplay data: game progress, scores, session duration, in-game actions, purchases • Location data: general geographic location based on IP address (we do not collect precise GPS location without explicit consent) • Cookies and tracking technologies (see Section 5)

2.3 Information from Third Parties

• Social login providers (Google, Facebook, Apple): basic profile information when you choose to sign in via these platforms • Analytics partners: aggregated usage statistics • Advertising partners: ad interaction data (only for non-personalized ads for users under 16) • Payment processors: transaction confirmation data

2.4 Microphone Access

Certain apps request access to your device's microphone to power real-time audio or pitch-detection features. Audio captured is processed entirely on your device and is never recorded, stored, or transmitted to us or any third party. You can revoke microphone access at any time in your device's Settings.

3. How We Use Your Information

We use the information we collect for the following purposes: • Provide, operate, and maintain our Services • Create and manage your account • Process transactions and send related information including purchase confirmations • Deliver in-game features, leaderboards, achievements, and social features • Send administrative information such as updates, security alerts, and support messages • Respond to your comments, questions, and customer service requests • Analyze usage patterns to improve our Services and develop new features • Personalize your experience and deliver relevant content • Detect, prevent, and address fraud, cheating, and technical issues • Comply with legal obligations and enforce our Terms of Use • Send promotional communications (with your consent where required)

5. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, and similar technologies to: • Keep you logged in to your account • Remember your preferences and settings • Understand how you interact with our Services • Measure the effectiveness of our marketing campaigns • Deliver relevant advertisements Types of cookies we use: • Essential cookies: required for the Services to function properly • Analytics cookies: help us understand usage patterns (Google Analytics, Firebase) • Preference cookies: remember your settings and choices • Marketing cookies: used to deliver relevant ads (only with consent) You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Services. We honor Do Not Track (DNT) browser signals. Mobile advertising identifiers: our mobile apps and games may use your device's advertising identifier — IDFA (Identifier for Advertisers) on iOS, or Advertising ID / GAID on Android — for advertising and analytics. You can control or reset this at any time: • iOS: Settings → Privacy & Security → Tracking (and Apple Advertising). On iOS 14.5+, we request permission through the App Tracking Transparency (ATT) prompt before any tracking. • Android: Settings → Google → Ads → "Delete advertising ID" or "Opt out of Ads Personalization". For users under the age of 13 (or 16 in the EEA), we serve only non-personalized ads.

6. Children's Privacy (COPPA Compliance)

SolidStudio takes children's privacy very seriously. Our general Services are not directed to children under the age of 13 (or 16 in the EEA). • We do not knowingly collect personal information from children under 13 without verifiable parental consent. • Games rated for all ages or targeted at children require parental consent before account creation. • We do not serve behavioral advertising to children under 16. • We do not enable social features (chat, friend lists) for verified child accounts without parental consent. • In-app purchases in children's games require parental authorization. • We do not share children's data with third parties for marketing purposes. If we discover that a child under 13 has provided personal information without parental consent, we will delete such information immediately. Parents or guardians may contact us at support@solidstudiogame.com to request access to, correction of, or deletion of their child's data.

7. Sharing Your Information

We do not sell your personal information. We may share your information with: • Service providers: third-party vendors who assist in operating our Services (cloud hosting, analytics, payment processing, customer support). They are bound by contractual obligations to protect your data. • Business partners: with your consent, for joint promotions or co-developed games. • Legal compliance: when required by law, court order, or government authority, or to protect the rights, property, or safety of SolidStudio, our users, or the public. • Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy. • Aggregated data: we may share anonymized, aggregated data that cannot reasonably be used to identify you. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

8. Data Retention

We retain your personal information for as long as necessary to: • Maintain your account and provide our Services • Comply with legal obligations (tax records, fraud prevention) • Resolve disputes and enforce our agreements Specific retention periods: • Account data: retained until account deletion + 30 days • Transaction records: 7 years (legal/tax requirements) • Gameplay logs: 2 years • Support communications: 3 years • Marketing data: until consent is withdrawn When data is no longer needed, we securely delete or anonymize it.

9. Data Security

We implement industry-standard security measures to protect your information: • Encryption: all data transmitted between your device and our servers is encrypted using TLS/SSL • Secure storage: sensitive data is encrypted at rest using AES-256 encryption • Access controls: strict internal access controls and employee data protection training • Regular audits: periodic security assessments and penetration testing • Incident response: a dedicated process for detecting and responding to data breaches Despite our efforts, no security system is impenetrable. In the event of a data breach that affects your rights, we will notify you as required by applicable law (within 72 hours for GDPR, as required for other jurisdictions).

10. Your Rights & Choices

Depending on your location, you may have the following rights: • Access: request a copy of the personal data we hold about you • Correction: request correction of inaccurate or incomplete data • Deletion: request deletion of your personal data ("right to be forgotten") • Portability: receive your data in a structured, machine-readable format • Restriction: request that we limit the processing of your data • Objection: object to processing based on legitimate interests or for direct marketing • Withdraw consent: withdraw consent at any time where processing is based on consent To exercise your rights, contact us at support@solidstudiogame.com. We will respond within 30 days. We may need to verify your identity before processing your request. You also have the right to lodge a complaint with your local data protection authority. Account deletion: if an app offers user accounts, you can permanently delete your account at any time directly in the app, typically under Settings → Account → Delete Account. When you delete your account, your personal data — such as your email address and display name — is permanently removed from our systems. Content you posted publicly may remain visible but is anonymized and no longer linked to your identity. You can also request account deletion by emailing support@solidstudiogame.com.

12. International Data Transfers

SolidStudio operates primarily in Vietnam. Your data may be transferred to and processed in countries other than your country of residence, including countries that may not have the same data protection laws as your jurisdiction. For our account-based community apps, your account data (such as your email address and display name) and the content you submit are stored on Supabase infrastructure located in Singapore. We do not sell your personal data. For users in the EEA/UK, we ensure that international transfers comply with GDPR requirements through: • Standard Contractual Clauses (SCCs) approved by the European Commission • Adequacy decisions where applicable • Other appropriate safeguards as required by law

13. Push Notifications & Marketing

With your consent, we may send you push notifications about game updates, events, promotions, and new releases. You can opt out at any time by: • Adjusting notification settings in the game or app • Disabling push notifications in your device settings • Clicking "unsubscribe" in any marketing email We will not send marketing communications to users who have opted out. Please note that even after opting out of marketing, we may still send you transactional or service-related communications.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: • Posting a notice on our website or within the game • Sending an email notification (for registered users) • Requesting renewed consent where required by law The date of the latest revision is displayed at the top of this page. We encourage you to review this policy periodically.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: SolidStudio — Privacy Team Email: support@solidstudiogame.com Address: Ho Chi Minh City, Vietnam Response time: within 30 days For GDPR-related requests, you may also contact our Data Protection Officer (DPO) at support@solidstudiogame.com.

© 2026 SolidStudio. All rights reserved.