Privacy Policy

Effective Date: 4 June 2026

Last Updated: 11 June 2026

This Privacy Policy describes how Rovion Games ("we", "us", "our", or the "Company") collects, uses, and shares information about you when you use our mobile application Wallduo (the "App"). By downloading, installing, or using the App, you agree to this Privacy Policy. If you do not agree, please uninstall the App and stop using it.

Wallduo is an interactive live-wallpaper and home-screen widget app. It is designed to ask for as little information as possible: it does not require you to create an account or sign in with an email or password. Optional features described below (such as photo sharing and the distance widget) only process the additional data they need, only with your action or consent, and only with the small group of people you explicitly connect with.

1. Who We Are

Rovion Games is an independent studio operating under the laws of India. You can contact us at support@roviongames.com for any privacy-related questions, requests, or complaints.

2. Information We Collect

We collect the following categories of information.

(a) Device and technical information. Device model, manufacturer, and operating system version. Device language, time zone, and approximate region (derived from IP address). Network type (Wi-Fi or cellular). App version and installation source. A resettable advertising identifier provided by your operating system (Google Advertising ID on Android), if you have not opted out at the operating-system level. This information is collected mainly through Google Firebase and Google AdMob.

(b) Usage and analytics data. Events related to how you use the App, such as which wallpapers you set, which widgets you add, which screens you view, onboarding completion, and the steps of the subscription and token purchase flows. Session start and end times, frequency, and duration. A pseudonymous identifier generated by Firebase Analytics that is not linked to your real-world identity.

(c) Advertising data. Whether you viewed a banner, interstitial, or rewarded ad, and how many rewarded ads you have watched (which we also use to limit abuse and detect invalid ad activity). Your consent decision for personalized versus non-personalized advertising. Your advertising identifier as described above.

(d) Purchases, subscriptions, and the token balance. If you subscribe to Wallduo Premium or buy the one-time "Remove Ads" product, we receive your purchase status from Google Play Billing so we can unlock what you bought. If you buy a token pack, our server verifies the purchase receipt with Google Play before crediting tokens. We store your token balance, your daily-claim streak, the count of tokens earned from rewarded ads, and the list of wallpapers you have unlocked, on our servers (Google Firebase) under the pseudonymous identifier described in Section 2(f). We do not receive or store your full card number or payment credentials; payment is handled entirely by Google Play.

(e) Pairing, circles, and shared content. The App lets you connect with other people in two ways, both using short invite codes that you share yourself:

- Game pairing, to play a wallpaper together with one other person (for example chess or a shared pet). When paired, your chosen display name, your moves and turns, and the state of the shared activity are exchanged through Google Firebase Realtime Database under a randomly generated code.

- Circles, small private groups of up to 4 people that power shared widgets. Within a circle, the following may be stored on our servers and visible to the other members of that circle, depending on which features you use: your display name; items on a shared checklist; shared habit goals and daily progress; answers to the daily question; notes you write to the circle; the approximate battery level of your device; a countdown or anniversary date you set; photos you choose to share (see Section 2(g)); and your approximate location for the distance feature (see Section 2(h)).

You choose who is in your circles by sharing the invite code. You can leave any circle at any time from within the App, after which you stop sharing with that circle.

(f) Anonymous authentication. To enable online features and apply security rules, the App signs you in to Firebase Anonymous Authentication, which assigns a pseudonymous identifier to your device. You are not asked for an email, name, or any account credentials. Your token balance, unlocks, circle memberships, and a push-notification token (Section 2(i)) are associated with this identifier. If you uninstall the App, this identifier is lost and a new one is created on reinstall; data tied to the old identifier becomes inaccessible.

(g) Photos (optional, user-initiated). If you use the photo-sharing widget, the photos you explicitly select or take are uploaded to our storage provider (Google Firebase Storage) and are visible only to the members of the circle you share them with. Photos are re-encoded before upload, which removes embedded metadata such as the location where the photo was taken. We keep only a limited number of recent photos per circle and delete older ones automatically. The App does not scan, access, or upload any other photos on your device, and does not request general photo or storage permissions; it uses the operating system's photo picker, which shares only the specific image you choose.

(h) Approximate location (optional, opt-in). If you enable the distance widget, the App asks for approximate ("coarse") location permission. When you use the App in the foreground, your location, rounded to roughly city-block-to-kilometre precision, is stored in your circle so that members of that circle can see the approximate distance between you. We do not collect precise GPS location, we do not track location in the background, and we do not collect location at all unless you enable this feature. You can turn it off by revoking the permission or leaving the circle.

(i) Push notifications. The App registers a push-notification token (Firebase Cloud Messaging) so the people you are connected with can trigger notifications to your device — for example "your move" in a game, a new shared photo, or a "miss you" tap. You can disable notifications at any time in your device settings.

(j) Crash and diagnostic data. If the App crashes or encounters errors, we collect diagnostic information through Firebase Crashlytics, such as the error details, device state at the time, and a pseudonymous identifier, so we can diagnose and fix the issue.

(k) Information you choose to provide. If you contact us by email, we receive whatever you send, including your name, email address, and message contents. If you use the in-app "Invite a friend" or share feature, your device's operating system shares whatever you select.

(l) Information stored only on your device. Your nickname, chosen avatar, selected wallpaper, favorites, frame-rate preference, daily app streak, cached entitlement flags, widget settings, and your saved list of partners are stored locally on your device, except to the limited extent described above for shared features.

What we do not collect. Your real name (we encourage nicknames), email or phone number (unless you contact us), precise GPS location, background location, contacts, microphone audio, or any photo you did not explicitly choose to share. The App requests only the permissions needed for the features you use: Internet and network state; notifications (optional); and approximate location only if you enable the distance feature.

3. How We Use Your Information

We use the information we collect for the following purposes.

To operate the App, including rendering live wallpapers and widgets, saving your preferences, running paired games and circles, delivering shared content to the people you choose, and sending push notifications you and your circle members trigger.

To operate the token economy fairly, including crediting daily claims and purchases, verifying purchase receipts with Google Play, preventing tampering with balances, and recording unlocks.

To improve the App, including understanding which wallpapers, widgets, and features people use.

To show ads, including third-party ads provided by Google AdMob and its mediation partners, for users who have not purchased an ad-free option. With your consent, we may show personalized ads.

To provide and manage purchases, including unlocking Wallduo Premium, Remove Ads, and token purchases based on Google Play Billing status.

To prevent fraud and abuse, including detecting invalid or excessive ad activity, manipulation of the token economy, abuse of our online services, and violations of our Terms and Conditions.

To diagnose crashes and bugs, using diagnostic reports to identify and fix problems.

For legal compliance, including meeting our obligations under applicable law and responding to lawful requests from authorities.

To communicate with you, only if you contact us first.

4. Children's Privacy

Wallduo is intended for a general audience aged 13 and older (or the applicable age of digital consent in your region). It is not directed to children under that age, and we do not knowingly collect personal information from them.

Where required by law, we use Google's User Messaging Platform and AdMob settings to manage advertising consent and to serve non-personalized ads to users who do not consent to personalized advertising.

If you are a parent or guardian and believe a child under the applicable age has provided us with personal information, please contact us at support@roviongames.com and we will delete it.

5. Legal Bases for Processing (GDPR / EU and UK Users)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing your information are as follows.

Consent, for personalized advertising, approximate location for the distance feature, and any optional analytics.

Legitimate interest, for non-personalized analytics, crash and diagnostic reporting, fraud and abuse prevention, and product improvement.

Contractual necessity, for providing the App, enabling the paired and circle features that you choose to use, operating the token economy, and managing your purchases.

Legal obligation, for tax, accounting, and compliance with lawful requests.

You can withdraw consent at any time through the in-app consent settings, your device permission settings, or by contacting us.

6. Sharing Your Information

We share information with the following third parties, each acting as our data processor or independent controller.

Google Firebase (Analytics, Anonymous Authentication, Realtime Database, Cloud Storage, Cloud Functions, Cloud Messaging, and Crashlytics): for analytics, online features, circles and shared content, photo storage, push notifications, the token economy, and crash reporting. See firebase.google.com/support/privacy

Google AdMob and its mediation partners: for serving ads. See policies.google.com/technologies/ads

Google Play Services and Google Play Billing: for app distribution, purchases, and receipt verification. See policies.google.com/privacy

Google User Messaging Platform (UMP): for advertising consent management. See support.google.com/admob/answer/10113207

When you pair for a game or join a circle, the information described in Section 2(e), and any optional content described in Sections 2(g) and 2(h), is shared with the specific people in that pairing or circle. We do not make this content public, and there is no public feed, directory, or discovery of other users in the App.

We may also share information with law enforcement, courts, or regulators when required by law or in response to a lawful request; with professional advisors such as lawyers, accountants, and auditors under confidentiality obligations; in connection with a sale, merger, financing, or other transfer of all or part of our business, in which case we will require the buyer to honor this Privacy Policy; and in aggregated or de-identified form that cannot reasonably be used to identify you.

We do not sell your personal information to third parties for monetary compensation. For the purposes of California law (CCPA and CPRA), our sharing of advertising identifiers with ad networks for personalized advertising may be considered "sharing". See Section 9 for opt-out details.

7. International Data Transfers

The third parties listed above operate globally. Your information may be transferred to, stored in, and processed in the United States, the European Union, India, and other countries where these providers operate. Where required by law, we and our processors implement appropriate safeguards such as Standard Contractual Clauses (SCCs).

8. Data Retention

Analytics data is retained for the Firebase event-data retention period, currently set to 14 months from collection, unless you request earlier deletion.

Crash and diagnostic reports are retained for up to 90 days.

Paired game sessions are temporary: a session is deleted when it ends, and abandoned sessions are removed automatically after a period of inactivity.

Circle content (shared lists, habits, notes, dates, answers, battery level, and approximate location for the distance feature) is retained while the circle exists so that its members can keep using it. Shared photos are limited to a small number of recent photos per circle; older photos are deleted automatically. When you leave a circle, you stop sharing new data with it; you may request deletion of content you contributed by contacting us.

Token balances, unlocks, and purchase receipts are retained while needed to provide what you paid for and to prevent fraud (for example, preventing the same purchase from being credited twice).

Data stored locally on your device remains on your device until you uninstall the App or clear its data.

Communications you send us are retained for as long as necessary to respond and for our records, typically up to two years.

9. Your Rights

Depending on where you live, you may have the following rights with respect to your personal information.

Right of access, to obtain a copy of the personal information we hold about you.

Right to correction, of inaccurate information.

Right to deletion or erasure, of your personal information.

Right to object, to processing based on legitimate interests.

Right to restrict processing.

Right to data portability, to receive your data in a structured, machine-readable format.

Right to withdraw consent, at any time, without affecting processing already performed.

Right to lodge a complaint, with your local data protection authority.

India-specific rights under the DPDP Act 2023. Right to nominate a person to exercise your rights in the event of your death or incapacity. Right to grievance redressal, which allows you to file a complaint with our Grievance Officer and, if unsatisfied, with the Data Protection Board of India.

California-specific rights under CCPA and CPRA. Right to know what personal information we collect, sell, or share. Right to delete. Right to correct. Right to opt out of sale or sharing, which you can exercise by adjusting your in-app ad consent settings or your device's ad-tracking settings. Right to non-discrimination, meaning we will not penalize you for exercising these rights.

Because the App does not require a traditional account, much of the information we process is pseudonymous or stored only on your device. For locally-stored data, you can exercise deletion at any time by clearing the App's data or uninstalling it. For server-stored data (such as your token balance, circle memberships, and shared content), contact us at support@roviongames.com with the subject line "Privacy Request" and we will locate and delete it; including your circle code(s) helps us find the data faster. We will respond within 30 days, or such shorter period as required by law. We may need additional information to verify or locate the relevant data before fulfilling certain requests.

Grievance Officer (India): Ronit Thakur, reachable at support@roviongames.com.

10. Security

We use commercially reasonable technical and organizational measures to protect your information, including transport-layer encryption (HTTPS and TLS) for data sent to our service providers, and server-side security rules that restrict shared content so that only the members of your specific pairing or circle can read it. However, no method of electronic transmission or storage is 100 percent secure. We cannot guarantee absolute security, and you acknowledge that you provide information at your own risk.

11. Third-Party Links

The App may contain links to third-party websites or services, for example our social media pages or our developer page on the Play Store. This Privacy Policy does not apply to those services. We are not responsible for the privacy practices of third parties.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or features of the App. When we make material changes, we will update the "Last Updated" date at the top of this policy. For material changes that expand our processing of your personal information, we will notify you via an in-app notice or other reasonable means, and where required by law, obtain your renewed consent.

Your continued use of the App after changes take effect constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you should stop using the App and uninstall it.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your information, please contact us.

Rovion Games

Email: support@roviongames.com

Subject line: "Privacy Inquiry"

For privacy matters under Indian law, you may also contact our Grievance Officer at the same email with the subject line "Grievance".

This Privacy Policy is provided in English. If translations are made available, the English version controls in case of any conflict.