1. About This Policy
This Privacy Policy explains how NFC Monsters ("we", "us", or "our") collects, uses, and protects your personal information when you use the NFC Monsters mobile app ("the App"). By using the App, you agree to the practices described here. If you do not agree, please stop using the App.
2. Information We Collect
We collect the following categories of data:
- Account Data: Email address, display name, and authentication tokens when you create an account or sign in.
- Game Progress: Monster collections, levels, XP, currency balances, battle history, achievements, quests, and club membership.
- Purchase History: Records of in-app purchases processed through Apple App Store or Google Play to fulfil and verify transactions. We do not store your payment card details.
- NFC Tag Data: The encoded payload on physical NFC tags you scan. This is used solely to spawn your monster and verify the tag has not already been claimed.
- Location (optional): Approximate location data is used by the Monster Hunt feature to place monsters on a map. This is only accessed while you are actively using Monster Hunt and is never stored on our servers.
- Device & Technical Data: Device type, operating system version, app version, and anonymised crash/diagnostic data to fix bugs and improve performance.
- Analytics: Anonymised gameplay events (e.g. features used, session length) to help us understand how players use the App.
3. How We Use Your Data
We use the data we collect to:
- Create and manage your account
- Save and synchronise your game progress across devices (cloud save)
- Process and verify in-app purchases
- Run multiplayer features, clubs, and leaderboards
- Serve rewarded advertisements (you can earn in-game rewards by watching ads)
- Detect and prevent fraud, cheating, and abuse
- Send important service communications (e.g. policy updates)
- Improve the App through anonymised analytics
- Comply with applicable laws
We do not use your data for interest-based advertising without your consent, and we do not sell your personal data to third parties.
4. Data Sharing
We may share your data only with:
- Apple / Google: For purchase verification via their respective billing platforms.
- Cloud & Hosting Providers: Secure servers used to store game data (data is encrypted at rest and in transit).
- Analytics Providers: Anonymised, aggregated data only.
- Ad Networks: Non-personally identifiable data to serve rewarded ads. You may opt out by purchasing an ad-free upgrade in the Shop.
- Law Enforcement: When required by applicable law, court order, or to protect the safety of users.
5. Device Permissions
The App requests the following permissions:
- NFC (Near Field Communication): Required to scan NFC tags to unlock monsters. Only accessed when you actively initiate a scan.
- Location (when in use only): Used solely for the Monster Hunt map. You can deny this permission and the rest of the App works normally.
- Internet Access: Required for account login, cloud saves, multiplayer, and loading game assets.
- Local Storage: Used to cache assets for offline performance. No personal files on your device are accessed.
All permissions can be revoked at any time in your device Settings app. Revoking a permission disables the associated feature but does not affect your account or core progress.
6. Children's Privacy
NFC Monsters is rated for users aged 13 and over. We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area). If you believe a child has provided us with personal data, please contact us immediately at privacy@nfcmonsters.com and we will delete it promptly.
7. Data Security
- All data in transit is encrypted using HTTPS/TLS
- Data at rest is encrypted using AES-256
- Access to user data is restricted to authorised personnel only
- We conduct regular security reviews
No system is 100% secure. If a data breach occurs that affects your rights, we will notify you as required by applicable law.
8. Data Retention
- Active accounts: Data retained for as long as your account exists.
- Inactive accounts: Data deleted after 2 years of inactivity.
- Purchase records: Retained for 7 years as required for financial/legal compliance.
- Analytics: Anonymised data retained for up to 1 year.
You can request deletion of your account and data at any time — see Section 9 below.
9. Your Rights & Account Deletion
Depending on your location, you may have the right to:
- Access a copy of the personal data we hold about you
- Correct inaccurate data (e.g. your display name)
- Delete your account and all associated data
- Restrict or object to certain processing activities
- Portability — receive your data in a machine-readable format
- Opt out of non-essential analytics
To delete your account: Go to Profile → Delete Account within the App, or email us at privacy@nfcmonsters.com. Please note that if you have an active in-app subscription you must cancel it through the App Store or Google Play before deleting your account. Purchase records may be retained as required by law.
10. In-App Purchases
All purchases are processed exclusively through Apple App Store (iOS) or Google Play (Android). We do not directly handle or store your payment details. Subscriptions and purchase history are managed by Apple or Google in accordance with their own privacy policies. For refund requests, please contact Apple or Google Support.
11. Third-Party Services
The App may use the following third-party services, each governed by their own privacy policy:
- Apple App Store & Apple Sign-In
- Google Play & Google Sign-In
- AdMob (Google) — rewarded ad delivery
- Stripe — web payment processing
12. International Data Transfers
Your data may be stored and processed in countries outside your own. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in line with applicable law.
13. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via an in-app notice or email. Continued use of the App after the effective date constitutes acceptance of the updated policy.
14. Contact Us
For any privacy questions, data requests, or to exercise your rights, please contact: