MineDive Privacy Policy
1. Who we are
- Controller: Two Squared LLC
- Registered office: 23415-1 Pedernales Canyon Trl, Spicewood TX, 78669
- Contact: privacy@twosquared.io
- Effective date: 2026-05-27
This policy describes how MineDive (the “app”) and its backend service collect, use, retain, and share your information. It covers our commitments under the EU GDPR, the UK GDPR, the California Consumer Privacy Act / California Privacy Rights Act, and Apple's App Store policies.
2. Our commitments at a glance
- No real name. Real name is never required. Optional account linking — Apple's Sign in with Apple on iOS, Google Sign-In on Android — may expose the name and/or email on that account for personalization; the player can edit any composed name before submit.
- No precise location. Precise location is never collected. Country may be inferred from App Store storefront for aggregate analytics; no GPS or wifi-derived location.
- Anonymous by default. Your account ID is a device-generated UUID stored on-device (Keychain on iOS). External account linking is optional (Apple ID on iOS, Google on Android); a player who never links an external account has no PII on our servers.
- Telemetry opt-out. Settings → “Opt out of analytics” suppresses every event at source.
- Leaderboard opt-out. Settings → “Opt out of leaderboards” suppresses writes; existing rows are deleted via the same path that powers account deletion.
- Account deletion. Settings → Delete Account removes every row keyed by your account ID across our single backend table. The same path satisfies GDPR / CCPA erasure requests.
- No cross-app tracking. No advertising or cross-app tracking SDKs are embedded. Android uses Google Play services (sign-in, purchases, leaderboards, anti-abuse) for app functionality only.
3. What we collect, why, and how long we keep it
Each row below corresponds to one App Store Connect Nutrition Label entry.
| What | Why | Retention |
|---|---|---|
| Identifiers: User ID — anonymous device-generated account UUID | App Functionality | Until /v1/account/delete is called |
| User Content: Leaderboard display name (player-chosen, public) | App Functionality | Until the player changes it or deletes the account |
| Contact Info: Email from Sign in with Apple (often a private relay) | App Functionality | Until /v1/account/delete is called |
| Contact Info: Optional support-ticket email (reply-only) | Customer Support | 180 days post-resolution, then cold-archive, then deleted at 365 days |
| Diagnostics: Performance data attached to a support ticket (opt-in checkbox) | App Functionality | 180 days post-resolution |
| Usage Data: Product interaction (tile reveals, floor completions, run outcomes) | Analytics; App Functionality | 540 days |
| Purchases: In-app purchase product IDs (payment info stays with Apple) | App Functionality; Analytics | Lifetime of account |
| Diagnostics: MetricKit aggregated launch + animation + hang metrics | Analytics; App Functionality | 540 days |
| Diagnostics: MetricKit crash + CPU-exception reports | Analytics; App Functionality | 540 days |
| User Content: In-game progress (run state, unlocks, statistics) mirrored to backend + iCloud | App Functionality | Until /v1/account/delete is called |
4. Tracking and advertising
This app does not track you across other companies' apps or websites. No advertising or cross-app tracking SDKs are embedded. The Android build includes Google Play services (Google Sign-In, Google Play Games Services, Google Play Billing, and Google Play Integrity) used solely for app functionality — optional sign-in, purchases, leaderboards, and anti-abuse — never for cross-app tracking. iOS's App Tracking Transparency prompt is therefore not shown.
5. Your rights
Depending on where you live, you have some or all of the following rights regarding your data:
- Access — request a copy of the data we hold linked to your account.
- Deletion — Settings → Delete Account, or email us.
- Correction — Settings → Leaderboard Display Name.
- Opt-out of analytics — Settings → Opt out of analytics.
- Opt-out of leaderboards — Settings → Opt out of leaderboards.
- Non-discrimination (CCPA) — exercising any right doesn't change app behavior.
To exercise any right, email privacy@twosquared.io. We respond within 30 days (GDPR) or 45 days (CCPA).
6. Children's privacy
MineDive is not directed at children under 13 (US) / under 16 (EU). We do not knowingly collect data from children in those age brackets. If you believe a child has provided us data, contact us and we will delete it.
7. International transfers
Our backend runs in the AWS us-east-1 region. If you are in the EU/UK, your data is transferred to the United States. We rely on the EU-US Data Privacy Framework + Standard Contractual Clauses to legitimize the transfer.
8. Third parties
- Apple (iOS build) — App Store, In-App Purchase, Sign in with Apple, iCloud, Game Center, MetricKit.
- Google (Android build) — Google Play (store + billing), Google Sign-In, Google Play Games Services, and Google Play Integrity.
- AWS — our backend infrastructure provider.
9. Changes to this policy
When we change this policy, we update the Effective date at the top and, for material changes, surface an in-app notice the next time you launch MineDive.
10. Contact
privacy@twosquared.io — for any question about this policy or your data.