Privacy Policy for Shipion

Last updated: September 29, 2026

This Privacy Policy explains how Shipion ("Shipion," "we," "us," or "our"), operated by Ali Javadli, collects, uses, stores, and shares information when you use the Shipion mobile game.

Shipion does not require you to create an account or sign in. The app and its service providers may use installation identifiers, purchase identifiers, and other technical identifiers to operate its features.

1. Information We Process

Gameplay and Usage Information

We may process gameplay and app-usage information, including scores, distance traveled, selected cities, levels, completed missions, unlocked content, advertisement interactions, and purchase events. We use this information to operate the game, understand how features are used, diagnose problems, and improve gameplay and performance.

Device and Technical Information

We and our service providers may process device type, operating system, app version, language, IP address, installation identifiers, crash reports, performance information, and device-integrity or security signals. Shipion does not request access to the advertising identifier (IDFA) and does not use App Tracking Transparency.

Camera, Photos and Face Data

The current version of Shipion does not access your camera or photo library and does not collect, process, or store photos or face data. See Section 5 for information about the avatar feature that was available in earlier versions.

Advertising Information

Shipion uses Google AdMob for rewarded and interstitial advertisements. Shipion requests non-personalized advertisements only. Advertising services may still process limited information, such as IP address, approximate location inferred from the IP address, advertisement interactions, and diagnostic information, for advertisement delivery, measurement, frequency limits, and fraud prevention.

Purchase Information

In-app purchases are processed through the Apple App Store or Google Play and managed using Adapty. We may process product identifiers, transaction identifiers, purchase history, entitlement status, and price and currency information to deliver purchased content and restore eligible purchases. We do not receive or store your full payment-card details.

Local Data and Notifications

Game progress, settings, coins, tickets, selected characters and equipment, previously downloaded characters, purchase entitlement caches, advertisement reward credits, and notification preferences may be stored on your device. If you allow notifications, Shipion may schedule local reminders, such as a reminder that a daily reward is available. You can disable these reminders in the app or in your device settings.

Support Communications

If you contact us, we receive the information you include in your message, such as your email address, issue description, and any identifiers or attachments you provide. We use this information to respond to and handle your request.

2. How We Use Information

We use information to:

- Provide and maintain the game.

- Store progress, settings, and unlocked content.

- Provide and measure non-personalized advertisements.

- Deliver purchases and restore eligible entitlements.

- Improve gameplay, reliability, and performance.

- Diagnose errors, prevent abuse, and protect the service.

- Respond to support and privacy requests, including deletion requests.

- Meet applicable legal obligations.

3. Advertising and Privacy Choices

Where applicable, Shipion uses Google's User Messaging Platform to request advertising consent and offer privacy choices. When Google indicates that privacy options are required, an Advertising Privacy option appears in Shipion's Settings, where you can review or change your choices. Shipion does not track you across apps and websites owned by other companies.

4. Retention of Game and Technical Information

Locally stored game information remains on your device until it is cleared or the app is deleted. Device backups and store-managed purchase records may persist separately. Analytics, crash, advertising, and purchase records are subject to the relevant providers' retention settings and applicable legal obligations. Support communications are retained as long as needed to address the request and meet legal obligations.

5. Face Data From the Discontinued Avatar Feature

Earlier versions of Shipion offered an optional feature that created a playable avatar from a photo the user chose. This feature has been removed. The current app does not collect, use, or share photos or face data.

What was collected: If a user of an earlier version chose to create an avatar and consented to processing, the app processed the submitted photo (including any visible face and appearance), generated reference images and avatar portraits, a 3D model with textures and rigging data, and technical processing records (job identifiers, status, and timestamps). No face geometry or biometric template was created for identification.

How it was used: Solely to generate a playable game character at the user's request. Face data was never used to identify or authenticate anyone, for advertising, for analytics, or for training our own models, and it was never sold.

Who it was shared with: Only with the service providers needed to create the avatar, and only for that purpose: Supabase (temporary storage and coordination), OpenAI (reference-image generation from the submitted photo), fal.ai / Hyper3D Rodin (3D model generation from generated images), and Meshy (rigging of the generated model). Each provider received only the content needed for its step. These providers process the data under their terms as service providers to us and are required to use it only to provide their service and to protect it with safeguards at least as protective as those described in this Policy.

Retention: Shipion's temporary server copies (Supabase) were deleted after the avatar was delivered to the device, or automatically within seven days if delivery did not complete. Avatars created with older versions may still have server-side files until deleted on request. Copies held by the AI providers are governed by their retention settings; for example, OpenAI's API data controls describe default retention of up to 30 days for abuse monitoring, with exceptions required by law or safety. Avatar files you downloaded remain on your device until you delete them or the app.

Deletion and revoking consent: You may withdraw consent and request deletion of any remaining face data or avatar data at any time by emailing dev.javadli@gmail.com. Please include information that helps us locate it, such as the avatar identifier or approximate creation date. We will delete what we hold, request deletion from the relevant providers where possible, and tell you about any technical or legal limitation. You can remove on-device copies by deleting the avatar in the app or deleting the app. Deleting an avatar does not delete the original photo from your photo library.

6. Third-Party Services

Services used by Shipion include:

- Google Firebase: analytics, crash reporting, and remote configuration. https://firebase.google.com/support/privacy

- Google AdMob: advertising and advertising privacy choices. https://policies.google.com/privacy

- Adapty: purchase and entitlement management. https://adapty.io/privacy/

- Supabase: backend infrastructure and storage. https://supabase.com/privacy

- Apple: iOS distribution and purchases. https://www.apple.com/legal/privacy/

- Google Play: Android distribution and purchases. https://policies.google.com/privacy

Providers used only by the discontinued avatar feature (see Section 5): OpenAI (https://openai.com/policies/privacy-policy/), fal.ai / Hyper3D Rodin (https://fal.ai/legal/privacy-policy), and Meshy (https://www.meshy.ai/privacy-policy).

7. Sharing and International Processing

We share information with service providers only as needed to operate the features described in this Policy. Information may also be disclosed where required by law, to respond to valid legal requests, to protect users and the service, or in connection with a transfer of ownership of the app. We do not sell personal information. Information may be processed in countries other than the country where you live, where data-protection rules may differ.

8. Your Choices and Rights

You can:

- Review advertising choices through Advertising Privacy in Settings when available.

- Disable notifications through Shipion or your device settings.

- Remove local app data by deleting the app.

- Request access to or deletion of identifiable server-side information, including data from the discontinued avatar feature.

Depending on your location, you may also have rights to correction, restriction, objection, portability, withdrawal of consent, or a complaint to a data-protection authority. To make a request, email dev.javadli@gmail.com. Because Shipion does not require an account, we may need an avatar identifier, approximate date, or transaction identifier to locate your information.

9. Children's Privacy

Shipion is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will investigate and delete it where required.

10. Security

We use reasonable technical and organizational measures to protect information. No electronic transmission or storage system is completely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy when our features, practices, service providers, or legal requirements change. The updated version will be posted on this page with a revised "Last updated" date.

12. Contact

Ali Javadli

Email: dev.javadli@gmail.com