LEGAL COMPLIANCE // APPLE & GOOGLE DEVELOPER GOVERNANCE

Privacy Policy for Rivets Applications

This comprehensive Privacy Policy outlines how Rivets Software LLC collects, uses, discloses, and protects your personal data across our entire catalog of mobile gaming applications and utility / productivity apps distributed on the Apple iOS App Store, Google Play Store for Android, and web platforms.

Effective Date: January 1, 2026 • Last Updated: October 25, 2026 • Publisher: Rivets Software LLC (rivetssoftware.com) • Contact: [email protected]
sports_esports

Mobile Gaming Apps (iOS & Android)

Covers all mobile games published by Rivets Software LLC including Apothecary Solitaire: TriPeaks, Apothecary: Potion Crafter (match 3 puzzle, masterwork potion craft, cozy workshop renovation, and offline play) Rivets Word Games (daily anagrams, vocabulary quests, and crosswords), and 1 Shot Golf: Trick Shot Puzzle (one-ball physics trick shot mini golf puzzles).

Apothecary: Potion Crafter Rivets Word Games 1 Shot Golf: Trick Shot Puzzle Game Center / Play Games Offline-First Play COPPA & Family Friendly
apps

Productivity & Utility Apps

Covers Simple Invoice Maker, Rivets Inventory, Rivets Claims, Hushlore Sleep Sounds, FieldSquire AI, Care Dementia Tracker, BeeKeeper Pro, and related utility engines.

Receipt & Camera Scanning Local SQLite Storage PDF Document Generation Encrypted Cloud Sync

Farkle Tavern: 10000 Hot Dice — specific privacy notice

Effective October 25, 2026. Published by Rivets Software LLC. Farkle Tavern is intended for adults aged 18 and over and is not directed at children. This notice describes this game specifically and takes precedence over general examples elsewhere on this page.

Game data on your device

Your tavern progress, dice collection, saved match, tutorial progress, house rules and sound preferences are stored locally on your device. The game does not require an account, provide player chat, or upload your saved game to our servers. It does not request contacts, microphone, camera or precise location permissions. Clearing the app's storage or uninstalling it removes local progress. We cannot restore a local save that has been deleted.

Optional rewarded advertising

The Android game uses Google AdMob with Unity Ads bidding for optional rewarded videos. You choose whether to watch a video for an in-game benefit; core dice play does not require watching ads. When advertising services run, their SDKs may collect or share IP addresses (which can indicate approximate location), device and advertising identifiers, ad interactions, and diagnostic or performance information to deliver and measure ads and prevent fraud. Processing depends on consent, SDK settings and your device's privacy settings. Advertising providers may process data on servers outside your country.

We use Google's User Messaging Platform to request available consent choices before initializing advertising and requesting ads. Settings includes Ad Privacy Choices when a privacy form is required and available. You can also use your Android device's advertising privacy controls. Declining consent or an unavailable ad does not grant a completed-video reward or prevent ordinary play.

Provider information: Google Privacy Policy, AdMob data disclosure, and Unity Privacy Policy.

Advertising SDK disclosures also cover SDK-generated user identifiers, advertising-related purchase or conversion history, and app performance information where collected by the provider. These are advertising-provider data practices; Rivets Software does not operate a game account or purchase-history database for this release. See Unity's data-safety disclosure for its collection and sharing details.

Purchases, analytics and support

The current Android release has in-app purchases disabled. Gold, gems and other game rewards have no cash value and cannot be cashed out. The game does not include a separate analytics service or a player-account database operated by Rivets Software. Advertising partners perform their own measurement as described above.

If you contact support, we receive the email address and information you choose to send. We use it to respond to your request and retain correspondence only as needed for support and legal obligations. Please do not send passwords or payment details. For help, local-data deletion instructions, privacy questions or applicable data-rights requests, contact [email protected] or [email protected]. For data held by an advertising provider, its linked privacy policy explains available rights and controls.

Request data deletion

  1. Delete local game data: in Android Settings, open Apps > Farkle Tavern > Storage & cache > Clear storage, or uninstall the app. This removes saved matches, progress and preferences from this installation. Device backups are controlled by your Android backup settings.
  2. Delete support correspondence or make a privacy request: email [email protected] with the subject “Farkle Tavern data deletion,” identify the correspondence or data you want removed, and use the email address you used to contact us. We may request information needed to verify the request. We do not need your password or payment details.
  3. Advertising-provider data: use the privacy icon in a Unity ad, your device's advertising privacy settings, and the Google and Unity privacy links above to request deletion or manage provider-held data. Contact us if you need help finding the appropriate provider request process.

Local game data is removed when you clear storage; we have no server copy of your progress. Support correspondence covered by a verified deletion request is removed unless retention is required to meet legal obligations or resolve the request. Advertising providers control retention and deletion of their own records under their linked policies; clearing the game does not itself delete those records. We do not represent that all provider data is automatically deleted within 90 days.

GravityLab: Physics Sandbox — specific privacy notice

Applies to the current Android game and test builds, package com.gravitylab.puzzle, updated October 22, 2026. Published by RivetSoft (Rivets Software LLC). For this game, this notice takes precedence over general examples elsewhere on this page.

Local game data

The game saves level progress, stars, builds, settings, Lab Credit balances and purchase-delivery identifiers on your device. We do not provide a cloud wallet, account-based game backup or cross-device progress synchronization. We do not claim additional application-level encryption of these game saves. Core puzzles work offline.

Purchases and billing verification

Google Play processes payments. Rivets Software LLC does not receive your payment-card details. When you begin or recover a purchase, Firebase Authentication creates or reuses a pseudonymous billing profile without a player sign-in screen. The app keeps the profile's refresh credential in the operating system's secure credential storage and sends a short-lived authentication token to our purchase verifier.

Our verifier uses Google Play's purchase API to check the product, purchase status, quantity and billing-profile ownership before granting credits. Our server keeps the billing profile identifier, product, credit amount, order identifier, purchase-token hash, delivery identifier, test-order flag and creation time to prevent duplicate or cross-profile claims. These records are pseudonymous, not necessarily anonymous. The server ledger does not store the raw Google Play purchase token.

Recover purchase checks unfinished, eligible transactions; it does not restore already-consumed credit packs or a lost local credit balance. Uninstalling the game or clearing local data does not delete records retained by Google, Firebase or our purchase-verification service.

Updates, advertising and other services

Expo hosts over-the-air code and asset updates. Checking for or downloading updates requires network requests that communicate technical app, platform and runtime information and an installation identifier used to deliver updates and count update usage; service providers also receive ordinary connection information such as IP addresses. Google and Firebase process billing and authentication requests and associated service logs.

Android version 1.19.1 (build 37) introduces optional rewarded videos through Google AdMob. Earlier version 1.19.0 (build 34) has advertising disabled. In the new build, advertising measurement initialization is delayed and the app does not initialize the ads SDK or request consent information until you choose to enable a reward video. Playing the core game does not require watching ads.

The game is intended for ages 13 and over. All ad and Google User Messaging Platform requests receive under-age-of-consent treatment, regardless of the player’s age. We request only non-personalized ads with a maximum content rating of PG, and do not collect your birth date. The Android advertising-ID permission and Android AdServices permissions are blocked. These settings do not mean that ads collect no data.

If you enable reward videos, Google Mobile Ads collects and shares connection information including IP addresses (which may estimate approximate location), app and advertising interactions, diagnostics and device or other identifiers for advertising delivery, analytics and fraud prevention. The app does not request precise location. Google and its service providers process this advertising data according to their policies, including how Google uses information from apps that use its services. Google’s messaging platform determines whether a consent or privacy-options form is required; where required, an Ad privacy choices button is available on the home screen. Consent failures prevent ad requests.

Each completed video reward confirmed by the ad SDK earns three Lab Credits, limited to three videos per local calendar day (nine credits total) and the game’s earned-credit reserve. A video cannot start unless the earned reserve has room for the full three-credit reward. The day, count and last rewarded-event identifier are saved locally to avoid duplicate rewards. Closing a video early does not earn a credit. Advertising-provider data retention follows the provider’s policies; removing the game does not remove information already processed by those providers.

This game has no separate analytics or Crashlytics integration, public player profiles, chat, user-generated content, multiplayer, Game Center or Google Play Games integration. It does not request access to your contacts, camera, microphone or precise location.

Retention and privacy requests

Local data remains until removed through device app-data controls or uninstalling the game; device backup services may retain copies according to device settings. Billing verification records are retained for purchase delivery, duplicate-redemption prevention and fraud prevention, with no automatic expiry configured. They are not automatically removed when the app is uninstalled.

For support, a billing-profile deletion request or another privacy request, email [email protected]. Include the game name and, for a purchase issue, the Google Play order identifier if available. Do not send passwords, billing refresh credentials, purchase tokens or payment-card details. We may need information to verify ownership before acting; records may need to be retained for applicable legal or fraud-prevention obligations. Email support itself communicates your email address and the information you choose to provide.

Apothecary Solitaire: TriPeaks — specific privacy notice

Applies to Android and iOS, including test builds, and the browser game. Updated October 22, 2026. This notice describes the current game (com.apothecary.solitaire). For this title, it takes precedence over general examples elsewhere on this page. The current version has no player account, cloud save, Game Center, Google Play Games, separate analytics SDK, or Crashlytics integration. Other sections’ examples of these features, encrypted game storage, and server anti-cheat do not describe this game.

Browser game

The free browser version at rivetssoftware.com/play/solitaire/ saves game progress, currency, inventory and settings in this browser's local storage. It does not sync with the Android or iOS app. Clear this site's browser data to remove these saves; private browsing or clearing site data may erase progress. The browser game has no in-game purchases, rewarded ads, player account or separate analytics SDK. Loading the website sends ordinary connection information, including your IP address and browser information, to our web host. Following the Google Play download link opens Google's store, which operates under Google's privacy policy.

Local game data

The app stores progress, currency, inventory, upgrades, settings, rewarded-ad cooldowns, and purchase-delivery identifiers in local app storage to run the game and prevent duplicate rewards. We do not operate a cloud backup of this progress. We do not claim additional application-level encryption of these local saves. Core play works offline; store purchases, restoration, consent updates, and ads require a network connection.

Purchases and restoration

Google Play Billing on Android and Apple StoreKit on iOS process payments. The app receives product and transaction identifiers, purchase tokens or receipt information, and purchase status to deliver items, acknowledge or consume purchases, and restore eligible permanent upgrades. These records are not necessarily anonymous. Rivets Software LLC does not receive your payment-card details from these purchases. Apple and Google retain their own store and transaction records under their policies. Consumable items and lost local progress are not restored by the game’s Restore Purchases function.

Optional rewarded ads and consent

The game uses Google AdMob for optional rewarded ads. When its advertising services run, Google’s SDK may collect or share IP addresses (which can indicate approximate location), device and advertising identifiers, ad interactions, and diagnostic information for advertising, measurement, and fraud prevention. Processing depends on consent, SDK configuration, and platform settings. We use Google’s User Messaging Platform to present available consent choices before requesting ads. Use the game’s Privacy Options control to revisit choices where a form is available, and your device’s advertising privacy settings for additional controls. Choosing not to watch an ad does not block core solitaire play.

Provider information: Google Privacy Policy, AdMob Android data disclosure, AdMob iOS data disclosure, and Apple Privacy Policy.

Permissions, retention, and your choices

This game does not request access to your contacts, camera, microphone, or precise location. Local saves remain until cleared or removed; use your device’s app-data controls or uninstall the app to remove its local data. Device backup services may retain copies under your device settings. This does not delete records held by Apple or Google. There is no game account to delete. For privacy requests or game support, contact [email protected]. If you email us, we receive your email address and the information you choose to include and use it to handle your request. Please do not send payment-card details.

1 Shot Golf: Trick Shot Puzzle — specific privacy notice

Applies to Android and iOS, including test builds, from October 21, 2026. This notice describes the current game (com.oneshot.minigolf). For this title, it takes precedence over general examples elsewhere on this page. The current version has no player account, cloud save, Game Center, Google Play Games, separate analytics SDK, or Crashlytics integration. Other sections’ examples of these features, encrypted game storage, and server anti-cheat do not describe this game.

Local game data

The app stores level progress, stars and best scores, in-game currency, settings, rewarded-ad cooldowns, and purchase-delivery identifiers in local app storage to run the game and prevent duplicate rewards. We do not operate a cloud backup of this progress. We do not claim additional application-level encryption of these local saves. Core play works offline; store purchases, restoration, consent updates, and ads require a network connection.

Purchases and restoration

Google Play Billing on Android and Apple StoreKit on iOS process payments. The app receives product and transaction identifiers, purchase tokens or receipt information, and purchase status to deliver items, acknowledge or consume purchases, and restore eligible permanent upgrades. These records are not necessarily anonymous. Rivets Software LLC does not receive your payment-card details from these purchases. Apple and Google retain their own store and transaction records under their policies. Consumable items and lost local progress are not restored by the game’s Restore Purchases function.

Optional rewarded ads and consent

The game uses Google AdMob for optional rewarded ads. When its advertising services run, Google’s SDK may collect or share IP addresses (which can indicate approximate location), device and advertising identifiers, ad interactions, and diagnostic information for advertising, measurement, and fraud prevention. Processing depends on consent, SDK configuration, and platform settings. We use Google’s User Messaging Platform to present available consent choices before requesting ads. Use the game’s Privacy Options control to revisit choices where a form is available, and your device’s advertising privacy settings for additional controls. Choosing not to watch an ad does not block core gameplay.

Provider information: Google Privacy Policy, AdMob Android data disclosure, AdMob iOS data disclosure, and Apple Privacy Policy.

Permissions, retention, and your choices

This game does not request access to your contacts, camera, microphone, or precise location. Local saves remain until cleared or removed; use your device’s app-data controls or uninstall the app to remove its local data. Device backup services may retain copies under your device settings. This does not delete records held by Apple or Google. There is no game account to delete. For privacy requests or game support, contact [email protected]. If you email us, we receive your email address and the information you choose to include and use it to handle your request. Please do not send payment-card details.

Rivets: My Location Saver — specific privacy notice

Applies to the Android app com.gpslocationsaver.pindrop, including test builds. Updated October 25, 2026. Published by Rivets Software LLC. This notice takes precedence over general examples elsewhere in this policy for this app.

Saved places and location permissions

The app uses your location, speed, and heading to mark places, position the map, and keep a rolling location buffer of approximately 75 seconds for its rewind feature. When you save a spot, its record can include coordinates, a short route trail, time, address, title, category, notes, and the text recognized from your voice. Private spots and their photos are stored on your phone rather than uploaded to the partner map. Local storage does not provide additional application-level encryption.

Optional return reminders use background location and geofences to notify you when you are near saved places, including while the app is closed. You can turn reminders off and change location and notification permissions in your phone settings. The app does not provide live tracking of another person.

Partner sharing and service records

Firebase Authentication creates a pseudonymous installation identity without requiring a username or password. Firebase and our backend process this identifier, your chosen display name, map membership code, device platform, connection information, and membership activity to operate the app, control access, and prevent abuse. These identifiers are not necessarily anonymous. If you use Partner Sync, shared spot records, including their saved route trails and text, are stored in Cloud Firestore and made available to your map partner. One subscription supports up to two members.

Voice, maps, and optional photos

Voice naming uses your phone's speech recognition provider, which may send audio to its servers. The app stores recognized text with the saved spot; it does not keep an audio recording. You can type a name instead. Address lookup uses the phone's geocoding provider. OpenStreetMap's tile service receives map tile requests and ordinary connection information, including IP address; requested map areas can reveal the area being viewed. External navigation and sharing apps receive the information you choose to send to them.

If you connect Google Drive, Google sign-in authorizes access to files created or opened through this app. The app remembers the connected email address locally. Photos attached to shared spots are uploaded to your own Drive folder named “My Location Saver Photos” and made viewable by anyone with their link so your partner can open them. Treat those links as shareable access to the photo. Disconnecting Drive does not delete uploaded photos or revoke existing file links. You can remove files or change link access in Google Drive.

Purchases, configuration, and advertising

Google Play processes Android subscriptions. Our backend receives purchase proofs, product and subscription status, and the pseudonymous identity needed to verify, acknowledge, restore, and renew access. It retains purchase-verification records to operate subscriptions and prevent duplicate or fraudulent claims. We do not receive your payment-card details. Firebase Remote Config processes installation identifiers, country, language, time zone, and technical app and platform information to deliver configuration. Service providers also process ordinary request and security logs. This build contains no advertising SDK, separate Google Analytics integration, or Crashlytics integration.

Deletion, retention, and contact

You can delete saved spots in the app. Deleted spots enter Recently Deleted and can be permanently removed there. The app removes local deleted spots older than 30 days when loading its data; cloud deletion also depends on an active sharing connection. Removing the app or clearing its storage removes local app data, subject to device backups, but does not automatically remove cloud membership or billing records, your partner's copies, exports, or Google Drive files. Cloud records currently have no general automatic retention deadline. Billing or security records may need to be retained for legal or fraud-prevention purposes. Requests to our services use encrypted HTTPS connections; this is not a claim of end-to-end encryption.

To request deletion of your My Location Saver cloud profile and associated data, email [email protected] with the subject “My Location Saver data deletion request.” Identify the app and describe the data you want removed. We may ask for information to verify ownership; do not send passwords, authentication credentials, raw purchase tokens, or payment-card details. Verified requests are processed within 30 days under the Rivets privacy policy. Cancel an active subscription separately in Google Play to stop future renewal charges. Google retains its own account and store records under its policies.

The app is intended for users aged 16 and over. For app support, contact [email protected]. For privacy requests, use [email protected].

01 Scope & Covered Services

This Privacy Policy applies to all mobile software applications, games, web applications, and backend API services developed and published by Rivets Software LLC (“Rivets”, “we”, “our”, or “us”), accessible via the Apple App Store, the Google Play Store, and direct web domains (including rivetssoftware.com). This includes our released games and test builds, including Apothecary Solitaire: TriPeaks (Android package and iOS bundle ID: com.apothecary.solitaire; see its specific notice below), Apothecary: Potion Crafter (Google Play Package ID: com.apothecary.potion.craft) and Rivets Word Games, as well as our utility suite (Simple Invoice Maker, Rivets Inventory, Rivets Claims, Hushlore Sleep Sounds, FieldSquire AI, Care Dementia Tracker, BeeKeeper Pro).

By downloading, installing, accessing, or playing any Rivets Software LLC game or application, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please uninstall and discontinue using our applications.

02 Information We Collect

We practice data minimization. We only collect information that is strictly necessary to deliver high-performance gameplay, maintain app stability, prevent cheating/abuse, or fulfill the core functions of our productivity tools:

  • check_circle
    Information You Provide Directly: Account credentials (if creating an optional cloud profile), support inquiries, feedback, and user-generated content such as custom invoice names or inventory logs.
  • check_circle
    Device & System Identifiers: Anonymous installation IDs, device hardware model, operating system version (iOS/Android), screen resolution, preferred language, and time zone.
  • check_circle
    Diagnostics & Crash Telemetry: Crash logs, stack traces, latency metrics, and memory dumps via Google Firebase Crashlytics or Apple TestFlight/Metrics to troubleshoot errors and improve frame rates.

03 Mobile Gaming Specific Telemetry (iOS & Android)

When you play our gaming applications, including Apothecary: Potion Crafter (com.apothecary.potion.craft) and Rivets Word Games:

videogame_asset Gameplay & Progression State

In Apothecary: Potion Crafter, we track your match 3 level completions, reagent transmutation states, 50+ unlocked potion & elixir recipes, chamber renovation stars, guild order commissions fulfilled, masterwork alchemical relics (Earthshaker Hammer, Divine Caduceus, Phoenix Catalyst), and daily idle hearth rewards. In Rivets Word Games, we store level completions, anagram solving times, high scores, hint consumption, and achievements.

Offline-First On-Device Storage: All core game progression, workshop decoration selections, and crafting recipes are stored locally on your device in sandboxed encrypted storage. You can play 100% offline with zero continuous network tracking. If you choose to connect Google Play Games or Apple Game Center, high scores, achievements, and cloud backups synchronize through your platform provider's encrypted APIs.

shield Fair Play, Anti-Cheat & Security

To prevent leaderboard manipulation, memory injection, and automated botting, our game engine evaluates hash signatures of game sessions and timestamp consistency. We do not inspect private files or unauthorized processes on your phone.

ads_click Rewarded Gameplay Ads & Non-Intrusive Monetization

If you choose to watch an optional rewarded ad in Apothecary: Potion Crafter (e.g., to claim bonus reagents, extra turns, or catalyst boosts) or in Rivets Word Games (for hints or coins), ad networks (such as Google AdMob or Unity Ads) deliver the video clip. We receive only a cryptographic callback confirmation to grant your reward. We do not sell or broker your personal information.

04 Utility, Productivity & Field Applications

For our suite of utility applications:

Simple Invoice Maker

Client names, addresses, line items, and invoice totals remain on your device. PDF generation occurs locally without uploading your private business records to public servers.

Rivets Inventory & Claims

Photos of belongings, receipts, serial numbers, and insurance claim exports are stored in local private storage or in your personal private cloud account. We never monetize or scrape your personal home inventory photos.

Hushlore Sleep Sounds

Audio playback presets, favorite sleep sounds, and ambient timer settings are stored strictly on-device for offline playback without continuous network tracking.

FieldSquire AI & Trade Tools

Estimator measurements (concrete volume, drywall areas, fencing lengths) are calculated locally or processed via encrypted API calls strictly to output contractor quotes.

Care Dementia Tracker

Care routines, symptom notes, and behavioral handoffs are stored securely. Health Disclaimer: This app is designed for family and caregiver coordination only and is not a medical device or diagnostic instrument under HIPAA or EU MDR regulations.

05 Store Billing & In-App Purchases (IAP)

All in-app purchases (such as coin bundles, ad-free upgrades, or subscriptions) made inside our iOS or Android applications are processed exclusively by:

  • Apple App Store: Apple StoreKit in-app purchase platform.
  • Google Play Store: Google Play Billing API.

Rivets Software LLC does not collect, view, or retain your payment card numbers, bank account numbers, or billing addresses. We only receive an anonymous digital receipt validation token from Apple or Google to confirm the transaction and unlock your digital entitlements.

06 Mobile Advertising, SDKs & Analytics

In select free-to-play gaming applications, we may display third-party advertisements (banners, interstitials, or rewarded videos) via trusted advertising networks:

Your Tracking Controls:

On iOS: In accordance with Apple's App Tracking Transparency (ATT) framework, our games will prompt you for explicit permission before accessing the IDFA (Identifier for Advertisers). You may toggle this permission at any time under Settings > Privacy > Tracking.

On Android: You can opt out of interest-based ads or reset your Google Advertising ID (GAID) at any time under Settings > Google > Ads.

07 Device Permissions & System Access

Our applications will only request device permissions when explicitly required by user-initiated actions:

Permission Apps That Use It Purpose & Handling
Camera Rivets Inventory, Rivets Claims Used exclusively to take photos of physical items, receipts, or property damage. No video or background streaming occurs.
Photo Library Inventory, Invoice Maker Allows you to attach existing photos or company logos. We access only the specific images you select.
Notifications Apothecary: Potion Crafter, Rivets Word Games, Care Tracker, BeeKeeper Optional idle hearth reward claims, daily word puzzle reminders, care task alerts, or hive inspection reminders. Can be disabled anytime in system settings.
Network & WiFi All Apps Used to verify licenses, synchronize Google Play Games achievements / cloud saves, stream sleep soundscapes, or load daily challenges. Offline gameplay in Apothecary: Potion Crafter requires no active connection.

08 Apple Game Center & Google Play Games Services

Our games—including Apothecary: Potion Crafter and Rivets Word Games—seamlessly integrate with Google Play Games Services and Apple Game Center to provide public leaderboards, alchemical achievement unlocks, and secure cloud save backup synchronization.

When you sign in to Game Center or Play Games, your public gamer handle and achievements are managed according to Apple's and Google's respective privacy policies. Rivets Software LLC does not access your personal email or real-world identity through these services.

09 Children's Privacy (COPPA & Family Policies)

Rivets Software LLC complies with the Children's Online Privacy Protection Act (COPPA) in the United States, the General Data Protection Regulation (GDPR-K) in the European Union, and Google Play's Families Policy.

  • Our general-audience games and productivity tools are not directed at children under the age of 13 (or under 16 in the EEA/UK).
  • We do not knowingly collect, request, or solicit personally identifiable information from children under 13.
  • If we discover that personal data has been inadvertently collected from a child under 13 without verified parental consent, we will promptly delete that information.
  • Parents or guardians with concerns may contact us immediately at [email protected].

10 Data Retention & Self-Service Account Deletion

In compliance with Apple App Store Review Guideline 5.1.1(v) and Google Play Account Deletion requirements, users who create an account in any Rivets Software LLC app have the right to easily initiate account and data deletion:

delete_forever How to Delete Your Account and Data:

  1. Within the App: Navigate to Settings > Account > Delete Account (for apps with online profile accounts). Confirm the prompt to immediately wipe all server-side progress and profiles.
  2. Local Game Progress (Apothecary: Potion Crafter & Word Games): Because Apothecary: Potion Crafter saves progress on-device, you can immediately erase all unlocked recipes, stars, hearth rewards, and workshop customization by selecting App Info > Storage > Clear Data in your Android settings, or by uninstalling the application.
  3. By Email: Send a deletion request to [email protected] with the subject "Data Deletion Request". We process all verified requests within 30 days.

11 Your Privacy Rights (GDPR & CCPA / CPRA)

Depending on your geographic location, you hold statutory rights regarding your personal information:

EEA & UK Residents (GDPR): You have the right to access, rectify, port, or erase personal data, object to or restrict processing, and lodge a complaint with your local supervisory authority.
California Residents (CCPA / CPRA): You have the right to know what personal information is collected, request deletion, and opt-out of the "sale" or "sharing" of personal information. Rivets Software LLC does NOT sell your personal information for monetary consideration.
Non-Discrimination: We will never discriminate against you, deny access, or alter app performance because you exercised your privacy rights.

12 Data Security & International Storage

We employ enterprise-grade security controls including Transport Layer Security (TLS 1.3) encryption for all network transmissions, isolated database tenants, access control firewalls, and cryptographic hashing for sensitive tokens.

Our cloud infrastructure is hosted in secure, certified data centers within the United States. If you access our applications from the European Union, United Kingdom, Canada, or elsewhere, your information will be transferred and processed in the United States under standard contractual clauses.

13 Policy Updates & Contact Information

We may update this Privacy Policy from time to time to reflect new games, platform updates, or evolving regulatory mandates. When updates are published, the "Last Updated" timestamp at the top of this document will be revised.

Contact Rivets Software LLC

For privacy inquiries, data deletion requests, or compliance questions, please contact our designated privacy team: