Privacy Policy

Lumeo — a mobile game by Raviach Studios

Effective: June 1, 2026 Last updated: August 14, 2026

1Overview

This privacy policy applies to the Lumeo app for mobile devices, together with any related services operated by Maor Raviach, trading as Raviach Studios (referred to here as the "Service Provider"). It explains what information the Application collects, why, how it's used, and the choices you have.

2Data we collect

The Application collects different information depending on whether you play as a guest or sign in.

CategoryExamplesWhen
Account data Email address, unique user ID and display name, via Firebase Authentication Only if you sign in — a guest account has none of this
Gameplay data High scores, coin balance, daily-reward streak, owned shop items, contest/Arena history Signed-in players (synced via Firestore); guests keep this locally on-device only
Purchase data Purchase tokens and product IDs handled by Google Play Billing — the Application never sees or stores your payment card details If you buy coins or a one-time upgrade
Device & diagnostic data Device model, OS version, IP address, in-app events All players, via Firebase Analytics
Advertising data Advertising ID and ad-interaction events, used to show and measure ads. Shared with Unity Technologies (Unity LevelPlay) and the advertising networks it mediates Where ads are shown, via Unity LevelPlay — see Advertising & ad mediation

3Public visibility (leaderboards & Arena)

Lumeo has social features that are, by design, visible to other players. If you sign in, your display name and scores may be shown to other players on global leaderboards and inside multiplayer contests ("the Arena"), including on results screens and podiums. Don't use your real full name as your display name if you'd rather keep it private — a nickname works just as well.

4Cookies and tracking technologies

The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.

5Advertising & ad mediation

The Application shows ads to keep the game free to play. Ads are served through Unity LevelPlay (formerly ironSource), an ad mediation platform operated by Unity Technologies. Mediation means LevelPlay runs an auction across several advertising networks for each ad shown, and the winning network supplies the ad. Your data is therefore shared not only with Unity Technologies but also with the advertising networks participating in that auction.

To select and measure ads, LevelPlay and the networks it mediates may collect and process your device's advertising ID (Google Advertising ID), IP address, device and OS information, and ad-interaction events such as which ads were shown, watched, or clicked. Each of these parties acts as an independent controller of that data. See the Unity Game Player and App User Privacy Policy, which covers Unity LevelPlay.

The networks currently enabled for this Application are listed in the Application's app-ads.txt file, which is the authoritative and up-to-date list of who is authorised to supply and sell ads in the Application.

Two kinds of ad appear: full-screen ads shown when a game ends, and optional "watch a video" ads that you choose to start in exchange for an in-game reward — either to continue playing, or to increase the coins you earned in that game. A one-time in-app purchase is available to remove the full-screen ads; the optional reward videos remain available, because you choose whether to start them.

Your choice about personalized ads

Personalized ads are only shown where you have agreed to them. The Application asks for that consent before any ad is requested, and you can change your answer at any time in the app under Settings → Ad Preferences. If you decline, you will still see ads, but they will be contextual (non-personalized) and your advertising ID will not be used to profile you.

You can also opt out of personalized advertising at the device level:

6Third-party services

The Application utilizes third-party services that have their own privacy policies about handling data:

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application. The Service Provider may disclose information:

7Your rights

You may request access to, correction of, or deletion of your personal data held by the Service Provider. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal. To exercise these rights, contact the Service Provider at raviachstudios@gmail.com.

8Delete your account & data

You can delete your Lumeo account (published by Raviach Studios) and the data associated with it at any time. There are two ways to do it.

Option 1 — In the app (immediate)

  1. Open Lumeo.
  2. Tap the settings icon (the gear, top-right of the home screen).
  3. Scroll to the account section and tap Delete Account.
  4. Confirm on the "Delete Account?" screen.

Your account and its data are deleted straight away, and you are returned to the game as a signed-out guest.

Option 2 — By email (if you've uninstalled the app)

Email the Service Provider using the button below, ideally from the email address associated with your account so the request can be verified:

Request account deletion

Email requests are processed within 30 days.

What is deleted, and what is kept

DeletedKept, and for how long
  • Your account record and unique user ID
  • Email address and display name
  • High scores and personal bests
  • Coin balance, owned themes, colours and skins
  • Daily-reward streak and daily task progress
  • Leaderboard entries and contest / Arena history
  • Purchase records — retained as long as required by tax, accounting and consumer-protection law. Payments are handled by Google Play; the Service Provider never holds your card details.
  • Aggregated and anonymised data — retained indefinitely, as it no longer identifies you.
  • Data needed for legal, security or fraud-prevention purposes — retained only as long as that purpose requires.

See Data retention for the full retention schedule. If you only want to remove some of your data and keep playing, see Delete specific data below.

Uninstalling the Application stops further data collection from your device, but does not by itself delete data already transmitted to the Service Provider or third parties — use one of the two options above for that.

9Delete specific data (keep your account)

You do not have to close your Lumeo account to have data removed. You can ask Raviach Studios to delete particular items while your account stays active.

How to request it

  1. Email the Service Provider using the button below, from the address associated with your account where possible.
  2. Say which data you want removed — for example your display name, your leaderboard entries, or your contest history.
  3. You'll receive confirmation once it's done. Requests are processed within 30 days.

Request data deletion

What can be removed this way

What is kept

Advertising data is handled separately: to stop your advertising ID being used for personalised ads, open Settings → Ad Preferences in the app and choose generic ads. See Advertising & ad mediation.

10Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. The Service Provider does not sell your personal information for money. However, showing personalized ads involves sharing your advertising ID with Unity LevelPlay and the ad networks it mediates for cross-context behavioral advertising, which California and several other US state privacy laws treat as "sharing". You can opt out of that at any time in the app under Settings → Ad Preferences — choosing generic ads there is a complete opt-out of this sharing. To exercise your other CCPA/CPRA rights, contact the Service Provider at raviachstudios@gmail.com.

For a better experience while using the Application, the Service Provider may require certain personally identifiable information, including but not limited to a user ID. This information is retained and used as described in this policy, and may be used to send important notices and, where permitted by law, marketing communications.

11International data transfers

The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms, including:

Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.

12Data retention

The Service Provider retains personal data based on its necessity for the stated purposes:

You may request deletion of your personal data at any time — see Delete your account & data — subject to any legal obligation to retain it. Some data may be required for the Application to function properly.

13Children's privacy

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them, and does not knowingly collect personally identifiable information from children under 16 in violation of applicable law.

Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. If the Service Provider discovers that a child has provided personal information, it will be deleted from the Service Provider's servers immediately. If you are a parent or guardian and believe your child has provided personal information, please contact the Service Provider at raviachstudios@gmail.com so appropriate action can be taken.

14Security & breach notification

The Service Provider safeguards the confidentiality of your information using physical, electronic, and procedural measures appropriate to the data processed.

If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, information about the nature of the breach and the steps being taken to address it.

15Changes to this policy

The Service Provider may update this Privacy Policy from time to time. Material changes will be posted here with an updated effective date, and where required by law, consent will be sought before they take effect. Previous versions are available on request by contacting raviachstudios@gmail.com.

16Contact us

If you have any questions about this policy or your data, contact the Service Provider at raviachstudios@gmail.com.