Privacy Policy for Veilglass

Last Updated: 18 November 2025

Veilglass is operated by Hanshew BSF Limited, a company registered in the United Kingdom.

Contact Information:
Email: contact@project-enra.com
Website: www.project-enra.com

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Veilglass mobile application ("the App"). We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Important: By using Veilglass, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the App.

1. Information We Collect

1.1 Location Data

Veilglass is a location-based exploration game that requires access to your device's location services. We collect:

Precise GPS Location: Your real-time latitude and longitude coordinates
Background Location Data: Location information even when the App is not actively in use or your screen is locked
Location History: A record of places you've visited while using the App
Accuracy Data: GPS accuracy measurements to ensure quality of gameplay
Timestamps: When each location point was recorded

Why We Need Background Location: Background location tracking is essential to the core gameplay of Veilglass. It allows you to "clear fog" and explore while your phone is locked and in your pocket during walks or hikes. This prevents battery drain from keeping your screen on, reduces the risk of dropping your phone, and improves safety by not requiring constant phone interaction while moving.

1.2 Account Information

When you create an account or sign in, we collect:

Email Address: Used for authentication and account recovery
User ID: A unique identifier assigned by Firebase Authentication
Display Name: If you choose to provide one
Authentication Provider Information: If you sign in with Google or another provider

1.3 Game Progress Data

We store your in-game progress and achievements, including:

Areas of the map you've explored ("fog holes")
Cleared geographical zones (S2 sphere data)
Points of Interest (POIs) you've discovered and released
Game statistics and progress metrics
Timestamps of when areas were explored

1.4 Device Information

We automatically collect certain device information:

Device model and operating system version
App version
Device identifiers for analytics purposes
Network connection type

1.5 Purchase Information

If you make in-app purchases or subscribe to premium features:

Subscription status and type (monthly/yearly)
Purchase tokens and transaction IDs
Purchase timestamps

Note: Payment information (credit card details) is processed by Google Play Billing and is never stored on our servers.

1.6 Analytics Data

We use Firebase Analytics to understand how users interact with the App:

App usage patterns and session duration
Feature usage and user engagement
Performance data and crash reports
Aggregated and anonymized usage statistics

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Core Functionality

To provide the core gameplay experience of location-based exploration
To track and display your exploration progress on the map
To reveal Points of Interest based on your location
To save and sync your game progress across devices

2.2 Account Management

To create and manage your user account
To authenticate you when you sign in
To enable cloud saving of your progress
To provide customer support

2.3 Subscription Management

To process and validate in-app purchases
To manage subscription status and premium features
To prevent fraud and unauthorized purchases

2.4 Analytics and Improvement

To analyze app performance and user engagement
To identify and fix bugs and technical issues
To improve features and develop new functionality
To understand usage patterns and optimize user experience

2.5 Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

Consent: You provide explicit consent for location tracking and analytics
Contract Performance: Processing is necessary to provide the App services you've requested
Legitimate Interests: We have a legitimate interest in improving the App and ensuring its security

3. How We Store and Protect Your Data

3.1 Data Storage

Your data is stored using the following services:

Firebase Cloud Firestore: Stores your game progress, account data, and location history
Firebase Authentication: Manages your account credentials and authentication
Local Device Storage: Cached game data stored on your device for offline functionality

All data is stored on secure servers operated by Google Firebase, with data centers that may be located in the United States and other countries.

3.2 Data Security

We implement appropriate technical and organizational measures to protect your data:

All data transmitted between your device and our servers is encrypted using HTTPS/TLS
Firebase Security Rules ensure users can only access their own data
Authentication tokens are securely managed and regularly refreshed
We conduct regular security reviews and updates

3.3 Data Retention

Indefinite Retention: The core purpose of Veilglass is to serve as a lifelong journal of all the places you've explored. Therefore, we retain your location data, game progress, and account information indefinitely unless you request deletion.

Justification: This indefinite retention is based on our legitimate interest in providing the App's fundamental value proposition - a permanent record of your explorations. You can request deletion of your data at any time (see Section 7).

4. Data Sharing and Third Parties

4.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Third-Party Services We Use

We share data with the following trusted third-party services to operate the App:

Google Firebase (Google LLC)

Purpose: Authentication, cloud storage, and analytics
Data Shared: Account information, location data, game progress, usage analytics
Privacy Policy: https://firebase.google.com/support/privacy

Google Play Services

Purpose: In-app purchases and subscriptions
Data Shared: Purchase tokens, subscription status
Privacy Policy: https://policies.google.com/privacy

OpenStreetMap

Purpose: Map tiles and geographical data
Data Shared: Your device requests map tiles based on your location (OpenStreetMap does not receive personally identifiable information from us)
Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, law enforcement).

5. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

5.1 Right of Access

You can request a copy of all personal data we hold about you.

5.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

5.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal data. See Section 7 for details.

5.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

5.5 Right to Data Portability

You can request a copy of your data in a machine-readable format.

5.6 Right to Object

You can object to processing based on legitimate interests.

5.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw consent at any time.

5.8 How to Exercise Your Rights

To exercise any of these rights, please contact us at contact@project-enra.com. We will respond to your request within 30 days.

6. Location Permissions

6.1 Permission Requirements

Veilglass requires the following location permissions:

ACCESS_FINE_LOCATION: For precise GPS tracking
ACCESS_COARSE_LOCATION: For approximate location
ACCESS_BACKGROUND_LOCATION: For tracking when the app is not in the foreground

6.2 Controlling Location Access

You can control location permissions through your device settings:

Go to Settings → Apps → Veilglass → Permissions → Location
Choose: "Allow all the time" (recommended), "Allow only while using the app", or "Deny"

Note: Denying location permissions will prevent the App from functioning as intended.

6.3 Location Services Disclosure

A persistent notification will appear when background location tracking is active, in compliance with Android requirements.

7. Account and Data Deletion

7.1 How to Request Deletion

You have the right to request deletion of your account and all associated data at any time. To request deletion:

Send an email to contact@project-enra.com
Include "Account Deletion Request" in the subject line
Provide your account email address

7.2 What Gets Deleted

When you request account deletion, we will permanently delete:

Your account information (email, display name, user ID)
All location data and location history
All game progress data (fog holes, cleared areas, discovered POIs)
Subscription information (active subscriptions will be cancelled)
Any other personal data associated with your account

7.3 Deletion Timeline

We will process your deletion request within 30 days. Once deleted, your data cannot be recovered.

7.4 Data Retention Exceptions

Some data may be retained for legal or operational purposes:

Transaction records required for accounting and tax purposes (retained for 6 years as required by UK law)
Data required to resolve disputes or enforce our Terms of Service
Anonymized analytics data that cannot be linked back to you

8. Children's Privacy

8.1 Age Restrictions

Veilglass is not specifically designed for children, but we do not restrict access based on age through in-app verification. The App is rated appropriately on the Google Play Store.

8.2 Parental Consent

Important Notice to Parents/Guardians: If your child is under 13 years old, they should not use this App without your explicit consent and supervision. Under UK GDPR, processing of children's data under 13 requires parental consent.

If you believe your child has provided us with personal information without your consent, please contact us at contact@project-enra.com and we will delete the information.

8.3 Location Tracking and Children

Parents should be aware that this App collects precise location data, including background location tracking. We recommend parents review and understand the location permissions before allowing children to use the App.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the United Kingdom, including the United States, where Firebase/Google servers are located.

These transfers are protected by:

Google's compliance with the EU-U.S. Data Privacy Framework
Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
Appropriate safeguards to ensure your data remains protected to UK GDPR standards

10. Cookies and Tracking Technologies

Veilglass does not use cookies as it is a native mobile application. However, Firebase Analytics may use similar technologies (SDK identifiers) to track app usage. These identifiers are used solely for analytics purposes and cannot be used to personally identify you outside the App.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes:

We will update the "Last Updated" date at the top of this policy
For material changes, we will notify you via email or in-app notification
Continued use of the App after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

12. Contact Us and Complaints

12.1 Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Hanshew BSF Limited
Email: contact@project-enra.com
Website: www.project-enra.com

12.2 Filing a Complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: https://ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Additional Disclosures for Google Play Store

13.1 Data Safety Section

This Privacy Policy supports the information provided in the Data Safety section of our Google Play Store listing. Key points:

Location data: Collected, stored, and used for core functionality
Data encryption: All data is encrypted in transit using HTTPS
Data deletion: You can request deletion of your data
Account required: An account is required to use cloud save features

14. Open Source Acknowledgments

Veilglass uses map data from OpenStreetMap, which is made available under the Open Database License (ODbL). OpenStreetMap data is contributed by thousands of volunteers worldwide.