Privacy Policy for Five Crowns

Effective Date: 02/19/2026

This policy explains how Bonfit America, Inc. ("Bonfit," "we," "us," "our") collects, uses, shares, and protects personal information when you play Five Crowns: Kingdom Quest on iOS or Android. Playing Five Crowns means you accept the practices described here.

1. Information we collect

1.1 Information you give us

• Guest play. You can play without signing in. We create a player ID for your device and use it to save your progress. Some of that progress is stored on your device and some is saved to our servers so it survives a reinstall, which means a guest account still has data you can ask us to delete.

• Sign in with Apple. Provides a unique identifier, your name, and an email address, which may be a private relay address you can turn off at any time.

• Google Sign-In. Provides a unique identifier, name, and email address.

• Facebook Login. Meta shares your Facebook app-scoped user ID, name, profile picture, and — if you grant the permission — your email address. We never receive your Facebook password. You can review and revoke what you share at Facebook Settings → Apps and Websites.

• Purchases. Apple and Google process your payment. We receive the transaction identifier, the product purchased, the price and currency, and the purchase date. We never receive your full payment card number.

• Support and surveys. Messages you send us, in-app support conversations handled through Helpshift, and responses to optional player surveys.

• User content. Your display name, and any content you submit in online modes where those are available.

1.2 Information collected automatically

• Device and app — Device model, OS version, app version, language, time zone, screen size · Compatibility, troubleshooting, feature support

• Identifiers — Identifier for Vendors (IDFV), Advertising Identifier (IDFA, iOS — only with your App Tracking Transparency permission), Google Advertising ID, Firebase installation ID, internal player ID · Analytics, install attribution, advertising, fraud and cheat prevention

• Gameplay — Rounds and levels played, scores, progression through Journey Mode, in-game currency earned and spent, features used, session length, in-game events · Running the game, saving progress, balancing and improving it

• Diagnostics — Crash logs, stack traces, performance traces, error reports · Fixing bugs and stability issues

• Network — IP address, approximate location derived from IP (country or region only), connection type · Security, fraud prevention, regional content and legal compliance

• Advertising — Ad impressions, clicks, rewarded video offers and completions, mediation and ad revenue data · Serving and measuring ads, paying for the free version of the game

We do not collect precise GPS location, your contacts, photos, microphone, or camera data.

1.3 Information from third parties

• Attribution partners (Singular) tell us which ad campaign or channel led to your install.

• Ad mediation partners (AppLovin MAX and the networks it mediates) report impressions, revenue, and ad performance.

• App stores (Apple, Google) confirm and validate purchases.

• Meta, Apple, and Google provide the profile fields listed above when you use their sign-in options.

2. How we use information

• Create and maintain your account or guest profile, and save your progress — Performance of a contract

• Run online and multiplayer features where those are available — Performance of a contract

• Process purchases, restores, and refunds — Performance of a contract

• Provide customer support and respond to your requests — Performance of a contract; legitimate interests

• Diagnose crashes, secure the game, prevent cheating, fraud, and abuse — Legitimate interests in a stable, fair game

• Measure and improve gameplay, difficulty, and features — Legitimate interests; consent where required by local law

• Serve personalized ads and measure ad performance across apps — Consent (App Tracking Transparency on iOS, and a consent prompt where required)

• Serve non-personalized (contextual) ads — Legitimate interests

• Send marketing emails or push notifications about Five Crowns — Consent; you can opt out at any time

• Comply with tax, accounting, and other legal obligations — Legal obligation

3. Advertising and your choices

The free version of Five Crowns is paid for by advertising. We use AppLovin MAX to mediate ads. The networks currently serving ads in Five Crowns are AppLovin, AppLovin Exchange, Google AdMob, and Meta Audience Network. Mediation lists change as networks are added or removed, and the current list is always available from us on request at customerservice@bonfit.com. These partners may use advertising identifiers and ad interaction data to select and measure ads, including ads you see in other apps.

• iOS. We ask for permission through App Tracking Transparency before your IDFA is used for cross-app tracking. Decline, and you still see ads — they are simply not personalized. Change your answer any time in Settings → Privacy & Security → Tracking.

• Android. You can reset or delete your advertising ID in Settings → Google → Ads.

• EEA and UK. Where required, we present a consent prompt before any personalized advertising or non-essential analytics, and you can change your choice at any time in the app's privacy settings.

• Rewarded ads are always optional. You choose whether to watch one in exchange for an in-game reward.

• Removing ads removes interstitial ads but optional rewarded ads are still available.

4. How we share information

We share personal information with the service providers below, each of which is contractually limited to using it for the services they provide to us.

• Google (Firebase Analytics, Crashlytics, Performance, Cloud Messaging, Google Cloud) — Product analytics, crash reporting, push notifications, hosting of player profiles and saved progress · policies.google.com/privacy

• Singular — Mobile install attribution and marketing measurement · singular.net/privacy-policy

• AppLovin (MAX) — Ad mediation and ad serving · applovin.com/privacy

• Google AdMob — Ad serving through AppLovin mediation · policies.google.com/technologies/ads

• Meta Platforms — Facebook Login, install attribution, and advertising through Meta Audience Network · facebook.com/privacy/policy

• Apple, Google — Sign-in, payment processing, and purchase validation · apple.com/legal/privacy | policies.google.com/privacy

• Helpshift — In-app customer support · helpshift.com/legal/privacy

• Formbricks — Optional player surveys · formbricks.com/privacy-policy

We also disclose information when we are legally required to, to protect our rights or player safety, and to a buyer or successor in a merger, acquisition, or sale of assets. We may share aggregated or de-identified data that cannot reasonably be used to identify you.

We do not sell personal information for money. Sharing advertising identifiers with ad partners for personalized advertising may qualify as a "sale" or "share" for cross-context behavioral advertising under California and certain other US state laws. You can opt out by declining App Tracking Transparency on iOS, deleting your advertising ID on Android, using the privacy settings in the app, or emailing customerservice@bonfit.com.

5. International transfers

We are based in the United States and process data on Google Cloud infrastructure in the United States. If you are in the EEA, UK, or Canada, your information is transferred to the United States, whose laws may differ from your own. Where required, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional safeguards. Email customerservice@bonfit.com for a copy of the relevant safeguards.

6. How long we keep information

• Account, guest profile, and saved progress — Until you delete your account, then removed from live systems within 30 days

• Backups containing deleted data — Purged within 90 days of the deletion request

• Inactive accounts — Deleted after 24 months of no activity

• Purchase records — Up to 7 years, where required for tax and accounting

• Support conversations — 24 months from the last message

• Analytics event data — Up to 26 months, after which raw event records are deleted

• Aggregated or de-identified data — Retained indefinitely; it can no longer identify you

7. Your rights and choices

Everyone

You can edit your profile in the app, delete your account and data (see Section 8), turn off push notifications in your device settings, unsubscribe from marketing emails using the link in each email, and control ad tracking as described in Section 3.

EEA and UK

You have the right to access, correct, delete, restrict, or object to our processing of your personal information, to receive it in a portable format, and to withdraw consent at any time without affecting processing already carried out. You may lodge a complaint with your local supervisory authority, or with the UK Information Commissioner's Office.

Canada

Under PIPEDA you may request access to the personal information we hold about you, challenge its accuracy, and withdraw consent, subject to legal and contractual limits. You may also complain to the Office of the Privacy Commissioner of Canada.

California

Under the CCPA/CPRA you have the right to know what we collect and disclose, to delete it, to correct it, to opt out of the sale or sharing of personal information for cross-context behavioral advertising, and to limit the use of sensitive personal information. We do not use or disclose sensitive personal information for purposes that require a limitation right. We will not discriminate against you for exercising any right. An authorized agent may submit a request on your behalf with proof of authorization.

How to exercise your rights

Email customerservice@bonfit.com from the address on your account, or follow the instructions at https://fivecrownscardgame.com/data-deletion. Guest players should include the player ID shown in the bottom of the Settings screen so we can find the right record. We respond within 30 days, or 45 days for California requests, and will tell you if we need more time.

8. Deleting your account and data

You can delete your Five Crowns account and its associated data at any time:

• In the app: Settings → Account → Delete Account

• By email: send a request to customerservice@bonfit.com, including your player ID if you play as a guest.

• Full instructions: https://fivecrownscardgame.com/data-deletion.

We remove your account data from live systems within 30 days of a verified request, and from backups within 90 days. We keep purchase records where tax and accounting law requires it, and de-identified analytics that can no longer be linked to you. Progress stored only on your device is removed when you delete the app.

If you signed in with Facebook, removing Five Crowns from Facebook Settings → Apps and Websites stops Meta from sharing further data with us, and Meta notifies us of your deletion request. It does not by itself delete the account data we already hold — use one of the routes above, or follow https://fivecrownscardgame.com/data-deletion, where you will receive a confirmation code and a status link.

9. Children

Five Crowns is a general-audience game intended for players aged 13 and over, or 16 in some EEA countries. We do not knowingly collect personal information from children under those ages. If you believe a child has provided us information, email customerservice@bonfit.com and we will delete the account and its data promptly.

10. Security

We protect information with encryption in transit, access controls, and regular review of our vendors. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant regulators as the law requires.

11. Links to other services

Five Crowns links to third-party sites and stores we do not control. Our store listings are at apps.apple.com/us/app/five-crowns-kingdom-quest/id6755253187 and play.google.com/store/apps/details?id=com.bonfit.fivecrowns. Their privacy practices are their own.

12. Changes to this policy

We update this policy as the game and the law change. The effective date at the top always reflects the current version. For material changes we give notice in the app or by email before the change takes effect.

13. Contact us

Bonfit America, Inc.

8535 Venice Blvd., Los Angeles, CA 90034, United States

Privacy, data deletion, and support: customerservice@bonfit.com