Privacy Policy — Gamies

Last updated: March 13, 2026

This privacy policy describes how your personal data is collected, used, and protected when you use the Gamies mobile application (hereinafter “the Application”).


1. Data Controller

The Application is published by:

Name: Julien SAUMANDE Status: Sole proprietor (Auto-entrepreneur, France) Email: julien@saumande.net


2. Data Collected

2.1 Account Data

Data Required Purpose
Email address No (if using Apple/Google sign-in) Account creation and management
Username (display name) Yes In-game identification and leaderboards
Avatar identifier Yes Profile customization
Authentication provider (Google, Apple, email) Yes Service login

2.2 Game Data

Data Purpose
Scores and performance Game functionality, leaderboards
Game history Progress tracking
Daily usage quotas Free plan usage limits

2.3 Social Data

Data Purpose
Friends list and friend requests Social features
Game invitations Enabling multiplayer sessions
Online status (last activity) Multiplayer availability display
Notifications Service-related communication

2.4 Subscription Data

Data Purpose
Transaction identifier (Apple/Google) Subscription validation and management
Plan type and status Premium access management
Expiration date Premium access management
Purchase platform (iOS/Android) Technical support

2.5 Technical Data

Data Purpose
Push notification token (FCM) Sending notifications
Platform (iOS/Android) Technical adaptation of the service

2.6 Data NOT Collected

The Application does not collect:

The Application does not use:


3.1 For Users in the European Union (GDPR)

Processing Legal Basis (Art. 6 GDPR)
Account and profile management Performance of contract (Art. 6.1.b)
Scores, games, leaderboards Performance of contract (Art. 6.1.b)
Social features (friends, invitations) Performance of contract (Art. 6.1.b)
Push notifications Consent (Art. 6.1.a)
Subscription management and billing Legal obligation (Art. 6.1.c)
Online status (presence) Legitimate interest (Art. 6.1.f) — multiplayer experience

3.2 For All Users

We process your data only as necessary to provide the service you have requested. We do not sell, rent, or share your personal data for advertising or marketing purposes.


4. Data Recipients

Your data is processed by the following service providers:

Service Provider Data Concerned Location Safeguards
Supabase Inc. (hosting, database, authentication) All service data European Union (EU region) Standard Contractual Clauses (SCC), Supabase DPA
Google Firebase (push notifications only) FCM push tokens United States Standard Contractual Clauses (SCC), Google Data Processing Terms
Apple Inc. (iOS in-app purchases) Transaction identifier United States Apple Developer Agreement
Google LLC (Android in-app purchases) Transaction identifier United States Google Play Developer Distribution Agreement

No data is sold, rented, or transferred to third parties for commercial or advertising purposes.


5. International Data Transfers

Our primary database is hosted in the European Union via Supabase.

Some data is transferred to the United States for push notification services (Firebase) and payment processing (Apple/Google). These transfers are governed by:


6. Data Retention

Data Retention Period
Account and profile Lifetime of the account + 30 days after deletion
Scores and game history Lifetime of the account
Social data (friends, invitations) Lifetime of the account
Subscription data 10 years after end of subscription (tax obligations)
Push tokens Until logout or account deletion
Notifications 90 days

After account deletion, all personal data is irreversibly erased, except subscription data retained for legal requirements.


7. Your Rights

7.1 Rights Under the GDPR (EU/EEA Residents)

Right Description How to Exercise
Access (Art. 15) Obtain a copy of your personal data Email the controller
Rectification (Art. 16) Correct inaccurate data Directly in the app (username, avatar) or by email
Erasure (Art. 17) Delete your account and all your data “Delete my account” button in the app
Portability (Art. 20) Receive your data in a structured format Email the controller
Objection (Art. 21) Object to processing based on legitimate interest Email the controller
Restriction (Art. 18) Temporarily restrict processing Email the controller
Withdraw consent Withdraw consent for notifications Your phone’s settings

To exercise your rights, contact: julien@saumande.net

We commit to responding within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the CNIL (French Data Protection Authority): www.cnil.fr, or with your local data protection authority.

7.2 Rights Under the CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Categories of personal information collected (per CCPA categories):

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

To submit a request, contact: julien@saumande.net

7.3 Rights for Users in Other Jurisdictions

Regardless of your location, you can:

We will respond to all legitimate requests in accordance with applicable local laws.


8. Data Security

We implement the following technical and organizational measures:


9. Children’s Privacy

The Application is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16.

If you are a parent or guardian and believe your child under 16 has provided us with personal data, please contact us at julien@saumande.net so we can delete that data.

For U.S. users: We comply with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13.


10. Changes to This Policy

We reserve the right to modify this privacy policy. In the event of a substantial change:


11. Contact

For any questions regarding the protection of your personal data:

Email: julien@saumande.net


This privacy policy is drafted in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the French Data Protection Act of January 6, 1978 (as amended), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA).