Privacy Policy

This Privacy Policy describes how Noir Files ("we", "us", "our", the "App") collects, uses, shares, and protects information when you use our mobile and web application. By using the App you agree to this Policy.

1. Information We Collect

• Account info: email address, display name, and profile photo (collected during email sign-up).
• Game data: cases you generate, clues unlocked, scores, achievements, multiplayer activity, and credit/transaction history.
• Device & technical data: device model, OS version, app version, language, crash logs, and performance diagnostics.
• Advertising identifier: Google Advertising ID (AAID) is accessed by the Google Mobile Ads SDK to serve and measure ads.
• Approximate location: derived from IP address only (no GPS access).

2. How We Use Your Data

• Provide the game (save progress, sync leaderboards, host multiplayer rooms).
• Generate AI mystery content from your prompts.
• Show and measure advertisements, including rewarded and app-open ads.
• Prevent fraud, cheating, ad-reward abuse, and platform misuse.
• Communicate important service notices and security alerts.

3. Advertising (Google AdMob)

The App displays ads through Google AdMob. AdMob and its certified partners may collect and process the following to serve, personalize, cap, and measure ads, and to detect fraud:

• Advertising ID (AAID), IP address, device & OS info, coarse location.
• Ad interaction events (impressions, clicks, rewards granted).

Where required by law (e.g. EEA, UK, Switzerland), we present a consent prompt via Google's User Messaging Platform (UMP) before personalized ads are shown. You may withdraw or change consent any time from Profile → Ad preferences.

You can reset or opt-out of personalized ads at the OS level: Android Settings → Google → Ads ("Delete advertising ID" / "Opt out of Ads Personalization").

More information: Google Ads Privacy & Terms.

4. Third-Party Processors

• Supabase — authentication, database, and storage hosting.
• Google AdMob — ad serving and measurement.
• AI providers (via Lovable AI Gateway) — text and image generation from your prompts.
• Cloudflare — hosting, CDN, and DDoS protection.

We do not sell your personal information.

5. Data Security

Data is encrypted in transit using HTTPS/TLS and at rest by our cloud providers. Access to backend systems is restricted, logged, and protected by role-based controls and database Row Level Security. No system is 100% secure; you use the App at your own risk.

6. International Data Transfers

Your data may be processed in countries outside your own (including the United States and India) where our service providers operate. We rely on Standard Contractual Clauses and equivalent safeguards where applicable.

7. Children

Noir Files is intended for users aged 13 and above (16+ in the EEA/UK where required). We do not knowingly collect personal data from children below this age. If you believe a child has provided us data, contact us and we will delete it. The App is not designed for or directed to children and is not enrolled in the Google Play Families program; ads served are restricted to non-child-directed inventory.

8. Your Rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, India DPDP Act), you may have the right to: access, correct, delete, port, restrict or object to processing, and withdraw consent. To exercise these rights, use the in-app options or email us (see section 12).

9. Account & Data Deletion

You can delete your account and associated data at any time:

• In-app: open Profile → Delete account and confirm.
• By email: send a request from your registered email to support@noirfiles.xyz with subject "Delete my account".
• Web form: noirfiles.xyz/profile.

Deletion removes: profile, generated cases, clues, scores, achievements, multiplayer history, credit balance, and linked auth identities. Anonymized analytics and required transactional/legal records may be retained up to 90 days. The process completes within 30 days of the request.

10. Data Retention

We keep your data while your account is active. Inactive accounts (no sign-in for 24 months) may be deleted automatically. Backups containing residual data are rotated and overwritten within 90 days.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified in-app or via email at least 7 days before they take effect. The "Last updated" date above always reflects the current version.

12. Contact & Grievance Officer

For privacy questions or to exercise your rights:

• Email: support@noirfiles.xyz
• Grievance Officer (India, IT Rules 2021): Noir Files Grievance Desk, support@noirfiles.xyz
• Response time: within 15 days as required by applicable law.