Privacy Policy

Effective date: 2026-10-31

1. Who we are

"Bloomist" (the "Game") is developed and published by Cosmoapp (самозанятый, Россия), an independent self-employed developer based in Russia ("we", "us"). We are responsible for the data the Game sends to our server (the data controller; the "operator" under Russian Federal Law No. 152-FZ).
For any question about your data, write to bloomist-support@cosmoapp.ru.

2. Summary

• No sign-up is needed. We do not ask for your name, phone number, contacts, photos or location. You give an email only if you want a receipt for a payment on the Game's website.
• The Game is available for Android (Google Play, and AppGallery on Huawei phones), for iPhone and iPad, and as a web version on Yandex Games.
• Your garden is stored on your device, and in the web version in your browser. When you are online, the Game creates an anonymous game account on our server by itself: usually after the tutorial, or on the first launch if your version has a platform sign-in, to find your earlier garden. The account is needed for cloud save, friends, the "Best gardeners" list, letters and purchase checks.
• You can link your garden to a platform account (Google Play Games, Game Center, HUAWEI ID or Yandex ID, where your version has it) and get it back on a new device. A garden moves to a device of another platform with a one-time code. See section 3 for details.
• The Game shows only rewarded ads. They are served by Yandex, and you choose whether to watch them. In the web version Yandex Games may also show its own ads (section 6).
• The Game has no third-party statistics or crash reporting services (for example, AppMetrica) at the moment. If we ever add one, we will update this policy first.
• The Google Play version uses Tenjin, an ad install measurement service. It tells us which of our ads in other apps brought players, and for that it receives the advertising identifier, device details and the IP address (section 5). It is turned off together with the statistics: Settings → Privacy → Analytics.
• The Game sends its game events (for example a launch, tutorial steps, a new level, a watched ad, a purchase) only to our own server: this is how we see how many people play and where the tutorial is hard. They contain no name or email. You can turn the sending off: Settings → Privacy → Analytics.
• We do not sell data.
• You can delete your account and all server data in the Game: Settings → Delete account.

3. Data our server receives

With statistics events the server does not store details of the program and device the request came from (user agent), the advertising identifier, your name or email. Sending is on from the first launch. The Settings → Privacy → Analytics switch turns the statistics off: while it is off, the Game does not send these events to the server, and everything else works as before. In the Google Play version the same switch also turns Tenjin off (section 5). The switch does not affect which ads are shown.

What we do not receive: card numbers and other payment details (the app store, Yandex Games or Robokassa handles them), the advertising identifier, contacts, photos, precise location, camera or microphone access.

The Game sends the receipt of a Google Play, AppGallery or Yandex Games purchase to our server. The server checks it (with Google Play or HUAWEI IAP, and a Yandex Games purchase by Yandex's signature) and does not keep the receipt itself. The server learns about a Robokassa payment from Robokassa.

Reminders are local: the Game schedules them on your device. We do not send notifications from the server and do not receive a device address for them (a push token). The system asks for the notification permission, and you can turn notifications off in your device settings.

Platform link. You can link your garden to a platform account if your version of the Game has that sign-in: Google Play Games (Android), Game Center (iPhone and iPad), HUAWEI ID (Huawei phones with AppGallery) or Yandex ID (web version). Then your garden comes back after a reinstall and on a new device of the same platform. If you are already signed in to the platform account on the device, the Game links the garden by itself at launch. The Game opens the platform's sign-in window only when you tap something, for example the "Link" button. To link, the Game passes the platform's sign-in proof to the server. The server checks it, takes only your account number on that platform from it, and keeps a hash of the number, not the number itself. To unlink: Settings → the platform's row → Unlink. The link record is deleted from the server at once, and on this device the Game no longer links the garden to that account by itself.

Transfer code. An account of one platform does not work on another, so a garden moves, for example, from Android to iPhone with a code: Settings → Move to another device → Move. The code is single-use and works for 15 minutes; a new code cancels the old one. The server keeps only a hash of the code. Do not share the code with anyone: it moves your garden to another device, and on the old device the Game goes on without the cloud and friends.

Device check. Android version from Google Play only: when the account is created, the Game gets a check token (Play Integrity) from Google Play and sends it to our server. The server passes the token to Google and learns whether the Game was installed from Google Play and runs on a genuine device. We keep only the result of the check and its time. If the check fails, the Game works as usual, but invite gifts are not granted and other players do not see you in the "Best gardeners" list. Google collects the device details for the check by itself, under its own rules.

Invites through Google Play. Android version from Google Play only: on the first launch the Game reads the install source (Install Referrer) from Google Play once. If you installed the Game from a friend's invite link, it contains an invite code. The Game takes only this code and sends it to our server to count the invite. The Game does not use or send anything else from the install source.

Paying through Robokassa. On the Game's website, in the "Shop" section (in Russian), you can pay for a purchase through Robokassa. You enter a friend code or player ID (it is in Settings), and the page shows the gardener name and level so you can check that you are paying for your own garden. In the Android version from Google Play, the Game may also offer Robokassa payment to players from Russia: for this it tells the server the country of the Google Play store. You enter your payment details on the Robokassa page; we do not receive them. The receipt email is optional. If you give it, we pass it to Robokassa so the payment receipt is sent to it, and we keep it with the order indefinitely, like purchase records. A purchase paid on the website arrives in the Game as a letter.

Web version on Yandex Games. The Game keeps your garden, the device key and settings in your browser (localStorage and IndexedDB). If you clear your browser data, a garden not linked to Yandex ID may be lost.

We process this data to run the Game as described in the Terms of Use. We also need IP addresses and purchase records to prevent fraud.

4. What other players see

• Friends see your gardener name, avatar, frame, level and your island.
• In the "Best gardeners" list other players see your name, level, avatar and frame, and on your player card also your showcase, badges and achievements, which island you are on, which islands you have reached, how many you have restored and how many days old your island is. Your garden is visible only to your friends.
• Your friend code is seen by the people you send it to. You can change it on the "Friends" screen with the "New code" button: the old code stops working.
• You can change your name, avatar and frame in your profile.
• On the payment page of the Game's website, anyone who knows your friend code or player ID sees your gardener name, level and which website purchases are available for this garden.

5. Who else receives data

• Yandex (YANDEX LLC, Russia), Yandex Mobile Ads. Serves the rewarded ads in the Android, iPhone and iPad versions. The Yandex ad SDK itself collects from the device the advertising identifier, IP address, device and system details, and data about ad views and taps. This SDK includes the AppMetrica library; the Game itself does not use AppMetrica and sends none of its statistics to it. See the Yandex Privacy Policy.
• Yandex Games (a Yandex service, Russia). The platform of the web version. It shows ads (rewarded videos and its own ads, for example when the Game starts), handles payments and Yandex ID sign-in, and processes its own data under its own rules: see the Yandex Privacy Policy. The Game sends the purchase and sign-in proofs that Yandex issues to our server to be checked.
• Google (Google Play). In the Android version from Google Play it handles payments and refunds, checks the device (Play Integrity) and reports the install source (Install Referrer). Our server passes the purchase receipt and the device check token to Google to make sure they are real. If your version has Google Play Games sign-in, the server checks the sign-in proof with Google.
• Tenjin (Tenjin, Inc., USA). Only in the Android version from Google Play. An install attribution service: it shows us which of our ads in other apps brought a player, so that we pay for ads by results. When the Game starts and every time you return to it, Tenjin receives from the device the advertising identifier (unless you deleted it in the Google ads settings), the App Set ID, its own random installation number, device and Game details (model, system version, language, time zone, Game version), the Google Play install source (Install Referrer) and the IP address, plus two game events: "tutorial finished" and "level 5 reached". Tenjin does not receive your name, email, game account number, friend code or the link the Game was opened with. Tenjin tells the ad networks where we buy ads for the Game (for example, AppLovin) about the install and these events, so that they know the ad worked. Tenjin processes the data on our behalf and keeps it under its own rules. Data goes to Tenjin from the first launch while Settings → Privacy → Analytics is on; turning the switch off stops it. See the Tenjin Privacy Policy.
• Apple (App Store, Game Center). The iPhone and iPad version comes from the App Store. It has no paid purchases at the moment. The server checks a Game Center sign-in by Apple's signature.
• Huawei (AppGallery, HUAWEI ID, HUAWEI IAP). In the version for Huawei phones it handles payments and refunds and provides HUAWEI ID sign-in. Our server passes the purchase data to Huawei to make sure the purchase is real.
• Robokassa. A Russian payment service for payments on the Game's website and through a link from the Game. It receives the payment details and the receipt email if you gave one.
• Unity Technologies. The Game is built on the Unity engine, and Google Play purchases go through its Unity IAP library. On launch the engine may send Unity anonymous technical details about the device (model, system version). Unity analytics, ads and cloud services are turned off in the Game.

Statistics and crash reports. The Game has no third-party statistics or crash reporting services (AppMetrica, Firebase, Crashlytics or others) at the moment. Game statistics go only to our own server and are kept there for 180 days (section 3). The Game does not collect crash reports at the moment. If we ever add a third-party statistics or crash reporting service, we will update this policy first. Tenjin is an ad measurement service, not a game statistics one: of the game events it receives only the two named above.

Yandex processes data in Russia. Google, Apple, Huawei, Tenjin and Unity are foreign companies: they process data including outside your country (Tenjin in the USA).

We do not pass data from our server to advertising or analytics companies.

6. Advertising

• The Game itself shows only rewarded ads: a video starts after you tap. There are no banners and no ads between screens in the Game.
• In the web version ads are shown by Yandex Games under its own rules: rewarded videos and the platform's own ads, for example when the Game starts.
• In the Android, iPhone and iPad versions ads may be based on your interests: the Game allows Yandex to use the device advertising identifier and does not ask about it separately. There is no switch for this in the Game.
• You can opt out on your device. On Android, reset or delete the advertising identifier in the Google ads settings. On iPhone and iPad the Game does not ask for the tracking permission.
• We buy ads for the Game in other apps ourselves (for example, through AppLovin). To know which ad brought a player, the Google Play version uses Tenjin (section 5). You can opt out in the Game, Settings → Privacy → Analytics, or on your device by deleting the advertising identifier in the Google ads settings.

7. Children

The Game is not directed to children under 13, and we do not knowingly collect their data. If you are a parent and believe your child played the Game and gave us data, write to bloomist-support@cosmoapp.ru and we will delete the account.

8. How data is protected

• The Game talks to the server only over an encrypted connection (HTTPS).
• The device secret key is stored on the server as a hash: it cannot be recovered from the database.
• Platform account numbers and transfer codes are also stored on the server only as a hash.
• Only the developer has access to the server.

9. Deleting data and your rights

• Delete your account: Settings → Delete account. Your profile, friends and garden are hidden from other players at once, and after 30 days the account, the cloud save, the island snapshots and the platform links are erased from the server. The garden on your device stays: to remove it too, delete the Game or its data in your device settings (in the web version, the site data in your browser).
• Unlink a platform: Settings → the platform's row → Unlink.
• If the Game is no longer installed, write to bloomist-support@cosmoapp.ru with the subject "Account deletion". Include your friend code or gardener name so we can find the account.
• Turn off statistics: Settings → Privacy → Analytics. The statistics on our server lose their link to the account when it is erased, and are deleted automatically 180 days after they were received. In the Google Play version the same switch stops sending data to Tenjin. To delete what Tenjin has already received, write to bloomist-support@cosmoapp.ru: we will pass the request on to Tenjin.
• A copy of your data, corrections, other questions. Write to bloomist-support@cosmoapp.ru and include your friend code: it is shown on the "Friends" screen under "Your friend code". We reply within 30 days, and within 10 working days to requests from Russia.
• You may complain to a supervisory authority: Roskomnadzor in Russia, or the data protection authority of your country.

10. Changes

We publish the new version of this policy on this page: https://bloomist.cosmoapp.ru/privacy. The effective date is shown at the top.