Privacy Policy for Gem Quest

Effective date: March 14, 2026
Last updated: August 12, 2026

Xerosoft Studio ("we", "our", or "us") operates Gem Quest (the "App"). This Privacy Policy explains what information Gem Quest processes, why it is used, the services involved, and the choices available to you.

1. Summary

Gem Quest can be played with local progress. If you create or use an account, account and game progress data is sent to Xerosoft Studio servers for authentication and cloud save. A verified account's username and server-verified scores are public by default to other signed-in players; you can hide them at any time in Prism Rankings or Gem Circle privacy settings. Gem Circle email discovery, Ready Rivals presence, and all precise account data remain off or private unless you enable them. Blocks, disabled social profiles, moderation restrictions, and an explicit hide choice always override the public default. Technical diagnostics are optional and are not sent until you choose to share them. Support, test feedback, and community reports are sent only when you submit them.

2. Information the App Stores or Processes

Gem Quest may store gameplay-related information locally on your device and, when cloud save is used, on our servers, including:

• Unlocked levels, stars, high scores, and total wins
• Coins, power-up inventory, account-bound upgrade levels, Stage Freeze inventory and active slots, streak status, and reward timers
• In-game settings such as sound, music, a broad Under 18 or 18-or-older advertising privacy choice, advertising consent, and optional diagnostics choices. Gem Quest does not request or store your birth date.
• Tutorial and progression state needed to restore your game session
• Leaderboard visibility, community-guidelines acceptance, verified best scores, blocks, and reports when you use signed-in leaderboard features
• Account-bound Gem Codex encounter and smash totals, achievement tiers and unlock times, and up to three Prism Legacy showcase choices
• Account inbox messages, whether you have read or cleared them, and non-expiring reward-claim receipts used to prevent duplicate grants
• Prism Duel invitations, opponent username, match status and deadlines, frozen fair-match rules, temporary Duel Kit, sealed scores, outcomes, earned-only Rival Shard balance and reservations, and server-authorized rewards when you use asynchronous friend challenges
• Gem Circle friend requests and friendships, social privacy choices, blocks, and a short-lived coarse foreground presence signal when you choose to share activity with friends or appear in Ready Rivals

This data is stored locally using platform-provided local storage mechanisms and may also be synchronized to Xerosoft Studio servers to support sign-in, progress restoration, and cross-session continuity.

3. Information We Collect Through the App

Depending on the features you choose, we may collect and process:

• Your username, email address, password hash and related sign-in session records
• Google account sign-in identifiers and limited profile details, such as your Google subject ID, verified email address, and display name, when you choose Google sign-in. Gem Quest does not request or retain your Google profile image.
• Gameplay progress, power-up inventory, stage outcomes, attempt duration, moves used, objective progress, active level mechanics, and sync timestamps
• A random app-install identifier, device label, platform, and session records used for account security, synchronization, abuse prevention, and deduplication
• Your broad Under 18 or 18-or-older choice, stored on the installation and translated into an age-treatment signal for Google Mobile Ads and the User Messaging Platform. It is not a birth date and is not added to your Gem Quest account profile.
• Optional error logs and technical diagnostics such as redacted stack traces, active screen, app version, locale, gameplay context, compact board state, progress snapshots, and a random diagnostic reference needed to investigate and fix bugs
• Support or test feedback you submit, including category, rating, comments, reproduction steps, test missions, app/build context you choose to attach, an optional related diagnostic reference, and whether you allow follow-up using your existing account email
• Pseudonymous keyed hashes derived from network or install identifiers for rate limiting, diagnostics, and feedback abuse prevention
• Google Play product identifiers, order references, purchase status, and one-way purchase-token and account-binding hashes used to grant fixed coin packs, fixed Prism Charge packs, or permanent entitlements and prevent duplicate or cross-account grants
• For selected valuable account actions, one-way Play Integrity token, challenge, and request hashes plus bounded app-recognition, licensing, device-integrity, app-version, pass/fail, and timing categories used to detect modified apps, replay, fraud, and abuse. We do not retain the raw Integrity token, request contents, signing-certificate fingerprint, or raw device attestation.
• For signed-in rankings, your account username, per-level verified best scores, total of those best scores, rank, levels scored, visibility preference, and the community-guidelines version applied to the profile
• For signed-in Prism Legacy, bounded per-attempt gem encounters, gem smashes, special-gem pairings, and destroyed breakable obstacles or anomalies used to maintain your Gem Codex and cosmetic achievements. These counters do not grant coins, inventory, energy, purchases, or competitive rank.
• Leaderboard block relationships and fixed-category username or suspected-cheating reports. Reports retain the reported username as it appeared, moderation status, and an audit of moderation state changes; they do not include free-text accusations.
• When account inbox notifications are enabled, an encrypted Firebase registration token, a one-way token hash, platform, locale, app version, token expiry/revocation state, and bounded delivery outcomes. Notifications use a fixed generic Gem Quest/Prism Post title and body plus inbox-routing keys, not an author-controlled message identifier or text, rewards, balances, or profile data.
• When you use Prism Duels, the challenger and challenged account IDs and usernames, an opaque match and attempt identifier, invite and play deadlines, acceptance or decline, fixed arena manifest and seed commitment, temporary match-only boost allowance, ordered move and boost commands, checkpoint and hash-chain evidence, client-reported elapsed timing, server replay engine and rules version, replay-calculated score, moves and completion state, final board hash, random state and draw count, remaining Duel Kit, client/server result-match diagnostic, Rival Shard reservations and settlement, and anti-abuse or Play Integrity evidence. Prism Duels do not include free-text challenge messages or chat.
• For verified Gem Circle accounts, an opaque public player identifier, friend-request and friendship state, the privacy settings you select, and fixed relationship events used to prevent duplicate or abusive requests. Existing eligible closed-test accounts may be connected as friends so they can find and challenge one another. Blocks, removed relationships, disabled profiles, and later privacy choices remain authoritative. Exact email discovery is off by default, requires a verified account and the target player's opt-in, never supports partial matching, and never returns or displays the matched email.
• When you enable Gem Circle presence sharing while the App is in the foreground, a short-lived status such as online, playing, or dueling and its expiry time. You can limit this to friends; appearing to non-friends in the separately opt-in Ready Rivals directory requires broader presence visibility. Gem Quest does not publish an exact last-seen time, level, board, opponent, device, or location, and does not run a background presence service.

We do not request contacts, photos, precise location, SMS, call logs, payment card details, or government-issued identifiers. Payment details are handled by Google Play; Gem Quest receives purchase tokens and product status needed to verify and grant a fixed coin pack, a fixed Prism Charge pack, or a permanent entitlement. Raw Play purchase tokens are not retained after verification. If you send feedback or contact us, do not include passwords, payment details, or another person's personal information.

4. How We Use Information

We use the information described above to:

• Save and restore your progress and settings
• Authenticate your account and keep your game state in sync with the database
• Enable game features such as daily rewards, streak tracking, unlocked levels, and inventory
• Operate optional signed-in leaderboards and Prism Legacy profiles, calculate ranks and cosmetic achievement progress, maintain your selected showcase, hide blocked players, review reports, and enforce community rules
• Operate asynchronous Prism Duels, give both players the same frozen arena and temporary boosts, resume unfinished runs, verify results, enforce server deadlines, settle or refund earned-only Rival Shard entries, prevent duplicate rewards, and record Rivalry Facet achievements
• Operate Gem Circle friend discovery, requests, friend lists, privacy controls, short-lived friend-visible foreground presence and separately opt-in Ready Rivals discovery, profile previews, blocking and reporting, and authorized handoff into Prism Duels
• Deliver account updates and server-authorized rewards through the signed-in inbox, prevent duplicate claims, and optionally wake the App to refresh that inbox
• Let you reset progress when requested from inside the App
• Diagnose, reproduce, and fix crashes, sync failures, and gameplay bugs
• Review closed-test quality, prioritize improvements, document production readiness, and respond when you explicitly allow follow-up
• Prevent spam, credential attacks, duplicate submissions, purchase fraud, and service abuse
• Respond to support, account deletion, or privacy inquiries that you send to us

5. Sharing and Third Parties

We do not sell personal information. We do not share submitted support, test feedback, block relationships, reports, moderation records, email addresses, display names, device information, or Integrity evidence with other players or publish them on Google Play.

For verified accounts, other signed-in players can see your account username, rank, verified score, and—for the total leaderboard—the number of levels scored by default. They can also see your bounded Gem Codex encounter and smash totals, cosmetic achievement progress and unlock times, and up to three showcase items you select when that profile is public. A per-level board shows the verified best score for that level. Your email address, display name, account ID, evidence IDs, Play Integrity details, and unselected private account data are never included. An explicit hide choice, block, disabled profile, username ineligibility, or moderation restriction removes the applicable public projection. Only non-testing completions from a sufficiently recent Google Play build with matching request-bound Play Integrity evidence can become competitive; Prism Legacy gameplay counters are cosmetic and do not make a completion competitive.

When you participate in a Prism Duel, the matched player can see your account username, whether you accepted, declined, completed, forfeited, or timed out, and the final result. Scores remain sealed until both runs are terminal. The other player cannot see your email address, account ID, device details, current balance, Integrity evidence, move transcript, or private account inventory. Existing blocks prevent invitations and hide the blocked relationship as applicable.

When you use Gem Circle, accepted friends can see your username, permitted coarse foreground presence, selected Prism Legacy showcase items, and bounded public score or achievement summaries. Players who find you through an enabled discovery option receive only the limited profile allowed by your settings. Your email address is never shown, even when an exact opted-in email lookup finds your account. Blocks are not disclosed to the blocked player; blocked or otherwise unavailable accounts receive a generic unavailable result. Sharing presence with friends does not place you in Ready Rivals; that directory requires a separate opt-in and broader presence visibility. All presence automatically expires shortly after the App stops sending foreground heartbeats.

Gem Quest uses service providers for specific app functions:

• Google Play distributes the Android app, provides Play testing and Android vitals, processes in-app purchases, and provides Play Integrity verification for selected valuable actions. For Integrity processing, Google may process the request hash, app package/version/signing metadata, Play licence status, and device-attestation information under Google's terms.
• Google Sign-In provides optional account authentication. The App sends the resulting ID token to our server, which verifies it with Google before creating or selecting a profile.
• Google Mobile Ads and User Messaging Platform provide test or production ads and regional consent controls. Depending on your region, consent, age-treatment choice, device settings, and Google's services, Google may process advertising identifiers, IP address, device/app information, ad interactions, and diagnostics. Missing/unknown choices and Under 18 both receive the SDK's restricted under-age treatment and non-personalized requests; 18 or older follows the normal regional consent path. Ad content is limited to a general-audiences (G) maximum in the app configuration.
• Firebase Cloud Messaging optionally delivers a fixed generic Gem Quest/Prism Post notification and inbox-change routing signal to a registered Android device. Google processes the device registration token and delivery request under Google's terms; Gem Quest keeps author-controlled message content, message identifiers, and reward details out of the notification payload.
• Xerosoft Studio hosting stores account, cloud progress, feedback, diagnostics, deletion requests, purchase verification results, and security records.

These providers process information under their own privacy terms. See Google's Privacy Policy and advertising information.

6. Data Retention and Deletion

Account and cloud gameplay data, including Prism Legacy counters, achievements, showcase choices, inbox interaction state, duel results, Rival Shard wallet state, Gem Circle relationships and privacy preferences, and reward receipts, is retained while your account exists so that progress and authorized grants can be restored. Gem Circle presence expires automatically within minutes and is not retained as an activity history. Terminal friend-request rows and fixed relationship events may remain with the account for anti-spam cooldowns, request deduplication, and abuse review, and are removed with account deletion. Shared broadcast message content may remain for other accounts after one account is deleted. Device push registrations expire after 180 days unless refreshed, are revoked when invalid or unregistered, and revoked token rows are removed after 90 days in bounded batches; bounded delivery audit rows are linked to those registrations and outbox records. Security sessions expire or are revoked. Short-lived Play Integrity requests and truly unclaimed verdicts are removed after 30 days. Current leaderboard best-score attempt and Integrity evidence remains while that score is current and is removed with the account; non-current attempt, verdict, settled-ticket, duel checkpoint, command, and superseded integrity evidence may be removed in bounded batches after 90 days. This preserves score and settlement auditability without retaining every intermediate play indefinitely. Leaderboard, Prism Legacy, Prism Duel, and Gem Circle relationships, blocks, reports, moderation actions, scores, results, wallets, reservations, preferences, and acceptance records are removed when the related account relationship is deleted, except for a narrowly limited settlement record where retention is legally required to resolve an active dispute or prevent fraud. Resolved or closed feedback may be removed after 24 months, and all feedback is removed after 36 months unless a narrower legal exception requires retention. Resolved diagnostics may be removed after 180 days, and all diagnostics are removed after 365 days. Short-lived rate-limit records are regularly removed. Google retains Firebase, Integrity, advertising, and platform processing data according to its own practices.

You can delete campaign progress without deleting your account by choosing Settings → Reset Progress inside Gem Quest and confirming the request. For a signed-in player this resets the device and cloud campaign journey—including unlocked stages, stars, streaks, tutorial progress, and the saved in-stage resume—while preserving the account, Prism Legacy Codex and trophies, verified coins, boosts, Gem Stage Freezes, Prism Core value, purchases, entitlements, and security records. Guest progress is deleted from that device only.

You can also remove local gameplay data by:

• Clearing the App's local storage or app data through your device settings
• Uninstalling the App

You can permanently delete a signed-in account inside the App. You can also request account deletion using the web deletion page, including when you cannot sign in. Account deletion removes the profile, sessions, cloud progress, inventory, Prism Legacy counters, achievements and showcase, inbox recipient/read/claim state, device push registrations and linked delivery attempts, leaderboard scores and totals, Gem Circle profile, friend requests, friendships, relationship events and current presence, Prism Duel invitations, attempts, checkpoints, results, Rival Shard wallet and reservations, visibility and guidelines acceptance, blocks in either direction, reports involving the account, linked moderation actions, linked diagnostics, personal purchase and entitlement rows stored by us, and linked feedback. To prevent a player from escaping an accepted Duel or changing its outcome by deleting an account, deletion cannot complete while that account has a live Prism Duel. The App and web deletion page explain that the player must wait for the shared deadline or settlement and then retry; any refundable reservation is returned through the normal server-authoritative settlement and Prism Post claim flow. Shared broadcast text remains available to other recipients because it is not a copy of the deleted account's data; a direct message body is removed when its last recipient is deleted. To prevent a consumed or permanent Google Play purchase from being granted again to another account, we retain a narrowly limited anti-fraud claim containing only a one-way purchase-token hash, a pseudonymous account-binding hash, product identifier, and deletion timestamp. It contains no raw token, name, email address, or gameplay history and is retained for as long as the affected Play purchase can be replayed or restored. Google Play may retain its own transaction records under Google's policies. Other narrowly limited records may be retained when required for legal compliance, dispute handling, or fraud prevention.

7. Security

Measures include HTTPS-only app traffic, Android cleartext blocking, system certificate trust in release builds, modern password hashing, random high-entropy sessions stored as server-side hashes, encrypted platform storage for client session tokens, authenticated encryption and separate keyed hashing for push registration tokens, prepared database queries, request-size limits, rate limiting, private server configuration, least-data feedback and generic inbox-notification design, keyed hashing of selected identifiers, redaction of common credentials and email addresses from diagnostics, server-side Google identity and purchase verification, one-use request-hash-bound Play Integrity checks for selected valuable actions and competitive scores, user-controlled score visibility, fixed-category reports, user blocking, auditable moderation state, and authenticated account deletion.

No system can be guaranteed completely secure. Keep your device and Google Play services updated, use a unique password, and never place credentials in feedback.

8. Children's Privacy

Gem Quest is not directed to children under 13. We do not knowingly collect personal information from children in violation of applicable law. Before first play, Gem Quest asks only whether the player is Under 18 or 18 or older; it does not request a birth date. Until an adult choice is saved—and whenever Under 18 is selected—the advertising SDK receives restricted under-age treatment, non-personalized requests are used, and ad content is capped at G. The choice does not change gameplay, rewards, prices, or ad frequency. Advertising, online-interaction, simulated-competition, and target-audience declarations are configured in Google Play and must remain consistent with the released build. Prize Duel is disabled by default and must not be enabled for a child- or Families-targeted release. If you believe a child has provided personal information, contact us so that we can investigate and delete it where appropriate.

9. Your Choices and Rights

You can change the broad advertising age group in the App's Privacy & Data settings, and advertising consent choices can be reopened where required. You can decline or disable optional diagnostics in the App's privacy settings; disabling clears unsent diagnostic reports from the device. You can disable Gem Quest notifications in Android settings without losing access to messages or rewards in the in-app inbox. Verified signed-in scores and usernames are public by default. You can hide or restore them at any time from Prism Rankings, and you can restrict Gem Circle profile summaries in its privacy settings. Gem Circle exact-email discovery and Ready Rivals presence remain off by default. You can control username and email discovery, profile and presence visibility, who may send friend or Duel requests, remove friends, cancel requests, stop presence immediately, and block or report another player. The current Leaderboard Community Guidelines and Gem Circle Community Guidelines explain the conduct and moderation rules for those surfaces. You can choose up to three unlocked showcase items, block other visible players, or report a displayed username or suspected cheating using fixed categories. You can submit feedback anonymously, omit technical context, choose whether to link an available diagnostic to your notes, or allow follow-up only when signed in. Depending on your location, you may also have rights to request access, correction, deletion, objection, or restriction of processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to Gem Quest, legal requirements, or our practices. Updated versions will be posted on this page with a revised "Last updated" date.

11. Contact Us

Xerosoft Studio
Email: privacy@xerosoftstudio.com
Website: https://xerosoftstudio.com/