Privacy Policy — Multiludo

Last updated: 26 October 2026

This Privacy Policy explains how Multiludo (“Multiludo”, “we”, “us”, or “our”) collects, uses, discloses, stores, shares, transfers, and protects information when you use the Multiludo mobile application for Android and iOS (iPhone) and related services (together, the “Services”). Multiludo is operated by Jakkrit Boonnet (Multiludo Studio), based in Thailand. Where this policy describes something that differs between Android and iOS, it says so.

Please read this Privacy Policy carefully. If you do not agree with it, you should not use the Services.

1. Who We Are

Multiludo is operated by Jakkrit Boonnet (Multiludo Studio), based in Thailand, who is the controller responsible for your personal data, including for the purposes of Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).

For privacy-related requests, you may contact us at: multiludo.studio@gmail.com.

2. Scope of This Policy

Multiludo is an offline, pass-and-play party games app. It does not use accounts, game servers, logins, chat, online multiplayer, or user-content sharing. Because of this, most of the data processing that can exist in online games does not apply to Multiludo. This Privacy Policy covers:

• data stored locally on your device;
• data processed by Google AdMob to serve advertising in the free version;
• purchase data handled by the app stores (Google Play and Apple’s App Store);
• crash reports and app-usage statistics processed by Google Firebase;
• app update checks;
• support communications you choose to send us.

The app store privacy information or data safety disclosures for Multiludo may provide additional details about the data practices of the app.

3. Personal Data We Collect

3.1 Data Stored on Your Device

The following is created by you and stored only on your device. We do not operate accounts or game servers, so this data is never sent to us and we cannot see it:

• player names, avatars, and colors;
• groups you create;
• game settings, presets, and any custom content you make;
• game history and statistics, such as games played and durations.

Uninstalling the app, or using the in-app data-deletion options, permanently removes this data.

Player names you enter are often the names of your friends or family. Please add someone only if they are happy to be included. These names stay on your device and are never sent to us.

3.2 Advertising Data

The free version of Multiludo shows ads through Google AdMob. To serve ads, Google and its partners may automatically collect and process certain information from your device, such as:

• device information such as device model, operating system, and language;
• device and advertising identifiers;
• IP address and approximate location (such as country) derived from it;
• app usage and ad interaction data (such as ad views and clicks).

On Android, the advertising identifier is your device’s Google advertising ID. On iOS, the advertising identifier (IDFA) is used only if you allow tracking when your device asks you (Apple’s App Tracking Transparency); if you don’t allow it, or are never asked, ads are served without it.

This data is processed by Google under its own privacy policy. Users who purchase ad removal will not see ads.

3.3 Purchase Data

If you make an in-app purchase (for example, ad removal, cosmetic items, or extra content — all one-time purchases; we do not sell subscriptions), the app store you installed Multiludo from — the Google Play Store on Android or Apple’s App Store on iOS — processes the transaction and may handle data such as purchase history, transaction identifiers, and receipt or purchase token data. The app reads that store’s record of your purchases on your device to unlock what you bought. We do not receive or store your payment details.

3.4 Support Data

If you contact us for support, we may process your contact details, your message and attachments, and any device or purchase information you choose to share so we can resolve your request.

3.5 App Update Checks

When the app starts, it may ask the app store (Google Play on Android, Apple’s App Store on iOS) whether a newer version is available, and it may download a small configuration file from our web host to check whether an update is required. These requests contain no personal data, but as with any internet request, the host receives your IP address and basic technical information, which is used only to deliver the file. If you are offline, the app simply skips the check.

3.6 Crash Reports and Usage Statistics

To keep the app stable and improve it, the app uses Google Firebase Crashlytics and Google Analytics for Firebase:

• Crash reports: when the app crashes or runs into an error, a report is sent with technical details only — the error and where in the app’s code it happened, the app version, device model, operating system version, and a random installation identifier created by Firebase.
• Usage statistics: which games are started and finished, the game mode, the number of players, which built-in content categories or card decks were used, how long a game lasted, when the shop is opened, and which item a purchase was tapped for and how it ended (for example, completed or canceled). Firebase also records basic app events such as the first launch and app sessions, with a random app-instance identifier, device model, operating system, language, and approximate location (such as country) derived from your IP address.

These reports never include player names, group names, or content you write yourself — self-made content is counted only as “custom”. We do not use them for advertising: Analytics does not collect your advertising ID and is not linked to ads.

In the EEA, UK, and Switzerland (where the app asks for consent), usage statistics are not collected at all. Elsewhere, they are collected only after the app’s consent check has completed. Crash reports are sent in every region, so that we can find and fix problems that stop the app from working.

4. How We Use Personal Data

We and our providers use the data described above to:

• provide and operate the Services and enable gameplay and app functionality;
• serve advertising, limit how often you see the same ad, measure ad performance, detect ad fraud, and — where permitted and consented to when required — show personalized advertising;
• verify purchases and entitlements;
• check whether an app update is available or required;
• find and fix crashes and errors, and understand which games and features are used so we can improve them;
• provide customer support and respond to your requests;
• maintain the security, availability, and reliability of the Services;
• comply with legal obligations and defend legal claims.

We do not use third-party analytics or tracking SDKs beyond Google AdMob (Section 3.2) and Google Firebase (Section 3.6).

5. Legal Bases for Processing (Thailand, EEA, UK, Switzerland, and Similar Laws)

Where the PDPA, GDPR, UK GDPR, or similar data protection laws apply, we rely on one or more of the following legal bases:

• Performance of a contract: to provide the Services and verify purchases.
• Legitimate interests: to maintain security, prevent fraud and abuse, find and fix crashes, understand how the app is used (outside the EEA, UK, and Switzerland), and respond to support requests, unless overridden by your rights and interests.
• Consent: for personalized advertising and certain tracking technologies, where consent is legally required.
• Legal obligation: to comply with accounting, tax, consumer protection, and law enforcement obligations.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place before withdrawal.

6. Advertising, Tracking, and Your Choices

To serve ads in the free version, Google AdMob may use your device’s advertising ID and similar technologies for ad delivery, frequency capping, measurement, and fraud prevention.

Where required by law (for example, in the EEA and UK), personalized advertising and certain tracking technologies will be subject to your consent, and we will request that consent before such ads are shown.

Depending on your device and region, you may be able to:

• reset or delete your advertising ID (Android: Settings → Google → Ads);
• on iOS, allow or stop apps from asking to track you, or turn tracking off for Multiludo (Settings → Privacy & Security → Tracking);
• limit ad personalization;
• manage Google’s personalized advertising at https://adssettings.google.com;
• withdraw or change consent through the consent prompt, or in the app at Settings → Ad privacy choices (shown where required in your region).

If you do not consent to personalized advertising, we may still show contextual or non-personalized ads, which may still involve limited processing for ad delivery, frequency capping, fraud prevention, security, and measurement.

7. How We Share Personal Data

We may share personal data with the following categories of recipients:

• Advertising partners: Google AdMob, which may process device data, advertising identifiers, app events, approximate location, and ad interaction data to request, deliver, measure, and secure ads.
• Service providers: Google Firebase (Crashlytics and Analytics), which processes crash reports and usage statistics on our behalf as described in Section 3.6.
• App stores and payment platforms: the Google Play Store (Android) and Apple’s App Store (iOS), which process your purchases under their own terms. If you request a refund, the store may ask us for information to help it assess your request, and the refund decision is made by the store.
• Legal, safety, and compliance recipients: where we believe it is necessary to comply with law, enforce our Terms, investigate fraud or abuse, or protect the rights, property, or safety of Multiludo, users, or others.
• Business transfers: if the operator of Multiludo is involved in a merger, acquisition, reorganization, or sale of assets, data may be transferred as part of that transaction, subject to applicable law.
• Aggregated or de-identified data: which cannot reasonably identify you.

8. International Data Transfers

Our advertising, crash-reporting, analytics, and app store partners may process data in other countries, including the United States and countries outside your country of residence. Where required, we and our partners rely on appropriate safeguards for international transfers, such as adequacy decisions, standard contractual clauses, or the EU-US Data Privacy Framework, where applicable.

Where the PDPA applies, transfers of personal data outside Thailand are made only to recipients that provide adequate protection or under the safeguards and exceptions permitted by the PDPA, such as the service provider’s own data-protection commitments or where the transfer is necessary to provide the Services you request.

9. Data Retention

Data you create is kept on your device until you delete it or uninstall the app; we never receive it. Purchase records may be kept by the app stores and by us as needed for accounting, tax, fraud-prevention, and legal compliance. Advertising data is retained by Google under its own policies. Crash reports are kept by Firebase Crashlytics for up to 90 days, and usage statistics are kept by Google Analytics for no longer than 14 months. When personal data is no longer needed, we will delete it, anonymize it, or securely retain it only where legally permitted.

10. Your Privacy Rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, withdraw consent, request data portability, opt out of certain targeted advertising or sharing, and lodge a complaint with a data protection authority (see Section 14 for regional details).

To exercise your rights, contact us at multiludo.studio@gmail.com. We may need to verify your identity before responding.

11. Age

Multiludo is a family-friendly party game with no alcohol-based gameplay and no adult (18+) content. However, because the Services include advertising and in-app purchases, they are made for players aged 13 and over. They are not directed to children under 13, and you must be at least 13 years old (or the minimum age of digital consent in your country, if higher) to use them. We do not knowingly collect personal information from children under 13, and we do not knowingly target personalized advertising to them. If you believe that a child under 13 has provided personal information, please contact us at multiludo.studio@gmail.com and we will take reasonable steps to delete it.

12. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. Because the data you create stays on your device, keeping your device secure is the most important protection. No method of transmission or storage is completely secure.

13. Third-Party Links and Services

The Services may include links to, or content from, third-party websites, app stores, or advertisers. We are not responsible for the privacy practices of third parties. Their own terms and privacy policies apply to their services. Please review:

• Google Privacy Policy — https://policies.google.com/privacy
• Apple Privacy Policy — https://www.apple.com/legal/privacy/
• Firebase privacy and security — https://firebase.google.com/support/privacy
• How Google uses information from apps that use its services — https://policies.google.com/technologies/partner-sites

14. Regional Notices

Thailand (PDPA). If you are in Thailand, the PDPA applies. We process your personal data on the legal bases described in Section 5 (performance of a contract, legitimate interests, consent, and legal obligation). Under the PDPA you have the right to: be informed about how your data is processed; access and obtain a copy of your personal data; request its transfer (data portability); object to its processing; request its deletion, destruction, or anonymization; request restriction of its use; request its correction; and withdraw consent at any time. To exercise these rights, email multiludo.studio@gmail.com. We will respond within the period required by law (generally within 30 days). If you believe we have not complied with the PDPA, you may lodge a complaint with the Office of the Personal Data Protection Committee (PDPC), Thailand (https://www.pdpc.or.th).

EEA, UK, and Switzerland. If you are located in the EEA, UK, or Switzerland, the GDPR, UK GDPR, or similar laws may apply, and you may lodge a complaint with your local supervisory authority.

California and certain U.S. states. Residents of California and certain other U.S. states may have additional rights, such as the right to know, access, delete, correct, and opt out of certain “sales” or “sharing”. We do not sell personal data for money. However, some advertising practices may be considered “sharing” or “targeted advertising” under certain U.S. state privacy laws, and where required we will provide appropriate opt-out mechanisms.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required by law, such as by updating the date above or posting a notice in the Services. Your continued use of the Services after the effective date of an updated Privacy Policy means that the updated policy applies to your use of the Services, to the extent permitted by law.

16. Contact Us

For questions or requests about this Privacy Policy or your personal data, contact us at multiludo.studio@gmail.com.