Fly Trap · Privacy Policy
Effective date: October 2, 2026 · Contact: support@kend.app
Fly Trap is a mobile game by Kend (Yunus Yurduseven, "we"), who is responsible for the data
described here. This policy explains what the game handles, why, who else receives it, and how
to delete it.
The short version: the game never asks for your name, email or phone number.
It gives you an anonymous player account so your garden is backed up and the online features
work. Ads are always non-personalized, and we do not track you across other apps or websites.
You can delete everything from the game at any time.
Your player account
- Anonymous account. On first launch the game signs in to Google Firebase
Authentication anonymously and creates a random player ID and a player name made of two words
and two digits (for example "SwiftMoth42"). On iPhone and iPad a copy is kept in the device
keychain, so reinstalling the game keeps the same account.
- Game Center and Google Play Games. If your device is signed in to Game
Center or Google Play Games, the game sends its player ID (with Apple's signature, or a one-time
code from Google) to our server, which links it to your account so you can restore your garden
on another device. We keep only that player ID and the link. Your Game Center or Play Games
name is shown in the game but not stored. Scores and achievements you earn are also sent to Game
Center or Play Games, and friends' names are read only after their own permission prompt and are
never stored or sent anywhere by us.
What we collect and why
- Cloud save. Your progress (levels, coins and items, looks, gardens,
achievements, statistics, league standing, settings, the flag you pick, and the store IDs of
your recent purchases, which stop a purchase from being granted twice) is stored on your device
and backed up to our database (Google Cloud Firestore), where only your account can read it.
- Transfer codes. If you ask for a transfer code, a copy of your save is
stored under that code so another device can claim it; the code works for 15 minutes.
- Leaderboards, the league, daily runs and achievements. When you play the
ranked modes we store your player name, the flag you picked, your scores and results, the
achievements you have earned and, for daily runs, the path of your run so others can race your
ghost. These entries are public: other players see them, and they are stored under your random
player ID, which is readable along with them.
- Garden Clubs. If you join a club, other club players see your player name,
flag, wins, when you joined and were last active, and the preset emotes you post. There is no
free-text chat.
- Your flag. The country flag on your name is the one you choose. We do not
work out your country from your location or IP address.
- Purchases. Payments are handled entirely by Apple or Google; we never see
your payment details. RevenueCat checks your purchases so the game can deliver them, using your
random player ID; we send it nothing else about you.
- Analytics. Google Analytics for Firebase receives gameplay events (for
example which levels are too hard and which items are bought, with the store's transaction ID
for purchases), device and app details, and an approximate location derived from your IP
address. It also uses an app-instance ID, and on Android it may collect your device's
advertising ID. We do not attach your player ID or name to analytics.
- Crash reports. Firebase Crashlytics receives technical data when the game
crashes (device model, system version, the error, and a short log of the game's recent steps,
which can include a purchase's store transaction ID or a club's ID) so we can fix bugs.
- Advertising. The free game shows ads from Google AdMob. Every ad request
asks for non-personalized ads, and the game does not ask for permission to track you. AdMob
still receives your IP address, device information and advertising ID to deliver ads, limit how
often you see them, measure them and prevent fraud, under
Google's privacy policy. You can reset or
delete your advertising ID in your device settings.
- Reminders. If you switch on reminders, Firebase Cloud Messaging gives your
device a push token, which stays on your device, and subscribes it to topics for all players,
your platform and your language. Switching reminders off removes the subscriptions and the
token.
- Updates and downloads. The game downloads its updates from
updates.kend.app and its garden art from assets.kend.app, both run on Cloudflare. These requests
carry your IP address and technical details such as the game's version and a random install
ID used for updates. We do not store them; Cloudflare keeps short-lived request logs.
- Device backups. On Android, your device's own backup to your Google account
includes the game's local data, your account included.
- Parental PIN. If you set a PIN for purchases, a scrambled (hashed) copy is
kept on this device only.
What we do not do
We do not collect your name, email address, phone number, contacts, photos or precise
location. We do not sell your personal data, and we do not use it to track you across other
companies' apps or websites. The game has no free-text chat.
Why we use it (legal bases)
We use your data to provide the game you asked for: your account, cloud save, purchases and
the online features (performance of a contract). We use analytics, crash reports, fraud
prevention and non-personalized advertising, which keeps the game free, on the basis of our
legitimate interests in running, improving and funding the game.
Who receives data
Our service providers process data for us under their own terms and privacy policies:
Google Firebase (authentication, database, server functions, analytics, crash reports,
messaging, remote settings), Google AdMob (advertising), RevenueCat (purchases) and Cloudflare
(updates and downloads). Apple and Google receive what you send to Game Center or Google Play
Games. We do not share your data with anyone else, unless the law requires it.
Where it is stored
Our database is hosted by Google Cloud in Zurich, Switzerland, and our server functions run
in the United States. Google, RevenueCat and Cloudflare process data in several countries,
including the United States, under their own data-protection safeguards.
How long we keep it
- Your cloud save, leaderboard, league, daily-run and achievement entries, and your Game
Center or Play Games link: until you delete your data.
- Transfer codes: they work for 15 minutes; the copy is removed when it is claimed or when
you delete your data.
- Garden Clubs: club posts are removed after 14 days, a player inactive for 28 days leaves
the club, and club race entries are removed a few weeks after the race.
- Analytics and crash reports: deleted automatically under Google Firebase's retention
periods.
Deleting your data
In the game: Profile, Cloud save, Delete my data, then Delete everything.
This deletes, at once, your cloud save and transfer codes, your leaderboard, league, daily-run
and achievement entries, your Garden Club membership, posts and race entries, the link to your
Game Center or Play Games player ID, and your anonymous account. Your device then starts over as
a new player.
Without the game: email support@kend.app,
as described at kend.app/fly-trap/delete-account.
What stays: your purchase records with Apple, Google and RevenueCat (so you
can restore a purchase or get a refund); a club's total wins, which include yours; analytics and
crash reports until their retention ends; scores and achievements you sent to Game Center or
Google Play Games, which you manage in their settings; and leaderboard entries from early versions
of the game that were not linked to an account, which we remove if you email us.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a
copy of your data, and to object to or restrict how we use it. Email
support@kend.app; since the game has no names or emails,
include your player name or a transfer code so we can find your data. You can also complain to
your local data-protection authority.
Children
Fly Trap is not directed at children under 13, and we do not knowingly collect personal data
from them. If you believe a child has used the game, use Delete my data or write to us.
Changes
If this policy changes materially we will update this page and the effective date above.