Privacy Policy

Last updated: 16 September 2026

This policy explains what the Peblings Android app (the "App") and the website at peblings.app (the "Site") collect, why, and what you can do about it. Peblings is made by Invariant Labs ("we", "us"). If anything here is unclear, write to hello@peblings.app.

1. Data that stays on your device

Everything about your peblings lives in a local database on your phone:

• each pebling's name, species, coat colour, wearables, ball and scene;
• its stats, level, XP, age, mood, mini-game state and history, and whether it is asleep, frozen or has passed away;
• which home-screen widget shows which pebling;
• your settings (for example whether alerts are on), whether you have finished the widget onboarding, and a cached copy of your subscription status.

None of this is sent to us. It is deleted when you uninstall the App or clear its data in Android settings. The App does not read your contacts, location, photos, files, microphone or camera.

2. Usage analytics

The App uses Google Analytics for Firebase, provided by Google LLC, to understand how Peblings is used. Analytics events are about the App, not about you: for example "a care action was tapped", "a pebling levelled up", "a mini-game invitation was posted", "a subscription purchase started". Events carry gameplay values such as the action, the level or the game, never a pebling's name or anything you typed.

Together with each event the Firebase SDK collects:

Data	What it is for
App instance ID	A random identifier created when the App is installed, so events from one install can be counted together. It is not linked to your name, email or Google account.
Device and app information	Device model, Android version, App version, language, screen size – to spot problems that only affect some phones.
Approximate region	Country or city derived by Google from your IP address at the time of upload. The IP address itself is not stored in analytics reports.
Advertising ID	Google may collect your Android Advertising ID as part of the SDK's standard data. We do not show ads and do not use it for advertising or profiling. You can reset or delete this ID at any time in Android's privacy settings.
Session and engagement	When the App was opened, for how long, and whether it crashed.

This data is processed on Google's servers, which may be located outside your country, including in the United States. Google acts as our processor under the Firebase Data Processing and Security Terms, which include the European Commission's standard contractual clauses for international transfers. Google's own privacy policy is at policies.google.com/privacy. We keep user-level analytics data for no longer than 14 months; aggregated statistics that cannot be tied to an install are kept longer.

Where the GDPR or UK GDPR applies, our legal basis for analytics is our legitimate interest in understanding and improving the App (Article 6(1)(f)). We have kept the data minimal and do not use it to make decisions about individuals.

3. Purchases

Peblings Premium is sold through Google Play Billing. Google Play collects and processes your payment information under Google's privacy policy and the Google Play Terms of Service. We receive only what we need to unlock the subscription: the product and plan you bought, a purchase token, and whether the subscription is active, cancelled, on hold or expired. We never receive your card number, billing address or Google account details.

The App checks your subscription status with Google Play when you open the paywall and periodically in the background so that a renewal or a cancellation reaches your widgets. Our legal basis is performance of our contract with you.

4. Alerts (notifications)

The App can show local notifications when a pebling is in danger, has passed away, is inviting you to a game, is ready to level up, or has been frozen. These are created on your phone by the App's own background check-in. There is no push notification server and no notification token leaves your device. Alerts require Android's notification permission, which the App asks for once after you create your first pebling; you can turn them off in the App's settings or in Android settings at any time. Nothing is shown between 22:00 and 8:00 local time.

5. Permissions the App asks for

Permission	Why
Notifications	To show the alerts described above. Optional.
Vibration	A short haptic tick when you tap a widget key.
Run at start-up	To refresh the widgets and reschedule the pet's check-in after your phone restarts or the App is updated.
Internet	Only for the analytics upload and for talking to Google Play about your subscription. The App has no other network features.

6. This website

The Site is static pages served through Cloudflare, Inc. It sets no cookies, embeds no third-party scripts, fonts or analytics, and does not collect personal information. The playable pebling on the home page keeps its stats in your browser's local storage so it is still there when you come back; that data never leaves your browser, and clearing the Site's data in your browser removes it. Like every web host, Cloudflare receives your IP address and browser details to deliver the pages and to protect against abuse; it may keep them in short-lived server logs under Cloudflare's privacy policy. If you email us, we keep your message for as long as it takes to answer it and for a reasonable time afterwards.

7. Children

Peblings is a general-audience app. It is not directed at children under 13 (or under the age at which a child can consent to data processing in your country, which is 16 in parts of the EU), and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

8. Sharing

We do not sell personal information and we do not share it with advertisers. The only parties that process data on our behalf are Google (analytics, Play Billing) and Cloudflare (Site hosting), as described above. We may disclose information if the law requires it, or to protect our rights, safety or property.

9. Your choices and rights

• Delete your data. Uninstalling the App, or clearing its storage in Android settings, deletes every pebling and setting stored on your device. It also retires the App's analytics instance ID; a reinstall gets a new one.
• Advertising ID. In Android settings → Privacy → Ads you can delete or reset the Advertising ID at any time.
• Alerts. Turn them off in the App's settings or in Android's notification settings.
• Subscription. Manage or cancel it in Google Play → Payments & subscriptions.
• Requests. Depending on where you live you may have the right to access, correct, delete or export personal data, to object to or restrict its processing, and to complain to a data protection authority. Because we hold no account and no name for you, we usually cannot tell which analytics data is yours; if you contact us with your App instance ID (available to us only if you send it) we will delete the analytics data attached to it through Firebase's deletion API. Email hello@peblings.app and we will answer within 30 days.

10. Security

Data stored by the App is kept in the App's private storage, which other apps cannot read without root access. Communication with Google's services uses encrypted connections. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy as the App changes. The date at the top shows when it was last revised; material changes will also be noted in the App's store listing or in the App itself. Continuing to use Peblings after a change means you accept the updated policy.

12. Contact

Invariant Labs
Email: hello@peblings.app