Privacy Policy

DATE: Jan 13, 2026

This Privacy Statement outlines the manner in which Huaan Wu (hereinafter denoted as "we" or "us") gathers and manages your personal data during your engagement with our mobile application, Ecosystem Merge, on the iOS platform. Our collection and processing of your pertinent information are conducted strictly to deliver superior gaming products and to optimize your user experience.

1. How We Gather Your Personal Data

We employ diverse methods to acquire, utilize, and handle your personal data, while steadfastly committing to safeguarding the security of your information under all circumstances. Below is an elaboration on the classifications of data we harvest and our processing methodologies.

1.1 Classifications of Personal Data

Upon your access to or utilization of Ecosystem Merge, we may accumulate the following general categories of information regarding you:

• Log Data: IP address, timestamps of access, and the type of device utilized.
• Hardware Details: Manufacturer of the device, model type, operating system (specifically iOS version), time zone settings, and language preferences.
• Device Identifiers: Online identification codes associated with the device used to access the game, encompassing IDFA (Advertising Identifier), Google Ads ID, Google Device ID, Game Center ID, and Google Play account ID.
• Gameplay Activity: Progress within the game, scores achieved, achievement data, and logs of interactions with fellow players.
• Transaction & History: Records of purchases, history of usage, customized preferences, and logs detailing the acquisition of in-game virtual goods.

1.2 Supplementary Data Sources

Should you opt to log into the game via third-party platforms (e.g., Apple Game Center), we will procure relevant details about you from said platforms (such as your display name and profile data). This is conducted in strict adherence to the authorization protocols defined by the platform, and is contingent upon your consent to the relevant permissions of that third-party service.

To understand how these third-party entities handle your data, please refer to their respective privacy policies:

• Apple Game Center: https://www.apple.com/legal/internet-services/itunes/gamecenter/

By logging in through a third-party platform, you explicitly represent and warrant that:

1. Your access and utilization of game-related functionalities adhere to the current terms and policies of the respective third-party platform.
2. You meet the minimum age requirements established by the third-party platform strictly in accordance with the laws of the applicable jurisdiction.

2. Utilization of Collected Information

We deploy your information for the objectives listed below, ensuring that the usage of each category of personal data aligns with the corresponding legal framework:

1. Service Provision & Support: To execute purchase requests, address your inquiries, and maintain communication; to deliver gaming services, refine and tailor your gameplay experience; and to dispatch game-related alerts, technical specifications, updates, privacy notices, and support assistance.
   • Legal Basis: Article 6(1)(b) of the General Data Protection Regulation (GDPR) (Performance of a Contract). This processing is vital for fulfilling the contract to which you are a party, supporting game functionality, delivering requested services, and ensuring the game's maintenance and updates.
2. Marketing & Improvement: To forward news regarding Huaan Wu or third-party promotions that may align with your interests, based on your marketing choices; to personalize your gaming journey and store your settings; to analyze gameplay and operational metrics, develop novel products/services, and elevate the quality of our software, content, marketing, and support.
   • Legal Basis: Article 6(1)(f) of the GDPR (Legitimate Interests). We conduct such processing based on our legitimate interest in delivering relevant advertisements/content and enhancing service quality.
3. Targeted Advertising: To present personalized ads, marketing materials, and relevant promotional data to users who have consented to sharing their advertising identifiers with our ad network affiliates.
   • Legal Basis: Article 6(1)(f) of the GDPR. This is based on our legitimate interest in providing content that interests you and optimizing service delivery.

3. Data Retention Duration

We will preserve your information only for the duration essential to deliver game services, satisfy legal mandates, and/or to exercise, defend, or establish our legal rights. For purposes such as dispute resolution, enforcement of terms, service management, compliance with technical/legal standards, or ensuring service security and integrity, we may keep portions of your personal data in our archives for a reasonable timeframe.

Usage Data is also retained for internal analytical purposes. Typically, this data is kept for a brief period, unless it is utilized to bolster security, improve functionality, or if statutory requirements compel us to extend the retention period.

4. Disclosure of Information

In compliance with your statutory rights and pursuant to Articles 6(1)(b), 6(1)(c), and 6(1)(f) of the GDPR, we may disclose or facilitate the sharing of your collected information with various third parties as follows:

1. External Parties: E.g., for collaborative service delivery, legal/security necessities, in the context of a business sale or asset transfer, or other purposes where you have granted permission.
2. Competent Authorities: If we determine that your conduct violates the spirit or letter of our policies, or if disclosure is imperative to safeguard the rights, assets, and safety of Huaan Wu or others.
3. Fellow Users: For instance, when you engage in public game communities/events, or when your data appears on leaderboards.

4.1 Sharing with Ad Network Affiliates

Upon your consent to share information under the relevant provisions of Article 6(1) of the GDPR, we will transmit your device identification data to ad network companies to facilitate personalized advertising. The ad networks we currently engage or may engage include:

• Applovin Corporation: https://www.applovin.com/privacy/
• AdColony: https://yandex.com/legal/international_ads_privacy_policy
• Amazon Publisher Services: https://www.amazon.com/privacyprefs
• Facebook, Inc.: https://www.facebook.com/about/privacy/
• Google LLC: https://policies.google.com/privacy
• Google Admob: https://support.google.com/admob/
• Unity Technologies: https://unity3d.com/legal/privacy-policy
• IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf
• Vungle, Inc.: https://vungle.com/privacy/
• Fyber: https://www.fyber.com/privacy-policy/
• InMobi: https://www.inmobi.com/privacy-policy/

Note: The usage of disclosed information by these third-party recipients is not governed by this Privacy Policy. Please consult their respective policies for details on their data processing practices.

4.2 Collaboration with Data Processors

Throughout the data processing lifecycle, we collaborate with the following processors, including server hosting services, technical support for internal operations, login service providers, and analytics firms:

• Firebase (Google LLC): https://firebase.google.com/support/privacy
• Adjust: https://www.adjust.com/terms/privacy-policy/

5. Safeguarding Children's Data

Ecosystem Merge is not intended for individuals younger than 13 years of age. We do not knowingly harvest personally identifiable information from children under 13. Should we discover that we have inadvertently collected personal data from a child under 13, we will promptly excise such data from our servers. If you are a parent or guardian and become aware that your child has supplied us with personal information, please contact us so we may take appropriate action.

6. Security Protocols

We prize the trust you place in us and endeavor to safeguard your personal information using commercially viable means. However, please be advised that no method of internet transmission or electronic storage is absolutely infallible; thus, we cannot guarantee total security of the information.

7. Push Notification Services

Subject to your consent to receive push notifications, we will transmit game-related updates, service news, promotional material, and other relevant messages to your iOS device. You retain the ability to deactivate these notifications by modifying the settings on your device.

8. Your Rights

8.1 Rights for Residents of the European Economic Area (EEA)

We are committed to processing and responding to your inquiries promptly, typically within one month of receipt. Should the complexity of the request necessitate an extension, pursuant to Article 12 of the GDPR, the period may be extended by up to two additional months (totaling three months), and we will notify you of the delay and the reasons for it.

(1) Right of Access

Under Article 15 of the GDPR, you are entitled to request access to the data we hold about you, including:

• The purposes of processing;
• Categories of personal data concerned;
• Recipients or categories of recipients to whom data has been disclosed;
• The projected storage period.

Additionally, you may request a copy of the personal data undergoing processing. Please note, access rights may be limited where intellectual property or trade secrets are concerned.

(2) Right to Object

Under Article 21 of the GDPR, regarding data processed based on "legitimate interests" (Article 6(1)(f)), you have the right to object to such processing on grounds relating to your particular situation. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

Direct Marketing: You may object at any time to the use of your data for direct marketing. Upon objection, we will halt processing for this purpose.

(3) Right to Rectification

Under Article 16 of the GDPR, you are entitled to demand the correction of any inaccurate personal data.

(4) Right to Restriction

Under Article 18 of the GDPR, you may request that we restrict the processing of your data under specific conditions. If valid, we will only process data with your consent, for legal claims, to protect others, or for significant public interest reasons.

(5) Right to Withdraw Consent

Under Article 7 of the GDPR, where processing is based on consent, you may withdraw it at any time.

• Withdrawal leads to the cessation of processing for that specific purpose, barring legal retention requirements.
• Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

(6) Right to Data Portability

Under Article 20 of the GDPR, if processing is based on consent or contract performance, you have the right to receive your provided personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

8.2 Rights for California Residents

(1) Response Timeline

We strive to address verifiable consumer requests within 45 days. If an extension is required (up to 90 days total), we will notify you in writing regarding the reason and the extension period via mail.

(2) Disclosure Scope

Disclosures will cover the 12-month period preceding the receipt of a verifiable request. If we cannot fulfill a request, we will explain why. For portability requests, we will choose a format that facilitates the unobstructed transmission of information from one entity to another.

(3) Right to Opt-Out

Under the California Consumer Privacy Act (CCPA), California residents have the right to direct businesses to cease selling their personal information to third parties.

(4) Right to Information

You are entitled to know the categories of data collected and the purposes thereof. Pertinent details are accessible within this Privacy Policy, which is updated at least annually.

(5) Right to Request Disclosure

You may request that we disclose the personal data collected about you over the past 12 months.

• Details regarding data categories, sources, and usage are found in this Policy.
• You have the Right of Access to obtain a free copy of your personal information, exercisable twice per year.
• We will provide: categories of collected data, sources, collection purposes, third-party recipients, and the specific pieces of information held.

(6) Right to Request Deletion

You have the right to request the deletion of personal data collected over the past 12 months.

We acknowledge this right, though exceptions apply where retention is legally mandated (e.g., service provision, security detection, legal compliance, public interest research, free speech protection, or reasonable internal operations). Absent these exceptions, we will delete your information upon request.

9. Data Deletion Request

Once retaining your personal data serves no further purpose, you may demand its immediate deletion. To initiate a deletion request, please contact us at: wuhuaan2074@outlook.com.

10. Contact Us

Should you harbor any inquiries regarding this Privacy Policy, please reach out via the following channel:

Contact Email: wuhuaan2074@outlook.com