Privacy Policy

Last updated: October 27, 2026

This policy explains what information the iPhone game Pofi: Crystal Tower (the "game") and this website handle, why, who else is involved, and the choices you have.

The short version. No accounts, no sign-up, no chat. Your game is saved on your phone. To count how the game is played, fix crashes, tune difficulty, take purchases and show the ads you choose, we use Apple, Google (Firebase and AdMob), our own purchase verification service (AppRevenue) and Meta. Tracking across other companies' apps happens only if you allow it when iOS asks. We do not sell your personal information.

1. Who we are

Pofi: Crystal Tower is made and published by Jazz Games, the controller of the personal information described here. For anything about privacy, write to hello@jazzgames.net.

2. What we collect

Kept on your phone

Your game save: levels, stars, lives, gold, boosters, Cloud Island decorations and settings.
An app identifier: a random code the game creates the first time it runs. It is not your name, phone number or Apple's advertising identifier.

Sent from your phone

Gameplay and diagnostics: events such as starting or finishing a level, moves used, a booster or ad reward used, or a purchase made, together with the app identifier, device model, iOS version, app version, language and country or region (from your settings, not your location). These go to Google Firebase (Analytics) and to our own Firebase backend. Crash reports and stability data go to Firebase Crashlytics.
Difficulty tuning: to keep levels fun rather than frustrating, our server sends anonymous level-progress numbers (for example level number, moves left, attempts and stars) to a gameplay-state classifier service that we use as a processor. It receives no name, contact details, advertising identifier or anything that identifies you, and it is not used for advertising.
Settings from us: Firebase Remote Config sends level and offer settings to the game. Firebase App Check uses Apple's App Attest / DeviceCheck to confirm that requests come from a genuine copy of the game.
Purchases: payments are made through Apple. Apple tells the game what you bought; our own purchase verification service (AppRevenue), operated by Jazz Yazılım, receives the signed App Store transaction and your subscription status from Apple, under an anonymous app user ID. We never receive your card details, name or Apple Account email.
Rewarded ads: only when you choose to watch one, Google AdMob receives information about your device and the ad request (for example IP address, device model and OS version) to show and measure the ad. Every ad request is marked child-directed and under the age of consent, so ads are contextual, never personalised, and AdMob does not use Apple's advertising identifier (the IDFA).
Game Center: if you are signed in, your scores and achievements go to Apple under your Game Center profile.
Ad measurement: to learn which of our own ads (for example on Facebook and Instagram) bring players, we use Apple's SKAdNetwork and the Meta (Facebook) SDK. The Meta SDK receives app events such as the install, app opens, levels reached and purchases (product and price), with device information. Only if you allow tracking when iOS asks does it also receive the IDFA, and only then is this data used to match an install to one of our ads; if you say no, Meta receives no IDFA and the data is not used for tracking. We do not use it to show you ads inside the game.
Support: whatever you send us when you email us, including your email address.

What we do not collect

No account, name, email (unless you write to us), contacts, photos, camera, microphone, precise location, health data or messages. The game has no chat and no user-generated content.

This website sets no cookies and runs no analytics. It loads fonts from Google Fonts, so Google receives your IP address and browser details when you open a page, and our host (Google Firebase Hosting) keeps ordinary server logs.

3. How we use it

To run the game: save your progress, give you what you bought, restore purchases, show the ads you choose and give their rewards, and post Game Center scores.
To keep it working: find and fix crashes and slow screens, and protect the game and its rewards from fraud.
To improve it: understand, in aggregate, which levels are too hard or too easy, and adjust difficulty, rewards and prices.
To measure our own advertising, as described above.
To answer you when you write to us, and to meet legal duties.

Where the EU or UK GDPR or Turkey's KVKK applies, our legal bases are: performing our agreement with you (running the game, purchases, rewards); our legitimate interests (security, crash reports, improving and balancing the game, answering support); your consent (where asked); ads in the game are never personalised: every ad request is marked as directed to children, so no advertising identifier or profile is used for them; and legal obligations.

We share information only with the services that run the game for us, each under its own terms:

Apple: App Store purchases, Game Center, SKAdNetwork, App Attest. apple.com/legal/privacy
Google: Firebase Analytics, Crashlytics, Remote Config, App Check, Cloud Functions and Hosting; AdMob for rewarded ads. policies.google.com/privacy
AppRevenue: our own purchase verification service (AppRevenue), operated by Jazz Yazılım, hosted on Cloudflare: signed App Store transactions, subscription status and an anonymous app user ID, to verify purchases and keep the Pofi Pass working.
Meta Platforms: measurement of our own ads through the Facebook SDK (app events; the IDFA only if you allow tracking). facebook.com/privacy/policy
Our difficulty classifier provider: anonymous level-progress numbers only, as described above.

We may also disclose information if the law requires it, to protect players or the game from fraud or abuse, or to a buyer if the game or Jazz Games is sold, under this policy. We do not sell your personal information, and we share it for cross-context behavioural advertising only if you allow tracking.

5. How long we keep it

Your save on your phone: until you delete it or the app.
Gameplay events and analytics: up to 14 months in Google Analytics, and at most 26 months in our own backend.
Crash reports: about 90 days in Crashlytics.
Purchase records: as long as needed to provide your purchases and as tax and accounting law requires.
Support emails: up to two years after the conversation ends.

6. Deleting your data

In the game: open Settings and tap Delete all data. It clears your progress on the phone, resets the app identifier and asks our backend to delete the gameplay records linked to it.
Anything else: email hello@jazzgames.net and we will delete what we hold about you within 30 days.

Purchases are records kept by Apple and by our purchase verification service (AppRevenue); deleting data does not refund or cancel them. A Pofi Pass subscription must be cancelled in your App Store account settings.

7. Children

Pofi: Crystal Tower is rated 4+ and is made to be enjoyed by everyone, but it is a general-audience game and is not part of the App Store's Kids category. We do not knowingly collect personal information from children under 13 (or the age your country sets) beyond what is needed to run the game. Purchases need the Apple Account holder's approval, and parents can use Ask to Buy and Screen Time to restrict purchases and tracking. If you believe a child has given us personal information, write to us and we will delete it.

8. Where it is processed

Our providers process information in the United States, the European Union and other countries where they operate. Where the GDPR, UK GDPR or KVKK requires it, transfers rely on the providers' standard contractual clauses or other lawful transfer mechanisms, and for transfers out of Turkey on the safeguards in KVKK Article 9.

9. Your rights and choices

Tracking: iOS asks whether the game may track you. If you say no, the IDFA is never shared, Meta's app events are not used to track you, and the game works exactly the same. Change it any time in iOS Settings, Privacy & Security, Tracking.
Ads: rewarded ads are always optional; just do not tap them.
Purchases: turn them off in Screen Time, or use Ask to Buy.
Your rights: depending on where you live (for example under the GDPR, UK GDPR, KVKK, or the California and other US state privacy laws), you can ask to access, correct, delete or move your information, object to or restrict its use, withdraw consent, and opt out of sale or sharing. Write to hello@jazzgames.net. We will not treat you differently for using these rights. You may also complain to your data protection authority.

10. Security

Information travels over encrypted connections, App Check limits our backend to genuine copies of the game, and access to our systems is restricted. No system is perfectly secure, but we work to protect what we hold.

11. Changes

If we change this policy, we will update the date at the top, and tell you in the game if the change is significant.

12. Contact

Jazz Games, hello@jazzgames.net.