Gembao privacy policy

How Gembao handles your data. This page is part of the BlueBurp Studio privacy policy, which also covers our website.

Last updated: Vivek Kumar · BlueBurp Studio · India

1. Who we are

BlueBurp Studio is the studio name and Google Play developer name used by Vivek Kumar, an individual, independent game developer based in India. In this policy "we", "us" and "BlueBurp" mean Vivek Kumar trading as BlueBurp Studio. We are the "data fiduciary" (India) or "controller" (EEA/UK) for the processing described here.

Privacy questions, requests and grievances go through the contact form (choose "Privacy or data request"). You can also email us at contact@blueburp.com. Vivek Kumar personally handles them.

2. About this game

Package name com.blueburp.gembao. Retro platformer. Intended for players aged 13 and above. Free. The only ads are optional reward videos. No in-app purchases and no subscriptions.

  • Game progress, stars, lives, scarf colours and settings are stored only on your device. When you uninstall the game, this data is deleted.
  • There is no account, sign-in, chat, leaderboard or cloud save. Android backup does not copy the game save.
  • The lives timer uses the clock of your device. It sends no data to us.
  • The only ads are optional reward videos. A video starts only when you tap its button. A video gives 1 life, a stage skip, a bonus gem hint or a scarf colour for Bao. Ad content is limited to a PG rating.
  • The game opens this policy from Settings → Privacy Policy. Where Google requires it, Settings → Privacy Options lets you change your ad choices.
  • Google AdMob supplies the ads. See the AdMob section of this policy.

More about the game: Gembao.

3. Our games

Every BlueBurp game follows the same rules:

  • No accounts. You never sign in, and we never ask for your name, email or phone number inside a game.
  • Progress stays on your device. Scores, settings and game progress are saved in the game's private storage on your phone. Uninstalling the game removes them. We cannot see or recover them.
  • No in-app purchases, no subscriptions. Our games are free and supported by ads.
  • Permissions. The games use internet and network-state access to load ads. Google's ads SDK also adds the advertising ID permission and a few routine system permissions that do not show a prompt. The games do not request your contacts, precise location, camera, microphone, files or phone number. Some games ask permission to show local reminder notifications made on your phone, with no data sent.
  • No analytics or crash-reporting SDKs are included in our games at this time. If a future game adds one, this policy and the game's Google Play Data safety form will say so before release.

Google Play may collect installation, crash and usage statistics independently under Google's privacy policy.

4. Advertising with Google AdMob

Our games show ads served by Google AdMob (the Google Mobile Ads SDK). To do this, Google and its certified ad partners may collect and use information from your device, including:

  • your advertising ID (a resettable identifier Android provides for ads) and, where applicable, the app set ID;
  • your IP address, from which an approximate location may be derived;
  • device and app information: device model, operating system, language, screen size, app name and version;
  • ad interaction data: which ads were shown, viewed or tapped, and diagnostic information.

Google uses this to serve and measure ads, to detect fraud and, where you have allowed it, to personalise ads. Third parties may use identifiers and IP addresses to collect information through ad serving in our games. Google describes this in its Mobile Ads SDK data disclosure, its advertising page and privacy policy.

Your ad choices:

  • In the EEA, the UK and Switzerland, the game shows Google's consent form (User Messaging Platform) when Google requires it. You can decline and still play the whole game. Google may then show non-personalised or limited ads, or no ads. You can change your choice at any time in the game under Settings → Privacy Options.
  • In US states with privacy laws, the game can show Google's "Do Not Sell or Share My Personal Information" option. You can reopen it from Settings → Privacy Options.
  • On any Android device you can reset or delete your advertising ID and opt out of ads personalisation under Settings → Google → Ads (or Settings → Privacy → Ads). Deleting the ID stops personalised ads across apps.
  • Google's Ads Settings controls personalisation for signed-in Google accounts.

Ads lead to third-party sites and apps with their own privacy practices. If an ad looks inappropriate or misleading, tell us through the contact form with the game name and what the ad showed, and we will report it to Google.

5. Children and age

Our games and this website are made for a general audience aged 13 and above and are not directed at children. We do not knowingly collect personal data from children under 13. Our games are listed on Google Play for ages 13 and over, are not designed for children, and limit ad content to a PG rating. If you believe a child has sent us personal data, contact us and we will delete it.

If you are under 18 (a "child" under Indian law), use our games only with the consent of a parent or guardian. Parents can turn off ads personalisation and reset the advertising ID in the device settings described in section 4, and can use Google Play's parental controls. The website contact form should be used by adults; a parent or guardian can write on a younger player's behalf.

6. Your rights and choices

Wherever you live, you can ask us to:

  • tell you what personal data we hold about you (for most people: only the emails you sent us);
  • correct or delete it;
  • withdraw consent for personalised ads (section 4);
  • raise a grievance about how we handled your data.

Use the contact form and choose "Privacy or data request". We verify requests by replying to the email address the data is linked to. We aim to respond within 30 days and will never take longer than the law allows.

7. India: the Digital Personal Data Protection Act, 2023

We are based in India and treat the DPDP Act, 2023 and the DPDP Rules, 2025 as our baseline, including obligations that come into force in stages. In particular:

  • Notice and consent. This policy and the in-game and on-site prompts are the notice. contact-form data is processed for the purpose you contacted us about; ads are served under Google's consent and settings described above. Consent can be withdrawn as easily as it was given.
  • Purpose limitation and minimisation. We collect the least data needed for each purpose and nothing for resale. We do not sell personal data.
  • Rights of the Data Principal. Access, correction, erasure, grievance redressal and the right to nominate a person to exercise these rights, as set out in section 6.
  • Grievance officer. Vivek Kumar, reachable through the contact form. If you are not satisfied with our response you may approach the Data Protection Board of India.
  • Children. See section 5. We do not undertake tracking or targeted advertising directed at children.

8. EEA, UK and other regions

EEA, UK and Switzerland. Our legal bases are consent (analytics; personalised ads, collected through the in-game consent form), legitimate interests (keeping the site and games secure, answering your messages, showing non-personalised ads) and legal obligations. You have the rights to access, rectification, erasure, restriction, portability and objection, and may complain to your local supervisory authority. We have no EU representative; contact us directly.

United States. We do not sell personal information and do not use it for cross-context behavioural advertising ourselves. Ads personalisation is controlled through your device's ad settings and Google's controls.

Brazil, and elsewhere. Where local law gives you additional rights, we honour them on request.

9. Retention and deletion

  • Contact emails: kept for up to 24 months after the conversation ends so we can follow up on bugs and requests, then deleted. Privacy requests are kept as long as needed to show we handled them.
  • Game data: lives on your device; uninstalling the game deletes it.
  • Advertising data: held by Google under its own retention rules; resetting your advertising ID breaks the link to past data.

10. Security and international transfers

The website is served over HTTPS only, the contact endpoint is rate-limited and bot-checked, and our inbox is protected with two-factor authentication. No method is perfect; if we learn of a breach affecting you, we will tell you and the relevant authority as the law requires.

Our providers (Cloudflare, Google) operate servers worldwide, so your data may be processed outside India or your home country. They do so under their own safeguards, including standard contractual clauses for EEA and UK data.

11. Changes and contact

We update this policy when a game, a provider or the law changes. The "last updated" date at the top tells you when. Material changes to how a game handles data are reflected in that game's Google Play Data safety form before the update ships.

Questions: contact form. Developer: Vivek Kumar, BlueBurp Studio, India.

The full policy, including the website, is at blueburp.com/privacy.