Privacy Policy

Who we are

This privacy policy explains how Lumirun (“the app”) handles your personal data. The app is made and published by North Creative, a trade name of NN Videografie, registered with the Netherlands Chamber of Commerce (KvK) under number 64005666, the Netherlands (“North Creative”, “we”, “us”). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).

Questions about privacy? Email info@northcreative.app. We reply within two working days.

Summary

Lumirun does not require an account. You can play without signing up and without internet.
Your game progress and settings are stored on your device.
We use AppsFlyer to measure which ads lead to installs. Your advertising identifier (IDFA) is only used if you allow tracking when iOS asks.
We never sell your data.

What data we collect and how

Stored only on your device

Game data: your scores, progress and settings. These stay on your iPhone and are not sent to us. Deleting the app deletes them.

Collected automatically through the AppsFlyer SDK

Device and app data: device model, iOS version, app version, language, IP address and the identifier for vendors (IDFV).
App events: that the app was installed and opened, and basic in-app events such as starting a game.
Advertising identifier (IDFA): only if you tap Allow when iOS asks “Allow Lumirun to track your activity across other companies' apps and websites?”. If you choose Ask App Not to Track, the IDFA is not collected.

Collected by Apple

Crash reports: if you have chosen in iOS to share analytics with app developers, Apple shares anonymous crash and performance data with us.
Purchases: if the app offers in-app purchases, payment is handled entirely by Apple. We never receive your payment details.

How we use your data

To run the game (performance of a contract): save your progress and settings on your device.
To measure our advertising (our legitimate interest, and your consent where tracking is involved): find out which ads, for example on Snapchat, TikTok or Meta, led to an install, so we spend our marketing budget well.
To fix problems (our legitimate interest): use crash reports to find and fix bugs.

We do not show personalised ads inside Lumirun and we do not make automated decisions with legal effects on you.

Attribution: AppsFlyer receives the device and app data described above to attribute installs to ad campaigns.
Ad networks: AppsFlyer reports install events back to the ad network that showed you an ad, such as Snap Inc. (Snapchat), TikTok or Meta, so they can measure their campaigns. This only includes data linked to your IDFA if you allowed tracking.
Apple: Apple distributes the app and provides crash reports if you opted in.
Authorities: only when the law requires us to.

How partners protect your data

We only share personal data with the service providers named in this policy, and only the data they need to do their job for us. Each of them is bound by a written agreement (such as a data processing agreement) and their own privacy policy to protect your data with at least the same level of protection as described in this policy and as required by the App Store Review Guidelines. They may not use your data for their own purposes beyond what is described here.

Some providers are based outside the European Economic Area, for example in the United States. In that case your data is protected by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

We never sell your personal data.

How long we keep your data

Game data: stays on your device until you delete the app.
Attribution data at AppsFlyer: kept for up to 24 months, after which it is deleted or made anonymous. We only look at combined, campaign-level results.
Crash reports: kept for up to 12 months.
Support messages: kept for up to 12 months after your question is closed.

How to withdraw consent and delete your data

Stop tracking: go to iOS Settings › Privacy & Security › Tracking and switch off Lumirun. From then on, your IDFA is not shared.
Reset your advertising identifier: iOS lets you limit or reset ad tracking in its privacy settings.
Delete game data: delete the app from your iPhone.
Delete attribution data: email info@northcreative.app. Because Lumirun has no accounts, we may ask for your device's advertising identifier so we can find and delete your data at AppsFlyer.

Your rights and choices

Under the GDPR you have the right to:

Access the personal data we hold about you and receive a copy.
Correct data that is wrong or incomplete.
Delete your data. Email us and we will delete the data we or AppsFlyer hold about your device.
Withdraw consent at any time, for anything we do based on your consent. This does not affect processing before you withdrew it.
Object to processing based on our legitimate interests, and restrict processing.
Data portability: receive your data in a machine-readable format.

To use any of these rights, email info@northcreative.app. We may ask you to confirm your identity and will respond within one month. If you are not happy with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Children

The app is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, email info@northcreative.app and we will delete it.

Security

We protect your data with encrypted connections (HTTPS/TLS), access controls and secure hosting. Only the people who need access to run the app have it. No method of storage or transmission is 100% secure, but we take reasonable steps to keep your data safe and will inform you and the Dutch Data Protection Authority if a data breach affects you, where the law requires it.

Changes to this policy

We may update this policy when the app or the law changes. The date at the top of this page shows the latest version. If a change is significant, we will tell you in the app before it takes effect.

Contact

North Creative, a trade name of NN Videografie, registered with the Netherlands Chamber of Commerce (KvK) under number 64005666, the Netherlands.
Email: info@northcreative.app