Developer and data controller: CapitalCraft Studios
Last updated: 3 November 2026
Effective date: 20 October 2026
This policy explains how CapitalCraft Studios ("we", "our", or "us") processes information when you use the Money Tycoon mobile application ("Money Tycoon" or the "App") on Android or iOS. Money Tycoon is a simulation game. Balances, holdings, trades, and other financial values inside the game are virtual game data, not real bank or brokerage accounts.
Android stores game progress on your device using Room, DataStore, and protected preferences.
iOS stores game progress on your device using Core Data, UserDefaults, and protected preferences.
On both platforms this includes your player name, selected country and persona, virtual balances, businesses, properties, investments, orders, achievements, settings, tutorial state, and purchase entitlement state.
On first launch, the App automatically asks Firebase Authentication to create a random user ID. No email address is required for this anonymous account.
Android: You may optionally sign in to Google Play Games for Saved Games restore, and optionally link a Google account for Mogul Exchange / online identity. Linking Google is not Android empire backup. If you link Google, Firebase may receive the email address, provider user ID, display name, and authentication token supplied by Google. We do not receive your Google password.
iOS: You may optionally use Sign in with Apple to link your Firebase account for Mogul Exchange / online identity. That is not iCloud backup. When Google OAuth is configured on the build, Settings may also offer Link Google Account for the same Exchange / online identity path. Apple or Google may provide an email and provider user ID. We do not receive passwords. Google Play Games Saved Games are not available on iOS.
Android: Restore authority is Google Play Games Saved Games when you are signed in. Linking a Google account (Firebase Auth) is Mogul Exchange / online identity, not empire backup. Firestore gameplay snapshots are not the Android restore path and remain disabled by default. Play Games Saved Games snapshots may be written when Play Games sign-in is active.
iOS: Empire backup and restore use CloudKit / iCloud. Sign in with Apple (and optional Link Google when OAuth is configured) is Mogul Exchange / online identity, not iCloud backup. iOS does not use Google Play Games. Restore coverage on iOS is limited to the systems implemented in the current release; the App discloses restore limitations in Settings when applicable.
Play Games Saved Games snapshots (Android) and CloudKit / iCloud copies (iOS) hold empire restore data when those backup paths are used. Firebase may still hold identity, notification tokens, the Apple Search Ads attribution record (iOS, after consent), and Mogul Exchange / online records keyed to your Firebase user ID. Firestore gameplay snapshots are not the Android restore path.
Android: Google Play processes purchases. We receive purchase tokens, product identifiers, transaction status, and entitlement information needed to verify and deliver a purchase.
iOS: Apple App Store processes purchases through StoreKit. We receive transaction identifiers, product identifiers, and entitlement information needed to verify and deliver a purchase.
We do not receive full payment-card or bank-account details on either platform.
Firebase Cloud Messaging (Android) and Apple Push Notification service (iOS) may issue a per-installation token. When registered, the App may store the token with your Firebase user ID, locale, selected country, notification preferences, app version, device model, and OS version. In-app notification settings and OS permission controls determine whether notifications are shown. Server-side frequency controls limit engagement messages.
On Android, Google Play Games sign-in is optional. If used, the App may receive a Player ID and display name for authentication, achievements, Saved Games, and global leaderboards. The App may submit game statistics such as virtual net worth, business/property counts, passive income, prestige, achievements, trade profit, and virtual tax paid. These leaderboard scores are reported by the game client and are not verified from a server-owned gameplay ledger; the App labels that limitation on the leaderboard screen.
iOS: Google Play Games is not available on iOS. Empire leaderboards on iOS use on-device records and, when online features are enabled, Firestore-backed boards.
On both platforms, the App may show passive inline banner ads to free players on selected informational screens. It also offers rewarded ads and rewarded-interstitial bonus offers that play only after you deliberately choose to watch.
Google AdMob and enabled mediation partners may process an advertising or device identifier, your IP address and the approximate location derived from it, ad interactions, and diagnostic information about ad performance for ad delivery, measurement, frequency control, fraud prevention, and compliance. Depending on region and consent, ads may be personalized or non-personalized.
Android: The Google User Messaging Platform (UMP) stores and communicates your advertising consent choices. You can reopen privacy choices from Settings and reset or delete the Android advertising ID in system settings.
iOS: UMP presents advertising consent where required. Apple's App Tracking Transparency prompt controls access to the Identifier for Advertisers (IDFA) for cross-app tracking. You can change tracking permission in iOS Settings → Privacy & Security → Tracking, and reset the advertising identifier under Privacy & Security → Apple Advertising. The App's privacy manifest declares tracking and the AdMob tracking domain googleads.g.doubleclick.net.
Remove Ads and qualifying ad-free subscriptions suppress all ad formats. A banner-only pass suppresses passive banners for its purchased duration but does not suppress rewarded offers or other ad formats.
Potential mediation partners include Meta Audience Network, Pangle, Unity, Liftoff/Vungle, AppLovin, ironSource, Mintegral, InMobi, and Digital Turbine/Fyber. A partner receives an ad request only when selected by the AdMob mediation configuration and permitted by applicable consent signals.
Android: Firebase Analytics and Firebase Crashlytics may collect app interactions, crash logs, diagnostics, device information, and an anonymous user ID where privacy law requires consent (for example the EEA and UK), and may be enabled by default elsewhere. You can revisit consent choices from Settings.
iOS: Google Analytics for Firebase stays off until the app has received its remote configuration. In regions where privacy law requires consent (for example the EEA and UK), it is turned on only after you agree in the Google User Messaging Platform (UMP) consent form; elsewhere it is turned on by default. It is never turned on for players flagged as children (the child setting or an under-13 age answer). Advertising uses of your device's advertising identifier require your permission through Apple's App Tracking Transparency (ATT) prompt, which you can change in iOS Settings → Privacy & Security → Tracking; a "Do Not Sell My Data" choice keeps advertising uses off. Where privacy law requires consent, you can change your choice at any time in Settings → About → Manage Privacy Options. When on, it collects app-instance usage events (including first_open), in-app purchase events (product, price, currency), ad-impression revenue, and approximate location derived from your IP address. It also collects gameplay and app-usage events: the screens you open, the features you use and your progress in the game (for example career, business and finance milestones, daily claims and rewards, onboarding and tutorial steps and in-game choices), each recorded as a short fixed label, an item identifier from the game or a number, never text you typed; it also sets analytics properties such as a random test-group label used for game experiments. It also collects store and offer events: when you open the in-game store, which product you start to buy (the App Store product identifier), whether that purchase completes, is cancelled or fails (with a short failure reason such as "network error", never a message you typed), and whether you accept or dismiss the first-purchase offer. All of these events are keyed to a random app-instance ID, not to your account. If you installed the game after tapping an Apple Search Ads ad, the app also asks Apple, once per install, which ad led to the install (Apple's AdServices framework; this does not use the advertising identifier and needs no tracking permission). We keep whether the install came from an ad, the campaign, ad group and keyword identifiers, the Apple Ads organisation identifier, the click date, the country or region of the ad, and whether it was a first download or a re-download. The campaign, ad group and keyword identifiers and the yes/no answer are set as analytics properties. The full record is also saved to your player record in our cloud database, linked to your Firebase user ID, so that purchase revenue can be matched to the ad that brought you. It contains no name, email address, device identifier or advertising identifier, and it is deleted with your player record when you delete your account. Firebase Crashlytics crash reporting is off until the consent check has run. In regions where privacy law requires consent (for example the EEA and UK), it is turned on only after you agree in the consent form, including to storing and accessing information on your device; elsewhere it is turned on by default. When on, it collects crash logs and stack traces, the state of the app when it crashed, error reports from the app (email addresses, account IDs and purchase transaction IDs are removed before they are sent; nothing is kept from before the consent check allows it), and device and OS information (device model, OS and app version) with a random installation ID. It is not linked to your account and is not used for tracking or advertising. If you withdraw consent in Settings → About → Manage Privacy Options, crash reporting stops and reports still stored on your device are deleted. Third-party ad SDKs may still process limited diagnostic data when an ad is requested. Firebase Remote Config and Firebase App Check (including Apple App Attest where enabled) may process installation and integrity signals needed to deliver configuration and protect online features securely.
Optional Pro Trading screens may request public market prices from providers such as Alpha Vantage, Finnhub, or Alpaca. Requests use HTTPS and may expose ordinary connection information such as IP address and user agent to the provider.
Android: The Tycoon Card feature generates an image on your device. Money Tycoon does not upload the image. If you choose Share or Save, Android sends it to the destination you select.
iOS: The same feature uses the system share sheet. Money Tycoon does not upload the image; the destination you choose processes it under its own terms.
If you use Mogul Exchange chat, we process the messages you send (floor, direct messages and syndicates), reactions, your handle and display name, and any profile photo you upload. Photos are resized on your device before upload. This data is "Other User Content" and "Photos or Videos" in Apple's App Privacy terms, is linked to your account, and is used only to run the chat and to moderate it (automatic screening, reports and staff review). It is stored on our game server exchange.moneytycoon.duckdns.org, is visible to other players in the rooms you post in, and is deleted when you delete your account (Settings → Delete Account).
Birth year. Before your first chat post we ask, once, for the year you were born. We store only the year, linked to your account on the same server, to decide how chat works for you; it is not shown to other players and cannot be changed afterwards. If the answer means you may be under 13, chat becomes read-only (the public Floor only, no direct messages, syndicates or profile photo), any profile photo is removed, and ads on that device are requested with Google's child-directed treatment and without the App Tracking Transparency prompt. The answer is kept if you start a new game and is deleted when you delete your account. This is "Other Data Types" in Apple's App Privacy terms.
The iOS App declares the following collected data categories in PrivacyInfo.xcprivacy, consistent with this policy:
| Category | Linked to identity? | Used for tracking? | Primary purposes |
|---|---|---|---|
| Name | Yes | No | App functionality (optional Sign in with Apple) |
| Email Address | Yes | No | App functionality (optional Sign in with Apple) |
| User ID (Firebase uid) | Yes | No | App functionality (account and online identity) |
| Device ID (IDFA when permitted; Firebase app-instance ID; push token) | Yes | Yes | Third-party advertising, developer advertising, analytics, app functionality |
| Purchase History | Yes | Yes | App functionality, analytics (in-app purchase measurement after consent) |
| Product Interaction | Yes | Yes | Analytics (first-party Firebase Analytics after consent, and SDK analytics), developer advertising, third-party advertising |
| Advertising Data | Yes | Yes | Third-party advertising, developer advertising, analytics (including ad-impression revenue) |
| Coarse Location (approximate, from IP address) | Yes | No | Analytics, developer advertising, third-party advertising |
| Gameplay Content | Yes | No | App functionality (cloud save, Exchange listings and bids) |
| Other User Content (chat messages) | Yes | No | App functionality (chat and moderation) |
| Photos or Videos (profile photos) | Yes | No | App functionality (chat profile and moderation) |
| Other Data Types (chat birth year) | Yes | No | App functionality (chat age rules) |
| Crash Data | No | No | App functionality (Firebase Crashlytics crash reports, after consent); analytics and third-party advertising (Google Mobile Ads SDK diagnostics) |
| Other Diagnostic Data | No | No | App functionality (Firebase Crashlytics device and error diagnostics, after consent); analytics, developer advertising and third-party advertising (Firebase and Google Mobile Ads SDK diagnostics) |
First-party Firebase Analytics data falls under the Device ID, Product Interaction, Purchase History, Advertising Data and Coarse Location rows above; the gameplay and app-usage events (screens, features used, progress) and the in-game store and offer events fall under Product Interaction and Purchase History, and the Apple Search Ads attribution (campaign, ad group and keyword identifiers) under Advertising Data. First-party crash reporting (Firebase Crashlytics, after consent) falls under the Crash Data and Other Diagnostic Data rows. The Google Mobile Ads SDK declares its own collection (including approximate location derived from IP address and ad diagnostics); those categories appear on the App Store privacy label alongside the table above.
We use Google Firebase, Google AdMob, mediation partners listed above, Apple (App Store, Sign in with Apple, iCloud / CloudKit, push notifications, App Attest), and on Android Google Play and Google Play Games. We do not sell personal information for money. Advertising identifiers and related data may be "shared" for cross-context behavioural advertising under some privacy laws when personalized advertising is permitted.
exchange.moneytycoon.duckdns.org runs Mogul Exchange, the Auction House, the Trading Floor and chat. It receives your account ID, sign-in token, trades and listings, and chat content.Provider policies include Google's Privacy Policy, Firebase Privacy and Security, AdMob privacy information, and Apple's Privacy Policy.
Local data remains until you reset it, clear app storage, delete the account, or uninstall. Cloud game data remains while the account is active or until deletion succeeds. Purchase records and entitlement evidence may be retained where required to prevent duplicate fulfillment, resolve disputes, or meet legal obligations. Apple or Google may retain store purchase history under their policies even after Money Tycoon account deletion. Firebase Crashlytics keeps crash reports and their associated installation identifiers for 90 days before deleting them (Firebase Privacy and Security).
This process requests deletion of the Firebase account, Firestore game data, server-authoritative exchange/rebirth records, registered notification data, and Money Tycoon-managed cloud saves, then clears local game data.
Android: If a recent Google reauthentication is required, the App will ask you to sign in again before continuing. Play Games snapshots may require separate cleanup through Google account controls.
iOS: Sign in with Apple reauthentication may be required before deletion completes. Google Play Games steps do not apply on iOS.
Email capitalcraftgames@gmail.com with the subject Money Tycoon account deletion request. Include the linked Apple or Google email or any player/account identifier you still have. Do not send a password or payment-card information. We aim to complete verified requests within 30 days.
App Store or Google Play purchase history, active/cancelled subscription records, platform achievements, fraud-prevention records, and records legally required for accounting or dispute handling may remain under applicable retention rules.
Reset Game starts a new playthrough and is not the same as Delete Account. Clear storage or uninstall removes local data but does not reliably delete cloud data.
Both platforms: Manage ad privacy choices and notification categories in Settings; request access, correction, export, restriction, objection, or deletion where applicable.
Android: Decline optional Google/Play Games linking; use Android advertising controls.
iOS: Decline ATT tracking; manage Sign in with Apple from Settings; use iOS advertising controls described above.
EEA/UK users may withdraw consent and complain to their local supervisory authority. California residents may request to know, correct, or delete covered information and may opt out of sharing used for cross-context behavioural advertising. We do not discriminate for exercising privacy rights.
Money Tycoon is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. Chat asks for a birth year before a player's first post; a player whose answer means they may be under 13 can only read the public Floor, cannot post, send direct messages, join syndicates or upload a photo, and is served child-directed ads without the tracking prompt (see Chat, Messages and Profile Photos above). If you believe a child provided information, contact us so we can investigate and delete it.
Service providers may process information in countries other than your own, including the United States. Where required, transfers rely on recognized safeguards such as adequacy decisions, the EU-US Data Privacy Framework, or standard contractual clauses.
We may update this policy as the App, providers, or legal requirements change. We will update the date above and provide additional notice for material changes when required.
CapitalCraft Studios
Email: capitalcraftgames@gmail.com
© 2026 CapitalCraft Studios. Money Tycoon is a virtual financial simulation game. Available on Google Play and the Apple App Store.