The short version
- No account needed. The App does not ask you to sign up or give us your name, email address or phone number.
- The camera never leaves your device. You play by moving your hands (and, in some games, your body) in front of the camera. Camera frames are analyzed on your device in real time. They are never recorded, saved, uploaded, or used for advertising or to identify you.
- The App is supported by ads. We and our advertising, analytics and attribution partners collect device and usage data. On iOS, ad partners can use your advertising identifier (IDFA) only if you allow tracking.
- No payments today. The App does not currently sell anything. If purchases are added later, Apple or Google will process them and we will never receive your card details.
- You are in control. You can manage camera access, tracking, ad personalization and notifications, and you can ask us to access or delete your data.
This Privacy Policy explains how the Magic Hand Challenge mobile game for iOS and Android (also displayed as “Magic Hand Challenged” on some devices and in some languages), including any version published under a different name (the “App”), collects, uses, shares and protects information about you. By using the App you acknowledge the practices described here. Please also read our Terms of Service.
1. Who we are
The App is developed and published by GLANRA COMPANY LIMITED (“GLANRA”, “we”, “us”, “our”), located at 37/2/6 Street No 12, Quarter 3, An Khanh Ward, Ho Chi Minh City, Vietnam. For the purposes of data protection laws such as the EU/UK General Data Protection Regulation (GDPR), we are the controller of the personal data described in this policy, except where a third party acts as an independent controller (see Section 10).
This notice is the App-specific privacy notice referred to in the GLANRA Privacy Policy, which applies to all of our apps. For this App, this notice is the complete description of our practices; where the two differ, this notice applies.
You can reach us at any time at [email protected].
2. Information we collect
2.1 Information stored on your device
The App keeps a few settings in its own storage on your device so it works the way you left it: your chosen language, whether you have already seen the introduction and the rating prompt, how many times you have opened the App, your notification setting and the schedule of upcoming game reminders, and the game content packs you have downloaded (see Section 4). This information stays on your device and is not sent to us.
2.2 Information you send us
If you send us feedback (from “Send Feedback” in Settings, or after rating the App 1 to 3 stars), your email app opens with a message that you can review and edit before sending. If you send it, we receive your email address, your message, the star rating and the reasons you selected, plus the details the App pre-fills: operating system version, language and region setting, and App version. We use this only to respond and to improve the App.
2.3 Information collected automatically
When you use the App, we and our service providers (listed in Section 10) automatically collect:
- Device and app information: device model, operating system and version, App version, language, country or region, time zone, screen size, network type, and similar technical data.
- Identifiers: your device’s advertising identifier (the IDFA on iOS, only if you allow tracking; the Advertising ID on Android, unless you have deleted it), the identifier for vendor (IDFV) on iOS, app instance and installation IDs generated by Firebase and AppsFlyer, push notification tokens, and IDs generated by advertising SDKs.
- Usage data: which screens you open and how long you stay on them, which game you choose, buttons you tap (for example Settings, Retry or Home), the language you pick, how far you scroll through the game list, and when the App could not connect to the internet. We do not collect your scores together with your identity.
- Advertising data: which ads were requested, shown and clicked, estimated ad revenue, and attribution data (for example, which ad campaign led to the App being installed).
- Diagnostics: crash reports, error logs and performance data.
- Approximate location: a coarse location (such as country, region or city) derived from your IP address. It is used to show the right consent message, to serve and measure ads, and for aggregated analytics. The App does not request or use your precise (GPS) location.
- Push notification token: if notifications are enabled, Firebase Cloud Messaging and Apple (or Google) issue a token so we can send you notifications. The token is used only to deliver notifications.
- Content delivery data: game packs and introduction videos are downloaded from our content servers. Those servers receive standard request data (such as IP address and device and App information) that is needed to deliver the content.
2.4 What we do not collect
The App does not access your photos, contacts, calendars, health or fitness data, or precise location. It does not record video or audio, and it does not use face recognition or any other method to identify anyone.
3. Camera and hand/body tracking
- Why the App needs the camera. The games are controlled by moving your hands, and in some games your body, in front of the front camera. The live camera image is shown on screen while you play.
- How tracking works. On-device machine-learning models (Google MediaPipe) find the position of your hands or body in each camera frame. This produces temporary position points (for example, where your fingertip is) that exist only in your device’s memory while a game is running. Neither the camera frames nor these points are recorded, stored, uploaded, shared with anyone, or used to identify you, for advertising, for marketing, or for data mining.
- Microphone. The iOS App does not use the microphone. The Android App may ask for microphone permission together with camera permission, but it does not record, store or send any audio.
Camera access is optional. You can turn it off at any time in your device settings, but the games cannot be played without it.
4. Game content downloads
To keep the App small, the pictures, sounds and animations of each game are downloaded the first time you open that game, and the introduction videos are streamed from our content servers. The downloaded packs are stored in the App’s storage on your device (on iOS they are excluded from your device backups) and are removed when you uninstall the App. Downloads contain only game content; nothing about you is uploaded in this process beyond the standard request data described in Section 2.3.
5. Notifications
With your permission, the App can show two kinds of notifications:
- Game reminders are scheduled locally on your device (for example, a daily suggestion of a game to play). They are created by the App on your device and do not send any information to us.
- Push notifications (such as news about new games) are sent through Firebase Cloud Messaging and Apple Push Notification service or Google Play services, using the push token described in Section 2.3.
You can turn notifications off at any time in the App (Settings › Notifications) or in your device settings. Turning them off in the App cancels scheduled reminders and deletes the push token.
6. How we use information
We use information for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the table also shows our legal basis under the GDPR.
| Purpose | Examples of data used | Legal basis (EEA/UK) |
|---|---|---|
| Provide the games: hand and body tracking, download game packs, remember your settings | Camera input (processed on device only), device and app info, settings stored on your device | Performance of our contract with you (our Terms) |
| Show ads that keep the App free | Identifiers, device info, approximate location, advertising data | Consent for personalized ads and for accessing information on your device where required; legitimate interests for non-personalized ads, frequency capping and fraud prevention |
| Measure and attribute marketing campaigns | Identifiers, install and usage events, advertising data | Consent where required; otherwise legitimate interests |
| Understand usage and improve the App and its games | Usage data, device info, approximate location | Legitimate interests; consent where required |
| Fix crashes and improve performance | Diagnostics, device info, identifiers | Legitimate interests |
| Send push notifications and show game reminders | Push token, language, usage data (reminders are created on your device) | Consent (your notification permission) |
| Configure the App remotely (for example, the list of games and ad settings) and test changes | Device and app info, app instance ID | Legitimate interests |
| Respond to feedback and support requests | Your email, message, rating and the pre-filled device details | Legitimate interests; performance of contract |
| Keep the App safe, prevent fraud and abuse, enforce our Terms, and meet legal obligations | Any of the above, as needed | Legitimate interests; legal obligation |
We do not sell your personal information for money. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
7. Advertising and tracking
The App shows banner, native, interstitial, app-open and rewarded ads, served by Google AdMob and, on Android, also by AppLovin MAX. These services can fill ads through other ad networks (“mediation”), which are listed in Section 10. These partners may collect the data described in Section 2.3 to serve ads, limit how often you see the same ad, measure performance, and detect fraud. If you have allowed it, they may also use this data to show ads that are personalized to your interests.
- iOS – App Tracking Transparency. The App asks for your permission before your data is used to track you across apps and websites owned by other companies. If you choose “Ask App Not to Track”, the IDFA is not shared, and you will still see ads, but they will be less relevant. You can change this at any time in Settings › Privacy & Security › Tracking.
- Android – Advertising ID. You can reset or delete your Advertising ID in your device settings (usually Settings › Privacy › Ads, or Settings › Google › Ads).
- Consent in the EEA, UK, Switzerland and some U.S. states. Where required, the App shows a consent message powered by Google’s User Messaging Platform (which uses the IAB Transparency & Consent Framework in the EEA/UK) before personalized ads are served. You can review or change your choices through the privacy settings option in the App, where available, or by contacting us.
Ads are provided by third parties. We do not control their content or the websites and apps they link to, and those have their own privacy policies.
8. Purchases
The App does not currently offer in-app purchases. If we add them in the future, they will be processed by the Apple App Store or Google Play under their terms and privacy policies. We will not receive or store your payment card, bank account or billing address details. The store would tell us only what you bought (product, price and currency, transaction identifiers, purchase dates and status), which we would use to unlock and restore features, prevent fraud, measure revenue, and meet legal obligations. We will update this policy before that happens.
10. Third-party services we use
This list reflects the current versions of the App and may change as we add or remove partners. Not every partner is used on every platform.
| Provider | Purpose | Platform | Privacy policy |
|---|---|---|---|
| Google AdMob | Advertising, ad mediation | iOS, Android | policies.google.com/privacy · How Google uses data from apps |
| Google User Messaging Platform | Consent management | iOS, Android | policies.google.com/privacy · How Google uses cookies and IDs in advertising |
| Google Firebase (Analytics, Crashlytics, Cloud Messaging, Remote Config, Cloud Firestore) | Analytics, crash reporting, push notifications, remote configuration | iOS, Android | firebase.google.com/support/privacy |
| Google MediaPipe | On-device hand and body tracking (no data leaves your device) | iOS, Android | Runs entirely on your device |
| AppsFlyer | Install attribution, ad revenue and campaign measurement | iOS, Android | appsflyer.com – Services Privacy Policy |
| AppLovin (incl. AppLovin MAX on Android) | Advertising, ad mediation | iOS, Android | legal.applovin.com/privacy |
| Chartboost | Advertising (mediation) | iOS, Android | Chartboost (LoopMe) Privacy Notice |
| Liftoff Monetize (Vungle) | Advertising (mediation) | iOS, Android | liftoff.ai/privacy-policy |
| Meta Audience Network | Advertising (mediation) | iOS, Android | facebook.com/privacy/policy |
| Mintegral | Advertising (mediation) | iOS, Android | mintegral.com/en/privacy |
| Unity Ads | Advertising (mediation) | iOS, Android | Unity App User Privacy Policy |
| ironSource / Unity LevelPlay | Advertising (mediation) | iOS | Unity App User Privacy Policy |
| Pangle (ByteDance) | Advertising (mediation) | iOS | Pangle End User Privacy Policy |
| myTarget / MyTracker (VK) | Advertising and ad measurement | iOS | VK Ads (myTarget) Privacy Policy · MyTracker Privacy Policy |
| DT Exchange – Digital Turbine | Advertising (mediation) | Android | digitalturbine.com/legal/privacy-policy |
| Bigo Ads | Advertising (mediation) | Android | Bigo Ads Privacy Policy |
| Apple App Store / Google Play | Distribution, ratings, ad attribution | iOS / Android | apple.com/legal/privacy · policies.google.com/privacy |
11. Data retention and deletion
| Data | Where it is kept | How long |
|---|---|---|
| Settings and downloaded game packs | Your device | Until you uninstall the App. Settings may remain in your own device backups; game packs are not backed up on iOS. |
| Camera frames and hand/body position points | Your device’s memory only | Discarded immediately, frame by frame, while you play. Never stored. |
| Analytics data | Google Analytics for Firebase | Event-level data is kept for up to 14 months. After that, only aggregated reports that do not identify you are kept. |
| Crash reports | Firebase Crashlytics | About 90 days |
| Content server logs | Our content servers or hosting provider | Only as long as needed to deliver content, keep the service secure and fix problems |
| Attribution and advertising data | AppsFlyer and advertising partners | According to each provider’s retention policy (see Section 10) |
| Support emails | Our mailbox | As long as needed to handle your request, and then up to 24 months, unless you ask us to delete them sooner |
When data is no longer needed, we delete it or make it anonymous.
12. Your choices and controls
- Camera: turn camera access on or off in your device settings.
- Tracking and ad personalization: see Section 7 (App Tracking Transparency on iOS, Advertising ID on Android, and the consent message where shown).
- Notifications: turn push notifications and game reminders off in the App under Settings › Notifications, or in your device settings, at any time.
- Local data: uninstalling the App removes its settings and downloaded game packs from your device.
- Withdraw consent: you can withdraw any consent at any time. This does not affect processing that already took place.
13. Your privacy rights
Depending on where you live, including under the GDPR, the UK GDPR, Vietnam’s personal data protection law and U.S. state privacy laws, you may have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing, including processing based on legitimate interests and direct marketing;
- receive your data in a portable format;
- withdraw consent at any time; and
- complain to your local data protection authority.
How to make a request. Email [email protected] with the subject “Privacy Request”. The App has no user accounts, so please include details that help us find your data, for example the email address and approximate date you contacted us. We may ask you to verify your request. We will respond within one month, or within the time required by the law that applies to you. Most usage and advertising data is held by our partners under device identifiers that we cannot link to you. In that case, we will explain how to contact the partner directly, and you can also use the device controls in Section 12.
14. U.S. state privacy notice
This section applies to residents of California and other U.S. states with comprehensive privacy laws.
- Categories we collect: identifiers (such as advertising and device IDs); internet or other electronic network activity (App usage and ad interactions); approximate geolocation; and inferences that advertising partners may draw about your interests. Camera input is processed only on your device and is not collected by us. We collect these from your device and from our partners, for the purposes described in Section 6.
- “Sale” and “sharing”: we do not sell personal information for money. However, allowing ad partners to collect identifiers and usage data for personalized, cross-context behavioral advertising may count as a “sale” or “sharing” under some state laws. To opt out, decline personalized ads in the consent message where it is shown, choose “Ask App Not to Track” on iOS, delete your Advertising ID on Android, or email us with the subject “Do Not Sell or Share”.
- Sensitive information: we do not collect biometric identifiers, and we do not use or disclose sensitive personal information to infer characteristics about you.
- Your rights: you may request to know, access, correct and delete your personal information, and to opt out as described above. You may use an authorized agent. We will not discriminate against you for exercising your rights.
- Retention: see Section 11.
15. Children
The App is a general-audience game and is not directed to children under 13, or under the minimum age required in your country to consent to data processing (for example, 16 in some EEA countries). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
16. Security
We use reasonable technical and organizational measures to protect information, including encrypted connections (HTTPS) and integrity checks for downloaded game packs, and reputable, secure cloud providers. Camera data never leaves your device. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
17. International transfers
We are based in Vietnam. We and our service providers may process information in countries other than the one where you live, including the United States and other countries where our providers operate. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.
18. Changes to this policy
We may update this policy from time to time, for example when we add features or partners. We will change the “Last updated” date above and, when changes are significant, give you notice in the App or on this page. If you keep using the App after an update, the updated policy applies.
19. Contact us
If you have questions or requests about this policy or your data, contact:
GLANRA COMPANY LIMITED
37/2/6 Street No 12, Quarter 3, An Khanh Ward, Ho Chi Minh City, Vietnam
Email: [email protected]
Telephone: +84 348 635 424
Support: glanraltd.com/support