Privacy Policy — Cannon Carnival

Effective date: 10 September 2026
Last updated: 10 September 2026

1. Who we are

ANPB FirstPoint Technologies Private Limited is a company incorporated in India.

• Developer name on Google Play: FirstPoint Studios
• Contact email: support@firstpointstudios.com
• Website: https://www.firstpointstudios.com

2. Information we collect

We collect only the information needed to run the game, save your progress, process purchases, and show advertising. We do not ask for or collect your contact list, SMS, precise location, microphone, camera, or files.

2.1 Information you provide

• Google Sign-In (optional). If you choose to sign in with Google, we receive your name, email address, profile picture, and Google account identifier through Firebase Authentication (a Google service). Signing in is optional; the game is playable without it.

2.2 Information collected automatically

• Game progress and settings. Your level progress, coins, boosters, and settings are stored locally on your device. They are associated with your account identifier when you sign in.
• Device and usage information. Through the Google software development kits (SDKs) embedded in the App (Firebase, Google Mobile Ads), the following may be collected automatically: device model, operating system version, app version, language, screen size, IP address (from which approximate/coarse location such as country may be inferred), install and session events, crash and diagnostic data, and app interaction events.
• Advertising identifiers. The App shows ads through Google AdMob, which may collect your device's Advertising ID and related signals to serve and measure ads (see Section 4).
• Purchase information. If you make an in-app purchase, the transaction is processed entirely by Google Play Billing. We receive confirmation of the purchase (product, order status) so we can deliver your items. We never receive or store your card number, UPI ID, banking credentials, or any other payment instrument details.

2.3 Information we do NOT collect

We do not collect: government identifiers, financial account details, health data, biometric data, precise GPS location, contacts, photos, or messages.

3. How we use information

We use the information described above to:

1. Operate the game and deliver its features (including downloading new levels from our servers);
2. Save and restore your game progress across sessions and, when signed in, across devices;
3. Process and deliver in-app purchases you make through Google Play;
4. Display advertising, including rewarded ads you choose to watch;
5. Measure performance, fix crashes, and improve the game;
6. Prevent fraud and abuse and enforce our terms;
7. Comply with applicable law.

We do not sell your personal information, and we do not use it for purposes unrelated to the App.

4. Advertising

The App displays ads served by Google AdMob (Google LLC). AdMob may use your Advertising ID and device information to serve ads and measure their performance. Depending on your device settings and applicable law, ads may be personalized or non-personalized.

5. Third-party service providers

We share information only with the service providers required to run the App, each acting under its own privacy policy:

We do not share personal information with any other third party, except: (a) when required by law, court order, or a governmental authority; (b) to protect our legal rights or the safety of users; or (c) in connection with a merger, acquisition, or sale of assets, in which case this Policy will continue to apply to your information.

6. Legal bases and Indian law

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, as applicable.

• Consent. By installing the App and, where applicable, choosing to sign in with Google, you consent to the processing described in this Policy. You may withdraw consent at any time by signing out, uninstalling the App, or contacting us (Section 10). Withdrawal does not affect the lawfulness of processing before withdrawal.
• Notice. This Policy serves as the notice required under the DPDP Act, describing the personal data we process, the purposes, and how to exercise your rights.
• Legitimate uses. Certain processing (e.g., fraud prevention, compliance with law) is carried out as permitted under applicable law.

For users in the European Economic Area/UK, our legal bases are: performance of a contract (running the game), consent (personalized ads, where required), and legitimate interests (analytics, fraud prevention).

7. Your rights

Subject to applicable law (including the DPDP Act), you have the right to:

• Access a summary of the personal data we hold about you;
• Correction and updating of inaccurate or incomplete data;
• Erasure of your personal data and account (see Section 8);
• Grievance redressal through our Grievance Officer (Section 10);
• Nominate another individual to exercise your rights in the event of death or incapacity (as provided by the DPDP Act);
• Where GDPR applies: data portability, restriction of processing, and objection, plus the right to lodge a complaint with your supervisory authority.

To exercise any right, contact us at support@firstpointstudios.com. We will respond within the timelines prescribed by applicable law.

8. Data retention and deletion

• Game progress stored on your device is deleted when you uninstall the App or clear its data.
• Account data (Google Sign-In identity) is retained while your account is active.
• Deletion request: You may request deletion of your account and associated data at any time by emailing support@firstpointstudios.com from the email address linked to your account, with the subject "Delete my Cannon Carnival data". We will delete the data within 30 days, except where retention is required by law (e.g., purchase records for tax/accounting).
• Purchase records are retained by Google Play under Google's policies; we retain minimal transaction confirmations as required for accounting and fraud prevention.

9. Security, storage and international transfers

We use reasonable security practices and procedures as required under Indian law, including transport encryption (HTTPS/TLS) for all network communication and access controls on our systems. Our service providers (Google) maintain industry-standard certifications for their infrastructure.

Data processed by Google services may be stored on servers located outside India (including the United States). Such transfers are made to jurisdictions and under safeguards permitted by applicable law, including the DPDP Act.

No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we take commercially reasonable measures to protect your data.

10. Grievance Officer

In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, the contact details of our Grievance Officer are:

• Designation: Grievance Officer, ANPB FirstPoint Technologies Private Limited (FirstPoint Studios)
• Email: support@firstpointstudios.com
• Response time: We acknowledge grievances within 72 hours and endeavour to resolve them within 15 days.

11. Children

The App is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13 (or the age of digital consent in your jurisdiction). As required by the DPDP Act, we do not knowingly process children's data in a manner detrimental to their well-being, and we do not direct targeted advertising at children. If you believe a child has provided us personal data, contact us at support@firstpointstudios.com and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified within the App or on this page, and the "Last updated" date will be revised. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

13. Contact us

For any questions about this Policy or your personal data:

ANPB FirstPoint Technologies Private Limited (FirstPoint Studios)
Email: support@firstpointstudios.com
Website: https://www.firstpointstudios.com