Privacy Policy

Effective date: 15 November 2026

This Privacy Policy explains how LesFM LLC ("we", "us") handles personal data when you use any of our mobile apps that link to this page (each an "App") and this website. Our Apps are built on the same technology, so one policy covers them all. Where something applies only to some Apps (for example, signing in), we say so.

In short

1. Who is responsible

The controller of your personal data is LesFM LLC, 651 North Broad Street, Suite 201, Middletown, DE 19709, USA. Email: support@tagsy.ai.

2. What we collect and why

2.1 Data that stays on your device

Player names, game history, statistics, free-play counters, language, theme and other settings are stored only on your device (and in your device backups, if you use them). We don't collect them and can't see them. Deleting the App deletes them.

2.2 Data processed when you use an App

Purpose Data Who processes it Legal basis (EEA/UK)
Working out which privacy rules apply to you Your IP address, used once at launch to look up your country. Only the country code is returned to the App; the IP address is not stored. If the lookup fails, the App uses your device's Region setting instead. Us, via Cloudflare Legal obligation (to ask for consent where the law requires it) and legitimate interests
Checking your internet connection A request to a Google connectivity-check address, which receives your IP address Google Legitimate interests (showing you an error when you're offline)
Purchases and subscriptions A random App user ID, purchase and subscription history, product, price and currency, country, device model, OS and App version, and Apple's Search Ads attribution token. Payment details are handled by Apple only. Apple, RevenueCat Performance of a contract (delivering and restoring what you bought)
Remembering your privacy choices Your choices and the date you made them, stored on your device for 13 months Your device only Legal obligation
Security and fixing problems Technical information about errors and the device needed to keep the App working and prevent fraud Us and the providers above Legitimate interests
Analytics (optional in the EEA, UK and Switzerland) An app-instance ID, the screens you view and the actions you take (for example onboarding steps, paywall views and purchase results, rating prompts, language and vibration changes), session start times, device model, OS and App version, language, and approximate location (country or city) derived from your IP address. We don't collect the device's identifier for vendors (IDFV) and don't use this data for ad personalization. Google (Firebase Analytics) Consent
Ad measurement (optional in the EEA, UK and Switzerland) The AppsFlyer ID, the identifier for vendors (IDFV), IP address, device model, OS and App version, install and launch times, App events (for example paywall views and checkouts) and purchase, trial, renewal and refund events with their amounts. Your advertising identifier (IDFA) is used only if you also allow tracking in Apple's prompt. If you sign in, Meta receives a random account ID, never your name or email. AppsFlyer, Meta, Google, RevenueCat (which passes purchase events to AppsFlyer) Consent
Reminders If you allow notifications, reminders are scheduled locally on your device. No push token or other data is sent to us. Your device only Consent (iOS notification permission)
Ratings If you choose to rate an App, Apple's rating dialog or the App Store opens. Apple handles your review. Apple Legitimate interests
Support Your email address and whatever you write to us Us Legitimate interests (answering you)

2.3 If you refuse ad measurement

If you are in the EEA, UK or Switzerland and don't allow ad measurement, Meta is not started, RevenueCat doesn't pass your purchases to AppsFlyer, and AppsFlyer only counts the install in anonymized form without device identifiers. Apple's SKAdNetwork may still report aggregated, anonymous campaign results to advertisers; Apple designed it so that you can't be identified.

2.4 Outside the EEA, UK and Switzerland

Analytics and ad measurement are on by default. Apple's App Tracking Transparency prompt still decides whether your IDFA is used and whether Meta's SDK is started. You can opt out at any time as described in section 4.

2.5 Accounts (only in Apps that offer sign-in)

Some Apps let you create an account with email and password, Sign in with Apple or Google Sign-In. We then process your email address, a user ID, and the name and email address Apple or Google share with us (Apple lets you hide your real email). Passwords are stored only in hashed form. Accounts are hosted by Supabase. The legal basis is performance of a contract. You can delete your account at any time by contacting us, and in the App where the App offers this.

2.6 What we don't do

We don't collect your precise location, contacts, photos or health data, and we don't use automated decision-making that has legal or similarly significant effects on you.

3. Partners we share data with

We share personal data only with the providers below, who process it for the purposes in section 2, and when the law requires it (for example a court order), to protect our rights or users' safety, or as part of a merger or sale of our business.

Partner Role Privacy policy
Apple (Apple Inc., USA; Apple Distribution International Ltd., Ireland) App Store, payments, App Tracking Transparency, SKAdNetwork, Sign in with Apple apple.com/legal/privacy
RevenueCat, Inc. (USA) Purchase and subscription management revenuecat.com/privacy
Google (Google LLC, USA; Google Ireland Ltd.) Firebase Analytics, ad measurement, connectivity check, Google Sign-In policies.google.com/privacy
AppsFlyer Ltd. (Israel) and its affiliates Install and purchase attribution appsflyer.com/legal/privacy-policy
Meta (Meta Platforms Ireland Ltd.; Meta Platforms, Inc., USA) Ad measurement for Meta ads facebook.com/privacy/policy
Cloudflare, Inc. (USA) Hosting of this website and the country lookup cloudflare.com/privacypolicy
Supabase, Inc. (USA) Account hosting, only in Apps that offer sign-in supabase.com/privacy

Some partners, such as Google, Meta and AppsFlyer, may also use the data as independent controllers, for example to improve their own services, under their own privacy policies.

4. Your choices

5. How long we keep data

6. International transfers

Our partners may process data in the United States and other countries outside the EEA and UK. We rely on an adequacy decision (for example for Israel, or for U.S. companies certified under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions) or on the European Commission's Standard Contractual Clauses. You can ask us for a copy of the relevant safeguards.

7. Your rights

EEA, UK and Switzerland

You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You can also complain to your local data protection authority.

United States

Depending on your state, you may have the right to know what personal data we process, to access, correct and delete it, and to opt out of the "sale" or "sharing" of personal data and of targeted advertising. We don't sell personal data for money. Ad measurement with AppsFlyer and Meta may count as "sharing" for targeted advertising; you can opt out as described in section 4. We don't process sensitive personal data, and we won't treat you differently for using your rights. If we decline your request, you can appeal by replying to our answer.

How to use your rights

Email support@tagsy.ai. Because most of the data above is linked to random device IDs rather than your name, tell us which App you use and, if you can, the date you installed it, so we can find your data. We answer within one month (45 days for U.S. requests) and may ask you to confirm your identity.

8. Children

Our Apps are not directed at children under 13, and we don't knowingly collect personal data from them. In the EEA, UK and Switzerland, only users aged 16 or older may give consent to analytics and ad measurement. If you believe a child has given us personal data, contact us and we will delete it.

9. Security

Data is sent over encrypted connections, access to our partner accounts is restricted, and we collect as little as possible. No system is perfectly secure, but we will notify you and the authorities of a breach where the law requires it.

10. Changes to this policy

We will update this page when our practices change and change the effective date at the top. If the changes are significant, we will tell you in the App before they take effect and, where required, ask for your consent again.

11. Contact

LesFM LLC, 651 North Broad Street, Suite 201, Middletown, DE 19709, USA
support@tagsy.ai