Privacy Policy
What OvO collects when you play, why, who helps us run the Services, how long we keep data and the controls you have.
Effective: October 15, 2026 · Version 1.0 · GEN A LIMITED
1. Introduction
This Privacy Policy explains how GEN A LIMITED (“we”, “us”) collects, uses, shares and protects personal data when you use OvO.games on iPhone, iPad, Android and the web (the “Services”). GEN A LIMITED is the data controller.
2. Information we collect
2.1 Information you give us
| Data | Details |
|---|---|
| Account | If you sign in with Apple or Google: a unique account identifier, and the name and email address the provider shares with us (Apple lets you hide your email). Guests have an anonymous identifier only. |
| Profile | Username, chosen OvO avatar, status line, language, friend code. |
| Friends | Friend requests, accepted friends, challenges you send and receive. |
| Purchases | Transaction records for token packs and OvO Pass (product, price, currency, store, date, status). We never receive or store your full card number. |
| Support | Messages you send to support@gena.studio, reports and feedback, game ratings and tags. |
2.2 Information collected automatically
| Data | Details |
|---|---|
| Gameplay | Games opened, levels started, won or failed, stars, moves, time, boosters used, scores, ranks, missions, streaks, medals, tokens earned and spent. |
| Usage | Screens viewed, buttons tapped, session length and frequency, notifications opened, banners viewed and tapped. |
| Device | Device model, operating system, app version, browser, language, time zone, and identifiers such as an install ID and push-notification token. |
| Advertising | For free players: advertising identifiers (IDFA on iOS only if you allow tracking; Android advertising ID; web cookies) and ad events (requests, impressions, rewarded completions) handled by Google. |
| Network | IP address and the approximate location (country, region, city) derived from it. We do not collect precise GPS location. |
| Diagnostics | Crash reports, error logs and performance data. |
2.3 Information from others
Sign-in details from Apple or Google; purchase and subscription status from Apple, Google, Stripe and RevenueCat; and aggregate advertising and measurement data from Google.
3. How we use information
| Purpose | Legal basis (where GDPR-type laws apply) |
|---|---|
| Provide the games, save progress, sync across devices, run friends, leaderboards, leagues and tournaments | Performance of our contract with you |
| Process purchases, deliver tokens, manage OvO Pass and prevent payment fraud | Contract; legal obligation |
| Validate scores, detect cheating, multiple accounts and abuse | Legitimate interests (fair play and security) |
| Improve games and levels (for example finding a level that is too hard), plan daily missions and events, measure what works | Legitimate interests |
| Send notifications you allowed (daily egg, streak, friend activity) and in-app messages | Consent (device permission) / legitimate interests |
| Show ads to free players and measure them; personalised ads | Legitimate interests for non-personalised ads; consent for personalised ads where required |
| Answer support requests | Contract; legitimate interests |
| Comply with law and enforce our Terms | Legal obligation; legitimate interests |
4. AI and automated operations
We use AI systems, including models provided by Anthropic, to help operate OvO: to analyse aggregated gameplay statistics (for example level completion rates) so levels can be tuned, to plan daily missions and events, to draft notifications and to help answer support emails.
- AI agents work mainly on aggregated or pseudonymised data. When an AI assistant helps with a support email, it sees the content of that email and the account details needed to answer it.
- Decisions with significant effects on you — such as closing an account, reversing a purchase or a refund request — are reviewed by a person.
- Our AI providers process data on our instructions and are not permitted to use it to train their models.
6. Payments
App Store and Google Play purchases are processed by Apple and Google. Web purchases are processed by Stripe. We receive confirmation of the purchase and its status, never your full card details. We keep transaction records as required by tax and accounting law.
7. Advertising and your choices
- iPhone and iPad: we ask for permission to track through Apple’s App Tracking Transparency prompt. If you say no, ads are not personalised using your IDFA.
- EEA, UK and Switzerland: we ask for your consent for personalised ads through Google’s consent tool. You can change your choice in Me → Settings → Privacy choices.
- Android: you can reset or delete your advertising ID in your device settings.
- Web: we use cookies for sign-in and preferences; advertising cookies are set by Google only where permitted or consented to.
- OvO Pass members see no ads.
8. International transfers
We are based in Hong Kong and our service providers may process data in other countries, including the United States and Singapore. Where required, we protect transfers with safeguards such as standard contractual clauses.
9. How long we keep data
| Data | How long |
|---|---|
| Account, profile and progress | While your account is active. Deleted within 30 days after you delete your account. |
| Guest data | Deleted after 24 months without activity. |
| Gameplay and usage analytics | Raw events for up to 13 months; after that only aggregated statistics. |
| Purchase records | As long as tax and accounting law requires (usually 7 years). |
| Support messages | Up to 2 years after the case is closed. |
| Security and fraud logs | Up to 12 months, longer if needed for an investigation. |
10. Security
We protect data with encryption in transit, access controls, least-privilege accounts for staff and AI agents, audit logs and regular reviews. No system is completely secure; if a breach affects you, we will notify you and the authorities as the law requires.
11. Your rights and choices
Depending on where you live, you can ask to access, correct, export, delete or restrict the use of your personal data, object to processing based on legitimate interests, and withdraw consent at any time.
- In the App: edit your profile in Me; change notifications, ad and privacy choices in Settings; delete your account in Settings → Delete account.
- By email: write to support@gena.studio. We reply within 30 days and may need to verify your identity.
- You can also complain to your local data protection authority (for example the Privacy Commissioner for Personal Data in Hong Kong, or your EU/UK supervisory authority).
Residents of Vietnam: we process your data in line with Decree 13/2023/NĐ-CP on personal data protection, including obtaining consent where it is required and parental consent for children under 16. Residents of California and other US states: we do not sell or share personal information for cross-context behavioural advertising other than through the ad choices described in section 7, which you can switch off.
12. Children
OvO is not directed at children under 13 and we do not knowingly collect their personal data. Players between 13 and the local age of digital consent need a parent’s permission. If you believe a child under 13 is using OvO, contact support@gena.studio and we will delete the account.
13. Changes to this Policy
We will post updates here and change the Effective date. For material changes we will notify you in the App or by email before they take effect.
14. Contact
GEN A LIMITED
Workshop 1104, Block C, Hong Kong Industrial Centre
489–491 Castle Peak Road, Lai Chi Kok
Kowloon, Hong Kong
support@gena.studio