Privacy Policy

Effective Date: October 14, 2026

This Consumer Privacy & Operational Transparency Guide clarifies the exact mechanisms by which Yimu Health Care (hereafter designated as "we," "us," or "our") curates, handles, and defends your personal information during your interactions with our mobile software, Dot Connect: Color Link, accessible via Google Play. Our prime objective in managing this digital ecosystem is to ensure a seamless gaming experience while rigorously maintaining operational transparency.

Taxonomy of Curated Information

We implement multifaceted data curation strategies to capture and organize your digital footprint, prioritizing strict information security. The sections below map out the specific data categories we log and our handling methodologies.

1.1 Automatically Logged Telemetry

The moment you run Dot Connect: Color Link on your hardware, our systems are engineered to automatically log the following data categories:

Networking Metadata: Your Internet Protocol (IP) routing address, precise timestamps of network connections, and fundamental device categorizations.

Hardware Specifications: The manufacturer of your device, exact model designations, installed operating system (Android/Google OS iterations), localized time metrics, and system UI language.

Unique Hardware Identifiers: Distinct alphanumeric strings permanently or temporarily assigned to your device, specifically your Google Advertising ID (GAID), Android Device ID, Google Play Games ID, and the core Google Account token.

Interactive Chronologies: Your gameplay advancement, peak performance scores, digital achievement markers, and data packets from multiplayer networking.

Economic & Interface Records: Ledgers of virtual currency consumption, real-world purchase receipts, custom game state configurations, and digital asset acquisitions.

1.2 Third-Party Identity Integration

If you choose to bypass our native systems and authenticate via federated networks, such as Google Play Games Services, we will extract permissible profile metadata (e.g., your public alias) through secure APIs. This extraction is wholly dependent upon your prior acceptance of that third party's privacy parameters.

We legally advise you to scrutinize the transparency documents of these external networks:

Google Play Games / Google Services: https://policies.google.com/privacy

By utilizing an external identity provider, you officially warrant that:

Your interaction fully aligns with the current Terms of Service published by that external provider.

You clear the legal minimum age threshold mandated by that platform within your sovereign jurisdiction.

Statutory Justifications for Data Utilization

Every data point we curate is tied to a specific operational mandate. We anchor all processing activities in recognized statutory frameworks:

Software Execution & User Care: To process commercial orders, resolve support tickets, and maintain network stability; to render the core game loop, load your custom states, and push critical binary updates and security advisories.

Statutory Justification: This is grounded in GDPR Article 6(1)(b) (contractual necessity). Processing is structurally inescapable to honor our user agreement and keep the application viable.

Product Evolution & Marketing Logic: To transmit curated promotional materials regarding Yimu Health Care or vetted allies; to memorize your preferences; and to utilize behavioral metrics to conceptualize new game mechanics and optimize our marketing and support apparatus.

Statutory Justification: Authorized via GDPR Article 6(1)(f) (legitimate interests). This sustains our valid corporate drive to refine our digital products and elevate consumer satisfaction.

Precision Programmatic Advertising: To display highly relevant commercial advertisements to players who have actively allowed our advertising partners to read their hardware identifiers.

Statutory Justification: Equally validated by GDPR Article 6(1)(f). This ensures our legitimate commercial viability through optimized programmatic ad placements.

Data Preservation and Lifecycles

Your personal records remain active in our databases exclusively for the lifespan necessary to render the game, fulfill legal audits, and navigate potential litigation. In edge cases involving contract disputes, infrastructural health, statutory holding regulations, or security forensics, we retain the jurisdiction to freeze specific data blocks for a legally compliant extension.

Concurrently, stripped and aggregated usage metrics used for internal dashboarding are routinely subjected to rapid deletion cycles, unless a severe security threat requires a prolonged preservation window.

External Dissemination Protocols

Honoring your transparency rights and acting strictly under GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may establish secure pipelines to share your data with external organizations in these scenarios:

Operational Collaborators: For the deployment of integrated services, legal compliance workflows, corporate mergers, or any initiative where you have supplied a positive opt-in.

Judicial and Regulatory Actors: In the event of a critical policy violation, or if binding legal decrees compel us to unveil data to protect the physical safety, intellectual property, or legal integrity of Yimu Health Care and the general public.

The Global Player Base: Consequent to your active participation in server-side matchmaking, digital forums, or global ranking ladders.

4.1 Dissemination to Ad-Tech Syndicates

Contingent upon your explicit consent as defined by GDPR Article 6(1), we will broadcast your hardware identifiers to advertising syndicates to power tailored ad targeting. Our integrated roster of ad-tech partners encompasses:

Applovin Corporation: https://www.applovin.com/privacy/

AdColony: https://yandex.com/legal/international_ads_privacy_policy

Amazon Publisher Services: https://www.amazon.com/privacyprefs

Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/

Google LLC: https://policies.google.com/privacy

Google Admob: https://support.google.com/admob/

Unity Technologies: https://unity3d.com/legal/privacy-policy

IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf

Vungle, Inc.: https://vungle.com/privacy/

Fyber: https://www.fyber.com/privacy-policy/

InMobi: https://www.inmobi.com/privacy-policy/

Notice: This Transparency Guide does not dictate the downstream data logic of these external firms. Please navigate to their respective privacy portals to audit their internal mechanics.

4.2 Technical Sub-Processors

To prevent server bottlenecks and guarantee networking stability, we lease processing power and analytic dashboards from specialized enterprise vendors:

Firebase (Google LLC): https://firebase.google.com/support/privacy

Adjust: https://www.adjust.com/terms/privacy-policy/

Protection of Minors (Under 13)

The Dot Connect: Color Link application is emphatically not compiled for, nor commercially targeted at, individuals beneath 13 years of age. We enforce a zero-tolerance filter against the intentional curation of personally identifiable information from this demographic. Upon verifying that restricted data has bypassed our safety nets, immediate database scrubbing scripts will be executed. Custodians identifying an unauthorized data transmission by a minor must contact our support desk immediately for intervention.

Digital Safeguards

We deploy commercially resilient cryptographic standards to encapsulate your personal records. Nevertheless, the digital community must concede that no cloud storage framework or internet transmission is flawlessly impenetrable. As such, we cannot issue an absolute legal warranty against sophisticated data exfiltration.

Device-Level Interventions (Push)

Provided you have granted the requisite OS permissions, we may push system alerts, promotional offers, and maintenance logs directly to your Android/Google interface. You wield absolute authority to kill this authorization and block these payloads via the native notification manager inside your device’s settings.

Statutory Consumer Entitlements

8.1 European Economic Area (EEA) Protections

We SLA our privacy resolution desk to a standard one-month window. For heavily fragmented inquiries, GDPR Article 12 grants us the legal flexibility to delay resolution by an additional two months (three months total). We will proactively transmit an explanatory log regarding any such delay.

(1) Data Access Entitlement: Authorized by GDPR Article 15, you may petition for a granular readout of your retained records, processing motives, external recipients, and archival lifespans. A digital payload can be extracted, barring intellectual property conflicts.

(2) Processing Objection: Governed by GDPR Article 21, you can contest processing tied to "legitimate interests" (Article 6(1)(f)). We will halt active processing threads unless we establish overriding legal justifications. Objecting to direct marketing data usage remains an absolute right.

(3) Data Rectification: Under GDPR Article 16, you wield the authority to compel the overwrite of corrupted or incomplete database records.

(4) Processing Restriction: Per GDPR Article 18, you may mandate a system-level quarantine on the active processing of your data under narrowly defined legal parameters.

(5) Consent Revocation: Dictated by GDPR Article 7, if a workflow hinges upon your consent, you may nullify that consent instantly. This revocation is forward-looking and does not invalidate prior computational actions.

(6) Data Portability: Under GDPR Article 20, you possess the clearance to extract your personal files in a standardized, machine-readable format and route them to an alternate data controller.

8.2 California Resident Privileges (CCPA)

(1) Execution Timeline: We target a 45-day statutory turnaround for verifiable consumer inquiries. If technical complexities necessitate a prolongation (up to a 90-day absolute ceiling), a formal written status log will be dispatched.

(2) Retroactive Lookback: Evidentiary data disclosures provided to you are strictly limited to the 12-month trailing window preceding your formal inquiry.

(3) Opt-Out Directive: The CCPA enshrines your undeniable right to set a "Do Not Sell" command regarding your personal telemetry.

(4) Right to Know: You are granted full transparency regarding the exact data vectors we curate and our operational motives, as explicitly detailed in this Guide.

(5) Access to Ledgers: Twice every calendar year, completely free of charge, you may execute a demand for a comprehensive audit of the personal information logged over the trailing 12 months.

(6) Deletion Command: You can issue a mandate for the permanent wiping of personal data collected over the preceding 12 months, provided it does not trigger statutory exemptions (e.g., critical bug fixing, legal compliance).

Triggering Data Purges

Should your personal records no longer serve a functional requirement for our services, you possess the authority to mandate a permanent data purge. To trigger this systemic erasure protocol, please route your formal directive to the designated compliance email below.

Compliance Communications

For regulatory clarifications, security feedback, or the execution of your formal privacy rights, direct all correspondence to:

Contact Email: sisknxbxxt78902@gmail.com