Privacy Policy

Overview

Grapplefish is a social virtual-reality fishing game. We process only the information reasonably necessary to provide features such as player accounts, cloud-saved progress, multiplayer rooms, optional voice chat, player safety, purchases, game analytics, and support.

Information we collect

The information we process depends on the features you use and the platform through which you access the game.

Information you provide

• Profile information, such as the display name and cosmetic choices you select.
• Communications, including information you provide in support requests, bug reports, safety reports, or other messages sent to us.
• Voice communications, when you choose to use in-game voice chat.
• Safety reports, including the selected report reason and information needed to identify the reporting player, reported player, game room, and application version.

Information collected when you play

• Account, platform, and device identifiers, including your Meta User ID, PlayFab player ID, multiplayer user ID, Android device identifier, or another identifier supplied by your device or VR platform. An Android device identifier may be used to create or recognize your PlayFab account. We use these identifiers to recognize your account and connect game services. We do not receive your Meta account password.
• Purchase and entitlement information, such as whether your Meta account owns the game or has access to an in-app purchase, downloadable item, or other entitlement. This may include a product identifier, purchase status, transaction or receipt identifier, and purchase token used to verify, grant, recover, or consume a purchase. Payment-card details are handled by the platform store and are not provided to Fiz Biz.
• Game and progression data, such as caught fish, inventory, virtual currency, statistics, achievements, preferences, equipped cosmetics, and saved progress.
• Multiplayer data, such as room or session information, display name, player state, avatar appearance, position and movement, held items, and gameplay interactions needed to synchronize a multiplayer session.
• Device and technical data, which may include device type, operating system, application version, language, IP address, network region, connection quality, crash information, and diagnostic logs.
• Usage and analytics data, such as first and recent login dates, daily login counts, purchase identifiers, purchased product or cosmetic, virtual-currency spending, and events needed to operate, secure, understand, and improve the game.
• Optional capture and streaming data, when you choose to use LIV/LCK recording or streaming features. Depending on the feature you use, this may include captured game video and audio, stream status, and information needed to connect to a selected streaming service. Recordings or screenshots saved locally remain subject to your device settings; a streaming provider processes content you choose to transmit under its own terms.

Information from other services

Your VR platform or linked service may provide an account identifier and other information permitted by your platform settings. Those companies process information under their own privacy policies.

How we use information

We use information to:

• create and recognize player accounts;
• verify ownership, purchases, downloadable content, and other entitlements;
• save and restore game progress, inventory, preferences, and cosmetics;
• provide multiplayer matchmaking, rooms, player synchronization, and optional voice chat;
• measure logins, retention, purchase activity, and feature usage to operate, maintain, troubleshoot, balance, and improve the Services;
• protect players, investigate reports, prevent fraud, cheating, abuse, and security incidents;
• respond to support and privacy requests; and
• comply with applicable law and enforce our terms.

Where applicable law requires a legal basis, we process information as necessary to provide the Services you request, for our legitimate interests in operating and securing the game, with your consent where required, or to comply with legal obligations.

How we share information

We do not sell personal information. We may disclose information in the following limited circumstances:

• Service providers. We use Microsoft PlayFab for player accounts, progression, events, and cloud game data; Photon for multiplayer networking and voice communication; Cloudflare for secure backend services, limited analytics, player-identity mapping, safety-report storage, and administration; Unity for the game engine and related technical services; Meta for VR platform functionality, entitlements, purchases, and its optional user-reporting service; and LIV/LCK for optional capture and streaming features. These providers process information for their services under their applicable terms and privacy policies.
• Other players. Information needed for social play—including your display name, avatar appearance, voice, movement, held items, and gameplay actions—may be visible or audible to players in the same session.
• Legal and safety reasons. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate abuse, enforce our terms, or protect the rights, safety, and security of players, Fiz Biz, or others.
• Business transfers. If Fiz Biz is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.
• At your direction. We may share information when you ask us to or give permission.

Voice chat and multiplayer

Voice chat is optional. When enabled, microphone audio is transmitted through Photon Voice to other players in your session so they can hear you. Other players may record or repeat what they hear using tools outside our control. Do not share personal or sensitive information in voice chat.

Multiplayer requires certain game-state information to be sent between players and networking services. You can avoid these multiplayer disclosures by not joining online rooms and can manage microphone permission through your device or platform settings.

You may mute another player locally and report player conduct through the in-game safety board. In-game reports may include the reporting and reported players' identifiers and names, the reason, room name, application version, and relevant account timestamps. Reports submitted through Meta's user-reporting service are also processed by Meta and delivered through Meta's reporting tools.

Data retention

We retain information only for as long as reasonably necessary to provide the Services, maintain your account and saved progress, meet legal obligations, resolve disputes, enforce agreements, and protect the security and integrity of the game.

Retention periods vary by type of information. Account and progression data, account-identity mappings, and purchase records may be kept while your account remains active or as reasonably needed to operate and secure the Services. In-game safety-report records stored in our Cloudflare reporting system are ordinarily deleted after approximately 32 days, while related security, rate-limit, audit, or PlayFab event records may be retained longer. Temporary multiplayer and voice data is generally processed for the live session, although limited connection, safety, or diagnostic records may be retained by us or our providers. Backup copies and records required for legal, fraud-prevention, accounting, or security purposes may remain for a limited period after a deletion request.

Your choices and privacy rights

You can control some processing by:

• disabling microphone access or choosing not to use voice chat;
• avoiding personal information in your display name and player communications;
• managing permissions and privacy settings through your VR platform; and
• contacting us to request access to, correction of, or deletion of information associated with your player account.

Depending on where you live, you may also have rights to obtain a copy of your information, object to or restrict certain processing, withdraw consent, or appeal a decision concerning a privacy request. We may need enough information to verify your identity and locate the relevant account before completing a request.

How to request deletion

All users, regardless of location, may request deletion free of charge. Email FizBizSupport@gmail.com with the subject Grapplefish Data Deletion Request. Include your Meta User ID or PlayFab player ID and the platform you use. Do not include your password.

After verifying the request, we will delete or de-identify information associated with the account from systems we control and instruct relevant service providers to process the request where applicable. We may retain limited information when required by law, necessary to complete the deletion, resolve disputes, enforce agreements, prevent fraud or abuse, protect security, or maintain a record of the request. We will explain if we cannot delete particular information.

Children's privacy

Grapplefish is intended for a general audience that may include adults, teens, and children who are permitted to use the Services. Children must use an age-appropriate or parent-managed account as required by Meta, the applicable VR platform, and local law. A parent or guardian should supervise a child's use of social and voice-chat features and review the platform's parental controls.

Where parental permission is required, we rely on the applicable platform's age and parent-management mechanisms and other legally valid consent mechanisms where necessary. We collect only the information described in this policy and use it to provide, secure, and support the Services. We do not use children's personal information for targeted advertising or sell it.

A parent or guardian may contact us to request access to, correction of, or deletion of personal information associated with their child, or to ask us to stop its further collection or use. We may take reasonable steps to verify the request and identify the relevant account. If we learn that we collected personal information from a child in a manner not permitted by applicable law, we will take appropriate steps to delete it.

Security and international transfers

We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no online service or method of transmission is completely secure, and we cannot guarantee absolute security.

Fiz Biz and our service providers may process information in countries other than the country where you live. Where required, we rely on recognized legal safeguards for international transfers of personal information.

Changes to this policy

We may update this Privacy Policy as the game, our practices, or applicable laws change. We will post the revised policy here and update the “last updated” date. If a change is material, we may provide additional notice through the game, its store listing, or an official community channel where appropriate.

Contact us

If you have a privacy question or want to exercise a privacy right, contact Fiz Biz at FizBizSupport@gmail.com.

For account-specific requests, include your player identifier and the platform you use so we can locate the correct account. Do not send your password or payment-card information.