Privacy Policy | Nyblecraft

1. Introduction and scope

Nyblecraft ("Nyblecraft", "we", "us" or "our") develops, publishes, operates and maintains software, digital products, games, websites and online services, and may provide software development, engineering, consulting, testing, maintenance and related technology services.

This Privacy Policy describes how we may collect, use, disclose, store and otherwise process personal information when you visit our websites, use our software, games, applications or online services, communicate with us, purchase our products, or interact with our business.

It is intended to provide a common privacy framework for Nyblecraft's current and future websites, applications, games, products and services worldwide. Not every activity or category of information described here applies to every product. A product may provide a supplemental privacy notice or in-product disclosure describing its specific practices. Where required by law, a supplemental notice, consent request or separate agreement will apply to the relevant processing.

This Policy does not replace any rights, notices, consents or obligations that cannot lawfully be waived or modified. If a separate agreement or product-specific notice applies, read it together with this Policy.

2. Who we are and how to contact us

Business / trading name:: Nyblecraft
Legal entity name:: Nyblecraft Pty Ltd
Website:: https://nyblecraft.com
Privacy contact:: support@nyblecraft.com

The identity of the organisation legally responsible for processing information may depend on the relevant service, jurisdiction and relationship. In client engagements, Nyblecraft may process information on behalf of a client under a contract or documented instructions, while the client may determine the purposes of that processing.

3. Information we may process

The information involved depends on how you interact with us and the features you use. We may process the following categories where relevant.

3.1 Information you provide

This may include your name, email address, telephone number, company and business contact details, messages, support requests, feedback, survey responses, account details, preferences, and other information you choose to provide.

For business services, this may also include project requirements, communications, technical documentation, test data and other information reasonably necessary to discuss, deliver or support an engagement.

3.2 Device, log and technical information

Depending on the website, product or service, we or our service providers may receive information such as IP address, device and operating-system type, application or browser version, language, time zone, network information, referring pages, timestamps, diagnostic identifiers, and general or approximate location inferred from technical information.

Servers, operating systems, app stores, hosting platforms and integrated software components may generate technical logs as part of their normal operation.

3.3 Usage, product and diagnostic information

Depending on the product, we may process usage events, feature interactions, session information, preferences, settings, saved progress, performance metrics, crash reports, error logs, troubleshooting information and other diagnostic data. Some information may be stored locally on your device; other information may be transmitted to our servers or service providers to provide features, synchronise data, diagnose faults, protect security or improve performance.

3.4 Transactions and entitlements

Where a product offers purchases, subscriptions, paid features or other transactions, relevant providers may process payment and transaction information. We may receive limited information such as transaction identifiers, purchase status, product entitlements, subscription status, refunds or records needed for support, fraud prevention and accounting. We do not necessarily receive or store full payment-card details.

3.5 Communications and business relationships

If you contact us, request information, subscribe to updates, enter into a contract or otherwise engage with our business, we may process contact details, correspondence, preferences, service history and related business records.

3.6 Information from other sources

Where lawful and relevant, we may receive information from app stores, operating-system providers, hosting and cloud providers, analytics or advertising providers, payment processors, clients, business partners, publicly available sources and other service providers.

3.7 Sensitive or special-category information

We do not intentionally seek sensitive or special-category personal information through general-purpose products or contact channels unless it is necessary for a defined purpose and lawful to process. If a service requires such information, we will provide additional information and obtain consent or satisfy another applicable legal condition where required.

Please do not submit sensitive information through general contact channels unless it is necessary and an appropriate method of handling it has been agreed.

4. How and why we use information

Depending on the relevant service and legal basis, we may process information to:

provide, operate, maintain and support websites, software, games, applications and other services;
deliver requested functionality, remember settings, store or synchronise progress, and manage product entitlements;
respond to enquiries, provide customer support and communicate with users, customers and clients;
develop, test, troubleshoot, secure and improve software, reliability, accessibility and user experience;
understand usage and performance, prepare aggregated statistics and evaluate product features;
provide or measure advertising, attribution or promotional activity where a product uses these features and the processing is permitted;
process transactions, verify purchases, prevent fraud and maintain appropriate financial or business records;
deliver contracted development, consulting, testing, maintenance and other business services;
monitor, investigate and prevent abuse, fraud, security incidents and violations of applicable terms;
comply with applicable laws, regulatory requirements, lawful requests and record-keeping obligations;
establish, exercise or defend legal claims and protect the rights, safety and property of Nyblecraft, users and others; and
carry out another purpose disclosed when information is collected or otherwise permitted by law.

Where a law requires a legal basis for processing, we will rely on an applicable basis, which may include consent, performance of a contract, compliance with a legal obligation, protection of vital interests, a task carried out in the public interest where applicable, or legitimate interests where permitted and appropriately balanced against individual rights.

We do not treat this list as permission to use information for any purpose whatsoever. We will provide further notice or obtain consent where required for a new or materially different use.

5. Cookies, local storage, SDKs and similar technologies

Our websites and some products may use cookies, local storage, software development kits (SDKs), pixels, device or advertising identifiers, and similar technologies. They may support core functionality, remember preferences, maintain sessions, understand usage, diagnose faults, protect security, measure campaigns or support advertising.

The technologies and purposes vary by product. Some technologies may be necessary to provide a service you request; others may require consent or offer opt-out rights under applicable law. Where required, we will provide appropriate notices and obtain consent before enabling non-essential technologies.

You may be able to control cookies through browser settings and certain device-level identifiers or tracking permissions through operating-system settings. Disabling some technologies may affect functionality. Device settings may not opt you out of every form of processing by every provider.

6. Analytics, advertising and third-party integrations

Some websites, applications and products may use third-party services for analytics, crash reporting, attribution, advertising, hosting, authentication, customer support, payment processing, security or other functionality.

Depending on the integration, a provider may collect information directly from your device or receive information from Nyblecraft. Those providers may process information under their own privacy terms and roles, subject to applicable law and our contractual arrangements.

The providers used and information shared can differ between products and may change as products evolve. Where required, we will disclose material providers and data practices in a product-specific notice or other appropriate disclosure.

We aim to select and configure third-party services appropriately, but we do not control independent providers' systems or all of their practices. This does not exclude any responsibility that applicable law places on Nyblecraft.

We do not sell personal information as a general business practice. Certain laws may define "sale", "sharing", targeted advertising or cross-context behavioural advertising more broadly than an ordinary cash sale. If a particular activity falls within such a definition, we will provide required notices and available choices, including opt-out mechanisms where applicable.

7. When we disclose information

We may disclose information, where relevant and lawful, to:

Service providers and processors that provide hosting, cloud infrastructure, storage, analytics, diagnostics, advertising, communications, security, support or other operational services.
Distribution and platform providers, including app stores and operating-system providers, where needed to distribute, update, authenticate, support or monetise a product.
Payment and transaction providers to process purchases, verify entitlements, manage refunds or prevent fraud.
Clients and authorised business partners where necessary to deliver contracted services or as otherwise authorised.
Professional advisers and insurers, including legal, accounting, audit and insurance advisers, where reasonably necessary.
Authorities and other recipients where disclosure is required or authorised by law, legal process or a lawful request, or is reasonably necessary to establish, exercise or defend legal claims.
Business transaction parties in connection with a proposed or completed merger, acquisition, restructuring, financing, sale of assets or transfer of a business, subject to applicable law and appropriate safeguards.
Other recipients with your direction or consent, where applicable.

We seek to limit disclosures to information reasonably relevant to the purpose. Where required, we use contractual terms and other safeguards for providers processing information on our behalf.

8. International processing and transfers

Nyblecraft and its service providers may operate in different countries. Information may be stored or processed in Australia or elsewhere, depending on the relevant service, infrastructure and providers. The countries involved may vary by product and may change over time.

Privacy laws and protections differ between jurisdictions. Where a law requires a particular safeguard, transfer mechanism, notice, assessment or consent for an international transfer, we will take the steps required for that transfer.

Where applicable, individuals may request information about relevant overseas disclosures by contacting us, subject to legal restrictions and the information reasonably available to us.

9. Retention and deletion

We retain personal information for no longer than reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law. Retention depends on the nature and sensitivity of the information, the reason it was collected, service requirements, contractual terms, security needs and applicable legal obligations.

When information is no longer required, we take reasonable steps to delete it, de-identify it or securely dispose of it. Some information may remain temporarily in backups, security logs or system archives until removed through established retention cycles. We may retain limited records where needed to comply with law, resolve disputes, enforce agreements, prevent fraud or establish, exercise or defend legal claims.

Where a product supports an account or remote storage, users may request deletion through the method described for that product or by contacting us. We will assess and process requests in accordance with applicable law and platform requirements. Some information may be retained where legally permitted or required, and we will explain relevant limitations where appropriate.

Uninstalling software does not necessarily delete information already held by app stores, third-party providers or remote systems. Deleting local data from a device may not delete remote data. Where a product supports account creation, any applicable account-deletion requirements and instructions should be described clearly for that product.

10. Security

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse, interference, alteration and disclosure. Measures may include access controls, encryption where appropriate, secure development practices, monitoring, backups, vulnerability management and limiting access to people and providers who need it.

No system, network, application, storage method or electronic transmission is completely secure. We therefore cannot guarantee absolute security. Nothing in this Policy limits any security obligation that cannot lawfully be limited.

If a personal-data or privacy incident occurs, we will investigate and take steps appropriate to the circumstances. Where applicable law requires notification to individuals, regulators or other parties, we will make those notifications in accordance with the relevant legal requirements.

11. Privacy rights and choices

Your rights depend on where you live, the type of information involved, our role and the laws that apply. Subject to legal conditions and exceptions, you may have the right to:

request access to personal information we hold about you;
request correction of inaccurate or incomplete information;
request deletion or erasure of information;
withdraw consent where processing relies on consent;
object to or request restriction of certain processing;
receive certain information in a portable format;
opt out of certain targeted advertising, sale or sharing of personal information;
limit certain uses of sensitive personal information;
challenge certain automated decisions where a law provides that right; and
lodge a complaint with a relevant privacy regulator.

We will not unlawfully discriminate against you for exercising a privacy right. Certain services or features may not be available if information essential to their operation is deleted or not provided, but any such limitation must be lawful and appropriately explained.

To submit a request, contact support@nyblecraft.com and describe the right you wish to exercise. We may need to verify your identity or authority to protect against unauthorised disclosure or deletion. Where the law permits, an authorised agent may submit a request on your behalf, subject to appropriate verification.

We aim to respond within the time required by applicable law. If we cannot fulfil a request in full, we will explain the decision and any available review or complaint options where required.

You can opt out of marketing emails by using the unsubscribe mechanism provided or contacting us. We may still send non-marketing communications needed to provide a service, administer a transaction, address security matters or meet legal obligations.

Where a product uses advertising or tracking technologies, relevant controls may also be available in the product, consent interface, browser or device settings.

12. Children and age-related protections

Our products and services may have different intended audiences and age restrictions. The relevant product listing, terms or supplemental notice should explain age requirements where applicable.

We do not knowingly collect children's personal information in circumstances where such collection is prohibited by applicable law. Where required, we will implement appropriate age-related safeguards, notices and parental or guardian consent mechanisms.

If you believe a child has provided personal information to us inappropriately, contact support@nyblecraft.com. We will assess the report and take appropriate steps under applicable law.

Parents and guardians should review the product's age rating, privacy information and device or platform controls. Do not assume that every Nyblecraft product is intended for children or that the same rules apply to every product.

13. Third-party websites and services

Our websites and products may link to or interoperate with websites, platforms or services that Nyblecraft does not operate. Their content, security and privacy practices are controlled by those third parties, not by this Policy.

Review the applicable third party's terms and privacy notice before providing information to it. This section does not exclude responsibility that applicable law imposes on Nyblecraft for its own actions or representations.

14. Client projects and business services

When providing software development, consulting, engineering, testing, maintenance or other services, Nyblecraft may receive or process information supplied by or on behalf of a client.

The client agreement, data-processing terms and project instructions may govern the permitted purposes, security controls, retention, deletion, subcontracting and handling of that information. Depending on the circumstances, the client may be responsible for determining the purposes of processing and providing notices or obtaining permissions, while Nyblecraft may act as a service provider or processor.

Clients are responsible for ensuring they have the rights and lawful authority required to provide information to Nyblecraft and for giving any notices that are their responsibility. Nyblecraft will handle information in accordance with its applicable contractual and legal obligations.

This section does not remove obligations that apply directly to Nyblecraft. A public privacy policy is not a substitute for appropriate confidentiality, security, data-processing or other contractual terms.

15. Legal bases and jurisdiction-specific information

Different jurisdictions impose different requirements. Where applicable, Nyblecraft will provide additional notices or mechanisms required by the law governing the relevant processing.

For individuals in the European Economic Area, the United Kingdom or other jurisdictions with similar data-protection laws, rights and requirements may include information about the applicable legal basis, data-controller identity, international transfers, retention, complaints, and rights to access, rectify, erase, restrict, object or request portability.

For residents of US states with applicable comprehensive privacy laws, rights may include access, correction, deletion, portability and opting out of certain sale, sharing or targeted-advertising activities, subject to the relevant law and eligibility thresholds.

Other jurisdictions may provide additional or different rights. Nothing in this Policy is intended to reduce a right that applies mandatorily under local law. Where required, a supplemental notice will provide jurisdiction-specific details, including how to exercise rights and how to contact the relevant regulator.

16. Changes to this Policy

We may update this Policy to reflect changes to our business, products, technologies, service providers, data-handling practices or legal obligations. The current version will be published on our website with an updated "Last updated" date.

Where required by law or platform rules, we will provide additional notice or obtain consent before implementing a material change. Merely continuing to use a product does not substitute for consent where consent is legally required.

We encourage you to review this Policy periodically.

17. Complaints and contact

For questions, privacy requests or complaints about Nyblecraft's handling of personal information, contact:

Privacy contact:: support@nyblecraft.com
Website:: https://nyblecraft.com

Please describe your concern and provide enough information for us to investigate. We may request further information to verify your identity or clarify the issue. We will investigate and respond within a reasonable period and in accordance with applicable law.

Depending on your location, you may be entitled to complain to a privacy or data-protection regulator. In Australia, this may include the Office of the Australian Information Commissioner (OAIC), where it has jurisdiction. In other countries, contact the regulator responsible for your jurisdiction.