Legal
Privacy policy
Amazgone is a shopping game. There are no payments, so we never see a card, a bank account or a billing address. We ask for as little as the game needs: a username, a password, and whatever you type into it while you play.
Last updated 2 October 2026 · Amazgone for Android and iOS (com.cikup.amazgone)
- No payment dataNo card, no billing address, no purchases. Coins are virtual.
- No real identityA username you invent. No email, phone, name or contacts.
- No ads, no trackingNo advertising SDKs, no data brokers. We never sell your data.
- No location accessThe app requests no location permission, ever.
1 Who we are
Amazgone is published by Shamu ("we"). For any privacy question, write to mujiburr741@gmail.com and we will answer within 30 days.
2 What we collect, and why
- Username and password3–20 characters, your choice
- To create your account and sign you back in. Your username is turned into an internal address for our authentication provider; we never ask for a real email. Your password is never stored by us in a readable form.
- Game statecoin ledger, orders, cart, level and XP, unlocked couriers, reviews
- To run the game and keep your progress if you reinstall or switch devices. The coin ledger is append-only, so a balance can always be re-checked against it.
- Delivery address you typefree text, for the in-game delivery only
- To place a pin on the map and animate a simulated delivery. Nothing is shipped to it. The text is sent to OpenStreetMap to be turned into coordinates — see section 4.
- Usage eventsscreens opened, products viewed, coins earned and spent, app version, device model and OS
- To see which parts of the game are played and where it breaks. Events are tied to a random account identifier, never to your username, address or review text.
- Crash and error logs
- To diagnose failures. Logs are technical and are not used to profile you.
3 What stays on your device
Amazgone is offline-first. The whole catalog and your game state live in a local database on your phone, and the app works in airplane mode. Your sign-in token is kept in the platform's secure storage — Android Keystore or iOS Keychain. Deleting the app removes all of this local data.
4 Who else processes your data
-
Google Firebase Google LLC
Authentication, Firestore database and Analytics. This is where your account and game state are stored and where usage events go.
-
OpenStreetMap OpenStreetMap Foundation
The address text you enter is sent to the Nominatim geocoding service to get coordinates, and map tiles are loaded from
tile.openstreetmap.org. These requests also reveal your IP address to them. -
Catalog sources DummyJSON · CheapShark · Open Food Facts
The app fetches product data from them. These requests contain no personal data, only your IP address.
These providers may process data outside your country. We have no other recipients: no ad networks, no data brokers, no analytics resellers.
5 How long we keep it
- Account and game state — for as long as your account exists, then deleted when you ask us to delete it (see section 7).
- Usage events — retained by Firebase Analytics for up to 14 months, then deleted automatically.
- Crash and error logs — up to 90 days.
6 Legal basis
Where the GDPR applies, we rely on contract for your account and game state — without them there is no game — and on legitimate interest for usage and crash data, to keep the app working. You can object to the latter by writing to us.
7 Your choices and rights
- Delete your account and data — see Delete your account. This removes your account, coin ledger, orders and reviews.
- Get a copy, or ask for a correction — email us and we will send or fix it.
- Turn off notifications — in your phone's settings for Amazgone. The app only uses notifications for in-game events.
- Play without an account — browsing the catalog works offline; an account is only needed to keep coins and progress.
If you are in the EEA or UK you may also complain to your local data protection authority.
8 Children
Amazgone is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
9 Security
Traffic to our providers uses HTTPS. Sign-in tokens are held in platform secure storage, and server-side access to game data is restricted by security rules, so one account cannot read or change another's.
10 Changes
If we change this policy we will update the date at the top of this page, and for a significant change we will say so in the app.