Trade Legends

Jomats FZCO · Legal

Privacy Policy

How Trade Legends collects, uses and protects your information.

Effective date · 21 September 2026

1. Who we are

Trade Legends is provided by Jomats FZCO ("we", "us", "our"). We are the controller responsible for the personal information described in this Privacy Policy. It covers the Trade Legends mobile app, its connected services, and these legal pages.

Jomats FZCO
Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates
Company number: DSO-FZCO-14516
Email: jomatsfzco@gmail.com

2. Information we collect

  • Account information: your account identifier, display name, selected avatar and, if you register, email address. We store password hashes and recovery-code verification data rather than plaintext passwords or recovery codes.
  • Gameplay and preferences: virtual balances, simulated trades and transaction history, competition results, rankings, achievements, rewards, referrals, mining progress, settings, language and notification choices. Guest play also creates a server-side profile.
  • Service and security information: sessions, request identifiers, timestamps, service activity and error information. Our infrastructure processes network information such as IP addresses to deliver requests and protect the service.
  • Installation measurement, where enabled: a random installation identifier, app/package and version information, Google Play install-referrer information (which may include campaign and click identifiers), referral-click and install timestamps, and collection time. Our installation identifier is separate from your game account and is not a hardware identifier. This collector does not send your account email, password, balance or session token.
  • App analytics and diagnostics: Google Analytics for Firebase processes app interactions, screen views, sessions, installation identifiers, app/device information and approximate location derived from network information. Firebase Crashlytics processes crash reports, stack traces, diagnostic app/device information and installation identifiers. We do not attach account emails, passwords, balances or raw installation-referrer values to custom analytics events or crash reports. Analytics advertising-ID collection and advertising-personalization signals are disabled in the current release.
  • Remote notifications: Firebase Cloud Messaging processes installation identifiers and notification tokens to deliver messages. Notification delivery and interactions may also be measured through Firebase Analytics.
  • Communications: your contact details and information you choose to send us when requesting support or exercising your privacy rights.
  • Local device storage: session credentials, cached progress, preferences and installation-delivery state are kept in app storage so the app can operate.

Trade Legends does not require access to your contacts, microphone, camera or precise device location. It does not request payment-card details or cryptocurrency private keys. All in-game funds are virtual.

3. How we use information

  • Provide accounts, save progress, run simulated trades and competitions, calculate virtual rewards, and synchronize the app with its server.
  • Authenticate requests, support account recovery, prevent duplicate rewards, detect abuse, and maintain reliable services.
  • Display player profiles and rankings and operate referral features.
  • Understand how users find the app and measure campaigns when installation measurement is enabled.
  • Understand app usage, diagnose crashes and performance problems, improve the simulator and deliver remote notifications.
  • Respond to support and privacy requests and comply with applicable legal obligations.
  • Provide optional reminders and, where available, advertising features.

Where a legal basis is required, we process information as necessary to provide the service you request, to meet legal obligations, or for legitimate interests such as security and service improvement where that basis is permitted and does not override your rights. We rely on consent where required, including for optional advertising or measurement that requires consent. You may withdraw that consent without affecting the lawfulness of earlier processing. Accepting the Terms of Use is not consent to optional data processing.

4. Advertising and notifications

Advertising availability depends on the app version and settings. Where Google Mobile Ads is activated, including test-ad mode, Google may process IP address and approximate location inferred from it, app/ad interactions, diagnostic information, and device or account identifiers, including the Android advertising ID and app set ID where available. These are used for advertising, measurement and fraud prevention. A local demonstration that does not activate Google ads does not send an ad request to Google.

See Google’s Privacy Policy and Google’s advertising information. Android settings let you reset or delete your advertising ID and manage available advertising privacy controls. Where consent is required, the relevant feature must obtain it before processing; this policy does not replace a consent prompt.

Trade Legends uses local notifications, Firebase Cloud Messaging for remote notifications, and an optional persistent mining-status notification. Android notification settings control whether the app can show notifications. Available in-app category settings apply to app-generated messages; some messages delivered directly by Firebase in the background are controlled by Android notification settings instead. Turning off notifications does not delete your account.

5. When information is shared

  • Other players: your display name, avatar, rankings and relevant game statistics or competition activity may be visible in public profiles, leaderboards and multiplayer features. Your password, recovery code and account email are not displayed in these features. Avoid including private information in your display name.
  • Service providers: infrastructure, hosting, network delivery/security and communications providers process the information necessary to operate the service. Cloudflare provides network delivery and security; see its Privacy Policy.
  • Google: Google Play provides installation-referrer information. Google Mobile Ads processes information when activated as described above. Google Analytics for Firebase, Firebase Crashlytics and Firebase Cloud Messaging process the app-usage, diagnostic and notification information described in this policy. See Firebase privacy and security information and Google’s Privacy Policy.
  • Campaign partners: when campaign measurement and a partner integration are enabled, install confirmations and relevant campaign/click identifiers may be sent to the provider responsible for that campaign to measure performance and reconcile installations. This installation feed does not include your account email, game balances or login credentials.
  • Legal and business purposes: we may disclose information when required by law, to protect rights and safety, or in connection with a business transfer subject to applicable privacy protections.

We do not sell account information for money. Rights relating to targeted advertising or other forms of sharing may still apply depending on your location and enabled features; contact us to exercise them.

6. Retention and deletion

We keep account information and gameplay records while needed to provide your account and its history, unless you request deletion earlier. After verified account deletion, account credentials, sessions, personal profile, account-linked activity and progress are removed from the active game service. Shared competition or transaction records may retain de-identified entries needed to preserve other players’ results.

Installation measurement is stored separately from game accounts and is subject to the attribution service’s retention schedule. It is not automatically identifiable from an account email. If you want installation records removed too, include that request when contacting us; we may need additional non-secret information to locate them. Uninstalling the app, clearing its storage or deleting a game account does not by itself prove that separate installation records have been removed.

Firebase analytics, diagnostic and messaging records are separate from your game account. Their retention and deletion depend on the Firebase product and configured retention settings; aggregated analytics reports may remain after event-level data expires. Crashlytics retains crash reports for 90 days before deletion from live and backup systems begins. Cloud Messaging installation identifiers are retained until deletion is requested, after which Google describes removal from live and backup systems within 180 days. Deleting your game account or uninstalling the app does not automatically delete all Firebase records. Contact us to request deletion of these records; we may need additional non-secret installation information to identify them, and will explain any identification or deletion limits. The linked Firebase privacy documentation provides product-specific details.

We retain support communications, security records and restricted backup copies only as long as reasonably necessary for their purpose, recovery, dispute handling or an applicable legal requirement. Retention depends on the record’s purpose, whether an issue remains open, and applicable obligations. Backup data is not used for routine gameplay and is removed through backup rotation. A deletion request may therefore take additional time to be reflected in backup copies. If an exception requires retaining information, we limit its use to that purpose and explain the reason where legally permitted.

Read the account and data deletion instructions to make a request without reinstalling the app.

7. Your choices and rights

You can change available profile and notification settings in the app and request account deletion. The current release does not offer a separate in-app switch for Firebase analytics or crash reporting; contact us about objections, consent withdrawal or deletion requests. Android notification permission controls visible notifications, not all analytics, diagnostics or installation processing. Depending on applicable law, you may also have rights to access or receive a copy of your information, correct it, erase it, restrict or object to processing, receive portable data, withdraw consent, or opt out of certain advertising uses. You may complain to the competent data-protection authority.

Send requests to jomatsfzco@gmail.com. We may ask for proportionate information to verify that the account or data belongs to you. Do not email passwords or recovery codes. We respond within the time required by applicable law and explain any permitted extension or restriction. Exercising privacy rights does not result in discriminatory treatment.

For a guest account, recovery or identification may be limited if you lose the device or its local session. Contact us while you still have access where possible.

8. Security and international processing

We use safeguards designed to protect information, including password hashing, session controls, restricted administrative access and HTTPS for public service connections. No storage or transmission system can be guaranteed completely secure. Keep your device, password and recovery code private.

Jomats FZCO is based in the United Arab Emirates. Information may also be processed in countries where our infrastructure and service providers operate, including the United States. These countries may have different data-protection rules. Where applicable law requires a transfer safeguard, we must use an appropriate lawful mechanism. Contact us for information about safeguards relevant to your data.

9. Children and younger users

Trade Legends is a simulation for learning and entertainment and may be used by younger users where permitted by applicable law. Additional protections apply to children’s personal information. Where the law requires parental authorization or verifiable parental consent, a child may use features that process personal information only after those requirements have been met. Permission to use the app does not by itself constitute legally valid consent to collect or share a child’s information.

We do not knowingly collect, use or share children’s personal information in violation of applicable law. If we learn that information was collected without required consent or another permitted basis, we will take appropriate steps to stop that processing and delete the information. A parent or legal guardian may contact us to ask about a child’s information, request access or deletion, or withdraw consent, subject to proportionate verification and applicable law. Please contact us before providing a child’s personal information if required consent arrangements are not available in the app.

10. These legal pages

This website is hosted on GitHub Pages. GitHub processes technical request information, including IP addresses, to provide and secure hosting under its Privacy Statement. We do not add advertising, analytics scripts, cookies or tracking pixels to these legal pages. Email links open your own email application; they do not submit a request until you send the email.

11. Changes and contact

We may update this policy as the service or applicable requirements change. The date at the top identifies the current version. We will provide additional notice of material changes where required and obtain new consent where required. Contact Jomats FZCO about this policy or your data:

Jomats FZCO
Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates
Company number: DSO-FZCO-14516
Email: jomatsfzco@gmail.com