Trade Legends

Jomats FZCO · Legal

Privacy Policy

How Trade Legends collects, uses and protects your information.

Effective date · 28 September 2026

1. Who we are

Trade Legends is provided by Jomats FZCO ("we", "us", "our"). We are the controller responsible for the personal information described in this Privacy Policy. It covers the Trade Legends mobile app, its connected services, and these legal pages.

Jomats FZCO
Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates
Company number: DSO-FZCO-14516
Email: jomatsfzco@gmail.com

2. Information we collect

  • Account information: your account identifier, display name, selected avatar and, if you register, email address. We store password hashes and recovery-code verification data rather than plaintext passwords or recovery codes.
  • Optional Google sign-in: if you choose Google sign-in through Firebase Authentication, we process your Firebase user identifier (UID), verified email address, display name and authentication tokens to verify your identity and link it to your game account. We store the UID and email for that link; the game service does not copy your Google display name or profile photo into your game profile. We do not receive your Google password.
  • Gameplay and preferences: virtual balances, simulated trades and transaction history, competition results, rankings, achievements, rewards, referrals, mining progress, settings, language and notification choices. Guest play also creates a server-side profile.
  • Service and security information: sessions, request identifiers, timestamps, service activity and error information. Our infrastructure processes network information such as IP addresses to deliver requests and protect the service.
  • Installation measurement, where enabled: a random installation identifier, app/package and version information, Google Play install-referrer information (which may include campaign and click identifiers), referral-click and install timestamps, and collection time. Our installation identifier is separate from your game account and is not a hardware identifier. This collector does not send your account email, password, balance or session token.
  • App use and advertising measurement: installation and campaign identifiers, first-install and app-opening times, app version, and details of ad impressions such as their value, currency, measurement precision, format, placement, response identifier and advertising network. We associate these records to measure app usage, retention and advertising performance. These cohort records do not include your account email or game balance. Any revenue figures here are developer advertising revenue, not virtual currency, and not your bank or payment information.
  • App analytics and diagnostics: Google Analytics for Firebase processes app interactions, screen views, sessions, installation identifiers, app/device information and approximate location derived from network information. Firebase Crashlytics processes crash reports, stack traces, diagnostic app/device information and installation identifiers. We do not attach account emails, passwords, balances or raw installation-referrer values to custom analytics events or crash reports. Google Analytics for Firebase does not collect the advertising ID, and its advertising-personalization signals are disabled.
  • Advertising: Advertising technologies used in Trade Legends may collect your IP address and approximate location inferred from it, advertising and other device identifiers, device and network information, interactions with ads such as impressions, clicks and viewability, and technical information such as diagnostics, crash logs and other app performance data. These data support ad delivery and measurement, analytics, and fraud prevention. We do not request precise device location for advertising or provide your age or gender to these advertising SDKs. Choices you make in the consent message are stored on your device.
  • Remote notifications: Firebase Cloud Messaging processes installation identifiers and notification tokens to deliver messages. Notification delivery and interactions may also be measured through Firebase Analytics.
  • Communications: your contact details and information you choose to send us when requesting support or exercising your privacy rights. If you choose to send optional freeform feedback comments or ratings, these are stored on the connected game server and are not published as a public Google Play review.
  • Local device storage: session credentials, cached progress, preferences and installation-delivery state are kept in app storage so the app can operate.

Trade Legends does not require access to your contacts, microphone, camera or precise device location. It does not request payment-card details or cryptocurrency private keys. All in-game funds are virtual.

3. How we use information

  • Provide accounts, save progress, run simulated trades and competitions, calculate virtual rewards, and synchronize the app with its server.
  • Authenticate requests, support account recovery, prevent duplicate rewards, detect abuse, and maintain reliable services.
  • Display player profiles and rankings and operate referral features.
  • Understand how users find the app and measure campaigns when installation measurement is enabled.
  • Understand app usage, diagnose crashes and performance problems, improve the simulator and deliver remote notifications.
  • Respond to support and privacy requests and comply with applicable legal obligations.
  • Provide optional reminders, show advertising (including optional rewarded ads that grant virtual rewards), and measure advertising and protect it against fraud.

Where a legal basis is required, we process information as necessary to provide the service you request, to meet legal obligations, or for legitimate interests such as security and service improvement where that basis is permitted and does not override your rights. We rely on consent where required, including for optional advertising or measurement that requires consent. You may withdraw that consent without affecting the lawfulness of earlier processing. Accepting the Terms of Use is not consent to optional data processing.

4. Advertising and notifications

Trade Legends is free to use and shows ads through Google AdMob mediation, including app-open, interstitial and native ads, and optional rewarded ads that grant a virtual reward after you watch them. Google and the selected advertising partners process the information described in “Information we collect” to show ads, measure them and prevent fraud. Ads may be personalized using the Android advertising ID where your choices and applicable law allow it; otherwise Google may show non-personalized or limited ads. We may switch advertising off remotely or change how often ads appear.

In the European Economic Area, the United Kingdom and Switzerland, the app shows Google’s consent message before ads are requested, and you can accept, refuse or choose the purposes and advertising partners it lists. Where US state privacy laws give you the right to opt out of the sale or sharing of personal information for targeted advertising, you can exercise it through the in-app controls when they are offered to you or by contacting us. When these controls apply to you, Settings includes an “Ad privacy choices” option to review or change your choices at any time. Android settings also let you reset or delete your advertising ID and opt out of ads personalization. See Google’s Privacy Policy, how Google uses information from apps that use its services and Google’s advertising information.

We use Google AdMob mediation with Meta Audience Network, Liftoff Monetize, InMobi and Pangle (TikTok Ad Network). Which partner serves an ad depends on availability and configuration. AppLovin, Mintegral and Digital Turbine DT Exchange SDKs are also included and may be enabled for ad delivery in the future. Included SDKs may perform device-side setup even when they are not selected to serve ads. Advertising partners' data practices and available privacy choices are described in the links below. Where required, we request consent and provide advertising privacy choices. Declining personalized ads does not necessarily stop the technical data processing needed for non-personalized ads, measurement and fraud prevention.

Trade Legends uses local notifications, Firebase Cloud Messaging for remote notifications, and an optional persistent mining-status notification. Android notification settings control whether the app can show notifications. Available in-app category settings apply to app-generated messages; some messages delivered directly by Firebase in the background are controlled by Android notification settings instead. Turning off notifications does not delete your account.

5. When information is shared

  • Other players: your display name, avatar, rankings, virtual balance, open and closed simulated trades, achievements and competition activity may be visible in public profiles, leaderboards and multiplayer features. Your password, recovery code and account email are not displayed in these features. Avoid including private information in your display name.
  • Service providers: infrastructure, hosting, network delivery/security and communications providers process the information necessary to operate the service. Cloudflare provides network delivery and security; see its Privacy Policy.
  • Google: Google Play provides installation-referrer information. Google AdMob processes advertising information as described above and, where you consent, advertising technology providers listed in Google’s consent message may process information to show and measure ads. Firebase Authentication processes optional Google sign-in information. Google Analytics for Firebase, Firebase Crashlytics and Firebase Cloud Messaging process the app-usage, diagnostic and notification information described in this policy. See Firebase privacy and security information and Google’s Privacy Policy.
  • Advertising partners: Advertising information may be sent directly from the app to the selected advertising partners, which may process it for their own advertising, measurement and security purposes under their applicable notices. Such transfers can include identifiers, approximate location, ad interactions, diagnostics, crash logs and other performance data.
  • Campaign partners: when campaign measurement and a partner integration are enabled, install confirmations and relevant campaign/click identifiers may be sent to the provider responsible for that campaign to measure performance and reconcile installations. This installation feed does not include your account email, game balances or login credentials.
  • Legal and business purposes: we may disclose information when required by law, to protect rights and safety, or in connection with a business transfer subject to applicable privacy protections.

For users in the EEA, United Kingdom and Switzerland, Pangle's applicable data terms describe joint responsibility with the publisher for collection through its SDK and transmission to Pangle. They describe Pangle's subsequent processing under its own responsibility. We provide the app-side information and privacy controls; Pangle's regional notice explains its processing and how to exercise your rights. You can contact us using the details in this policy about processing in Trade Legends.

We do not sell account information for money. Rights relating to targeted advertising or other forms of sharing may still apply depending on your location and enabled features; contact us to exercise them.

6. Retention and deletion

We keep account information and gameplay records while needed to provide your account and its history, unless you request deletion earlier. After verified account deletion, account credentials, sessions, personal profile, account-linked activity and progress are removed from the active game service. Shared competition or transaction records may retain de-identified entries needed to preserve other players’ results.

Installation measurement is stored separately from game accounts and is subject to the attribution service’s retention schedule. It is not automatically identifiable from an account email. If you want installation records removed too, include that request when contacting us; we may need additional non-secret information to locate them. Uninstalling the app, clearing its storage or deleting a game account does not by itself prove that separate installation records have been removed. The separate app-use and advertising measurement records described in “Information we collect” are kept in their own storage and are not automatically deleted when you delete your game account.

Firebase analytics, diagnostic and messaging records are separate from your game account. Their retention and deletion depend on the Firebase product and configured retention settings; aggregated analytics reports may remain after event-level data expires. Crashlytics retains crash reports for 90 days before deletion from live and backup systems begins. Cloud Messaging installation identifiers are retained until deletion is requested, after which Google describes removal from live and backup systems within 180 days. Deleting your game account or uninstalling the app does not automatically delete all Firebase records. When you delete a game account linked to Google sign-in, the app asks Firebase Authentication to delete the corresponding Firebase sign-in user. That request is sent from the app and may be interrupted; if it does not finish, you may need a network connection, to relaunch the app, or to sign in again to complete it. This does not delete your Google account. Contact us to request deletion of these records; we may need additional non-secret installation information to identify them, and will explain any identification or deletion limits. The linked Firebase privacy documentation provides product-specific details.

Advertising partners retain information according to their own policies and the purposes for which it is processed, including advertising measurement, fraud prevention and legal obligations. We do not set one common retention period for every advertising SDK. See each partner's notice for its retention criteria and options to request access or deletion. Removing the app or resetting an advertising identifier does not necessarily delete information previously received by a partner.

We retain support communications, security records and restricted backup copies only as long as reasonably necessary for their purpose, recovery, dispute handling or an applicable legal requirement. Retention depends on the record’s purpose, whether an issue remains open, and applicable obligations. Backup data is not used for routine gameplay and is removed through backup rotation. A deletion request may therefore take additional time to be reflected in backup copies. If an exception requires retaining information, we limit its use to that purpose and explain the reason where legally permitted.

Read the account and data deletion instructions to make a request without reinstalling the app.

7. Your choices and rights

You can change available profile and notification settings in the app and request account deletion. Where offered, the “Ad privacy choices” option in Settings lets you change your advertising consent or opt-out choices. The current release does not offer a separate in-app switch for Firebase analytics or crash reporting; contact us about objections, consent withdrawal or deletion requests. Android notification permission controls visible notifications, not all analytics, diagnostics or installation processing. Depending on applicable law, you may also have rights to access or receive a copy of your information, correct it, erase it, restrict or object to processing, receive portable data, withdraw consent, or opt out of certain advertising uses. You may complain to the competent data-protection authority.

Send requests to jomatsfzco@gmail.com. We may ask for proportionate information to verify that the account or data belongs to you. Do not email passwords or recovery codes. We respond within the time required by applicable law and explain any permitted extension or restriction. Exercising privacy rights does not result in discriminatory treatment.

For a guest account, recovery or identification may be limited if you lose the device or its local session. Contact us while you still have access where possible.

8. Security and international processing

We use safeguards designed to protect information, including password hashing, session controls, restricted administrative access and HTTPS for public service connections. No storage or transmission system can be guaranteed completely secure. Keep your device, password and recovery code private.

Jomats FZCO is based in the United Arab Emirates. Information may also be processed in countries where our infrastructure and service providers operate, including the United States. These countries may have different data-protection rules. Where applicable law requires a transfer safeguard, we must use an appropriate lawful mechanism. Contact us for information about safeguards relevant to your data.

9. Children and younger users

Trade Legends is a simulation for learning and entertainment and may be used by younger users where permitted by applicable law. Additional protections apply to children’s personal information. Where the law requires parental authorization or verifiable parental consent, a child may use features that process personal information only after those requirements have been met. Permission to use the app does not by itself constitute legally valid consent to collect or share a child’s information.

We do not knowingly collect, use or share children’s personal information in violation of applicable law. If we learn that information was collected without required consent or another permitted basis, we will take appropriate steps to stop that processing and delete the information. A parent or legal guardian may contact us to ask about a child’s information, request access or deletion, or withdraw consent, subject to proportionate verification and applicable law. Please contact us before providing a child’s personal information if required consent arrangements are not available in the app.

10. These legal pages

This website is hosted on GitHub Pages. GitHub processes technical request information, including IP addresses, to provide and secure hosting under its Privacy Statement. We do not add advertising, analytics scripts, cookies or tracking pixels to these legal pages. Email links open your own email application; they do not submit a request until you send the email.

11. Changes and contact

We may update this policy as the service or applicable requirements change. The date at the top identifies the current version. We will provide additional notice of material changes where required and obtain new consent where required. Contact Jomats FZCO about this policy or your data:

Jomats FZCO
Dubai Silicon Oasis, DDP, Building A2, Dubai, United Arab Emirates
Company number: DSO-FZCO-14516
Email: jomatsfzco@gmail.com