Privacy Policy for Boutiquo (iOS)
Effective Date: October 31, 2026 · Last Updated: October 31, 2026
1. Who we are
Boutiquo (the “Game”) is developed by VibeDeV and published by VIBECORE DIGITAL, British Columbia, Canada (“we”, “us”, “our”). This policy covers the iOS version of Boutiquo from the App Store. The same game on Google Play has its own policy.
Contact for every privacy question or request: support@vibecoredigital.com.
2. The short version
- You do not need an account, a name, an email address or a phone number to play.
- Your boutique, wardrobe and progress are saved on your device.
- Online play (visiting other players’ boutiques, friends, likes, gifts and cloud save) uses a random player ID that our server creates. It never asks who you are. There is no chat. You choose a name for your avatar and your boutique, and other players see them; both are checked by a word filter, and players can report names or boutiques that break the rules.
- Ads are optional reward videos you start yourself, served by Google AdMob. There are no ads between screens. In the European Economic Area, the United Kingdom and Switzerland the Game asks for consent first.
- Anonymous gameplay statistics (for example level-ups and which gem packs sell) go to Google Analytics for Firebase so we can balance the Game. Turn them off any time in Settings → Share gameplay stats; in the EEA, the UK and Switzerland they are only sent with consent. They are never used for advertising.
- Gem purchases go through Apple’s App Store (StoreKit); we never see your payment details.
- We do not sell personal information.
3. Information handled by the Game
| Data | Where it lives | Why |
|---|---|---|
| Game progress (coins, gems, level, items, fixtures, your boutique’s layout, your avatar’s outfit, orders, goals, settings) | On your device; with online play, a copy on our server (cloud save) | So the Game works and remembers your boutique |
| Purchase records (which gem pack, a transaction reference) | On your device and with Apple’s App Store (StoreKit) | To deliver each purchase exactly once |
| Advertising data (the advertising identifier (IDFA, only if you allow tracking) and the IDFV, approximate location from your IP address, ad interactions, device diagnostics), collected by Google AdMob | Google’s systems; the IDFA only if you allow tracking | To show and measure ads; personalised only with consent where consent applies |
| Gameplay statistics (an analytics ID that Firebase creates for this installation, milestone events such as level-ups, collections, goals, Magic Boxes, gem packs delivered and reward videos watched, device model, operating system and app version, approximate location from your IP address), collected by Google Analytics for Firebase | Google, for at most 14 months | To see how the Game is played and balance it; never for ads, never linked to your advertising identifier or player ID |
| Online play data (random player ID, a one-way hash of your device’s secret key, your avatar’s name and your boutique name, your avatar’s look, your public boutique, friends, likes, gifts and inbox, and reports you send or receive) | Our server (see section 5) | Online play and cloud save |
We do not collect your real name, email address, contacts, photos, precise location or any biometric data. The only text other players can see is the name you give your avatar and your boutique; please do not use your real name or anything that identifies you. The Game has no chat.
Gameplay statistics. The Game uses Google Analytics for Firebase with its advertising features switched off: it does not collect the advertising identifier or the IDFV (identifier for vendor), does not use the data for ads and does not share it for Google’s own purposes. Statistics start only after the privacy step at launch, and in the EEA, the UK and Switzerland only if you consent in Google’s consent dialog. Turning off Settings → Share gameplay stats stops them at once and resets the analytics ID on your device. See How Google uses information from apps that use its services.
4. Ads
Ads are provided by Google AdMob. The only ads are reward videos you choose to watch from the Gem Shop (coins only, a few hundred per video depending on your level, up to four a day). Where consent rules apply, a consent dialog from Google (the User Messaging Platform) appears before any ad is requested, and you can change your choice later with Settings → Ad privacy choices (or Privacy options in the Gem Shop). If the consent dialog cannot load, the Game does not request ads.
App Tracking Transparency
After the consent step, iOS asks whether Boutiquo may track you (Apple’s App Tracking Transparency prompt). If you choose Allow, AdMob may use your device’s advertising identifier to show ads that fit your interests. If you choose Ask App Not to Track, the identifier is not available to us or to AdMob, and you still get ads, just less personalised ones. You can change this any time in iOS Settings → Privacy & Security → Tracking. The Game works the same either way.
AdMob’s practices are described at policies.google.com/technologies/ads.
5. Online play and cloud save
Online play is optional and is not switched on in every test build. When it is on:
- Player ID and key: the first time you go online, our server creates a random player ID and a secret key for this installation. The key is stored on your device next to your save; our server keeps only a one-way hash of it. There is no sign-in, email or password.
- Cloud save: a copy of your game save is stored on our server so a new device or a reinstall can get your boutique back (using a one-time transfer code you make in the Game).
- What other players see: your avatar’s name and your boutique name (both chosen by you), your level, your boutique’s floor, decor and stock, and your avatar’s outfit, hair and eye colour. They never see your coins, gems, purchases, orders or any device information.
- Friends, likes and gifts: who you added with a friend code, who liked or sent you a gift, and the coins waiting in your inbox.
- Names, reports and moderation: names are checked by a filter on your device and on our server, and can be changed up to 3 times a day. If you report a player, we store the reason, any short note you add, where it happened, the names they used at the time, your player ID and the time. Reports are read by us (the studio) and are never shown to the reported player. If several players report the same boutique, its names are hidden from others until we review it. We may reset names, hide a boutique from other players, or turn off online play for a player who breaks the Terms; offline play and anything you bought are not affected.
- Connection data: traffic reaches our server through Cloudflare, which passes on your IP address. Our server uses it in memory to limit request rates and stop abuse; it is not stored in our database.
Our server and database run on a virtual private server from OVHcloud in Beauharnois, Quebec, Canada, which we operate ourselves. Cloudflare carries the encrypted traffic between the Game and our server.
6. Purchases
Gem packs are processed by Apple’s App Store (StoreKit). We receive confirmation of the product and a transaction reference so the Game can deliver it; we never receive your card or bank details. Prices and refunds follow the App Store’s rules. Nothing sold for real money is random: every gem pack shows exactly how many gems it contains. Magic Boxes are opened with in-game coins only, list every piece they hold and never repeat one.
7. Children
The Game is meant for players 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used online play, write to support@vibecoredigital.com and we will delete that data.
8. Your choices and rights
- Play without personalised ads: decline in the consent dialog, or simply never start a reward video.
- Play without online play: the Game works fully offline.
- Stop gameplay statistics: Settings → Share gameplay stats.
- Delete your online data at any time in the Game: Settings → Delete online data. See Delete your data for everything else.
- Depending on where you live (for example the GDPR in the EEA and UK, or PIPEDA in Canada) you may have rights to access, correct, move or delete personal information, or to object to its use. Write to support@vibecoredigital.com and we will help within 30 days.
9. Retention and security
| Data | How long |
|---|---|
| Game data on your device | Until you delete the app or clear its data |
| Online play data on our server | While you use online play; deleted at once when you use Delete online data or ask us |
| Reports and our moderation notes | An open report until we review it; a closed one for 12 months, then deleted. Deleting your online data also deletes reports made about you; reports you made are kept without your player ID, so we can still act on them |
| Gameplay statistics at Google Analytics for Firebase | At most 14 months, then deleted by Google |
| Our database backups | Seven nightly copies, so deleted data is gone from them within about a week |
| OVHcloud’s automatic server backup | One copy, replaced every night |
Connections to our server are encrypted, the server is not reachable except through Cloudflare, and access to it is limited to us. Third parties (Google, Apple, Unity, Cloudflare, OVHcloud) keep data under their own policies.
10. International transfers
We are based in Canada and our server is in Canada. Google and Cloudflare may process data in other countries under their own safeguards.
11. Changes
We will update this page when the Game’s data practices change and adjust the date at the top. Big changes will also be shown in the Game.
Contact
VIBECORE DIGITAL, British Columbia, Canada
support@vibecoredigital.com