Privacy Policy

Effective Date: October 16, 2026

This Information Governance & Player Privacy Doctrine formulates the exact principles under which Yimu Health Care (herein designated as "we," "us," or "our") extracts, utilizes, and insulates your personal data while you operate our application, Lane Jam: Car Puzzle, via the Google Play ecosystem. Our ultimate objective is to architect a flawless interactive experience without compromising your digital privacy.

1. Data Harvesting Vectors

We deploy structured auditing and extraction mechanisms to manage your digital footprint, anchored by a zero-tolerance approach to data insecurity. The following clauses break down the data vectors we actively monitor and our operational handling.

1.1 Auto-Captured Signals Upon your device executing Lane Jam: Car Puzzle, our backend nodes are configured to passively log these data groupings:

• Networking & Traffic Logs: Your Internet Protocol (IP) routing address, server handshake timestamps, and primary hardware categorizations.
• Device Schematics: The original equipment manufacturer (OEM), specific hardware variant, active operating system (Android/Google OS), localized language settings, and regional time zones.
• Persistent Tracking Keys: Network-level tags inextricably linked to your device, specifically your Google Advertising ID (GAID), Android Device ID, Google Play Games ID, and the overarching Google Account token.
• Gaming Chronologies: Your advancement through the game, peak score markers, unlocked milestones, and transactional records from multiplayer network connectivity.
• Economic Ledgers: Histories of fiat microtransactions, depletion rates of virtual assets, custom UI configurations, and digital currency balances.

1.2 Connected Identity Ecosystems Should you opt to bypass native registration and link an external hub like Google Play Games Services, our infrastructure will synchronize permitted profile elements (e.g., public display monikers) utilizing their secure APIs. This bridging operation is entirely contingent upon your active ratification of that third party's privacy manifesto. We legally advise you to scrutinize the compliance frameworks of these hubs:

• Google Play Games / Google Services: https://policies.google.com/privacy

By federating your login, you legally stipulate that:

• Your operational conduct remains in absolute compliance with the active Terms of Service of that external platform.
• You satisfy the legal age of consent mandated by the third party within your sovereign jurisdiction.

2. Lawful Basis for Operations

We manipulate your data strictly to execute the operational goals mapped out below, guaranteeing all computing events are validated by a codified statutory anchor:

• Service Delivery & Client Continuity: To clear commercial transactions, resolve support tickets, and sustain backend connectivity; to render the core game loop, load local save states, and distribute binary updates and security advisories.
• Statutory Anchor: Grounded in GDPR Article 6(1)(b) (contractual necessity). This processing is structurally indispensable for us to enforce the Terms of Service and keep the application viable.
• Analytical Iteration & Marketing Tactics: To deploy targeted promotional intelligence regarding Yimu Health Care or vetted alliances; to cache your interaction habits; and to run heuristic analyses to blueprint new features and streamline both marketing operations and helpdesk efficiency.
• Statutory Anchor: Authorized by GDPR Article 6(1)(f) (legitimate interests). We rely on this to support our valid corporate objective to iterate on our software architecture and elevate end-user satisfaction.
• Programmatic Monetization: To project targeted commercial payloads to users whose device parameters have been cleared for access by our ad-tech network partners.
• Statutory Anchor: Equivalently supported by GDPR Article 6(1)(f). This ensures our legitimate commercial viability through optimized ad monetization strategies.

3. Retention and Archival Horizons

Your personal data remains active in our hot storage databases exclusively for the lifecycle necessary to render our services, clear legal audits, and manage judicial disputes. In edge cases involving arbitration, infrastructural triage, contract disputes, or compliance holds, we retain the jurisdiction to freeze specific data blocks in cold storage for a legally extended epoch. Conversely, aggregated and hashed Usage Metrics utilized for internal dashboarding are routinely subjected to rapid garbage collection cycles, unless extended preservation is mandated by law or critical security incident responses.

4. Third-Party Data Routing

Honoring your digital sovereignty and operating strictly under GDPR Articles 6(1)(b), 6(1)(c), and 6(1)(f), we may open secure pipelines to route your data to vetted external entities under these parameters:

• Strategic Integrators: For the deployment of joint operational features, legal compliance audits, corporate acquisitions, or any workflow requiring your explicit opt-in.
• State & Judicial Apparatuses: In the event of a verified breach of our Terms, or if binding subpoenas compel data release to shield the IP, network integrity, or safety of Yimu Health Care and the global public.
• The Multiplayer Ecosystem: Consequent to your active participation in server-side matchmaking, global chat channels, or high-score leaderboards.

4.1 Advertising Exchanges Subject to registering your active consent pursuant to GDPR Article 6(1), we will bridge your device tags to advertising exchanges to render hyper-relevant ad units. Our matrix of integrated ad exchanges encompasses:

• Applovin Corporation: https://www.applovin.com/privacy/
• AdColony: https://yandex.com/legal/international_ads_privacy_policy
• Amazon Publisher Services: https://www.amazon.com/privacyprefs
• Meta (Facebook, Inc.): https://www.facebook.com/about/privacy/
• Google LLC: https://policies.google.com/privacy
• Google Admob: https://support.google.com/admob/
• Unity Technologies: https://unity3d.com/legal/privacy-policy
• IronSource: http://www.ironsrc.com/wp-content/uploads/2019/03/ironSource-Privacy-Policy.pdf
• Vungle, Inc.: https://vungle.com/privacy/
• Fyber: https://www.fyber.com/privacy-policy/
• InMobi: https://www.inmobi.com/privacy-policy/

Notice: This Doctrine does not control the server-side logic of these external entities. Users must audit the distinct privacy documentation of these third parties to evaluate their data routing.

4.2 Backend Operations Vendors To preempt server bottlenecks and guarantee networking stability, we lease processing power and analytic dashboards from specialized enterprise vendors:

• Firebase (Google LLC): https://firebase.google.com/support/privacy
• Adjust: https://www.adjust.com/terms/privacy-policy/

5. Underage Player Provisions

The Lane Jam: Car Puzzle application binaries are strictly not compiled for, nor distributed to, individuals under the age of 13. We implement hard filters against the intentional ingestion of personally identifiable information (PII) from this demographic. Upon verification that restricted data has bypassed our safety nets, rapid database eradication scripts will be executed. Custodians identifying an unauthorized data leak from a minor must contact our support desk for an immediate purge.

6. Security Protocols

We prioritize your trust and deploy enterprise-grade cryptographic perimeters to secure your data. However, the digital community must concede the reality that no cloud infrastructure or internet transmission is flawlessly impenetrable. Therefore, we cannot issue an absolute legal warranty against unauthorized zero-day exfiltration.

7. System-Level Broadcasts

Conditioned strictly upon your opt-in flag, we may push system-level payloads, encompassing game alerts, promotional offers, and maintenance logs, directly to your Android/Google interface. You wield absolute authority to kill this authorization and block these payloads via the native notification manager inside your device’s OS settings.

8. Statutory Privacy Privileges

8.1 European Economic Area (EEA) Mandates We commit to a standard one-month Service Level Agreement (SLA) for resolving privacy inquiries. For highly fragmented or complex queries, GDPR Article 12 grants us the legal flexibility to delay resolution by an extra two months. We will proactively transmit an explanatory alert regarding any such delay.

• (1) Access Entitlement: Governed by GDPR Article 15, you may petition for a granular readout of your retained records, processing motives, external recipients, and archival lifespans. A digital payload can be extracted, barring IP conflicts.
• (2) Processing Objection: Under GDPR Article 21, you can contest processing tied to "legitimate interests" (Article 6(1)(f)). We will kill active processing threads unless we establish overriding legal justifications. Objecting to direct marketing data usage remains an absolute, unconditional right.
• (3) Data Rectification: Under GDPR Article 16, you wield the authority to compel the overwrite of corrupted, inaccurate, or partial database entries regarding your profile.
• (4) Processing Restriction: Per GDPR Article 18, you may mandate a system-level quarantine on the active processing of your data under narrowly defined legal parameters.
• (5) Consent Revocation: Dictated by GDPR Article 7, if a specific workflow hinges upon your consent, you may nullify that consent instantly. This revocation is forward-looking and does not invalidate prior computational actions.
• (6) Data Portability: Authorized by GDPR Article 20, you possess the clearance to extract your personal files in a standardized, machine-readable format and route them to an alternate data controller without systemic friction.

8.2 California Resident Directives (CCPA)

• (1) Resolution Window: We target a 45-day statutory turnaround for verifiable consumer inquiries. If technical complexities necessitate a prolongation (up to a 90-day absolute ceiling), a formal written status log will be dispatched.
• (2) Retroactive Lookback: Evidentiary data dumps provided to you are strictly limited to the 12-month trailing window preceding the timestamp of your request.
• (3) Opt-Out Directive: The CCPA enshrines your undeniable right to set a "Do Not Sell" command regarding your personal telemetry.
• (4) Transparency Right: You are granted full visibility into the exact data vectors we extract and our operational motives, as transparently hardcoded in this Doctrine.
• (5) Audit Access: Twice every calendar year, completely free of charge, you may execute a demand for a comprehensive ledger of the PII logged over the trailing 12 months.
• (6) Deletion Command: You can issue a mandate for the permanent wiping of personal data collected over the preceding 12 months, provided it does not trigger statutory exemptions (e.g., critical bug fixing, legal compliance, or security logging).

9. Invoking Data Eradication

Should your personal records no longer serve a functional requirement for our services, you possess the authority to mandate a permanent data purge. To trigger this systemic erasure protocol, please route your formal directive to the designated compliance email below.

10. Compliance Officer Contact

For regulatory clarifications, security feedback, or the execution of your formal privacy rights, direct all correspondence to: Contact Email: [email protected]