Nimzo — Stay Calm. Think Fast.

Privacy Policy

Effective date: 1 October 2026 · Last updated: 2 October 2026

This policy explains what information Nimzo uses, where it goes and why, and the choices you have. It covers the Nimzo game for iPhone and Android, and our websites, nimzo.touheed.app and touheed.app.

1. Who we are

Nimzo is made by Touheed Khan, an independent developer in Bengaluru, Karnataka, India ("we", "us", "our"). Under data protection law, we are the controller of the personal information we handle, as this policy describes. You can reach us at contact.touheed@gmail.com.

Nimzo uses services from Apple, Google and Cloudflare. They handle information under their own privacy policies, which the sections below link to.

We share personal information only with these three companies, and only for the purposes this policy describes, unless the law requires us to disclose it. Each of them provides the same or equal protection of your data as this policy states, under its own privacy policy and its terms with us. We don't sell your data.

2. What Nimzo keeps on your phone

To remember your game, Nimzo saves the following in its own private storage on your phone:

• Progress: scores and personal bests; statistics such as correct answers, response times and accuracy; level and XP; achievements; themes and companions; your Focus balance; your Daily Challenge attempts; and your streak, including the local date and time zone of your last run, so travel doesn't break it.
• Settings: sound, music, haptics, theme, and whether the daily reminder is on and at what time.
• Run records: for your recent 60 Second Rush and counted Daily runs, and for the runs behind your leaderboard scores: when the run started, the challenge seed, your taps and their timing, your score and run tag, when you used Focus, and the app version. A run can be replayed from its record, so its score can be checked.
• Purchase records: which products you own, and the identifiers Apple or Google return for each purchase (see Purchases).
• Identifiers: a random install ID that Nimzo creates the first time it starts, which contains nothing about you, and your Game Center or Play Games player IDs if you sign in.
• Ad counters: for example, how many runs have passed since the last ad and how many ad rewards you've had today, so ads stay infrequent and daily limits work.
• Ad consent choices, stored by Google's consent tool where it applies.

We don't have a server that receives any of this. It stays on your phone, with these exceptions:

• a backup copy, if backup is on (section 3);
• your scores, run tags and achievements, which go to Apple or Google if you sign in to Game Center or Play Games. We can see the leaderboards, including player IDs, in their developer tools (section 4);
• your ad consent choices, which Google's ad software sends with its ad requests (section 5);
• the install ID, which goes to Apple or Google with each purchase (section 6).

Deleting Nimzo deletes everything it saved on your phone.

3. Backups

So your progress isn't lost when you change phones or reinstall Nimzo:

• iPhone: when you're signed in to iCloud, Nimzo keeps a copy of your progress and settings in your iCloud account, using iCloud key-value storage. Apple stores it, and we can't access it. Turning off iCloud for Nimzo in your iPhone's settings stops syncing, but the copy already in iCloud stays there. To delete that copy, use Erase progress in Nimzo's Settings while iCloud is still on for Nimzo. Nimzo on your other iPhones and iPads with the same Apple Account then erases its progress too when it next syncs, so the erased progress doesn't come back.
• Android: if backup is on, Android's Auto Backup includes Nimzo's saved data in your Google Account backup and restores it when you set up a new phone or reinstall Nimzo. Google stores it, and we can't access it. After you use Erase progress, your next backup replaces the old copy. You can also turn backup off, or manage your backups, in your phone's settings.

Erase progress deletes everything Nimzo saved on your phone, including unspent Focus, except your ad consent choice: Google's consent tool keeps it, and you can change it in Nimzo › Settings › Privacy choices. Remove Ads and themes you bought come back with Restore Purchases.

A full device backup, such as iCloud Backup or a backup on your computer, may also include Nimzo's data. Backups are covered by the Apple Privacy Policy and the Google Privacy Policy.

4. Leaderboards and achievements

Leaderboards and achievements are optional, and Nimzo works fully without them. They use Apple Game Center on iPhone and Google Play Games on Android. Nimzo has no usernames of its own: leaderboards show your Game Center or Play Games name.

If you're signed in, Nimzo sends Apple or Google:

• your Daily Challenge and 60 Second Rush scores, each with a run tag: a number that links the score to its run record on your phone;
• the achievements you unlock.

To show leaderboards, Nimzo reads ranks, scores and player names from Apple or Google, plus your own player ID so it can highlight your row. It shows other players' entries only while the screen is open and doesn't keep them. If you choose to see your friends' scores, Apple or Google may ask whether Nimzo can see your friends list. Nimzo uses that list only on your phone, to show their scores.

Other players can see your name and scores on the leaderboards, depending on your Game Center or Play Games settings.

We can see Nimzo's leaderboards, including player names, player IDs and scores, through Apple's and Google's developer tools. We use them only to find and remove cheated or impossible scores, to handle appeals, and to act on your requests about your scores. If we remove a score or block a player, we keep a short record of the action (the date, platform, leaderboard, player ID, score and reason), so we can handle appeals and spot repeated cheating.

Apple handles Game Center data under its Game Center & Privacy notice and the Apple Privacy Policy. You can sign out of Game Center or change your profile in the Settings app. Google handles Play Games data under the Google Privacy Policy, and you can choose who sees your Play Games activity in your Play Games profile settings.

5. Advertising (Google AdMob)

Nimzo is free to play and shows ads from Google AdMob, through Google's Mobile Ads software:

• full-screen ads at natural breaks between runs, never during a challenge, and not in your first few games;
• rewarded ads that you choose to watch, for a revive in Endless, double XP for a run, or one Focus (up to 3 Focus a day from ads). You never have to watch one.

Non-personalized ads, no tracking

Nimzo asks Google for non-personalized ads only, in every country. These ads aren't based on your past behavior. Google chooses them from context, such as the app you're using and your general location (for example, your city) estimated from your IP address. On iPhone, Nimzo doesn't show Apple's App Tracking Transparency prompt, so your device's advertising identifier (IDFA) isn't available to Nimzo or to Google. We don't use data from Nimzo to track you across other companies' apps or websites.

What Google's software collects

To show ads, Google's software may collect your IP address; device and app information, such as device model, operating system, app version and language; identifiers (on Android, your device's advertising ID, and on both platforms, identifiers that stay within Nimzo or on your device); advertising data, such as which ads you saw and whether you tapped them; interactions such as app launches; and diagnostic data such as crash logs and performance data. Even with non-personalized ads, Google uses identifiers to limit how often you see the same ad, to report on ads in aggregate, and to detect fraud and abuse, not to target ads at you.

On Android, you can reset or delete your advertising ID at any time in your phone's settings.

Google processes this data as described in How Google uses information from sites or apps that use our services and the Google Privacy Policy. Google also explains personalized and non-personalized ads.

Your consent in the EEA, the UK and Switzerland

Where the law requires consent to store or read information on your device for advertising, including in the European Economic Area, the United Kingdom and Switzerland, Nimzo shows Google's consent form before it requests any ad. You can decline, and Nimzo still works. You can change or withdraw your choice at any time in Nimzo › Settings › Privacy choices. That row appears where the law requires it.

Removing ads

The Remove Ads purchase turns off the full-screen ads between runs. Rewarded ads stay available, because you choose them. If you never watch one, you won't see any ads.

If you see an ad that seems inappropriate, email us at contact.touheed@gmail.com with the time and what it showed, and we'll try to block it. You can also report it to Google with the ad's own info or options button.

6. Purchases

On iPhone you can buy Remove Ads, premium themes and Focus packs. On Android you can buy Remove Ads and premium themes. Apple (through the App Store) or Google (through Google Play Billing) processes each purchase, and we never receive your name, payment card or account details.

For each purchase, Apple or Google gives Nimzo transaction identifiers: on iPhone, the transaction IDs and Apple's signed transaction record; on Android, the purchase token and order ID. Nimzo keeps them on your phone with the product, to verify the purchase (on Android it also checks Google's signature on it), to unlock and restore what you bought, and to sort out problems such as a missing item or a refund. Nimzo also gives Apple or Google its random install ID with each purchase. They store it with the transaction, so a purchase can be matched to this installation.

Apple and Google also give us sales reports for accounting. Google Play's order reports list each order: the order number, date, product, price and taxes, the device model, and the buyer's country and state, plus the city and postal code in some countries. Apple's reports show sales totals by product and country, not individual buyers. We use these reports only for accounting, tax and refund questions, and we keep them as long as tax law requires (see How long we keep data).

Apple's and Google's handling of purchase data is covered by the Apple Privacy Policy and the Google Privacy Policy.

7. The game settings file

When Nimzo starts, it downloads a small settings file from our website, nimzo.touheed.app, for example to know which leaderboards are active. The request doesn't include your progress, your player ID or your install ID. Like any web request, it shows the server your IP address and basic details, such as the time and the software making the request. Cloudflare serves the file for us (see Our websites).

8. Support emails

If you email us, we receive your email address, your message and anything you attach. We use them only to answer you and to fix what you report. Our email is provided by Google (Gmail), which stores it under the Google Privacy Policy.

9. Notifications

Daily reminders are off until you turn them on, either in Nimzo's Settings or from the one-time "Remind me daily" offer after a Daily Challenge. Only then does your phone ask for permission. Nimzo schedules at most one reminder a day, at the time you choose, on your phone. It doesn't use push notifications, and nothing about your reminders is sent to us or anyone else. You can turn reminders off in Nimzo's Settings or in your phone's settings.

10. Sharing a score

When you share a score, Nimzo creates the score card image or text on your phone and opens your phone's share sheet. It goes only where you choose to send it, and we don't receive it. Nimzo never reads your photos. On iPhone, if you choose Save Image in the share sheet, iOS may ask whether Nimzo can add photos to your library. That permission lets Nimzo add the image, not see your photos.

11. Permissions

Nimzo doesn't ask for access to your contacts, camera, microphone, location, calendars or Bluetooth, and it can't read your photos. It asks only for:

• notifications, when you turn on reminders;
• adding a score card to your photo library, on iPhone, when you choose Save Image;
• your Game Center or Play Games friends list, if you choose to see your friends' scores.

Basic permissions, such as internet access, are granted without a prompt.

12. Analytics and crash reports

Nimzo has no analytics SDK of its own, doesn't track you across other companies' apps, and sends us no data about how you play. Google's ad software (see section 5) collects some usage and diagnostic data, which Google also uses for ad measurement and analytics.

Apple and Google give us aggregated statistics, such as downloads and crash rates, and crash reports from people who chose to share diagnostics with app developers in their phone's settings. These don't identify you to us.

If we add an analytics provider in a future version, we'll update this policy before that version is released.

13. Our websites

Our websites, nimzo.touheed.app and touheed.app, use no cookies, no analytics and no scripts. Cloudflare hosts them (Cloudflare Pages) and also serves the game settings file. Like any web host, Cloudflare processes your IP address and request details, such as the page, the time and your browser, to deliver pages and protect the sites from attacks. It does this under the Cloudflare Privacy Policy. We look at Cloudflare's traffic statistics only in aggregate, and never use them to identify you. Our websites don't track you, so browser Do Not Track signals change nothing.

The pages use the Sora typeface from Google Fonts, so your browser sends your IP address to Google when it loads the font. See the Google Fonts privacy FAQ.

14. Legal bases

Where privacy laws such as the GDPR in the EEA, the UK and Switzerland require a legal basis, we rely on:

• Providing the game you asked for (performance of a contract): saving your progress and settings, backups, leaderboards and achievements once you sign in, and making and restoring purchases.
• Our legitimate interests in keeping Nimzo working, secure and free of cheating, and in funding a free game with ads: run records and run tags, removing cheated scores and blocking players, the game settings file, hosting our websites and loading their font, showing non-personalized ads, and answering your emails.
• Your consent, where the law requires it: for storing or reading information on your device for advertising (asked through Google's consent form), and for reminders, which you turn on yourself. You can withdraw consent at any time. This doesn't affect what happened before.
• Legal obligations, where the law requires us to keep or share information, such as the sales and tax records that tax law requires us to keep.

Google also processes ad data for its own purposes, on its own legal bases, as its privacy policy describes.

You don't have to give us any personal information. Nimzo works without an account, and only leaderboards need a Game Center or Play Games sign-in. We make no decisions about you based solely on automated processing that have legal or similarly significant effects. Nimzo checks a run only to decide whether to submit its score.

15. Children

Nimzo is a general-audience game. It isn't directed at children under 13, and we don't knowingly collect personal information from children. Nimzo doesn't ask anyone for their age or personal details. If you think a child has sent us personal information, for example by email, contact us and we'll delete it.

16. How long we keep data

17. Your rights and choices

Most of your Nimzo data never leaves your phone, so you control it directly:

• Use Erase progress in Nimzo's Settings to erase everything Nimzo saved on your phone, except your ad consent choice (see below), and, on iPhone, its iCloud copy and Nimzo's progress on your other devices with the same Apple Account. Deleting Nimzo also erases what it saved on your phone, but not the iCloud copy.
• Turn off iCloud for Nimzo (iPhone) or backup (Android) to stop new backup copies.
• Sign out of Game Center or Play Games, or manage your profile, in your phone's settings or your Play Games profile.
• Change your ad consent in Nimzo › Settings › Privacy choices, where it applies. On Android, reset or delete your advertising ID in your phone's settings.
• Turn the daily reminder off in Nimzo's Settings at any time.

For information we hold, such as your emails, sales reports and any moderation records, and for your scores on Nimzo's leaderboards, email us at contact.touheed@gmail.com. Depending on where you live, you may have the right to access, correct or delete your personal information, to get a copy of it, to object to or restrict how we use it, and to withdraw your consent. We'll answer within 30 days. To make sure a request is really yours, we may ask for details such as your Game Center or Play Games name and a recent score.

EEA, UK and Switzerland

You can also complain to your local data protection authority.

India

Under the Digital Personal Data Protection Act, 2023, you can ask us for a summary of your personal data and how we use it, ask us to correct, complete, update or erase it, and nominate someone to exercise these rights for you if you die or can't act for yourself. For grievances, contact Touheed Khan at contact.touheed@gmail.com. If we don't resolve your grievance, you can complain to the Data Protection Board of India.

United States

We don't sell your personal information or share it for cross-context behavioral advertising, and we don't use or disclose sensitive personal information.

18. International transfers

We're based in India. Apple, Google and Cloudflare process data in many countries, including the United States, and protect international transfers with their own safeguards, such as the European Commission's Standard Contractual Clauses, as their privacy policies explain. Emails you send us are stored by Google and read by us in India, so if you write from another country, your message is transferred to India so we can answer it.

19. Security

Nimzo keeps your data in its private storage on your phone, which iOS and Android protect from other apps. Leaderboards, purchases, ads, backups and the game settings file use encrypted connections to Apple, Google and Cloudflare. We keep what we receive to a minimum. No storage or transfer is perfectly secure, but collecting as little as possible is the best protection we can offer.

20. Changes to this policy

We'll update this policy before a change in how Nimzo handles your data reaches you, and change the date at the top. For example, if we add an online service for leaderboards or accounts, personalized ads or an analytics provider, this policy will describe it before the version that uses it is released. For significant changes, we'll also tell you in the release notes or in the app, and where the law requires your consent, we'll ask for it first.

21. Contact

Email us with any privacy question, request or grievance.