Trackline Privacy Policy

Last updated: 2026-10-25

This policy covers Trackline, a puzzle game for iOS and Android published by The Gymbiote Company Inc. ("we", "us"). It explains what the game collects, why, who processes it, and how to delete it. The policy for the Gymbiote fitness app is separate, at gymbiote.com/privacy.

1. Playing without an account

You can play Trackline without signing in. Your progress is then stored only on your phone, and we receive none of it. Ads (Section 4) still run unless you are in a region or consent state where they cannot.

2. What we collect when you sign in

• Account — your email address and a password (stored by Google Firebase Authentication as a salted hash, never by us), or a sign-in through Apple (iOS) or Google. With Apple you may hide your email; we then receive a private relay address.
• Trainer name — the name you choose. It is public: it appears on the leaderboard to every player.
• Leaderboard score — the number of levels you have completed and stars earned. Public, next to your trainer name.
• Game save — your levels, stars, gymbiotes, rings, REPS balance and similar game progress, synced to Google Firebase Firestore so it follows your account to another phone. It is private to your account.
• Purchase records — when you buy REPS, the store transaction id and product, so a purchase is credited once and can be restored.

We do not collect your contacts, photos, location, health data or browsing history.

3. In-app purchases

Purchases are processed by Apple (App Store) or Google (Google Play). We never see your card or payment details. We use RevenueCat to confirm purchases; it receives the store receipt and an anonymous account id. revenuecat.com/privacy

4. Advertising

• Trackline shows a banner ad and an optional rewarded video ad through Google AdMob. AdMob may receive your device advertising identifier, IP address, approximate location derived from it, device information and ad-interaction events. policies.google.com/technologies/ads
• Where the law requires it (for example the EEA, UK and Switzerland), the game asks for your consent through Google's consent form before any ad is requested. You can change your choice later from the game.
• On iOS, use of the advertising identifier is gated by Apple's App Tracking Transparency prompt. You can change it at any time in Settings → Privacy & Security → Tracking. If you decline, ads are not personalized.

5. Data kept only on your phone

Your settings, your offline game save and the game's error log stay on your device. The error log is never uploaded. Reminders the game schedules are local notifications created on the phone itself.

6. How we share information

We do not sell your personal data. Besides your public trainer name and score, we share data only with the processors named above (Google Firebase, Apple, Google, RevenueCat, Google AdMob) to run the game, when the law requires it, or with a successor if the company is acquired, subject to this policy.

7. Security and retention

All traffic is encrypted in transit (TLS), and Firebase encrypts data at rest. Security rules let only you read or write your save; anyone can read the leaderboard, and only you can change your own row. We keep your account data while your account exists. When you delete it (Section 9), your account, leaderboard row and cloud save are removed immediately; backups age out within 30 days. Store purchase records are kept by Apple, Google and RevenueCat under their own policies.

8. Children

Trackline is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email support@gymbiote.com and we will delete it.

9. Your rights and deleting your data

Delete your account in the game: RANKS → Delete account. Or email support@gymbiote.com. Full steps are at gymbiote.com/trackline/delete-account. To request a copy or correction of your data, email the same address; we answer within 30 days.

California residents may know, access, delete and correct their personal information and will not be discriminated against for doing so. Residents of the EEA, UK and Switzerland may also restrict, port or object to processing and complain to their data-protection authority. Our legal bases are our contract with you (running the game and your account), legitimate interests (security, the leaderboard) and your consent (personalized ads).

10. International transfers

We are based in the United States and our processors operate globally, so your data may be processed outside your country. Where required we rely on Standard Contractual Clauses or equivalent safeguards.

11. Changes

We may update this policy. The date at the top changes when we do, and material changes are announced in the game.

12. Contact

Email support@gymbiote.com.

The Gymbiote Company Inc.