Hero Investor Privacy Policy

Last updated: October 8, 2026

Smart Atum Studio is an independent game studio operated by Ramy Tawfik ("we", "us", or "our"). This policy describes how information is handled in Hero Investor: Business Tycoon for Android, package com.smartatum.investorhero. It does not describe the separate Windows PC edition.

The game is an entertainment simulation. Names, balances, assets, and business results created in gameplay are in-game content, not records of your real-world finances.

1. Information and purposes

Device, network, and service identifiers

The game and its integrated services may process device model, operating-system and app version, language, IP address, advertising identifiers where available, and technical identifiers used to operate those services. Advertising and analytics services may derive an approximate location from network information, such as your IP address.

Google Analytics for Firebase uses an Analytics App Instance ID to associate events with an app installation. Other Firebase services use their own installation identifiers or messaging tokens. These are distinct from your Google Play Games player ID and are not your email address. Identifiers can still be associated with activity, diagnostics, or purchase-verification records; they are not described here as fully anonymous.

Gameplay analytics, diagnostics, and performance

Firebase Analytics records gameplay and feature-use events, in-game progress and statistics, purchases, ad requests and impressions, ad revenue, reward events, sharing actions, and selected preferences such as interface style and music settings. We use these records to understand feature use and improve the game.

Firebase Crashlytics processes crash and error reports with diagnostic information. Firebase Performance Monitoring measures application performance, including startup and gameplay-operation timing, and performance information collected by its SDK. Firebase Remote Config retrieves settings used to operate the game, such as update requirements and feature or fair-play controls.

Google Play Games and cloud saves

When you use Google Play Games, the game accesses your player ID and display name and uses Google services for achievements, leaderboard scores, and cloud saves. Cloud saves contain game progress, settings included in the save, chosen in-game player and company names, and other saved game state. Local copies are also stored on your device.

Scores can be submitted while you are signed in. Your Play Games profile information and scores may be visible to other players through leaderboards, subject to Google's profile and privacy settings. We do not receive your Google account password.

Purchases and verification

Google Play Billing handles purchases and payment processing. To verify and deliver a purchase, the game sends the purchase token, product ID, app package, app version, and Analytics App Instance ID when available to our Google Cloud Run backend. The backend checks the purchase with the Google Play Developer API and records verification information, which can include the order ID, product, verification result, app version, and app-instance identifier.

We use purchase records to deliver or restore eligible items, resolve purchase problems, and prevent invalid or repeated grants. We do not receive payment-card details from Google Play. Operational purchase notifications are also used to monitor purchase events, such as the product, transaction status, and event time.

Fair play and abuse prevention

The game checks for signs of tampering and implausible gameplay results. Related analytics and diagnostic records can include detection flags, a reason for blocking a score, submitted and calculated scores, app version, and the affected product. These signals help protect leaderboards and purchases and investigate errors or abuse. Suspected tampering can restrict affected features.

Notifications and support

Firebase Cloud Messaging uses a registration token to deliver notifications, including game announcements or purchase offers. The game can also schedule local reminders. If you contact support, we receive your email address, message, and any information you choose to provide so that we can respond.

2. Service providers

Information is processed by the services that provide the corresponding feature. Their own privacy notices describe how they handle information:

• Google AdMob, with Unity Ads and Meta Audience Network through AdMob mediation, for ad delivery, measurement, and fraud prevention. Advertising SDKs may process advertising and device identifiers, network information, approximate location, and ad interactions according to the applicable settings and choices. See the Google, Unity, and Meta privacy notices.
• Firebase Analytics, Crashlytics, Performance Monitoring, Remote Config, and Cloud Messaging for the functions described above. See Firebase privacy and security information.
• Google Play Games and Google Play Billing for platform features, saves, achievements, leaderboards, and purchases. See the Google Privacy Policy.
• Google Cloud for purchase verification, operational purchase-event processing, and service logs. See the Google Cloud Privacy Notice.

We may also disclose relevant information when required by law, to respond to a valid legal request, or to protect users and services from fraud or abuse. A transfer of the studio or its assets may involve relevant information, subject to applicable protections and notice requirements.

3. Advertising, notifications, and choices

The game uses Google's User Messaging Platform to obtain applicable advertising choices. Ad initialization is gated by whether that platform permits ad requests. Where required and available, you can reopen Privacy options in the game's Settings to review your choices. You can also manage advertising controls in Android settings.

Advertising choices do not themselves delete cloud saves, purchase records, or previously collected analytics and diagnostics. See the deletion section for those records. Manage notification permission through Android's app settings and use any notification controls available in the game. You can manage your Play Games profile and sign-in settings through Google.

4. Optional sharing of game content

You can choose to share in-game images and reports, such as a magazine cover or monthly report, through other apps. Shared content may include your chosen in-game names, fictional company details, and gameplay statistics. Sharing is initiated by you, and the app you choose handles the shared content under its own settings and privacy policy.

Review the content before sharing, especially if you chose to use a real name in the game. Separately, Firebase Analytics records use of sharing features and related gameplay statistics; this is distinct from the image or report you choose to send.

5. Retention and deletion

• Local game data remains on your device until you clear the app's storage or remove it. Exported images and backup files may remain in the locations you chose and need to be deleted separately.
• Play Games data and cloud saves are managed through Google's services. Removing the app does not by itself delete cloud data. See the instructions on our data-deletion page.
• Analytics, diagnostics, and performance data are retained according to the relevant service settings and lifecycle, for measuring use, troubleshooting, and improving reliability. Retention can differ by record type; aggregated reports may persist separately from individual event records.
• Purchase-verification and security records are retained as needed to verify purchases, investigate abuse, resolve disputes, and meet applicable recordkeeping obligations.
• Support correspondence is retained as needed to resolve the request and related follow-up or legal obligations.

We assess retention based on the purpose of a record, whether it is still needed to provide the feature or investigate a problem, and applicable legal requirements. Deletion requests are subject to records we can identify and control and to necessary legal, transaction, or security exceptions. Deleting local data does not automatically erase records already processed by service providers.

6. Privacy rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of personal data, object to or restrict processing, and withdraw consent where processing relies on consent. You may also complain to your local data-protection authority. Contact us to exercise applicable rights; we respond within the time required by applicable law.

Where a legal basis is required, processing depends on its purpose: providing requested game features and purchases, legitimate interests in reliability and fraud prevention where permitted, legal obligations, or consent where required. This notice does not replace a consent choice that must be obtained separately.

7. Security, international processing, and children

We use safeguards appropriate to the information and feature, including HTTPS for backend purchase-verification requests. No system can guarantee complete security. Providers may process information outside your country under their applicable safeguards.

Hero Investor is not directed to children under 13; a higher age threshold may apply under local law. If you believe a child has provided personal information contrary to these requirements, contact us so that we can investigate and take appropriate action.

8. Contact and changes

We update this policy when data practices or services change and show the revised date on this page. The current official policy is hosted on smartatum.com. See our studio privacy overview for website and other product information.