Privacy Policy

This Privacy Policy explains how Misbau LLC (“we”, “us”, or “our”) handles information in connection with Murmy, our mobile application for iOS and Android.

Murmy is a relaxing, single-player game. Using one finger, you lead a flocking swarm of light across the screen to bloom dormant “buds” into flowers of light as the scene shifts from night toward dawn. It is a wordless, meditative experience with no accounts, no competition, and no fail states. The main journey is free to play, with an optional one-time in-app purchase that unlocks an endless “wander” mode.

The short version: Murmy does not require an account and does not collect personal information about you. Your game progress and settings are stored only on your own device. The one exception is purchases, which are processed by Apple, Google, and RevenueCat so that we can deliver and restore your unlock. We do not use analytics or advertising, we do not track you, and we do not sell or share your personal information.

1. What information we handle

Information you provide to us. If you email us (for example, for support), we receive your email address and whatever you choose to write. We use it only to reply.

Data stored on your device. Murmy saves your game state locally on your device — your progress, settings, whether you have purchased the unlock, and your cumulative “lights” and “nights” counts. This information stays on your device, is not transmitted to us, and is removed when you delete the app.

Purchase data. If you buy the optional unlock, the transaction is processed by Apple or Google. We use RevenueCat to validate the purchase and to let you restore it on your devices. For this purpose, RevenueCat processes purchase/transaction details and a randomly generated app-user identifier, and may process limited technical information such as an IP address. We receive confirmation of entitlement and aggregate, non-identifying purchase statistics; we do not receive your payment card details. Apple, Google, and RevenueCat handle this data under their own privacy policies: Apple, Google, RevenueCat.

What we do not collect. We do not use analytics or telemetry SDKs, we do not serve advertising, we do not track you across apps or websites, we do not collect your location, contacts, photos, microphone, or camera, and we do not collect information about you from third parties.

2. How we use information

We use the limited information described above only to:

• deliver the app and its features;
• process and restore your one-time purchase;
• respond to you if you contact us for support; and
• comply with the law and protect against fraud or misuse.

3. Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR require us to identify a legal basis for processing personal information. We rely on:

• Performance of a contract — to process and restore purchases you make;
• Consent — when you contact us voluntarily (you may withdraw consent at any time);
• Legitimate interests — to keep the app secure and prevent fraud or abuse;
• Legal obligations — where the law requires it.

4. Who we share information with

We do not sell your personal information and we do not share it for advertising. We rely on a small number of providers strictly to operate the app’s purchase feature:

• Apple App Store / Google Play — to process payments and deliver in-app purchases.
• RevenueCat — to validate and restore your one-time unlock.

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of our business, in which case we will continue to protect your information and notify you of any change in how it is handled.

5. International transfers

We do not operate our own servers that store your personal information. The providers we use to process purchases — Apple, Google, and RevenueCat — operate in the United States and other countries, so purchase-related data may be processed there. Where these transfers involve personal information from the EEA, UK, or Switzerland, those providers rely on recognised transfer safeguards (such as the European Commission’s Standard Contractual Clauses) under their own privacy programs.

6. How long we keep information

Game data stored on your device remains until you delete the app. Purchase records are retained by Apple, Google, and RevenueCat for as long as needed to provide and restore your purchase and to meet their own legal and accounting obligations. If you email us, we keep that correspondence only as long as needed to handle your request.

7. How we keep information safe

We follow the principle of collecting as little as possible — the strongest protection is that there is almost nothing about you to expose. The providers we rely on apply their own technical and organisational security measures. That said, no method of electronic storage or transmission is ever completely secure, so we cannot guarantee absolute security.

8. Children

Murmy is intended for a general audience and is not directed to children. Because the app has no accounts and does not collect personal information from anyone, we do not knowingly collect personal information from children. If you believe a child has somehow provided us with personal information (for example, by emailing us), please contact us at [email protected] and we will delete it.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, to object to or restrict its processing, or to data portability. Because we hold little or no personal information about you, there is often little for us to act on — but you can always contact us and we will respond in accordance with applicable law. For purchase records held by Apple, Google, or RevenueCat, you can exercise rights through them or by contacting us and we will assist.

To make a request, email [email protected]. If you are in the EEA or UK and believe we have processed your information unlawfully, you may also lodge a complaint with your local data protection authority.

10. Do-Not-Track

Murmy does not track you or your activity across apps or websites, so there is nothing for a Do-Not-Track signal to limit. We do not respond to such signals because we do not engage in cross-site tracking.

11. US state privacy rights

If you are a resident of a US state with a comprehensive privacy law (for example California, Colorado, Connecticut, Texas, Virginia, and others), you may have rights to know about, access, correct, delete, or obtain a copy of personal information a business has collected about you, and to opt out of its sale, sharing for targeted advertising, or certain profiling.

For Murmy, this is straightforward: we do not collect personal information about you directly, we do not sell or share it for advertising, and we do not profile you. The only personal-information flow is the identifier and transaction data processed by Apple, Google, and RevenueCat solely to provide and restore your purchase, as described in section 1 and section 4. To exercise any right, email [email protected]; if we decline a request, you may appeal by replying to our response, and you may also contact your state attorney general.

12. Other regions

Australia & New Zealand. We handle personal information consistently with Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020. You may request access to or correction of your personal information by contacting us.

South Africa. Under POPIA, you may request access to or correction of your personal information by contacting us, and may complain to the Information Regulator if unsatisfied.

United Arab Emirates. As a UAE-based company, we handle personal information consistently with applicable UAE data protection law. You may contact us with any request or concern.

13. Updates to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide a more prominent notice. We encourage you to review this policy periodically.

14. How to contact us

If you have questions about this policy or your privacy, email us at [email protected] or write to us by post:

Misbau LLC
Sharjah Media City
P.O. Box 130130
Sharjah, United Arab Emirates

To review, update, or delete information: game data on your device is removed by deleting the app; for anything else, email [email protected] and we will help.

---

Murmy™ is a product of Misbau LLC.