EdenBees Privacy Policy

Version 2026-10-08 · Last updated 8 October 2026 · Applies to the EdenBees game for Android

You are reading the current Privacy Policy. Permanent link to this version: /privacy/2026-10-08/. All versions

EdenBees is a Bible-trivia game made by PhoxWare (“we”, “us”). When you play EdenBees (the “Game”) or use the online services behind it (together, the “Services”), we collect information about you (“Information”), some of which counts as “personal information” or “personal data” under privacy laws. This policy explains what we collect, why we collect it, who receives it, how long we keep it, and the choices you have.

This policy covers the Game and the services that support it. Our marketing website, edenbees.com, is an information site and holds no game data.

In short

Who We Are

The controller of your personal data is PhoxWare Studios, 24 ET ND. For privacy questions or requests, contact privacy@edenbees.com. For the purposes of the UK GDPR and EU GDPR we are the “controller”, and for Canada’s PIPEDA we are the organisation responsible for your personal information.

1. What Information Do We Collect?

We collect Information in three ways: you give it to us, we collect it as you use the Game, or we receive it from other parties. Where the law requires it, we ask for your consent first.

Information you give us

• Player name. When you set up, the Game suggests a generated name, which you can keep or change (up to 25 characters). We recommend not using your real name.
• Country, language and time zone settings, used to show the right content and to work out when your daily reset happens.
• Device name. A label for your handset (up to 25 characters) that you can change.
• Recovery email and password (optional). If you choose to claim your account, we store your email address and a securely hashed version of your password (we never store the password itself). This lets you recover your account and use it on another device.
• Your privacy choices. A record of each consent choice you make, what you chose, when, and which version of this policy you were shown. We also record when you accept this policy.
• Reports and appeals. If you flag a question as wrong, submit a bug report (free text of up to about 1,000 characters, plus the screen you were on, your device model and OS version), or appeal a suspension or device ban (free text of up to 2,000 characters), we keep what you send. Please don’t include sensitive information in free-text fields.
• Privacy requests. Requests to download or delete your data, and the re-confirmation of your identity that a deletion request requires.

Information collected as you play

• Account and device identifiers. Random identifiers for your player account and your device, your device model and Android version, and records of when and how you signed in (sign-in tokens are stored only in hashed form).
• Gameplay data. Games you play, the questions you were asked and your answers, scores, time taken per question, lifelines used, experience points, coins, game passes, badges, leaderboard standing, and referral codes and links.
• Fair-play data. Signals we use to detect cheating and abuse, and records of any suspension or device ban, including appeals.
• IP address. Handled briefly by our servers to work out your region (for example, to show the right consent form and serve ads) and to protect our servers from abusive request volumes. We do not use it to locate you more precisely than your country.
• Analytics (only if you opt in). Gameplay events such as which question was answered, whether it was correct, how long it took, plus your app version, platform, region and any experiments you are part of. When you opt out, collection stops immediately.
• Crash and error reports. Crashes are always recorded in a basic form: the type of error, its message and technical trace, app version, the screen you were on, and memory use. This basic report is not linked to your device or account. If you opt in to crash and diagnostic reporting, we also record your device model, Android version and language and link the report to your account. Technical error messages can occasionally contain incidental details from your device, which is why we limit how long we keep them and scrub them when an account is deleted.
• Advertising information. When you choose to watch a rewarded ad, Google’s AdMob service collects your Android advertising ID, device identifiers, and information about how you interact with the ad. No ad is requested until you have answered Google’s consent form.
• Inbox messages. The in-game inbox is one-way: we send messages to you, and nobody else can message you through the Game.

Information from others

• Google provides your answers to the ad consent form and the ad-related signals described above. We do not use Google sign-in, and Google Play does not give us your name, email or payment details.
• We do not buy Information about you from data brokers.

What we don’t collect

We do not collect your precise location, contacts, photos, microphone or camera data, date of birth or age, or payment details. The current version of the Game has no real-money purchases.

2. How Do We Use the Information We Collect?

• To provide the Game you asked for: running your account, saving progress, scoring games, awarding rewards, showing leaderboards, delivering inbox messages and keeping offline question packs up to date.
• To keep the Game fair and secure: detecting cheating and abuse, applying and reviewing suspensions and device bans, limiting abusive traffic, and investigating incidents. Some integrity checks are automated. Any suspension or ban can be appealed, and appeals are decided by a member of our team.
• To fix and improve the Game: diagnosing crashes and, if you opt in, analysing how questions and features perform, balancing difficulty, and testing changes.
• To show rewarded ads: ads are optional and tied to earning game passes. Personalised ads are used only if you agree through Google’s consent form; otherwise ads are non-personalised.
• To email you about your account: we send only service emails that you trigger, such as account verification, password reset and appeal outcomes. We do not currently send marketing emails. If that changes, we will do it only if you have opted in to marketing communications.
• To meet legal obligations and handle your requests: keeping the records needed to show we respect your choices, responding to access and deletion requests, and defending legal claims.
• To produce statistics that do not identify you.

3. Who Do We Disclose Your Information To?

We share Information only with the organisations below, who act on our instructions, and in the limited cases that follow.

Other players. Your player name appears to other players on leaderboards only if you have turned on the leaderboard display name option. Otherwise others see an anonymous label. You always see your own name.

Analytics and crash reports stay with us. We do not use any third-party analytics or crash-reporting service.

Legal and safety. We may disclose Information if the law requires it, to respond to valid legal process, to protect the safety of players or our Services, or to establish or defend legal claims.

Business changes. If we merge with or are acquired by another business, or sell the Game, Information may transfer as part of that deal. We will tell you and honour the choices described here.

Advertising and “sale”. We do not sell your Information for money. When you agree to personalised ads, Google may use your advertising ID to tailor ads, which some laws describe as “sharing” for advertising. You can change this at any time (see section 4).

4. How Can You Control Your Information?

In the Game, go to Settings → Privacy. Changes take effect immediately.

Ad preferences. Choose “Manage ad preferences” in Settings → Privacy to reopen Google’s consent form and change your ad choices. You can also reset your advertising ID or opt out of ad personalisation in your Android system settings.

Download my data. Request a copy of your data from Settings → Privacy. You receive a file with your profile, devices, consent history, gameplay history and answers, referrals, appeals, privacy history and crash reports. The file is ready shortly afterwards, stays available for 24 hours, and you can make one request per day. Your export includes data we already hold even if you have since switched a consent off.

Delete my account. Choose Delete my account in Settings → Privacy. You will be asked to confirm it is you (with your password if you have a recovery email, otherwise through your device). Your account is deactivated at once and disappears from leaderboards. You then have 14 days to cancel from within the Game. After 14 days your personal data is permanently deleted or irreversibly anonymised. If your account is subject to an open legal hold or fraud investigation, we will tell you at the time that we cannot delete it yet, and we will delete it once the matter closes.

What stays after deletion. A few records are not deleted because their purpose is to outlive the account: device records used to block banned or abusive devices and enforce referral limits (these hold device identifiers, not your name), and a seven-year log of privacy actions in which your identifier has been replaced by a random reference that cannot be traced back to you. Gameplay and crash records that must remain for statistics are stripped of anything that points to you.

You can also make requests by contacting us (section 12).

5. How Long Do We Keep Information?

We keep Information only as long as we need it for the purposes above.

6. How Do We Secure Your Information?

• All traffic between the Game and our servers is encrypted in transit (TLS 1.2 or higher).
• Our databases and file storage are encrypted at rest.
• Passwords are stored only as salted, hashed values.
• Every request is tied to your signed-in account on our servers, so one player cannot read or change another player’s data.
• Our staff have no direct access to the production database. Access to personal data goes through audited, time-limited tooling.
• We limit request rates to resist abuse and monitor for unusual access.
• If a breach is likely to put your rights at risk, we will notify the relevant data protection authority within 72 hours where the law requires, and we will tell affected players where required.

No system is perfectly secure. Please keep your password private and your device protected.

7. Our Legal Bases (UK and EU)

• Contract: running your account and the Game, scoring, rewards, leaderboards you see, the inbox, account recovery and service emails.
• Legitimate interests: keeping the Game secure and fair, preventing abuse, basic crash diagnostics, limiting abusive traffic, producing anonymous statistics, and defending legal claims. We balance these against your rights, and you can object (section 10).
• Consent: analytics, marketing communications, showing your name to other players on leaderboards, crash reports that identify your device, and personalised ads. You can withdraw consent at any time without affecting what we did before you withdrew.
• Legal obligation: keeping records the law requires and responding to your rights requests.

8. International Transfers

We host the Game on Microsoft Azure in UK South. Google may process ad-related Information in other countries. Where Information is transferred outside the UK, the European Economic Area or Canada to a country without an equivalent level of protection, we rely on approved safeguards such as adequacy decisions or standard contractual clauses.

9. Children

EdenBees is a general-audience trivia game and is not directed at children. We do not ask for your age or date of birth, so we do not know which players are children. The Game has no chat, messaging, friend lists or comments, and other players can see only your player name on leaderboards, and only if you opt in. We do not knowingly collect personal information from children under 13, or under the higher age that applies in your country. If you believe a child has given us personal information, contact us and we will delete it.

10. Your Rights

We apply the same rights to every player, wherever you live. Depending on where you live, you may have the right to:

• Access the Information we hold about you, and receive a copy.
• Correct inaccurate Information (you can change your player name and device name in the Game).
• Delete your Information.
• Restrict or object to our use of it, including where we rely on legitimate interests.
• Take your data with you in a portable format (the downloadable file in section 4 is in a standard format).
• Withdraw consent at any time.
• Complain to a regulator. In the UK, the Information Commissioner’s Office (ico.org.uk). In the EU, your local data protection authority. In Canada, the Office of the Privacy Commissioner of Canada. We would appreciate the chance to resolve your concern first.

We respond to rights requests within 30 days. We may extend this where the law allows, and will tell you if we do. If you live in a US state or another region with its own privacy law, you may have additional rights, and we will honour valid requests under the law that applies to you. We will not treat you differently for exercising your rights.

11. Changes to This Policy

Each version of this policy has a version label shown at the top, and we keep a record of which version you accepted and when. If we make a significant change, we will ask you to review and accept the new version the next time you open the Game. For minor changes, such as fixing a typo, we may update the policy without asking you again. If we release the Game on other platforms or add features that collect new kinds of Information, we will update this policy before they launch. The current policy is always available in the Game under Settings → Legal & Compliance, and you do not need to sign in to read it.

12. Contact Us

PhoxWare Studios 24 ET ND Email: privacy@edenbees.com