1 Overview
MinuteBugtong ("we," "us," or "our") operates the MinuteBugtong mobile app (available on iOS and Android) and the website at minutebugtong.app (together, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
By using MinuteBugtong, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.
Short version: We collect minimal data needed to run the app — mainly analytics events to understand how people play, and account information only if you choose to register. We do not sell your personal data.
2 Information We Collect
Information You Provide
- Account registration: If you choose to create an account, we collect your email address, display name, and (optionally) a profile photo.
- User-generated content: Riddles ("bugtong") you submit through the app, including the clue text, answer, hints, and difficulty settings.
- Communications: If you contact us by email (e.g., hello@minutebugtong.app), we retain your message and email address to respond to you.
Information Collected Automatically
| Data Type | What We Collect | Purpose |
|---|---|---|
| Usage Events | Puzzle solved/revealed, hints opened, share actions, screen views | Understand how the app is used; improve features |
| Device Info | Device type, operating system version, app version | Diagnose crashes; ensure compatibility |
| App Instance ID | Anonymous identifier assigned by Firebase to your app install | Analytics aggregation; push notifications |
| Push Token | Expo/FCM push notification token (only if you opt in to notifications) | Send daily puzzle reminders |
| IP Address | Approximate IP (processed by Google's servers) | Approximate geo-region for analytics; spam prevention |
| Streak & Engagement | Current streak count, total puzzles solved, XP points | Leaderboard; personalized experience |
We do not collect precise GPS location, financial information, contacts, or microphone/camera data (camera access is only used if you upload a profile photo, and only with your explicit permission).
3 Google Analytics & Firebase Analytics
MinuteBugtong uses Google Analytics 4 (GA4) on the web version of our app and landing page (minutebugtong.app), and Firebase Analytics in the native iOS and Android apps — both provided by Google LLC.
What these tools collect:
- Page views and screen views (which screens you visit)
- User interactions (button taps, puzzle attempts, shares)
- Session duration and engagement metrics
- Device category, OS version, app version
- Approximate geographic region (country/city level, derived from IP)
- Anonymous user identifiers (Firebase Instance ID)
How Google Uses This Data
Google may use analytics data in accordance with their own privacy policies. For more information, please review:
IP Anonymization
GA4 automatically anonymizes IP addresses by default. We do not store raw IP addresses in our own systems.
Opting Out of Analytics
On the native app (iOS/Android): Analytics collection respects your device-level ad tracking preferences. You can disable analytics by contacting us at hello@minutebugtong.app and we will provide instructions to disable collection on your account.
On the web version: A cookie consent banner is shown on first visit. You may decline analytics tracking at that point. You can also use the Google Analytics Opt-Out Add-on for your browser.
4 How We Use Your Information
- Provide the Service: Authenticate you, save your progress, streak, and submissions to Firestore.
- Improve the app: Analyze usage patterns to understand which features are popular, identify bugs, and prioritize improvements.
- Push notifications: Send daily puzzle reminders only if you explicitly opt in through the app settings.
- Leaderboard & community: Display your display name and streak on public leaderboards (only if you are a registered user and have not opted out).
- Content moderation: Review user-submitted riddles before publishing them to the Community Feed.
- Legal compliance: Respond to lawful requests from authorities and comply with applicable law.
We do not use your data for targeted advertising, profiling, or automated decision-making that produces legal effects on you.
5 Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. We share data only with the following service providers, strictly for operating the Service:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Google Firebase (Firestore, Auth, Analytics, Cloud Functions, FCM) |
Database, authentication, analytics, push notifications, backend logic | firebase.google.com/support/privacy |
| Google Analytics 4 | Web analytics (landing page and web app) | policies.google.com/privacy |
| Expo (EAS) | App build and OTA update delivery | expo.dev/privacy |
| Apple App Store / Google Play | App distribution (governed by their respective terms) | Apple / Google |
We may disclose your information if required by law, legal process, or to protect the rights, property, or safety of MinuteBugtong, our users, or the public.
6 Cookies & Tracking Technologies
Web Version (play.minutebugtong.app & minutebugtong.app)
The web versions of MinuteBugtong use cookies and similar technologies for the following purposes:
- Analytics cookies (Google Analytics): Track page views, sessions, and user interactions to help us understand usage. These are only activated after you provide consent via the cookie banner.
- Functional storage (Firebase): Firebase uses browser storage (IndexedDB/localStorage) to maintain your authentication session and sync your progress.
- Preference storage: We store your cookie consent choice and app preferences (e.g., onboarding completed) in localStorage.
Native App (iOS & Android)
The native app does not use browser cookies. Firebase Analytics on native devices uses a persistent app instance identifier (not a cookie). Push notification tokens are stored in our Firestore database only when you opt in to notifications.
Managing Cookies
You can control analytics cookies via the consent banner on first visit to our web app. You may also configure your browser to block or delete cookies; however, some features of the web app may not function correctly without functional storage.
7 Your Rights & Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data (e.g., your display name, email).
- Deletion: Request deletion of your account and associated data. You can delete your account by contacting us at hello@minutebugtong.app.
- Opt out of analytics: Decline analytics tracking via the cookie consent banner (web) or by contacting us (native app).
- Opt out of notifications: Disable push notifications at any time in the app's Settings screen.
- Data portability: Request an export of your data in a machine-readable format.
To exercise any of these rights, please email us at hello@minutebugtong.app. We will respond within 30 days.
8 Children's Privacy
MinuteBugtong is designed for general audiences and is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at hello@minutebugtong.app and we will promptly delete it.
9 Data Retention
We retain your account data for as long as your account is active or as needed to provide the Service. Analytics data in Google Analytics/Firebase is retained for 14 months by default, after which it is automatically aggregated or deleted.
If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal or security reasons.
10 Security
We use industry-standard security measures to protect your data, including:
- Firebase Authentication for secure login (email/password and Google Sign-In)
- Firestore Security Rules to ensure users can only access their own data
- HTTPS encryption for all data in transit
- Firebase App Check to prevent unauthorized API access
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
11 Advertising & Ad Networks
MinuteBugtong may display advertisements served by third-party ad networks. This section describes how advertising works in the app and what data ad networks may collect.
Current status: Ads are not yet active in MinuteBugtong. This section is published in advance of our planned ad integration so you are fully informed before it goes live.
Ad Networks We Plan to Use
| Network | Platform | Privacy Policy |
|---|---|---|
| Google AdMob | iOS & Android app | policies.google.com/privacy |
| Google AdSense / Ad Manager | Web (play.minutebugtong.app) | policies.google.com/privacy |
What Ad Networks Collect
When ads are active, ad SDKs may collect the following on your device:
- Advertising identifiers: Apple's IDFA (Identifier for Advertisers) on iOS and Google's Advertising ID (GAID) on Android — used to serve relevant ads and measure ad performance.
- App activity: Which ad was shown, whether it was clicked, and ad interaction events.
- Device information: Device model, OS version, screen size, language, and approximate location (country/region level).
- IP address: Used to determine approximate region and prevent ad fraud (processed by Google's servers).
iOS App Tracking Transparency (ATT)
On iOS 14.5 and later, before we access your IDFA for ad personalization, we will show you Apple's App Tracking Transparency prompt. This prompt allows you to choose whether to allow or deny cross-app tracking for advertising purposes. If you deny, ads will still be shown but they will be non-personalized (contextual ads only).
Personalized vs. Non-Personalized Ads
You can choose non-personalized ads at any time by:
- iOS: Go to Settings → Privacy & Security → Tracking and disable tracking for MinuteBugtong.
- Android: Go to Settings → Google → Ads and enable "Opt out of Ads Personalization."
- Web: Use the cookie consent banner on first visit to decline advertising cookies, or visit adssettings.google.com to manage your Google ad preferences.
Rewarded Ads
MinuteBugtong plans to offer optional rewarded ads (e.g., "Watch a short ad to get a hint"). These are entirely voluntary — you will never be forced to watch an ad to access core app features.
We will update this section and the "Last Updated" date at the top of this policy when ads go live. Continued use of the app after that date constitutes acceptance of the updated terms.
12 Philippine Data Privacy Act of 2012
MinuteBugtong is developed in the Philippines and we comply with the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations (IRR) as administered by the National Privacy Commission (NPC).
Lawful Basis for Processing
We process your personal data under the following lawful bases:
- Consent: For analytics data collection (web) and push notifications — you explicitly consent to these at the point of collection.
- Contract: For account data — processing is necessary to provide the Service you have signed up for.
- Legitimate interests: For app improvement analytics on native devices, to ensure the continued quality and stability of the Service.
Data Subject Rights (DPA 2012)
As a data subject under Philippine law, you have the right to:
- Be informed of how your data is processed (this Privacy Policy)
- Access your personal data
- Object to processing
- Erasure or blocking of personal data
- Damages in case of violation
- File a complaint with the National Privacy Commission: www.privacy.gov.ph
Our designated Data Protection Officer (DPO) can be reached at: hello@minutebugtong.app
13 Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by:
- Updating the "Last Updated" date at the top of this page
- Displaying an in-app notice for material changes (if you are a registered user)
Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.
14 Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
We aim to respond to all privacy-related inquiries within 30 days.