Privacy in Mofu

1Who is responsible

The provider named below is responsible for Mofu and this website. Contact us by email or post about privacy.

2Game progress and local storage

Your creature, needs, growth, coins, furniture, records, language and settings are stored on your device: in local app storage on Android and browser storage in the web app. The browser also caches game files for offline use. Ordinary care and mini-games need no Mofu game server. There is no registration, leaderboard or online trading. Fonts and images are bundled with the app or served by our own website. Only the optional transfers and purchase checks below use additional online services.

Storage provides the game and your chosen settings (where personal data are involved: GDPR Article 6(1)(b); necessary device storage under German TDDDG section 25(2)(2)). Data remain until app/browser data are cleared or the app is uninstalled; browsers may also remove their own storage. Android cloud backup is disabled for Mofu. Without a still-valid transfer code, we cannot restore deleted local progress.

3Optional reminders and device features

Care and evening reminders are off by default. Enabling them stores the required care values, times, language and notification limits locally on Android. No push service receives your game progress. Turn reminders off in Mofu or Android settings at any time (GDPR Article 6(1)(a), where consent is required; withdrawal applies going forward).

The day cycle uses your device clock only. Mofu requests no location, contacts, camera or microphone access and does not read the Android device identifier in this version.

4Google Play and optional Android extras

Mofu remains free to play. The Android app offers 13 optional one-time, non-consumable gadget extras and bundles through Google Play Billing. Google Play shows available products, local currency and final prices. Purchases and restoration of purchased extras require an internet connection and successful server-side purchase verification. The web app remains free.

Every purchase requires an additional parental PIN. A parent creates a secret six-digit PIN, stored locally only as a randomly salted PBKDF2 hash with failed-attempt counters. Neither PIN nor hash is sent to Google or our server or included in a progress transfer. The PIN proves no age and does not replace Google Play or Family Link purchase approval. A dedicated PIN recovery process is planned for a later version and is not currently available. Clearing app data also deletes the local PIN and game progress.

For verification or restoration, Mofu receives product identifiers, purchase status and a purchase token from Google Play. The app sends purchase tokens and a randomly generated app-installation identifier over HTTPS to our verification service hosted by STRATO. It obtains further purchase evidence such as the product, status and purchase or acknowledgement times from Google, and verifies and acknowledges the purchase through the Google Play Developer API. The service does not permanently store purchase tokens, order numbers, Google account names or account email addresses. The result is stored on your device as a signed entitlement containing the installation identifier and a validity of up to seven days. Confirmed extras can therefore work offline for a limited time; renewed verification and restoration require internet access. The entitlement and installation identifier remain locally until app data are cleared or the app is uninstalled. We do not use Android ID for this. Processing provides the requested extras and protects against forged purchase evidence (GDPR Article 6(1)(b) and (f), where personal data are involved).

When the Android app starts or returns to the foreground, the active billing module queries Google Play for existing Mofu purchases. If purchase evidence is available, its purchase tokens and the random installation identifier are sent to our verification service for rechecking. No new parental PIN is required for this. Without existing purchase evidence, these automatic queries send no purchase tokens or installation identifier to our verification service.

Google processes payments, purchase history and any refunds under its own terms. Mofu receives no payment or card details. One-time extras are restored using the same Google Play account; a progress code transfers no paid entitlements. Play Integrity remains inactive. The web app has no Google Play, Stripe or PayPal checkout.

After parental confirmation and before the payment dialog, the app also checks that the verification service is reachable. It sends its random installation identifier over HTTPS without purchase tokens. This availability check stores no new purchase entitlement; technical access counters may be created.

The active Google Play Billing library also records technical information about its API use, success and failure results, and connection problems. This may be sent to Google through Google DataTransport to improve the library and investigate errors. Technical context can include app/library versions and device or system information. Diagnostics start with queries by the active module and can therefore occur without a purchase. This is not advertising tracking or a log of your care actions. Google’s privacy notices govern its processing.

The Android app activates the billing module at app startup. Activating and using Google Play Billing 9.1.0 APIs may automatically trigger diagnostics, even without a purchase or parental PIN. Google DataTransport may transmit app/library versions, success and error results, device/Android build, language, time zone and network type. The random installation identifier is a nonce binding the RSA-SHA256 signed entitlement to this installation. It is not Android ID or an advertising ID. Mofu does not access GPS or Android Advertising ID (AAID). Technical purchase-verification requests also use short-lived IP-based access limits for secure operation (GDPR Article 6(1)(f)).

5Moving progress to another device

This feature is optional and starts only when you explicitly create a code. Mofu encrypts a copy of progress on your device, including the creature and its name, needs, growth, coins, furniture, records and game settings. Our STRATO server receives the encrypted copy, a random retrieval identifier and the expiry time. The decryption key stays in the transfer code on your devices and is never sent to the server. We cannot decrypt the content. This is not ongoing cloud backup or an account.

The code can be used once on your other device within 30 minutes. After a successful transfer or expiry, the copy is no longer accessible and is automatically cleaned up. The progress on the previous device is not deleted. Device-related identifiers are not transferred; reminders are not automatically enabled on the new device. Without a valid code we cannot retrieve your progress. Treat the code as a password and do not post it publicly: anyone who knows it can redeem the copy while it is valid. Children should ask an adult for help.

Processing provides the transfer you request (GDPR Article 6(1)(b), where personal data are involved). Connection data described below are also processed for operation and abuse prevention.

6Website, downloads and server logs

Our web app, privacy page and APK downloads are hosted on our server with STRATO GmbH. Requests involve necessary connection data such as IP address, time, requested file and browser information to deliver content. The purpose is secure, reliable operation; the legal basis is GDPR Article 6(1)(f). STRATO provides hosting.

Regular access logs are disabled for the Mofu website. Technical errors may be recorded in error logs, including an IP address or requested URL. Logs use automatic rotation with up to 14 archive files, for troubleshooting and security rather than usage profiles. This does not mean a fixed 14-day retention period. Necessary security evidence may be retained until an incident is resolved. The website uses HTTPS and no advertising cookies. The standalone Android app does not fetch its game artwork from our server at every launch.

The optional progress transfer also involves technical connection data. The service derives values from the IP address protected by a secret server key, with counters for access limits valid for at most one hour. These cover the associated transfer requests and failed attempts. They are used to prevent abuse, not to build device or advertising profiles, and are automatically cleaned up. A temporary retrieval identifier links only the associated transfer requests; it is not an account. The service keeps the encrypted progress copy only for the requested transfer. Secure operation is the purpose and basis for abuse prevention (GDPR Article 6(1)(f)).

7Sharing a game card

Only when you use sharing does Mofu create a game card on your device and open the system chooser. You select the destination app and recipients. The card contains game artwork and the creature's name, not your phone contacts. The image remains in the app cache until replaced, the cache is cleared or the app is removed. The destination app processes shared data under its own rules. There is no automatic upload to us.

8Contact and retention

When you email us, we process your sender address, message and any voluntary attachments to answer your request. The basis is GDPR Article 6(1)(f), or Article 6(1)(b) for contractual enquiries. Messages are kept only as long as needed to handle the enquiry, resolve possible claims or meet legal retention duties. Please do not send passwords, payment details or identity documents. We do not sell player data or create advertising profiles of your gameplay.

9Children and parents

Mofu is also intended for children. Playing requires no real name, email or birthday. There is no chat or personalised advertising. Free care remains available regardless of optional paid extras. Parents can help with purchases, transfer codes, notifications and privacy questions and use device or Google Play settings. Transfer codes are for your own devices, not public exchanges with other players. Please do not use real contact details as your creature’s name. Changes in processing are explained in these notices.

10Your rights and deleting data

Where we process personal data, you have rights to access, rectification, erasure, restriction, portability and objection subject to legal conditions (GDPR Articles 15–21). You may object to processing based on legitimate interests for reasons relating to your situation. You may withdraw consent going forward. Use the contact above.

On Android, delete local data through Settings → Apps → Mofu → Storage → Clear data, or uninstall. In the web app, delete mofu.unique4creativity.de website data in your browser. Your local progress will be lost. This does not delete data held by Google as provider of the Play Store or by another app chosen for sharing; their own procedures apply.

You may complain to a data protection authority (GDPR Article 77), particularly the Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate. Contact details are linked below. We do not use automated decision-making with legal or similarly significant effects or advertising profiling.

The short-lived transfer copy is inaccessible after redemption or code expiry and is automatically cleaned up. Contact us with questions or deletion requests about technical server data; do not send a complete transfer code. Short-lived access counters are also automatically cleaned up.

11Scope and changes

These notices describe Mofu 0.31.3 (Build 65) for Android with optional Google Play extras, the free web app, optional progress transfer and this privacy page. Web and iOS use no Google Play Billing, Stripe or PayPal checkout in this offering. Other unique4creativity.de services have their own notices. Changes to processing or providers are published here; we request any necessary new consent beforehand.