Touchgrind BMX2+ Privacy Policy

Effective date: October 1st 2026

Introduction

This Privacy Policy describes how Illusion Labs AB ("Illusion Labs", "we", "us", or "our") collects, uses, and shares information when you play Touchgrind BMX2+ on Apple Arcade ("the Game"). This policy applies only to Touchgrind BMX2+ on Apple Arcade and is separate from the privacy policy that applies to the App Store version of Touchgrind BMX2.

Touchgrind BMX2+ has been built specifically for Apple Arcade. It contains no advertising, no in-app purchases, and no third-party analytics, tracking, or social SDKs. All online features are delivered exclusively through Apple's CloudKit and Game Center frameworks. Illusion Labs does not operate any server or backend that stores or processes your data.

Data We Collect

We collect only the minimum information needed for the Game to function. All data is generated by your gameplay and your in-game choices; we do not request any information outside the Game.

Information you provide to us

• Display name. On first launch, the Game auto-generates a display name (for example, "SwiftRider42") which you can edit at any time in the profile screen. Your display name is visible to other players on leaderboards and in the player search. Chosen display names are passed through a profanity filter, and names that fail the filter are rejected at the point of entry.
• Country. You may select a country from a list, used to filter leaderboards. You can also choose "None" to opt out of country filtering.
• Rider Tag. The Game auto-generates an 8-character alphanumeric Rider Tag (for example, "AB12CD34") that other players can use to find you. You cannot change your Rider Tag.
• Bike customization. Your currently equipped bike model and color choices.
• Support requests. If you contact us at support@illusionlabs.se, we will receive the email address and content you provide in your message. We use this information solely to respond to your request.

Information collected automatically

• Gameplay and progression data, including: best scores per location, completed challenges, claimed experience rewards, experience level, and your list of favorited rival players.
• Device and platform data needed for the Game to run: device type, operating system version, and standard diagnostics provided by Apple's system frameworks.

Information we do NOT collect

We do not collect any of the following in Touchgrind BMX2+:

• Real name, email address (except via a support request you send us), phone number, physical address, or date of birth.
• Precise or approximate location beyond a player-selected country.
• Advertising Identifier (IDFA), Vendor Identifier (IDFV), or any other device identifier used for tracking.
• Contacts, photos, microphone input, or any other device data requiring a system permission prompt.
• Behavioral or telemetry analytics of any kind.
• Crash reports or diagnostics sent to Illusion Labs.

How We Use the Data We Collect

We use the data described above only to provide you with the Game and to operate its features. Specifically, we use it to:

• Create and maintain your player profile, including your display name, country, Rider Tag, current bike configuration, and experience level.
• Display your best scores on leaderboards, including global, country-filtered, and friend-filtered leaderboards.
• Save your progression and unlocks across devices, so that your bikes, challenges, and experience rewards are available on every device you sign in to Apple Arcade on.
• Enable you to find and favorite other players via Rider Tag search or name prefix search.
• Respond to support requests you send us by email.
• Detect and fix bugs via information you voluntarily provide in a support request.
• Comply with legal obligations where required.

We do not use your data for advertising, profiling, or any purpose unrelated to providing Touchgrind BMX2+ to you.

How Your Data Is Stored and Shared

Apple CloudKit and Game Center

All data that leaves your device is stored exclusively in Apple iCloud, using Apple's CloudKit and GameKit frameworks. Illusion Labs does not operate any server, database, or backup system that stores or processes your player data.

• Your public profile (display name, country, Rider Tag, bike, colors, level) and your best scores are stored in the public CloudKit database for the Touchgrind BMX2+ container (iCloud.com.illusionlabs.bmx2plus), so that other players can see you on leaderboards and find you by Rider Tag.
• Your claimed rewards, challenge progression, and favorited rivals are stored in your private CloudKit database, which is visible only to you and is not accessible to Illusion Labs.

Apple processes this data as a data subprocessor to deliver CloudKit and Game Center services. Apple's use of your data is governed by Apple's Privacy Policy.

Data sharing with third parties

We do not share your data with any third party for that third party's own purposes. We do not use any third-party advertising network, analytics provider, crash reporting service, or social SDK in Touchgrind BMX2+.

The only circumstances in which your data may be shared are:

• With Apple, as described above, for the delivery of CloudKit and Game Center services and for the delivery of the Game itself through Apple Arcade.
• If required by law, subpoena, court order, or other legal process, or if necessary to protect the rights, property, or safety of Illusion Labs, our players, or others.
• With affiliates and successors, if Illusion Labs is acquired by or merged with another company, in which case we will notify you before your data becomes subject to a different privacy policy.

Data Retention

We retain your data for as long as you continue to play Touchgrind BMX2+ and your Apple Arcade subscription grants you access to the Game. Because all player data is stored in Apple CloudKit and not in any Illusion Labs system, retention is governed in practice by Apple's CloudKit infrastructure and by your use of the Game.

You can request deletion of your data at any time using the in-game "Delete my data" action (see below), after which your public and private CloudKit records are removed.

Support emails you send to us are retained only for as long as necessary to resolve your request.

Permissions and Your Choices

Touchgrind BMX2+ uses Game Center and iCloud for its online features. Both are part of Apple's system services and are managed through your device's system Settings.

• When you are signed into iCloud, your progression, unlocked cosmetics, best scores, completed challenges, and favorited rivals sync across all your devices via Apple CloudKit.
• When you are signed into Game Center, your best scores are submitted to the public Touchgrind BMX2+ leaderboards and you can be found by other players via your Rider Tag or display name.
• You can play Touchgrind BMX2+ without being signed into iCloud or Game Center. In that case your progress is stored only on your device, does not sync to other devices, and is not submitted to the global leaderboards. You can sign in later at any time and your local progress will be synced up.

The Game does not request any other system permissions.

Your Data Subject Rights

Depending on where you live, you may have rights under privacy laws such as the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA). These rights may include:

• The right to access the personal data we hold about you.
• The right to correct inaccurate personal data.
• The right to delete your personal data.
• The right to object to or restrict our processing of your personal data.
• The right to data portability.
• The right to lodge a complaint with your local data protection authority.

To exercise these rights, you can:

1. Use the in-game "Delete my data" action in the Settings screen. This deletes all public and private CloudKit records associated with your player in Touchgrind BMX2+, including your profile, scores, rewards, challenges, and favorites.
2. Email us at support@illusionlabs.se and describe the right you wish to exercise. We will respond within a reasonable period and in accordance with applicable law.

We may ask you to provide additional information to verify your identity before processing a request.

Kids

Touchgrind BMX2+ is a general-audience game, designed so that playing the Game exposes children to as little risk as reasonably possible:

• No advertising of any kind. The Game contains no third-party advertising networks, no ad impressions, no sponsored content, and no advertising identifiers.
• No in-app purchases and no loot boxes. There is nothing to buy inside the Game, no randomized reward purchases, no premium currency, and no pressure to spend.
• No behavioral profiling and no analytics. We do not profile children or anyone else, and we do not ship any third-party analytics or tracking SDK.
• No chat, messaging, voice, or free-form communication. The only player-entered text in the Game is the display name, which is passed through a profanity filter before it is accepted. Players cannot send messages, cannot post comments, and cannot upload user-generated content.
• Minimal personal data. The Game does not ask for a real name, email address, phone number, birthday, street address, photograph, or any similar personal information.

The only place a player could inadvertently expose personal information is the display name field. Because display names are shown on public leaderboards and in the player search, we recommend that parents review their child's display name and ensure it does not contain real names or other identifying information.

Parents and guardians can use Apple's Family Sharing, Screen Time, and Ask to Buy controls, and Game Center's age-based protections, to manage their child's use of the Game.

If you believe that a child has provided personal information through the Game — for example by typing a real name as a display name — change the name or use the in-game "Delete my data" action described above to immediately remove all of a player's data.

Security

We rely on Apple's security infrastructure to protect your data:

• All data in transit between Touchgrind BMX2+ and Apple's services is encrypted by Apple's CloudKit and GameKit frameworks using TLS.
• Data at rest is stored by Apple in CloudKit. Illusion Labs does not hold copies of player data outside of CloudKit.
• Touchgrind BMX2+ enables Apple's App Transport Security with no insecure exceptions.

No online service can be guaranteed to be 100% secure. If we become aware of a security incident affecting your data, we will notify affected players in accordance with applicable law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of the policy. If the changes are material, we will notify you in-game or through a reasonable means. Your continued use of Touchgrind BMX2+ after an update constitutes your acknowledgement of the updated policy.

Contact Us

If you have questions about this Privacy Policy or about our data practices, please contact us:

Illusion Labs AB
Gustav Adolfs torg 45
SE-21139 Malmö
Sweden

Email: support@illusionlabs.se