Privacy Policy

Last updated: 5 August 2026

This Privacy Policy explains how Mio Path (“we”, “us”, the “app”) collects, uses, shares and protects information when you play Mio Path, use app features such as friends and invites, sign in, view ads, make purchases, contact us, or visit miopath.com.

Who we are

Mio Path is an independent mobile puzzle game for iOS and Android, operated from the Netherlands. The developer of Mio Path is the controller responsible for the personal data described in this policy. You can reach us about privacy at privacy@miopath.com. That controller is OLYMPHEON B.V., registered with the Dutch Chamber of Commerce (KvK) under number 42110578, VAT identification number NL869778808B01, business address Oude Apeldoornseweg 45 - 067, 7333 NR Apeldoorn, the Netherlands.

Summary

You can play and finish the whole game anonymously, without a username.
To appear on the leaderboard or use friends, you choose a username, which is then shown to other players together with the avatar you selected.
We store progress so the game works and can sync across your devices.
You can sign in with Google or Apple to back up and restore your account.
We use Firebase for accounts, database, notifications, crash reporting, performance and cloud services.
We use PostHog, hosted in the European Union, for product analytics and session replay, so we can understand how the game is played and improve it. In regions where consent is required, this only runs after you agree.
We use AppsFlyer to measure which marketing campaigns lead to installs.
We use Google AdMob for ads, including rewarded ads and full-screen ads between some levels.
In regions where consent is required, we use Google’s User Messaging Platform (UMP) to ask for ad and privacy choices before ads are requested.
We do not receive your payment card details.
We do not sell your personal data, and we share it only as described in this policy.
Mio Path is intended for users aged 13 and over.

Information we collect

App account and profile

Anonymous account ID. When you start the app, we may create an anonymous account so your progress can be stored and restored.
Sign-in with Google or Apple. If you choose to sign in, we use Firebase Authentication together with Google Sign-In or Sign in with Apple to create or link your account. We receive an account identifier from the provider and, depending on the provider and your choice, your name or email address. If you use Sign in with Apple, you can choose Apple’s option to hide your email address.
Username. A username is optional, and you can play and complete the game without one. It is required to appear on the leaderboard or to use friends. If you choose a username, we store it and show it to other players as part of the leaderboard and friends features. Until you choose one, the app shows you a local placeholder name (such as “Frog friend”) that is only visible to you and is never shared with other players.
Settings. We store preferences such as language, sound, notifications, cosmetics and similar app settings.

Game progress and gameplay

Progress. Levels completed, pack progress, hints, glimpses, rewards, unlocks, achievements, currencies and similar gameplay state.
Gameplay events. Events such as level completion, purchases, rewards, ad-free periods and prompt milestones. We use these to make the app work, prevent abuse, improve balance and understand whether important flows are working.

Friends, gifts and invite links

Friend features. If you use friends, gifts or friend requests, we store the related user IDs, usernames, request status, gift state and timestamps needed to run those features.
Invite links. Links such as miopath.com/i/... contain an invite code. The website uses the code only to open the app, send you to the correct store, or show a fallback page. We may keep simple counts such as whether an invite page was opened by iOS, Android or desktop.

Purchases

In-app purchases are processed by Apple or Google.
We receive purchase confirmation data, product IDs, transaction IDs or subscription status needed to unlock purchases and prevent fraud.
We do not receive your payment card number, bank details or full billing information.

Notifications

If you turn on notifications, we use Firebase Cloud Messaging together with the Apple or Google push services to deliver them. This uses a device push token. You can turn notifications off at any time in your device settings.

Diagnostics and security

Crash and performance data. We collect crash logs, performance measurements, device model, operating system version, app version and similar diagnostic data.
Security and abuse prevention. We may process technical data such as IP address, identifiers, timestamps and logs to protect the app, prevent abuse, debug problems and keep services reliable.

Analytics and session replay

Mio Path uses PostHog as its main product analytics tool, alongside Firebase Analytics. We use it to understand how the game is played, for example which levels are started and completed, how players move through onboarding, which shop screens are viewed, and whether features such as hints and rewards work as intended.

PostHog may process:

A pseudonymous account identifier and gameplay properties such as the number of levels completed.
Usage events such as level starts, screens viewed, purchases made, ads shown and settings changed.
Device model, operating system version, app version and similar technical information.
Session replays. Recordings of how app screens are used, such as taps and navigation. All text and images are masked before recording, so usernames, other players’ names and other readable content are not visible in replays.

PostHog data is hosted in the European Union. We do not use PostHog data for advertising and do not share it with ad networks. In regions where consent is required, such as the European Economic Area, the United Kingdom and Switzerland, analytics and session replay only run after you agree through the consent message, and withdrawing your consent in the app settings turns them off.

Install attribution

Mio Path uses AppsFlyer to measure which marketing campaigns lead to app installs, so we can understand whether our marketing works. AppsFlyer may process device identifiers (including the advertising identifier where available and allowed; on iOS only with App Tracking Transparency permission), IP address, install events and in-app events such as purchases. You can limit this through the tracking and advertising settings of your device as described below.

Mio Path uses Google AdMob to show ads. Ads may include rewarded ads that you choose to watch for in-game benefits, and interstitial ads shown between some levels after the early onboarding levels.

Google AdMob and the Google Mobile Ads SDK may collect or receive information such as:

IP address.
Device identifiers, including advertising identifiers where available and allowed.
App interactions, ad impressions, ad clicks and ad reward events.
Approximate location inferred from IP address.
Device, browser and app information.
Crash, diagnostic and performance information.

AdMob may use this information for ad delivery, frequency capping, fraud prevention, ad measurement, analytics, service improvement, personalized advertising where allowed, and non-personalized advertising where personalization is not allowed or not selected. We configure ad requests with a maximum ad content rating of “G” and do not treat the app as directed to children.

In the European Economic Area, the United Kingdom and Switzerland, we use Google’s User Messaging Platform (UMP) to show a consent message and collect your choices before ads are requested when required. The consent message explains the purposes and partners involved. You can manage or change your ad privacy choices in the app settings when the privacy options form is required in your region.

You can read more about how Google uses information from sites and apps that use its services at Google’s partner sites policy, and about Google advertising controls at Google’s advertising policy page.

Where laws treat personalized advertising as a “sale” or “sharing” of personal information, we rely on the consent and privacy controls described in this policy and in the app.

How we use information

We use information to:

Provide the game, save progress and restore purchases.
Create and secure your account when you sign in with Google or Apple.
Sync progress across devices when account features are used.
Run friends, invites, gifts, leaderboards, rewards and other app features.
Send notifications you have enabled.
Show ads, measure ads, prevent ad fraud and respect consent choices.
Understand how the game is played and measure retention, using analytics and session replay where allowed.
Measure which marketing campaigns lead to installs.
Improve levels, onboarding, stability and performance.
Provide support and respond to privacy requests.
Keep the app and services secure.
Comply with legal obligations and platform requirements.

Legal bases

Depending on where you live, our legal bases may include:

Contract. To provide the app, save progress, deliver purchases and run requested features.
Consent. For personalized ads, product analytics and session replay, local storage or device identifiers where consent is required, and for optional permissions such as notifications where applicable.
Legitimate interests. To keep the app secure, prevent abuse, understand aggregate app performance, improve the service and operate non-intrusive diagnostics where allowed.
Legal obligation. To comply with tax, accounting, platform, safety and regulatory duties.

We share information only where needed for the app and services:

Google Firebase and Google Cloud. Authentication, Firestore database, Cloud Functions, Cloud Messaging, Crashlytics, Performance Monitoring, Analytics where allowed, hosting and infrastructure.
Google and Apple sign-in. When you sign in, Google or Apple processes your sign-in and shares a basic account identifier with us so we can create or link your account.
PostHog. Product analytics and session replay, hosted in the European Union.
AppsFlyer. Install attribution and marketing campaign measurement.
Google AdMob and advertising partners. Ad delivery, consent, measurement, fraud prevention and personalization where allowed.
Apple and Google Play. Purchase processing, receipts, subscriptions, refunds and store compliance.
Cloudflare. Hosting, security and traffic delivery for miopath.com.
Service providers and legal requests. Support, security, fraud prevention, legal compliance, or protection of our rights and users.

We do not sell your personal data for money, and we do not exchange it for other value outside the advertising context described above. We do not publish your private progress data. When you appear on the leaderboard or in friends, other players can see your username and the cosmetic avatar you selected, such as mascot, outfit, frame and background, but not your private progress data.

Website and invite links

When you visit miopath.com, the site may process basic technical information such as IP address, browser type, user agent, request URL and timestamps through Cloudflare and hosting logs. We use this to deliver the site, secure it and understand whether important pages work.

The website does not use advertising cookies. Invite links use the invite code in the URL to open the app, route you to the right app store, or show the invite fallback page. We do not share invite codes with advertising partners.

Your choices and controls

You can play without choosing a username.
You can change language, sound and other settings in the app.
You can manage ad privacy choices through the app settings when Google’s privacy options form is required in your region.
You can reset or delete your Android advertising ID in Android settings.
On iOS, the app asks for App Tracking Transparency permission, and you can change tracking and advertising settings at any time in iOS settings.
You can manage purchases and subscriptions through your Apple or Google account.
You can request deletion of your account data by contacting privacy@miopath.com.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction or objection to certain processing. You may also have the right to withdraw consent where processing is based on consent.

If you are in the European Economic Area, the United Kingdom or Switzerland, you also have the right to lodge a complaint with your local data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); in the United Kingdom it is the Information Commissioner’s Office (ico.org.uk).

US state privacy rights

Depending on your US state, you may have rights to know about, access, delete or correct your personal information, to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising, and not to be discriminated against for exercising these rights. We do not sell personal information for money. Personalized advertising through AdMob may be treated as a “sale” or “sharing” under some state laws. To opt out, you can use the ad privacy options in the app where available, reset or limit your advertising ID on Android, and manage tracking settings on iOS, or contact us at privacy@miopath.com.

To make a request, contact privacy@miopath.com. We may need information to verify the request and find the correct account. If you ask us to delete account data, some records may remain where needed for security, fraud prevention, legal compliance, purchase records or backup integrity.

Data retention

We keep personal data only as long as needed for the purposes described in this policy:

Progress and account data are kept while your account is active or until deletion is requested.
Purchase records are kept as long as needed to provide purchases, prevent fraud and meet store or legal requirements.
Crash, performance and analytics data are kept for limited periods according to the settings of the relevant service provider.
Website and security logs are kept for limited periods needed for security and reliability.

International transfers

We use service providers such as Google Firebase, Google AdMob, Google Cloud, AppsFlyer, PostHog and Cloudflare. Data may be processed in countries other than where you live. PostHog analytics data is stored in the European Union. Where required, we use appropriate safeguards provided by those service providers, such as standard contractual clauses or other transfer mechanisms.

Security

We use reasonable technical and organizational measures to protect information. No online service can be guaranteed to be completely secure, but we work to reduce risk and limit access to information to what is needed.

Children

Mio Path is intended for a general audience aged 13 and over. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. In some regions a higher minimum age applies for consenting to data processing (up to 16 in parts of the European Economic Area); where that is the case, you must meet that age or have permission from a parent or guardian to use the app. If we learn that we have collected personal information from a child under 13, or under the applicable minimum age, without proper consent, we will delete it. If you are a parent or guardian and believe your child has provided us with personal data, contact us at privacy@miopath.com.

Changes

We may update this policy from time to time. The “last updated” date above reflects the latest version. If a change is important, we may provide notice in the app or on the website.

Contact

Questions about your privacy? Email privacy@miopath.com.