Privacy Policy for Treasure

Last updated: 2025-11-25

This Privacy Policy describes how Exenze Active AB (“we”, “our”, “us”) processes information in the mobile application Treasure (“the Application”). We are committed to protecting your privacy and only collect the minimum information necessary to operate and improve the Application.

The Application collects only anonymized usage data. No information processed through analytics services can be used to identify an individual user.

1. Data Controller
Exenze Active AB
Thuelgatan 1A
903 26 Umeå, Sweden
Email: kontakt@exenze.com
Representative: Marcus Sundelin, CEO

2. Types of Data We Collect
The Application collects anonymous usage data for product improvement and troubleshooting. This includes:

- Treasures found
- Offers claimed
- Feature usage
- Approximate location
- Technical performance data
- App interactions and event statistics

No personal data, identifiers, advertising IDs, account information, or device-level identifiable information is collected.

3. Purposes of Processing
Anonymous analytics data is processed for:
- Ensuring correct app functionality
- Understanding feature usage
- Improving user experience
- Maintaining app security and stability
- Aggregated behavior analysis

4. Legal Basis
Processing anonymous data is based on Exenze Active AB’s legitimate interest to maintain, improve, and secure the Application in accordance with GDPR Article 6(1)(f).

5. Third-Party Services
The Application uses these analytics services, receiving anonymous data only:

5.1 Mixpanel (EU Datacenter)
Aggregated usage analytics and event tracking.
Processed exclusively within the EU.

5.2 Google Analytics for Firebase
Analyzes overall app usage patterns, stability, and performance.
Only anonymized analytics data is collected.

5.3 Unity Analytics
Basic usage statistics.

6. Location Data
Approximate location may be processed. Location data is not stored, identifiable, or used for advertising.

7. Data Retention
Retention periods:
- Mixpanel: up to 12–24 months (EU region only)
- Firebase Analytics: 2–14 months
- Unity Analytics: approximately 90 days

8. Data Transfers Outside the EU/EEA
Mixpanel processes data only in the EU.
Firebase and Unity may process anonymized data globally under SCCs.

9. Children’s Data
Treasure is not intended for children under 13 without supervision.
No personal data is collected.

10. Security
We apply organizational and technical measures including encryption, access control, and data minimization.

11. User Rights
Since no personal data is collected, GDPR data subject rights do not apply.

12. Changes to This Policy
Updates will be posted in the Application or published online.