Artek Futura Artek Futura

Legal · Privacy

Privacy Policy

This policy explains what personal data Zongtopia and the other Artek Futura products collect, why we collect it, who we share it with, how long we keep it, and how you can access or delete it at any time.

Effective 17 September 2026 Version 1.0 Applies to Zongtopia (Android & iOS)

Want your account and data deleted? You do not need to install the app or contact support first. Use our public request page — it works for anyone, at any time.

Request account & data deletion

01Who we are

Zongtopia is published by Artek Futura, a brand of Futurawave SRL ("Artek Futura", "we", "us"), a company registered in Spain under tax number (NIF) B67881953, with registered offices at Av. Mare Nostrum 7, 46120 Alboraya, Valencia, Spain. Artek Futura is the data controller for the personal data described in this policy.

Zongtopia is co-developed with Galaxy4Games, which acts as our data processor: it builds and maintains the game under a written agreement and may only process data on our documented instructions.

Privacy contact: hello@artekfutura.com

02What this policy covers

This policy applies to the Zongtopia mobile game on Google Play and the App Store, and to the other products and websites we operate: Fix The Mix, HumanArtBox, Panoramma, Oh My Gig and artekfutura.com. Where a product collects something specific to it, we say so in the relevant section below.

It does not apply to third-party services you reach from our products (for example an artist's page on a streaming service). Those are governed by their own policies.

03Data we collect

We collect only what the game needs to work, to be safe, and to get better. We never sell your personal data, and we do not use it to build advertising profiles about you across other companies' apps and sites.

CategoryWhat it includesHow we get it
Account dataEmail address, display name or nickname, password (stored only as a salted hash), or the account identifier returned by Google Play Games / Sign in with Apple if you use those.You provide it when you create an account.
Game progressLevels completed, scores, achievements, studio upgrades, in-game currency, lesson progress, settings and preferences.Generated as you play.
Purchase recordsTransaction identifier, item purchased, date, amount and country. We never receive or store your card or bank details — payment is handled entirely by Google Play or Apple.From the store, when you buy something.
Device & technical dataDevice model, operating system version, app version, language, time zone, coarse country derived from IP address, and a pseudonymous app instance identifier.Collected automatically by the app.
DiagnosticsCrash reports, error logs, performance measurements (load times, frame rates).Collected automatically when something goes wrong.
Usage analyticsSessions, screens opened, features used, events such as "level completed", aggregated into statistics.Collected automatically as you play.
Advertising identifiersAndroid Advertising ID (AAID) or Apple's Identifier for Advertisers (IDFA), and ad interactions such as impressions and clicks. Not collected from users identified as children — see section 05.Collected by our advertising partner when ads are shown.
Support messagesYour email address and anything you write to us when you ask for help or exercise a privacy right.You send it to us.

What we do not collect

  • We do not collect precise location. We only derive an approximate country from your IP address.
  • We do not access your contacts, photos, microphone, camera, SMS or call logs.
  • We do not collect special categories of data (health, religion, biometrics, political opinions).
  • We do not store payment card data of any kind.

04Why we use it & legal bases

Under the EU General Data Protection Regulation (GDPR) we must have a legal basis for each use. Here is ours.

PurposeData usedLegal basis
Create and run your account, save and restore your progress across devicesAccount data, game progressPerformance of a contract (Art. 6(1)(b))
Deliver in-app purchases and handle refunds and supportPurchase records, account dataPerformance of a contract (Art. 6(1)(b))
Keep accounting and tax records of transactionsPurchase recordsLegal obligation (Art. 6(1)(c))
Fix crashes, prevent cheating and abuse, keep the service secureDiagnostics, device dataLegitimate interests (Art. 6(1)(f)) — running a stable, safe game
Understand how the game is used so we can improve lessons and difficultyUsage analytics, device dataConsent (Art. 6(1)(a)) where required; otherwise legitimate interests
Show advertising that keeps the game freeAdvertising identifiers, ad interactionsConsent (Art. 6(1)(a))
Answer your messages and honour your privacy requestsSupport messagesLegal obligation and legitimate interests

Where we rely on consent, you can withdraw it at any time — in the app's privacy settings, or by writing to us — without affecting processing that already happened.

05Children and families

Zongtopia is an educational music game used by beginners of all ages, including children, and in schools. It participates in Google Play's Families programme and we comply with the Google Play Families Policy, the US Children's Online Privacy Protection Act (COPPA) and Article 8 GDPR.

How we treat child users

  • The app asks for age in a neutral age screen the first time it runs, and adapts its behaviour to the answer.
  • For users identified as children, we do not collect advertising identifiers and we do not show personalised or interest-based advertising. Only contextual, family-safe ads served by Google-certified ad SDKs are shown.
  • We do not knowingly collect more personal data from a child than is needed to run the game, and we never condition participation in an activity on giving us more data than necessary.
  • We do not include social features that let children share personal information publicly, and there is no open chat.
  • In the European Union, consent for information society services is valid from the age set by each member state (in Spain, 14). Below that age we rely on a parent or guardian's authorisation.

Parents and guardians

If you are a parent or guardian, you can ask us at any time to show you what data we hold about your child, to correct it, or to delete it and close the account. Write to hello@artekfutura.com or use the deletion request page. We will act within 30 days and will not require you to create an account to make the request.

If we learn that we have collected personal data from a child in a way that is not permitted, we delete it promptly.

06Advertising

Zongtopia is free to play and is partly funded by advertising served through Google AdMob. Ads let us keep the core game free for schools and for players who cannot pay.

  • Children never see personalised ads. For child users, ads are contextual only and no advertising identifier is collected.
  • For adult users in the EEA, the UK and Switzerland, we ask for consent before any personalised advertising, in line with Google's EU User Consent Policy. If you say no, you still see ads, but they are not based on your identifier.
  • You can reset or delete your advertising identifier at any time: on Android, Settings → Privacy → Ads; on iOS, Settings → Privacy & Security → Tracking.
  • Google's handling of this data is described in How Google uses information from sites or apps that use our services.

07Purchases

Optional in-app purchases are processed by Google Play Billing or the Apple App Store. Those stores handle the payment and are the data controllers for your payment details. We receive only a confirmation containing the transaction identifier, the item, the amount, the date and the country — never your card number, bank details or billing address.

Refunds follow the policy of the store you bought from. If a purchase belongs to a child's account, a parent or guardian can request a refund through the store and can contact us for help.

08Who we share data with

We share personal data only with the service providers we need to run the game, and only for the purposes below. All of them are bound by contract to protect the data and may not use it for their own purposes.

RecipientWhat they doData involved
Galaxy4GamesCo-development, maintenance and technical support of the gameAccount data, game progress, diagnostics
Google Firebase (Authentication, Cloud Firestore / Realtime Database, Cloud Storage)Accounts, saved progress, backend hostingAccount data, game progress
Google Analytics for FirebaseUsage statisticsUsage analytics, device data, app instance identifier
Firebase CrashlyticsCrash and stability reportingDiagnostics, device data
Google AdMobServing advertisingAdvertising identifiers, ad interactions (never for child users)
Google Play Billing / Apple App StoreProcessing purchasesPurchase records
VercelHosting of our websites, including this pageServer logs, IP address

We may also disclose data if we are legally required to — for example to comply with a court order or a lawful request from a public authority — or to establish, exercise or defend legal claims. If Artek Futura is ever involved in a merger or acquisition, we will tell you before your data is transferred and you will keep the rights described here.

We do not sell personal data and we do not share it for cross-context behavioural advertising, as those terms are used in California and other US state privacy laws.

09International transfers

We are based in the European Union and prefer EU data storage. Some of our providers are established in the United States, so your data may be transferred outside the European Economic Area. When that happens we rely on the European Commission's Standard Contractual Clauses, on the EU–US Data Privacy Framework where the provider is certified, and on additional technical measures such as encryption in transit and at rest. You can ask us for a copy of the safeguards we use.

10How long we keep data

We keep each category only as long as we need it for the purpose it was collected for, or as long as the law requires.

DataRetention period
Account data and game progressFor as long as your account is open. Deleted within 30 days of a verified deletion request, and removed from encrypted backups within 90 days.
Inactive accountsAccounts with no activity for 36 months are deleted automatically, after we email a warning to the address on the account.
Purchase records6 years from the transaction, as required by Spanish commercial and tax law. After an account deletion, only the minimum invoice data is kept (transaction identifier, amount, date) — detached from your profile.
Diagnostics and crash reports90 days.
Usage analyticsEvent-level data for a maximum of 14 months, after which only aggregated, non-identifying statistics remain.
Advertising identifiersNot stored by us. Held by Google according to its own retention policy; you can reset the identifier at any time.
Support messages24 months from the last message in the conversation.
Website server logs12 months.
Records of privacy requests3 years, to prove we complied with the law.

11Deleting your account and data

You can delete your Zongtopia account and the personal data attached to it at any time, and it is free.

Two ways to do it

  1. In the app: open Settings → Account → Delete account, then confirm. The account is closed immediately and the data is erased on our servers within 30 days.
  2. On the web, without the app: use our public account and data deletion request page. You do not need to log in or install anything.

What gets deleted

  • Your email address, display name and login credentials.
  • All game progress: levels, scores, achievements, in-game currency and purchases of virtual items, settings and preferences.
  • Any support correspondence linked to the account, unless we still need it for a legal claim.
  • The link between your device identifiers and any analytics data about you.

What we must keep, and for how long

  • Invoice and transaction records for 6 years, because Spanish commercial and tax law requires it. These are reduced to the minimum and detached from your profile.
  • Aggregated, anonymous statistics that can no longer identify you — these are not personal data and are kept indefinitely.
  • Records showing that we handled your request, for 3 years.
  • Copies inside encrypted backups for up to 90 days, after which they are overwritten. Backups are not used to restore deleted accounts.

Deletion is permanent. Progress and any virtual items or currency bought inside the game cannot be recovered afterwards, and deleting your account does not automatically refund past purchases — those follow the store's refund policy.

Prefer to delete only some data? You can ask us to erase specific data (for example your analytics history) while keeping your account. Write to hello@artekfutura.com and tell us what you want removed.

12Your rights

Wherever you live, you can ask us to:

  • Access the personal data we hold about you, and get a copy.
  • Correct data that is wrong or out of date.
  • Delete your data — see section 11.
  • Restrict or object to processing based on our legitimate interests.
  • Port your data: receive it in a structured, machine-readable format, or have it sent to another provider.
  • Withdraw consent at any time, for analytics or advertising.
  • Not be subject to decisions based solely on automated processing that produce legal effects — we do not make any such decisions.

To exercise any of these, write to hello@artekfutura.com from the email address on the account, or use the request page. We reply within 30 days. We may ask for information to confirm it is really your account, and we will not charge you unless a request is manifestly excessive.

If you are in the EEA and you think we have handled your data badly, you can complain to your local supervisory authority. In Spain that is the Agencia Española de Protección de Datos — aepd.es. We would rather you told us first, so we can fix it.

If you are a California resident, you also have the right to know, delete, correct and to not be discriminated against for exercising those rights. As noted above, we do not sell or share personal data for cross-context behavioural advertising.

13Security

We protect your data with measures appropriate to the risk, including:

  • Encryption in transit (HTTPS/TLS) and at rest on our backend.
  • Passwords stored only as salted hashes — we never see them in readable form.
  • Access limited to the people who need it, with individual accounts and multi-factor authentication.
  • Written data-processing agreements with every provider, including Galaxy4Games.
  • Regular backups, held encrypted and overwritten on a rolling 90-day cycle.

No system is perfectly secure. If a breach affects your personal data and is likely to put your rights at risk, we will notify the competent supervisory authority within 72 hours and tell you directly without undue delay.

14Changes to this policy

We may update this policy as the game evolves or the law changes. The effective date and version number at the top always tell you which text is current. If a change is significant — a new purpose, a new category of data, a new recipient — we will announce it in the app and, where the law requires, ask for your consent again before the change applies.

15Contact us

Artek Futura — a brand of Futurawave SRL
NIF B67881953
Av. Mare Nostrum 7, 46120 Alboraya, Valencia, Spain
Email: hello@artekfutura.com
Web: artekfutura.com

For anything about your data — a question, a request, a complaint — that address reaches a human and we answer within 30 days.

Request account & data deletion