Chocolate Puzzle: Choco Poco Privacy Policy

Effective November 12, 2026

Choco Poco, listed on the App Store as Chocolate Puzzle: Choco Poco, is a chocolate puzzle game for iPhone and iPad (the "App") published by Brainwave Learning Apps ("we", "us" or "our"). In the App you snap a chocolate bar into the pieces that cute animal customers order. This Privacy Policy explains what information the App handles, why, who it is shared with, how long it is kept and the choices and rights you have. It also covers the Choco Poco pages of this website and the messages you send us. The Android version of the App has its own privacy policy, and our Terms of Service apply to your use of the App.

By installing or using the App you acknowledge that you have read this Privacy Policy. If you do not agree with it, please do not use the App.

1. Information the App handles

Your game stays on your device

Your level progress and stars, your coins and boosters, whether you own No Ads, your sound, music and vibration settings, the language you picked and the version of the Terms of Service you accepted are stored only on your device and in your device backup if you have enabled backups with Apple. They are never sent to us or to any server, and we have no access to them.

Information you give us

If you email us, we receive your email address, your message and anything you choose to include, such as screenshots, your device model and the app version. We use these messages to answer you and to improve the App.

Information collected automatically

The App uses Google Firebase, a service of Google LLC, to understand how the App is used and to fix problems. Firebase Analytics records events such as a level started, won or lost, a booster used, a reward video watched, an ad shown or a purchase made, together with the app version, device model, iOS version, language, country and a random app instance identifier. Firebase Crashlytics sends a crash report with the state of the App and the device when the App crashes. Google processes this information for us under the Firebase privacy and security terms, analytics events are kept for up to 14 months and crash reports for 90 days. When the App shows ads, Google AdMob, described in section 3, collects device and usage information. Together these services collect:

• Device and app information such as device model, operating system and version, app version, language, time zone, screen size, network type and carrier.
• Identifiers such as the IP address and the approximate location derived from it, the advertising identifier of your device (the IDFA, only with your permission), the identifier iOS provides to the apps of one developer and random identifiers that the ad, analytics and crash reporting services create for your installation of the App.
• Usage information such as the levels you play and finish, boosters and reward videos used, the ads requested, shown and tapped, how often you see them, and crash logs.

Purchases

The App offers No Ads, a Starter Pack and coin packs as one-time purchases, processed by Apple through the App Store. Apple gives the App a confirmation of each purchase, such as the product, date, status and an anonymous transaction identifier, but never your name, payment card or billing address. Restore purchases in the Sweet Shop of the App reads your earlier No Ads and Starter Pack purchases from Apple.

What we do not collect

We do not ask for or collect your name, age or birth date, precise location, contacts, photos, camera, microphone, health, financial or biometric information. The App has no account, no chat, no AI features, no player profiles and no way to post or share content with other players. The only permission the App asks for is the tracking permission described in section 3. Please do not send us sensitive information.

2. How we use information

• To provide the App and its features, such as the levels, stars, coins, boosters and purchases.
• To show ads, measure their performance and limit how often you see them, personalized only with your permission or consent where the law or the platform requires it.
• To understand how the game is played, for example which levels are too hard, to find and fix crashes and bugs, and to improve the App.
• To answer your messages and requests.
• To keep the App and its players safe and to prevent fraud, cheating and abuse.
• To comply with the law, enforce our Terms of Service and protect the rights, property and safety of our players, Brainwave Learning Apps and others.
• In connection with an organization, reorganization, merger, sale or transfer of the App or our business, see section 4.

Legal bases for players in the European Economic Area, the United Kingdom and Switzerland. We process personal data to perform our contract with you (to provide the App you chose to use), for our legitimate interests (to keep the App working, secure and improving, to show non personalized ads that fund the free App, to answer your messages and to establish, exercise or defend legal claims), which we balance against your rights, with your consent (personalized ads and storing or reading information on your device where consent is required), which you can withdraw at any time without affecting earlier processing, and to comply with legal obligations.

3. Advertising

The App shows a banner under the board, full screen (interstitial) ads between some levels and, only when you choose to watch one, reward videos that give you a continue or a booster. Ads are served by Google AdMob, a service of Google LLC. Google serves ads from its own advertisers and from the advertising partners it works with, and we may add other ad networks through AdMob mediation in the future, in which case we will update this policy. These companies collect the information described in section 1 to deliver, measure and, where permitted, personalize ads, to limit how often you see an ad and to detect fraud, and they may combine it with information from other apps and websites under their own policies. How Google uses information from apps that use its services.

• European Economic Area, United Kingdom and Switzerland. The App asks for your consent through Google's consent form, which follows the IAB Transparency and Consent Framework, before personalized ads are shown. You can change your choice at any time in the App settings under Privacy options. In these regions the App does not also show the tracking prompt below, so the advertising identifier of your device is not used.
• Tracking permission. Elsewhere the App asks for your permission through App Tracking Transparency before the advertising identifier is used to track you. If you decline, you still see ads, just not ones based on that identifier. You can change your choice at any time in Settings, Privacy and Security, Tracking. Installs that come from an ad may be reported to the advertiser through Apple's SKAdNetwork, which does not identify you.
• US states. Under some US state laws, letting ad partners use your identifiers for personalized ads may count as "selling", "sharing" or "targeted advertising". You can opt out in the App settings under Privacy options, which the App shows where these laws apply, with the tracking setting above or by writing to us, see section 10.
• No Ads. No Ads and the Starter Pack remove the banner and the ads between levels. Reward videos stay your choice, and with No Ads you get their rewards without watching a video.

Ads are provided by third parties. We do not endorse and are not responsible for the products, services or websites they promote. If you see an ad that should not be there, tell us and we will try to block it.

4. How information is shared

• Service providers and partners described in sections 1 and 3, Google for analytics, crash reports and ads and Apple for the platform and purchases, only to provide their services, under their terms and, where they act on our behalf, only for our purposes.
• Legal and safety reasons. To comply with laws, court orders, legal process or lawful requests of public authorities, to enforce our terms, to protect the rights, property and safety of our players, Brainwave Learning Apps or others, and to detect and prevent fraud and security issues.
• Organization and business transfers. Choco Poco is operated under the Brainwave Learning Apps name and may be organized into, or transferred to, a company or another legal entity, or be part of a merger, acquisition, financing, reorganization, sale of assets or insolvency proceeding. Information we hold may be transferred to that entity, successor or acquirer, which will be bound by this Privacy Policy for that information unless you are notified otherwise.
• With your consent or at your direction.
• Aggregated or de-identified information that cannot reasonably be used to identify you, for any purpose.

Your game progress is never shared, because it never leaves your device. We do not sell your personal information for money.

5. How long information is kept

Information on your device stays there until you delete the App, which removes everything it stored. Copies in your device backup follow your backup settings. We keep your emails as long as we need to answer you and keep a record of our correspondence, then delete them. The services described in sections 1 and 3 keep what they receive for the periods set out in their own policies. We may keep information longer when the law requires it or to establish, exercise or defend legal claims.

6. Security

The App keeps your game on your device and we run no server that stores it. The ad, analytics, crash reporting and purchase services use encrypted connections (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Protect your device with a passcode and keep it up to date. To the extent permitted by law, we are not responsible for unauthorized access to information caused by circumstances beyond our reasonable control, including incidents at third party services.

7. International transfers

We and the services we use, such as Google and Apple, may process information in the United States and other countries whose data protection laws may differ from those of your country. Where the law requires it, these transfers rely on appropriate safeguards, such as adequacy decisions or the Standard Contractual Clauses of the European Commission used by our providers.

8. Children

Choco Poco is a general audience game for players 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, for example in an email, contact us and we will delete it. Purchases are subject to Apple's parental controls, such as Ask to Buy and Screen Time, which we recommend parents turn on.

9. Your choices and rights

Choices on your device

• Delete the App to remove everything it stored on your device.
• Allow or deny tracking in Settings, Privacy and Security, Tracking, and change your ad consent or opt out of personalized ads in the App settings under Privacy options, see section 3.
• Buy No Ads or the Starter Pack to remove the banner and the ads between levels, and bring them back on another device with Restore purchases in the Sweet Shop.

Your rights

Depending on where you live, for example in the European Economic Area, the United Kingdom, Switzerland, Brazil, Canada, California and other US states, you may have the right to access your personal information, to correct it, to delete it, to receive a copy of it in a portable format, to object to or restrict its processing, to opt out of targeted advertising, profiling and the sale or sharing of personal information, and to withdraw a consent you gave. We will not treat you differently for using these rights. Residents of the European Economic Area, the United Kingdom and Switzerland may also complain to their data protection authority.

How to make a request

Email support@hotkeys.io with the subject "Choco Poco privacy request". We may ask for information to verify your request, and an authorized agent may act for you with your signed permission. We answer within the time the law requires, usually 30 or 45 days. Because we keep no account or game data on our servers, the personal information we hold is limited to the emails you send us, and we may be unable to link information held by third party services to you, in which case we will explain how to use your device settings or contact that service directly. If we decline your request, you may appeal by replying to our decision, and if your appeal is denied you may contact your state attorney general or data protection authority.

10. Notice for US state residents

This section supplements the policy for residents of California and other US states with consumer privacy laws.

• Categories collected in the last 12 months: identifiers (IP address, advertising identifier, installation identifiers of the ad, analytics and crash reporting services, and your email address if you write to us), internet or other electronic network activity (interactions with the App and with ads), approximate geolocation derived from the IP address, inferences that ad partners may draw about your interests, and commercial information (purchase confirmations). We do not collect sensitive personal information.
• Sources: you, your device, Apple and the services described in sections 1 and 3.
• Purposes: those in section 2.
• Disclosures for business purposes: identifiers, network activity and approximate geolocation to the platform, analytics, crash reporting and advertising providers.
• Sale or sharing: identifiers, network activity, approximate geolocation and inferences may be made available to advertising partners for cross context behavioral advertising, which some laws treat as a sale or sharing. You can opt out as described in section 3 or by emailing us. We do not knowingly sell or share the personal information of consumers under 16.
• California Shine the Light: we do not share personal information with third parties for their own direct marketing purposes.
• Nevada: we do not sell covered information as defined by Nevada law. You may still send us an opt out request by email.

11. Other things you should know

• Do Not Track and Global Privacy Control. These are browser signals. In the App, use the device and in-app controls described in sections 3 and 9. The Choco Poco pages of this website set no cookies and load no advertising or analytics scripts.
• Third party content and links. Ads and the websites they lead to belong to their owners and are provided by third parties under their own terms. We are not responsible for their content or practices.
• Offline play. The game works without an internet connection. Ads, reward videos, analytics, crash reports and purchases need a connection and happen only when one is available.
• New features. If we add features that handle information in a new way, such as leaderboards, we will update this policy before they go live.

12. Changes to this policy

We may update this Privacy Policy from time to time, for example when we add features or partners or when the law changes, and we will change the date at the top when we do. When a change is material, the App shows you the updated policy together with our Terms of Service before you keep playing, and where the law requires your consent we will ask for it again. The updated policy applies from its date, and continuing to use the App after that means you accept it to the extent permitted by law.

13. Who we are and how to contact us

Choco Poco is published under the name Brainwave Learning Apps and may be distributed on the App Store through the developer accounts of Brainwave Learning Apps or its affiliates. For any question about this Privacy Policy or your information, email support@hotkeys.io and put Choco Poco in the subject.