Privacy Policy
This English version is provided for your convenience. SuperOvni Studios is based in Mexico, so if there's ever a conflict between the two versions, the Spanish version prevails to the extent permitted by law.
This is our full privacy notice under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, published March 20, 2025). The short version: we collect as little as possible, we don't sell your data, and there are no ads.
1. Who is responsible for your data
Carlos Quijano, doing business as SuperOvni Studios, based in Saltillo, Coahuila, Mexico, is responsible for processing your personal data in Grovee. Privacy contact: hola@superovni.com.
2. The data we process
| Type | What it is | When |
|---|---|---|
| Account ID | A random number that identifies your account (anonymous or email). | Always, to save your orchard. |
| Email and password | Your email address and password (the password is stored encrypted; no one can see it). | Only if you create an email account. |
| Name or nickname and friend code | The name you type in, and a code your friends use to add you. | If you use them. |
| Game data | Your orchard, coins, level, collection, animals, friends, gifts, your daily reward streak, and who waters your orchard (and whose orchards you water). | While you play. |
| Notification subscription | The technical address your browser gives us so we can send you notifications (plus its encryption keys), your language and your time zone. | Only if you turn on notifications. |
| Usage data | In-game events with a date and time (for example, opening the game, planting, harvesting), your last visit, and the number and length of your sessions, used for statistics and game balance. | While you play. |
| Technical data | IP address and browser and device type, which our providers log for security and to keep the service running. | When you connect. |
We do not process sensitive personal data, financial or payment data (the game has no purchases), or your location. Your device's clock is used on your device itself to show day and night in the game.
3. Why we use your data
Essential purposes (we can't run the game without them):
- Creating and maintaining your account and saving your progress.
- Letting you sign in on other devices and reset your password.
- The friends, gifts and watering features, and the daily reward (your time zone decides when your day starts).
- The orchard photo you can share is created on your own device: we don't receive or store it.
- Sending notifications to your phone or computer (ripe fruit and a daily reward reminder), only if you turn them on.
- Preventing cheating, abuse and fraud, and keeping the game secure.
- Internal statistics to understand how the game is played, balance it and fix bugs.
- Responding to your requests and meeting our legal obligations.
Secondary purposes: we don't have any today. We don't use your data for advertising or marketing. If we ever wanted to, we'd ask you first and you could say no.
4. Who we share your data with
- Your friends: friendship goes both ways (the people you add, and the people who add you with your code or invite link). They can see your name or nickname (or your friend code if you haven't set a name), your level and experience, and your orchard (trees, decorations and size). Anyone who receives a gift from you sees your name. Your friends can also water your orchard, and you'll see who did. In the weekly ranking, you and your friends see each other's harvests, watering and animals caught that week, and how many species each has discovered. You can remove friends at any time under Friends.
- Service providers that help us run the game (data processors), which may only use the data to provide their service to us: Supabase (database and accounts; servers in Ohio, USA) and Netlify (website hosting; global network).
- Your browser's notification service (Apple, Google, Mozilla or Microsoft, depending on your device), if you turn on notifications: it receives the encrypted notification in order to deliver it.
- Authorities, when a law or a valid order requires it.
We don't sell, rent or share your data with third parties for advertising.
5. International transfers
Our providers store and process data outside Mexico, mainly in the United States. We do this so we can provide the service, using providers that have security measures and contractual data protection commitments in place.
6. Your rights (ARCO) and withdrawing consent
Under Mexican law you can Access your data, Rectify it, Cancel (delete) it or Object to its use (together known as “ARCO rights”), and you can also withdraw your consent:
- The fastest way to delete everything: in the game, go to Settings → Delete my account. It happens instantly.
- For any other request, email hola@superovni.com with the subject line “ARCO rights”, and include your name, your account email (or your friend code), which right you want to exercise and, if it's a correction, the correct information. If you're acting on behalf of someone else (for example, a child), please show that you're authorized to do so.
- We'll reply within 20 days of receiving your request and, if it's approved, we'll carry it out within the following 15 days.
How to limit the use of your data
- You don't have to set a name or create an email account. You can play without giving us any contact details (we only use your random account ID plus the game and technical data described above).
- Notifications are optional and can be turned off in Settings (or by removing the permission in your browser). When you turn them off, we delete your subscription.
- You can change your name under Friends → Change name, and remove friends at any time.
- For any other limitation, email us at hola@superovni.com.
7. How long we keep your data
For as long as your account exists. When you delete your account, we delete your orchard, your game data, your email and your password, and your game events are no longer linked to you (they remain only as anonymous statistics). Technical backups and our providers' security logs (for example, sign-in logs) may be kept for a limited time until they're deleted automatically. If a technical problem prevents something from being deleted right away, we finish the job manually. Anonymous accounts (without an email) that have been inactive for more than 24 months may be deleted.
8. Security
We use encrypted connections (HTTPS), encrypted passwords, access rules so each player can only see and change their own data, and server-side checks for important game actions. No system is 100% secure. If we discover an incident that affects your rights, we'll let you know.
9. Storage on your device
We don't use advertising or tracking cookies. We only store what the game needs to work in your browser (for example, your session, your sound setting and your language). Details are in our Cookie Policy.
10. Children and teens
The game doesn't ask for contact details to play. Anyone under 18 needs a parent's or guardian's permission to create an email account, and for children under 13 we ask that the parent or guardian create it using their own email address. We don't knowingly collect contact details from minors without that permission. If you're a parent or guardian and think this has happened, email us and we'll delete it. See our Parents' Guide.
11. If you live outside Mexico
European Union, United Kingdom and European Economic Area: we process your data to provide the game you signed up for (your account and progress), based on our legitimate interests (security, preventing cheating and internal statistics), and with your consent where we ask for it (for example, notifications). You have the right to access, rectify, erase, restrict and port your data, to object to its processing, and to lodge a complaint with your local data protection authority.
California and other U.S. states: we don't sell or “share” personal information for advertising. You can ask to know what data we have about you, and to correct or delete it, and we won't treat you differently for doing so.
Children in the United States: the game has no chat, ads or purchases, and doesn't ask for contact details to play. Email accounts for children under 13 must be created by a parent or guardian using their own email.
12. Changes to this policy
If we change this policy, we'll post the new version here with its date and, if the change is significant, we'll let you know in the game.
13. Supervisory authority
If you believe your right to data protection has been violated, you can contact Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), the authority responsible for personal data held by private parties under the 2025 law.