Effective and last updated: September 6, 2026
Controller: Pedro Diego Correa da Silva, an individual operating under the Brimora Games brand
Privacy contact: brimora@remessaflow.com
1. Scope and transparency
This policy applies to Mosaico Vivo, package com.brimoragames.mosaicovivo, and related support. Read it together with the Data safety information shown on Google Play. Brimora Games does not create a separate account: the game works locally, and connecting Google Play Games is optional.
This version of the Brimora Games institutional website uses no advertising cookies, tracking pixels, or first-party analytics tools. External links are governed by the destination website’s policies.
2. Information handled
2.1 Data stored on the device
To operate the game, the following may be stored: unlocked and completed levels; scores and ratings; claimed rewards; gem and item balances; Portal Energy and the timestamp used to regenerate it; first-purchase bonus status; automatically generated avatar and nickname; ranking division and points; language, audio, vibration, and privacy preferences; completed tutorials; and tokens of processed purchases to prevent duplicate grants.
This data remains on the device until you, Android, or uninstallation removes it. The in-game reset command deletes only the progress identified in its confirmation and preserves certain economy and cloud data disclosed on that screen.
2.2 Optional Google Play Games
If you choose to connect Google Play Games, Google may provide a player identifier and process data required for authentication, leaderboards, and cloud saves. The cloud file may include progress and completed levels, tutorials, best scores, claimed rewards, gems, first-purchase bonus status, Portal Energy with a timestamp, and the selected avatar.
The game uses an automatic nickname and a built-in avatar. It has no chat, photo uploads, custom public names, or free-form content sharing. Connecting Play Games does not create a separate Brimora Games account.
2.3 In-app purchases
Gem purchases are processed through Google Play Billing. Brimora Games does not receive your full payment-card number. To validate a purchase and prevent duplicate grants, the game automatically creates a random anonymous identity through Firebase Authentication. It contains no name or email address and does not require a Google Play Games connection.
The anonymous identifier, product, and purchase token are sent over an encrypted connection to Brimora Games’ backend on Google Cloud Run. The backend checks the Android Publisher API, records the result, quantity, Google order number when provided, granted values, and timestamps in Cloud Firestore, and then consumes the product. The raw token is not stored in Firestore: the deduplication record uses its cryptographic hash.
2.4 Rewarded ads
You choose whether to watch a rewarded ad in exchange for the stated reward. The game uses Google Mobile Ads (AdMob) and Google User Messaging Platform (UMP). Because the declared audience is age 13 or older, requests are marked as not child-directed for COPPA purposes. They also use the conservative treatment for users under the age of consent, with no personalized advertising or remarketing and with content limited to the G digital content rating.
Even in this restricted mode, the Google Mobile Ads SDK may automatically collect and share the IP address (which may indicate approximate location), app and ad interactions, diagnostic data, and device or account identifiers for contextual advertising, measurement, security, and fraud prevention. Privacy choices can be opened from the in-game store when required; otherwise, that button opens this policy.
2.5 Support
If you email us, we process your address, message, attachments, and information you voluntarily provide—such as device model, Android version, game version, player ID, or order number—to respond, investigate errors, locate a purchase, or honor a legal right. Never send a password, full payment-card number, or security code.
3. Purposes and legal bases
- run the game and preserve requested progress;
- provide Play Games cloud saves and leaderboards when you enable them;
- process purchases, grant items, and prevent duplicates or fraud;
- deliver rewards after voluntary ads;
- maintain security, fix errors, and provide support;
- comply with legal and regulatory duties and establish or defend legal claims.
Depending on the context and applicable law, we rely on performance of the requested service or contract, legal obligations, consent, and proportionate legitimate interests such as security and fraud prevention. Where processing relies on consent, you may withdraw it through available controls without affecting prior lawful processing.
4. Sharing and providers
Necessary data may be processed by Google Play, Google Play Games, Google Play Billing, Google AdMob, UMP, Firebase Authentication, Google Cloud Run, and Cloud Firestore. Depending on the context, these services act under their own policies as processors or independent controllers. We do not sell personal information and do not use first-party data for cross-app behavioral advertising.
See Google’s Privacy Policy and the Google Mobile Ads SDK data disclosure.
5. Retention
- Local data: until app data is cleared, removed by an available in-game control, or the app is uninstalled.
- Cloud saves and leaderboards: under Google Play Games controls and retention periods, until user deletion or an applicable request.
- Purchase validation: the anonymous identifier and deduplicated transaction record remain in Firebase and Firestore as long as needed to grant or reconcile gems, prevent fraud, provide support, and comply with legal duties. You may request deletion through the channel in this policy, subject to required retention.
- Google Play records: under Google policies and legal retention periods.
- Support: as long as needed to resolve the request and, where necessary, meet a legal duty, prevent fraud, or protect legal rights.
When retention is no longer needed, data directly controlled by Brimora Games will be deleted or anonymized unless the law requires or permits continued retention.
6. Security and international transfers
We use safeguards proportionate to the risks and minimize the data handled. Communications with Google services are encrypted in transit. Because these providers operate globally, data may be processed outside your country under applicable transfer safeguards. No system is completely infallible.
7. Children and teenagers
Mosaico Vivo is intended for people aged 13 or older. The game content is family-friendly; this audience setting primarily reflects the presence of in-app purchases and related monetization controls. Minors should make purchases only with a parent’s or guardian’s authorization and supervision and may use Google Play parental controls.
The game is not declared as directed to children under 13 for COPPA purposes. As an additional protection for teenagers and other users, ads are non-personalized and limited to the G rating. The Play Console audience declaration must remain consistent with this configuration and local obligations.
Any processing involving children or teenagers must give primary consideration to their best interests. Parents and guardians may contact us to exercise rights or ask how data is used.
8. Your rights and choices
Depending on where you live, you may request confirmation and access, correction, sharing information, anonymization, blocking, deletion, portability where applicable, withdrawal of consent, objection, or restriction. You may also complain to Brazil’s ANPD or another competent supervisory authority after contacting the controller.
You may clear local data in Android settings, manage Play Games data in your Google Account, decline rewarded ads, and reopen privacy choices where available. Visit our account and data deletion page or email brimora@remessaflow.com. We may request only the minimum information needed to locate records and prevent fraud.
9. Changes and contact
We may update this policy to reflect changes to the game, providers, or law. The current version will remain at this URL with a revised date. Questions or requests: brimora@remessaflow.com.