PopGrabPrivacy Policy
What PopGrab collects, why, and how to get rid of it.
Effective 1 September 2026 · Last updated 1 September 2026
1. Who we are
PopGrab is a mobile game published by Team Mio, an independent developer team. Team Mio is responsible for the app and, for people in the UK and the European Economic Area, is the data controller for the information described here.
The postal address and email in section 14 reach us, and every request sent there is answered. A store listing may show a different name from Team Mio, because the stores display the name on the developer account — it is the same publisher either way.
This policy covers the PopGrab apps for iOS and Android, and this website. It does not cover Apple's App Store or Google Play, which have their own policies.
2. What we collect
An account identifier, always
PopGrab creates an anonymous account the first time you open it, so your progress has somewhere to live. That account is a random identifier and nothing else — no name, no email address, no device identifier, and nothing that points back to you as a person. You are not asked to sign in and the game is fully playable without ever doing so.
If you choose to sign in
Signing in with Google or Apple exists so your progress survives a lost or replaced phone. When you do, the provider gives us:
- your email address;
- your display name, if your provider account shares one;
- an identifier for your account with that provider.
We never see or receive your Google or Apple password. If you use Sign in with Apple and choose Hide My Email, we only ever receive Apple's relay address, and that is all we store.
Your game data
PopGrab is offline-first: rounds are played and scored entirely on your device, and everything below is written to your phone first. A copy is then mirrored to our servers against your account identifier, which is what lets a reinstall get your progress back.
| Data | Examples |
|---|---|
| Progress | Level, XP, Sparks, current tier, best solo score |
| Lifetime counters | Rounds played, tiles popped, best rhythm rating, best consistency |
| Your tunes | Notes, scale, instrument, tempo and reverb of tunes you save or back up |
| Leaderboards | Your display name and score, when you appear on a board |
| Allowances | How many AI Tuner remixes you have left this week |
Leaderboard entries are visible to other players by design. Nothing else in that table is.
What you type into the AI Tuner
The AI Tuner turns a short mood description into a tune. When you use it, the text you type is sent through our server to Anthropic, whose Claude model generates the result. Anthropic acts as our service provider for that request. Your prompts are not used to train models, and we do not build a profile from them. We keep the tune that comes back, because it is yours; we do not retain the prompt beyond what is needed to produce and troubleshoot the result.
Advertising
PopGrab is free, and advertising is the only thing that pays for it. There is nothing to buy in the game, so there is no payment for us to take — we never receive a card number, a billing address, or any payment credential.
Every ad in PopGrab is one you choose to watch in exchange for something: more time on a finished round, an AI Tuner remix, or a sound palette. There are no banners, no ads between screens, and none when the game opens. Ads are supplied by Google AdMob, and to serve and measure them Google may collect a device advertising identifier, an approximate location derived from your IP address, and how you interacted with the ad. Google is an independent controller of that data; see Advertising choices for how to limit it, and Google's own policies for the full picture.
Server logs
Our hosting provider records ordinary technical information when your app talks to our servers — IP address, timestamp, and which request was made. We use it to keep the service running and to detect abuse, and nothing else.
Notifications
If you turn on reminders, PopGrab schedules them on your device. There is no push token, no notification server, and nothing is sent from us to your phone. Turning the switch off cancels them locally.
3. What we never collect
- Your contacts, photos, files, calendar, microphone or camera.
- Precise location. We never ask for a location permission.
- Health, fitness, financial or biometric data.
- Your browsing or app usage outside PopGrab.
We do not sell your personal information, and we run no third-party analytics or attribution SDK inside the game.
4. Why we use it
| Purpose | Data used | UK/EU legal basis |
|---|---|---|
| Running the game and saving progress | Account identifier, game data | Performance of a contract |
| Letting you sign in and recover an account | Sign-in details from Google or Apple | Performance of a contract |
| Generating tunes in the AI Tuner | Your prompt | Performance of a contract |
| Keeping the service secure and fair | Server logs, allowance counters | Legitimate interests |
| Showing personalised ads | Advertising identifier and ad data | Consent |
| Showing non-personalised ads | Limited ad data | Legitimate interests |
5. Who else sees it
We share data only with the providers that make the game work:
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Accounts, database and backup hosting | Account identifier, sign-in details, game data, server logs |
| Sign-in and AdMob | Sign-in details; advertising data | |
| Apple | Sign in with Apple | Sign-in details |
| Anthropic | Generates tunes for the AI Tuner | The prompt you type |
| Firebase Hosting | Serves this website | Standard web request logs |
We may also disclose information where the law requires it, or to establish or defend legal claims. If PopGrab is ever sold or merged, account data may transfer with it, and this policy travels with your data until it is replaced by one you are told about.
6. How long we keep it
- Game data and account records — for as long as your account exists.
- Anonymous guest accounts — deleted after a prolonged period with no activity, since there is no way for you to return to one.
- Server logs — a short rolling window, then discarded.
- Deleted accounts — removed within 30 days of your request, apart from anything we must keep for tax or legal reasons.
Data stored on your own device stays there until you delete the app.
7. Your rights
Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. If you are in the UK or EEA you also have the right to restrict or object to processing, to portability, to withdraw consent at any time, and to complain to your local supervisory authority.
If you are a California resident, you have the right to know what we collect, to delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information. We do not sell personal information; personalised advertising may count as "sharing" under California law, and Advertising choices explains how to stop it. We will not discriminate against you for exercising any of these rights.
Email support.teammio@gmail.com and we will respond within one month. Because most accounts are anonymous, we may need something that ties the request to your account before we can act on it.
8. Deleting your account
Open Settings → Account → Delete Account in the app and confirm. Your account and everything stored against it — progress, tunes, leaderboard entries and the copy on your device — are removed straight away. Step-by-step instructions.
If you can no longer reach the app, email support.teammio@gmail.com from the address you signed in with, with the subject Delete my account, and we will remove it within 30 days and confirm when it is done.
9. Advertising choices
- Simply don't watch them. Every ad in PopGrab is one you opt into. Nothing you need in order to play is behind an ad, and declining costs you only the reward that ad was offering.
- On iOS, personalised ads require your permission through Apple's App Tracking Transparency prompt. Decline it, or change it later in Settings → Privacy & Security → Tracking, and you will see non-personalised ads.
- On Android, open Settings → Google → Ads to delete your advertising ID or opt out of personalisation.
Turning off personalisation does not remove ads; it makes them less relevant.
10. Children
PopGrab is intended for players aged 13 and over, and is not directed at children. We do not knowingly collect personal information from anyone under 13 — or under the minimum age of digital consent where you live, which is up to 16 in parts of the EEA. If you believe a child has provided us with personal information, email support.teammio@gmail.com and we will delete it.
11. International transfers
Our providers operate globally, so your data may be processed outside your country, including in the United States. Where data leaves the UK or EEA we rely on the European Commission's Standard Contractual Clauses, the UK Addendum, or an adequacy decision covering the destination.
12. Security
Traffic between the app and our servers is encrypted in transit. Our database enforces row-level security, so an account can only ever read its own rows. Sign-in tokens are held in your device's private app storage. No system is perfect, and we cannot guarantee absolute security — but if a breach affects you, we will tell you and the relevant regulator as the law requires.
13. Changes
When this policy changes we update the date at the top. If a change materially affects your rights, we will tell you in the app before it takes effect.
14. Contact
Team Mio
Friends Road, Mirpur Dhaka, Bangladesh
support.teammio@gmail.com