Privacy policy

• Cuicani does not ask for your name, email, phone number, photos or location, and it has no accounts. Your progress is saved on your phone.
• Mixiuh runs no servers for the game: we do not receive what you do in it, or your age.
• The only third-party services are Google’s, for ads (AdMob) and consent (UMP), and your phone’s store (Google Play or the App Store) for the one-time purchase. Section 6 says what each one receives.
• None of that starts before the age screen is answered. Ads are optional: they only play when you tap a button that says so.
• For anyone under 13, and anyone who picks “Prefiero no decirlo” (I would rather not say), ads are not personalized, carry Google’s child treatment, and are served without the phone’s advertising ID.
• To delete everything, clear the game’s data or uninstall it.

Cuicani is a game by Mixiuh, a software studio based in Guadalajara, Jalisco, Mexico. Mixiuh is responsible for this policy and for any data you send us.

Legal name, address and phone number of the controller: [PENDING: full legal name (individual or company), address and phone]

Privacy contact: mixiuhonline@gmail.com.

This policy covers the Cuicani app for Android and for iPhone and iPad (identifier com.mixiuh.colibri) and its support pages.

Legal review: Mexico’s LFPDPPP requires the controller’s identity and address in the privacy notice, and the US COPPA Rule requires the operator’s name, address, phone number and email. The developer name shown on Google Play and the App Store must match the one here.

Cuicani is a game for all ages. It is free and is paid for by two things only: optional rewarded ads and a one-time purchase, the Mecenas del valle, which removes the ads. It has an energy, the nectar (“néctar”), that refills over time or instantly with an ad, and that is never sold.

There is no chat, no public profile, no content from other people and no links to social networks. The game sends no notifications. It includes no analytics or crash reporting tools, our own or third-party, apart from what Google’s ad SDK collects on its own (section 6). It never asks about diagnoses or your health.

The first time, before playing, the game asks “¿Cuándo naciste?” (When were you born?), with month and year (never the day), or “Prefiero no decirlo”. Nothing is preselected.

Until that answer, the game starts no third-party service and makes no network connections. The answer picks one of three profiles:

• Child: under 13; in the European Economic Area, under 16; if the game does not know your region, under 16; anyone who picks “Prefiero no decirlo”; and any answer that cannot be read.
• Teen: 13 to 17 (or from that digital age up to 17).
• Adult: 18 or older.

The answer is stored only on your phone and is sent to no one. Google’s services only receive the treatment that matches the profile (for example, child treatment), never your age or date. To apply your region’s rules, the game reads the region set on your phone; it does not use your location or IP address for that.

All of this lives in the game’s storage on your phone. Mixiuh does not receive it:

• Your progress and settings.
• Your answer to the age screen (month and year, or that you preferred not to say) and the resulting profile.
• If you have the Mecenas del valle: the purchase status confirmed by the store.
• Ads you report: the date, where it appeared and the number the ad network gives that ad. Nothing about the player. The last 20 are kept.
• Where it applies, your consent choice, which Google’s tool stores on the phone (section 6.2).

6.1 Google AdMob: ads

When. The game starts Google’s ad SDK only after the age screen. Ads are offered from the second time you play, never when the game opens, and only play when you tap a button that says so, in exchange for something shown beforehand. They are Google ads shown on top of the game. With the Mecenas del valle there are no ads.

What Google collects. According to Google’s documentation for its SDK (checked on October 5, 2026), the SDK automatically collects and shares, for advertising, analytics and fraud prevention:

• The device’s IP address, which may be used to estimate its general location.
• Product interactions, such as app launches, taps and video views.
• Diagnostic and performance information, such as launch time, hang rate and energy use (on iPhone and iPad, also crash logs).
• Device identifiers: on Android, the advertising ID, the app set ID and, if applicable, identifiers of accounts signed in on the device; on iPhone and iPad, the advertising identifier or other app- or developer-scoped identifiers.
• On iPhone and iPad, advertising data, such as ads that have been seen.

On Android, Google states that all of this data is encrypted in transit (TLS). Sources: Google Play data disclosure and App Store data disclosure.

How we limit it. With every ad request, the game tells Google how to treat it, by profile:

According to Google, non-personalized ads are not based on past behavior: they use context, such as the app’s content and a general (city-level) location. Even so, Google uses identifiers for frequency capping and aggregated ad reporting (AdMob Help).

• On Android, Cuicani does not hold the advertising ID permission, so the system never hands it to Google’s SDK, for any profile.
• On iPhone and iPad, the advertising identifier is only available to an app if you allow it in Apple’s tracking prompt. This game never asks for it.
• We ask AdMob not to show ads about gambling, dating, alcohol, weight loss, health or medicines. [PENDING: confirm these categories are blocked in the AdMob console]

More on how Google uses this data: How Google uses information from sites or apps that use its services and the Google Privacy Policy.

6.2 Google UMP: your consent

In the European Economic Area, the United Kingdom and Switzerland, and whenever the game does not know your region, before the first ad you choose the game uses Google’s User Messaging Platform (UMP) to ask for the consent the law requires. That tool checks with Google whether asking is needed and stores your choice on the phone, using the IAB TCF standard.

It is never used with the child profile. For teens it carries the under-the-age-of-consent tag; according to Google, with that tag it does not request consent. You can change or withdraw your choice in “Opciones de privacidad” (Privacy options; section 8). If you do not consent, Google may show limited, non-personalized ads.

Legal review: the legal basis for showing contextual ads to minors in the European Economic Area, and the decision on AdMob’s “programmatic limited ads”, which according to Google use local storage to detect invalid traffic without consent.

6.3 Purchases: Google Play and the App Store

The Mecenas del valle is a one-time payment, not a subscription. Payment is processed by your phone’s store (Google Play or Apple’s App Store) with your account, under its own terms and privacy policy. The game never sees your card or payment details. On the phone it receives the purchase confirmation (which product, its status and a receipt signed by the store) to unlock and restore it, and does not send it to Mixiuh.

In the child profile, before the store opens, an adult confirms with the phone’s screen lock; then the store’s family controls apply (Apple’s Ask to Buy or Google’s Family Link).

Store privacy policies: Google and Apple.

6.4 What the phone itself does

• Adult confirmation. The game asks the system for the screen lock (fingerprint, face or passcode). The system does the check: the game only receives “yes” or “no”, never biometric data. It is used for the “Para personas adultas” (For adults) part of the child profile (purchases, the profile’s ads and reported ads) and to correct the age.
• Clipboard. Only when you tap “Copiar partitura” (Copy score; 13+). You decide where to paste it.

Cuicani is for all ages and we know children play it. That is why the child profile, which anyone who picks “Prefiero no decirlo” also gets, works like this:

• We do not ask children for a name, email, location or photos, and there is no way to share data with other people.
• Ads are rewarded and optional: they only play when a button is tapped, after an in-game sheet that says “Ahora viene un anuncio. No es parte del juego.” (An ad is coming. It is not part of the game.). They carry Google’s child treatment, general-audience content and Google ads only, with no interest-based ads or remarketing.
• Children never see Google’s consent form or Apple’s tracking prompt, and never see the Mecenas del valle next to an ad or when the nectar runs out.
• Buying first requires an adult to confirm on the phone.
• After every ad they can tap “Reportar este anuncio” (Report this ad).

Technical data Google receives. Even with child treatment, Google’s SDK receives technical data such as the IP address, interactions and diagnostics (section 6.1). In this profile we use Google only to show contextual ads, cap how often they are shown and prevent fraud, which the US COPPA Rule calls “support for internal operations”. We do not use it for behavioral advertising or to build profiles.

For parents and guardians. In “Cómo nos mantenemos gratis” (How we stay free), inside “Para personas adultas” (For adults, behind the phone’s lock), there is a switch, “Anuncios en este perfil” (Ads in this profile). It is on by default; when off, no ads appear in that profile and the nectar refills over time only. You can delete all of the game’s data at any time (section 9) and write to us at mixiuhonline@gmail.com.

If you are under 13 and want to write to us, ask an adult to do it. If someone under 13 writes to us, we use their email only to reply once and then delete it.

Legal review: the full COPPA notice: the internal operations for which a persistent identifier is used (312.4(d)(3)), the written retention policy (312.10) and the security program (312.8); the UK Children’s Code and its impact assessment; and Mexico’s rules for minors (consent through whoever holds parental authority).

• Privacy options. In Ajustes (Settings) and in “Cómo nos mantenemos gratis” (How we stay free), “Opciones de privacidad” appears when Google’s tool requires it (European Economic Area, United Kingdom and Switzerland). There you can change or withdraw your consent, as easily as you gave it.
• Not watching ads. Just do not tap them: everything free stays free. The Mecenas del valle removes them for good, and in the child profile an adult can turn them off.
• Reporting an ad. In the child profile, “Reportar este anuncio” (Report this ad) when coming back from an ad; at 13 or older, “Reportar el último anuncio” (Report the last ad) in “Cómo nos mantenemos gratis”.

• On your phone: until you clear the game’s data or uninstall it. On Android: Settings › Apps › Cuicani › Storage › Clear data. On iPhone and iPad: delete the app. Your progress is deleted; the Mecenas del valle comes back with “Restaurar compras” (Restore purchases).
• On Android, the game’s data is excluded from Google’s cloud backup, though it can move to a new phone with a direct device-to-device transfer. On iPhone and iPad, system backups (iCloud or your computer) may include app data, depending on your settings.
• At Google: under its own rules (how Google retains data).
• At the store: your purchase history stays in your Google Play or Apple account, under their policies.
• At Mixiuh: only the emails you send us. We keep them while we handle your request and for up to 12 months after the last reply; then we delete them. You can ask us to delete them sooner.

Legal review: the retention period for support emails (written retention policy, COPPA 312.10).

Depending on where you live, the law gives you rights over your data:

• Mexico: access, rectification, cancellation and opposition (ARCO rights), and withdrawing your consent.
• European Economic Area and United Kingdom: access, rectification, erasure, restriction, portability, objection and withdrawing consent at any time, plus lodging a complaint with your country’s data protection authority.
• United States: parents and guardians can ask to review or delete their children’s information and refuse further collection.

Mixiuh does not hold the game’s data: it lives on your phone and you delete it yourself (section 9). For emails you sent us or any question, write to mixiuhonline@gmail.com and we will reply within the time the law sets. For data held by Google or the store, use their tools or contact them; we can help you find how.

In Mexico, the authority for personal data is the Secretaría Anticorrupción y Buen Gobierno.

Legal review: rights, deadlines and authority under the current LFPDPPP (DOF 2025), the GDPR and any applicable US state laws.

• The game’s data stays inside the sandbox the system gives each app.
• The game only loads its own content, bundled in the app, and does not let you browse to other sites.
• Mixiuh runs no servers for the game, so it keeps no copies of your data.
• We only share data with Google and the stores, which handle it under their policies and their commitments to us and to the stores, with protection at least equal to what this policy describes.
• Google and Apple may process data outside your country, including in the United States, under their policies.

Legal review: the equivalent-protection confirmation Apple requires (guideline 5.1.1), international transfers, and whether Google acts as controller or processor in each case.

• Controller: Mixiuh (section 2).
• Data: we collect no identifying data. Your age answer is stored on your phone; through Google, the technical data in section 6.1; through support, your email and what you write.
• Necessary purposes: showing the rewarded ads you ask for with the protections for your age, processing and restoring the Mecenas del valle purchase, and answering your messages. There are no secondary purposes: we do not use your data for marketing and we do not sell it.
• Sensitive data: none. We never ask about your health.
• Third parties: Google (ads and consent) and your phone’s store (purchases), as explained in section 6.
• ARCO rights and withdrawal: by email to mixiuhonline@gmail.com, with your name (or your representative’s), what you request and a way to reply to you.
• Changes: on this page, with its date.

Legal review: the full privacy notice under the LFPDPPP (DOF 2025): disclosure or transfer to Google and the stores, tacit consent, and the means to limit use or disclosure.

If what the game does with data changes, we update this page and its date before the change reaches the game. If the change is significant, we will also mention it in the store’s release notes.

Questions? Write to mixiuhonline@gmail.com or visit Cuicani support.