BitPet Privacy Policy

Last Modified: April 3, 2026

1. Data collection and use

This Privacy Policy covers our use of any information that can or could be used to identify you ("Personal Data"). We may use aggregated or de-identified data for analytical purposes where the data no longer identifies a specific individual.

In order to provide our Services and to fulfill the promises that we make in the Terms of Service, we need to gather and process certain Personal Data:

Some of our Services require you to open an account with us before you can use them. This may require you to provide your age and the in-game username you use on our Services. When you register for an account and use the Services, we collect and use this information to authenticate you, to ensure that you are eligible and able to receive the Services, and to provide you with the correct version of the Services.
You may be required to have an account that supports third-party single sign-on services to use some of our services. In this case, the personal data we collect also depends on the external account you use, their privacy policy, and what privacy settings we can see on those services when you access BitPet AS services using their services.
- If you associate a Google Account with the Services, we collect your Google email address and an authentication token provided by Google.
- If you choose to connect your Facebook account to the Services, we will collect the unique user ID provided by Facebook and, if you allow, your email address registered with Facebook.
- If you choose to associate your Apple account with the Services, we will collect the email address stored with your Apple ID account, or if you provide a private forwarding email by using the "Hide My Email" option provided by Apple email address.
We collect and use your device's precise real-time location data (using technologies like GPS, Wi-Fi, and cell tower triangulation) when you use our Services. This includes continuous background tracking if you enable it for participating services. The explicit purpose of this collection is to enable the core location-based gameplay functionality, which relates your real-world location to the in-game experience, and to plan the location of in-game resources. Your location data is strictly used for gameplay and core service provision, and is not used for advertising or marketing purposes. If you do not provide consent for location data, certain core features of the Service may not function.
We also may collect Primary Account information, such as information about your mobile device model, brand, operating system, battery status, frame rate, in order to improve the app compatibility for your device.
We also collect and use your in-game actions and achievements, and certain information about your mobile device (including device identifiers, device operating system, model, configuration, settings) to provide the Services for you and create a personalized user experience. We also generate an account ID for you in our internal systems to associate you with an account when you use certain Services.
The information above is also used in order to provide customer and technical support to you.

We may also use your Personal Data as follows:

IP address, browser type, operating system, the website you visited prior to visiting our Services, the pages of our Services you viewed or the features you used and the time spent on features or functions on those pages, advertising and device identifiers, your age and behavior during gameplay, your in-game user settings and preferences, and your in-app purchases to learn more about our users and understand who is using our services and how they use our services.
In-game actions will also be analyzed in order to show you rewards, promotions, or various offers in or about our Services tailored to each user’s personal experience. We clarify that while this analysis involves profiling to personalize your experience, we do not use automated decision-making that produces legal effects concerning you or similarly significantly affects you.
Use your internal account ID and in-game username to associate any User Content you submit to BitPet AS through the Services (such as local points of interest) with your account.
Share updates and news with you in-game or via email using your email address and device information. You can unsubscribe at any time by clicking the unsubscribe link in the email.
To improve upon existing- or provide new or additional features for our Services
We prevent cheating as described in our Terms of Service, by monitoring your in-game actions and achievements, and specific information about your mobile device, such as; OS, device model, identifiers, configuration, settings
Moderate User Content: We process any User Content you submit (such as AR photos for competitions) and any reports submitted by other users regarding that content. This is necessary to maintain a safe environment, enforce our Terms of Service, and prevent the display of inappropriate or illegal material.
Regulatory or legal disclosures and establishing, exercising, or defending legal claims.

We use background activity tracking to provide you with certain functionalities in the Services such as in-game items and rewards tied to your step counts and location, and alerts for nearby gameplay events. We do this to ensure you get in-game rewards and/or progression for all of the walking you do while playing our games. You can change your mind and turn off background activity tracking at any time, disabling activity tracking for the specific Service in your device settings if you are using an iOS device, or by closing down the Walking Service if you use Android. We do not use this data for marketing or advertising purposes. Our Services cannot read from or write to your device’s health app without your consent.

2. Children’s Privacy

Our Services are not directed at and are not intended for use by children under the age of 13. Where required by applicable law, we will apply a higher age threshold or require parental consent. If we learn that we have collected Personal Data from a child under 13 (for example, through a user or parental request), we will take steps to promptly delete such information. We do not actively verify age and rely on user-provided information. We do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and believe your child has provided Personal Data, please contact us at privacy@bitpet.io.

3. Legal Basis for Processing

We process your Personal Data only when we have a valid legal basis to do so under applicable data protection laws, including the GDPR. The legal bases for our data processing activities are as follows:

Performance of a Contract: Processing is necessary to provide the Services, including the mobile game BitPet, and fulfill our obligations under our Terms of Service. This includes:
- Creating and maintaining your account, including verifying your age and in-game username, and facilitating third-party sign-on (Google, Facebook, Apple).
- Processing in-game actions, achievements, and device information to provide a personalized user experience and provide customer and technical support.
- Associating User Content with your account via your internal account ID and in-game username.
Legitimate Interests: Processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms. We have assessed that our legitimate interests are not overridden by your rights and freedoms. This includes:
- Analyzing usage data (IP address, browser type, gameplay behavior, in-app purchases, etc.) to understand our users, improve upon existing features, and provide new or additional features for our Services.
- Preventing cheating and fraud by monitoring in-game actions and specific device information, as described in our Terms of Service.
- Improving app compatibility by collecting Primary Account information such as device model, OS, battery status, and frame rate.
- Internal analysis of in-game actions to provide a personalized in-game experience and gameplay-related rewards/offers.
- Establishing, exercising, or defending legal claims.
Consent: Processing is carried out based on your specific and informed consent, which you may withdraw at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdraw it. You can withdraw consent via your device settings or by emailing privacy@bitpet.io. This includes:
- Processing your real-time, precise location data (both foreground and background) to enable the core, location-based gameplay functionality.
- Processing background activity tracking (step counts, location alerts) to provide you with certain in-game functionalities and rewards.
- Sharing updates and news via email, where consent is required by applicable law.
- Sharing Personal Data with our third-party publishing partners for direct marketing purposes.
Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation that we are subject to. This includes disclosures to government and law enforcement officials when legally required.

4. Data Storage Duration

We retain your Personal Data for as long as necessary to fulfill the purposes set out in this Privacy Policy. The specific retention periods depend on the purpose for which we process your data:

Active Account: We retain Personal Data associated with your account for the entire duration your account is active.
Account Deletion: Following the permanent deletion of your account (either via the app or by request), we will delete or anonymize your Personal Data within thirty (30) days, provided there are no legal or regulatory requirements to retain it.
Legal & Compliance Retention: We may retain certain data for a longer period if required to comply with legal obligations, such as tax and accounting laws (up to seven years in some jurisdictions), to resolve disputes, or to enforce our agreements.
Anonymization: When Personal Data is no longer needed and we are not legally required to keep it, we will either permanently remove it or render it anonymous so that it can no longer be associated with you. If we remove the Personal Data, we will, as long as it is commercially reasonable and technically feasible, make said Personal Data irrecoverable or irreproducible.

5. Data transfer

BitPet AS operates its services worldwide. To the extent permitted by law, your personal information may be transferred and stored in countries other than yours for the purposes described in this Privacy Policy. The data protection laws in these countries may differ from those in your country.

If we transfer your Personal Data from the UK or the EEA to other countries, including the US, we ensure that a similar degree of protection is provided to your Personal Data as within the UK or the EEA, as applicable, by ensuring that at least one of the following safeguards is implemented:

The country to which your Personal Data is transferred to is a country that the European Commission (or the UK Government, if you are based in the UK) considers providing an adequate level of protection for Personal Data as the UK or the EEA, as applicable.
We use specific contracts approved by the European Commission (or the UK Information Commissioner's Office, if you are located in the UK), which give Personal Data the same protection as it has in the UK or the EEA, as applicable, when we deal with service providers.

6. Information sharing

The Personal Data that we collect from or about you will not be shared with anyone except as described below:

Information Shared with Our Service Providers: We engage external service Providers with whom we partner to manage and provide services. As part of this, they will process your personal data on our behalf. These external service providers only have access to your personal data to perform services on our behalf. The service providers we use can help us:

Hosting and Operations: To run and maintain our Services through third-party cloud platforms and software tools (e.g., Amazon Web Services (AWS)).
Authentication (SSO): Providers such as Google, Apple, and Facebook for account creation and sign-in services, as described in Section 1.
Analytics and Crash Reporting: Including tools like Google Firebase and Crashlytics, to monitor performance, analyze usage, and identify crashes.
Payment Processing: To facilitate in-app purchases and provide payment solutions (e.g., Apple App Store, Google Play Store).
Marketing and Communications: To conduct email and mobile messaging campaigns, and perform game/marketing analysis.
Customer Support: To provide technical and customer support.

Some third-party service providers may also collect information directly from you as a third-party service in accordance with their own privacy policies (for example, payment processors may ask you for billing and financial information). Such third party service providers will not share your financial information, such as credit card numbers, with BitPet AS, but may share limited information about us with us related to your purchase, such as your postal code.

Information shared with other players: We share certain Personal Data with other players when you use the Services. This personal information includes your in-game profile (such as your username, avatar, online status, etc.), your in-game actions and achievements, your real-world location in relation to your game, or when you interact with it game resources to play the game. In addition, some games link to third-party sharing features on your device that you may use to share personal information with others outside the Services; BitPet AS does not control and is not responsible for the practices of these third-party sharing features.

Content Moderation: To ensure a safe experience, we provide tools for players to report inappropriate User Content (including AR photos). When content is reported, it is reviewed by BitPet AS staff and may be removed from our Services if it violates our policies.

Publicly Shared Information: When you use the Services, particularly when you play our games, use contest features, or participate in our forums, the following information about you may be shared on publicly available websites and therefore made public: Your Username, your in-game profile, your success and your public messages.

Information Shared with Third Parties: We share Anonymous Data with third parties for industry and market analysis. Only with your express consent may we share Personal Data with our third-party publishing partners for direct marketing purposes. We do not share personal information with other third parties for direct marketing purposes.

Information Disclosed to Protect Us and Protect Others: We work with government and law enforcement officials or private parties to enforce and comply with laws. We will only disclose your information to government or law enforcement officials or private parties as we reasonably deem necessary or appropriate: (a) to respond to claims, legal process (including subpoenas and search warrants); (b) to protect our property, rights and safety, and the property, rights and safety of third parties or the general public; (c) Investigate and stop any activity that we deem illegal, unethical or lawful.

Disclosures Related to Business Transactions. The information we collect from users, including personally identifiable information, is a business asset. If we are acquired by a third party as a result of a transaction such as a merger, acquisition or asset sale, or if our assets are acquired by a third party, if we go out of business or all or part of our assets, including your personal information, will be passed or transferred to Third-party acquirers associated with the transaction.

7. Data safety

We use industry-standard encryption (such as TLS/SSL) to protect your Personal Data during transmission over the internet.

We have put in place appropriate legal, organizational, and technical security measures designed to prevent your Personal Data from being accidentally lost, used, or accessed in an unauthorized way, or improperly altered or disclosed. We limit access to your personal information to employees, agents, contractors, and other third parties who have a business need to know, and they process your personal data only on our instructions and under an obligation of confidentiality. We have put in place procedures to deal with any suspected Personal Data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

8. Rights and choices

You have certain rights in relation to your Personal Data, which means that you can, where applicable under local law, exercise the following rights by contacting us at privacy@bitpet.io:

Right of Access, Rectification, and Erasure: Request access to, correction of inaccurate, or deletion of the Personal Data we hold on you. You can request deletion by emailing us at privacy@bitpet.io, or you can delete your account directly from the settings panel inside the application (open BitPet, click settings, and select "Delete User"). Please note that the in-app deletion action is permanent and non-reversible.
Right to Object or Restrict Processing: Request us to stop or restrict the processing of your Personal Data. This right to object applies in particular to processing for direct marketing purposes. We may still process data if it is necessary for the performance of a contract or if we have a compelling legitimate interest that overrides your objection.
Right to Data Portability: Request to receive the Personal Data we hold about you in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller.
Right to Withdraw Consent: Where we rely on your consent to process your Personal Data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdraw it. You can withdraw consent via your device settings or by emailing privacy@bitpet.io.
Right to Complain: You may complain to a supervisory authority; however, we'd appreciate the opportunity to handle your concerns directly and prefer you contacting us first. If you are based in the UK or the EEA and you think that we have not complied with data protection laws, you may complain to your local supervisory authority. If located in the EEA, you may also contact our designated EU Representative, EDPO, at their official address or via their designated contact channels, which can be found EDPO, Avenue Huart Hamoir 71, 1030 Brussels, Belgium.

Please be informed that if you refuse to share the Personal Data that we request, we may not be able to provide our Services. After contacting us, we may send you an email for you to verify your request. Our aim is to handle your request within 30 days or a shorter time period as provided by the laws of your jurisdiction.

9. Privacy Policy Changes

The Personal Data we collect is covered by the Privacy Policy in effect at the time such information is collected, and we may make changes to this Privacy Policy from time to time whereby you will be given reasonable notice of any such material change.

10. Third Parties

When using our Services, you may access links to websites and services that are owned or operated by third parties (each, a “Third Party Service”). Any information that you provide on or to a Third Party Service or that is collected by a Third Party Service is provided directly to the owner or operator of the Third Party Service and is subject to the owner’s or operator’s privacy policy. We’re not responsible for the content, privacy, or security practices and policies of any third-party service. To protect your information, we recommend that you carefully review the privacy policies of all.

11. Notice to California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights regarding your Personal Data under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Right to Know and Delete: You have the right to request that we disclose what personal information we collect, use, disclose, or sell, and the right to request deletion of your personal information, subject to certain exceptions. You can exercise these rights by contacting us at privacy@bitpet.io.
Do Not Sell or Share: BitPet AS does not “sell” your Personal Data in the traditional sense. However, if we were to share your personal data for cross-context behavioral advertising, you would have the right to opt-out. We do not currently engage in cross-context behavioral advertising with third parties that involves the "selling" or "sharing" of your Personal Data as defined by CCPA/CPRA.

12. Contact Us

Data Controller: BitPet AS, Christian Krohgs gate 30, 0186 Oslo, Norway. For privacy inquiries, please contact: privacy@bitpet.io.