Privacy Policy for Broken Soul Games

Effective date: August 8, 2026
Last updated: August 10, 2026

Double J Labs provides multiple Broken Soul games and related web services. The data practices differ by product. Please use the section for the game you are using.

Broken Soul 2: Boss Rush

This section applies to the Android game Broken Soul 2: Boss Rush, package name com.brokensoul2.mygame (the "Game").

1. Account and authentication

The Game uses Google Sign-In through Supabase Auth. When you sign in, we and our service providers process your name or display name, email address, Google sign-in identifier, Supabase user ID, and authentication and session information. We use this information to authenticate you, manage your Game account, associate cloud saves and ranking data with your account, and protect the Service. We do not receive or store your Google password.

2. Game, cloud-save, and ranking data

The Game stores data on your device and synchronizes account-linked data with Supabase. This may include your player name, game progress, save slots, unlocked content, inventory, equipment, currencies, upgrades, rewards, settings, language, scores, ranking history, purchase entitlements, and purchase-related game state.

Ranking features may display your player name, score, and rank to other authenticated players. Account identifiers are used internally to associate ranking records with the correct account.

3. Google Play Billing and purchase data

The Game offers optional digital products through Google Play Billing. Google Play processes your payment method and payment-account information. The Game may process the product ID, order identifier, purchase state and time, quantity, purchase token, acknowledgement or consumption state, and signed purchase information needed to deliver, restore, or manage a purchase.

The raw purchase token is used on your device to communicate with Google Play. A one-way token fingerprint and limited purchase-history fields, including product or order identifiers, purchase time, quantity, and verification status, may be stored in your local and cloud save to prevent duplicate grants and restore eligible entitlements. Double J Labs does not receive your full payment-card number or other complete payment credentials.

4. Google Analytics 4

The Game uses Google Analytics 4 (GA4) through Google's web analytics tag to understand general usage and improve the Game. GA4 loads automatically when the Game starts. The current version does not provide an in-game analytics opt-out switch.

Depending on your device and use of the Game, GA4 may process:

We do not intentionally include your name, email address, phone number, Google account identifier, or the contents of locally stored save data in analytics events. Google states that IP addresses may be processed to derive general geographic information but are not logged or stored in Google Analytics. The Game does not request precise GPS location for analytics.

5. How we use information

We use information described in this section to:

We do not use Game data to provide targeted advertising.

6. Service providers and disclosure

We use Google LLC for Google Sign-In, Google Play Billing, Google Analytics 4, and Google-hosted resources. We use Supabase for authentication, database storage, cloud synchronization, and server functions. These providers process information on our behalf to provide their services and may process data in countries other than your country of residence under their applicable privacy and security terms.

We do not sell personal information or provide Game data to data brokers or third parties for their own targeted advertising. We may disclose information when reasonably necessary to comply with law, respond to a valid legal request, prevent fraud or abuse, protect users, or protect the rights and security of Double J Labs.

7. Local storage, security, and services not used

The Game keeps authentication state, account information, game saves, settings, and purchase-entitlement state on your device. Account-linked data is transmitted to Supabase and service providers using HTTPS/TLS. Access to cloud data under our control is restricted through access controls. No transmission or storage system can be guaranteed to be completely secure.

The current version of the Game does not use:

If these practices change in a future version, we will update this Privacy Policy and the Google Play Data safety declaration to reflect the change.

8. Data retention and account deletion

Account-linked authentication, cloud-save, and ranking data is retained while your Game account remains active or for as long as needed to provide the Service, protect it, and meet the obligations described in this policy. Local data remains on your device until removed by the Game, Android storage controls, a device reset, or uninstallation.

You can permanently delete your Broken Soul 2: Boss Rush account from Settings > Session > Delete Account in the Game. When the in-game deletion completes, the Supabase authentication account and its associated cloud save and ranking records are deleted, and account-related local authentication and game-progress data are removed from that device. This action cannot be undone.

If you cannot access the Game, submit a request through our account deletion request page or contact doublejmsoft@gmail.com. We may ask for the minimum information reasonably necessary to locate and verify the account. Never send us your Google password, access token, purchase token, or full payment-card details. Verified external requests are normally completed within 30 days.

Deleting the Game account does not automatically delete records controlled independently by Google, including Google Play payment and order records, or GA4 data that cannot reasonably be linked to the account request. Google retains those records under its own policies. Aggregated or de-identified reports may also remain. Language, audio, performance, accessibility, consent, and similar non-account device preferences may remain until you clear the Game's Android storage or uninstall it.

We may retain deletion-request correspondence for up to three years to document and protect the request. Where applicable law requires it, limited transaction, accounting, dispute, chargeback, or fraud-prevention records may be retained for up to five years. Such retained records are restricted to those purposes and deleted or de-identified when the applicable period ends. Temporary copies may remain in service-provider backups until they are removed through the provider's routine backup-rotation process.

GA4 retention is governed by the retention settings configured for our Google Analytics property and Google's applicable retention policies. We generally cannot identify GA4 records using an email address alone. You may request deletion of analytics information by contacting us; we will use available deletion tools for records that we can reasonably identify.

9. Children's privacy

The Game is not directed to children under 13, or under the minimum age required by applicable law in their country. We do not knowingly permit children below that age to create an account or provide personal information. If we learn that a child's information has been collected contrary to applicable law, we will take reasonable steps to delete it. A parent or guardian may contact us using the email address below.

10. Security

Account, cloud-save, purchase-related, and analytics information is transmitted to the applicable service provider using HTTPS/TLS encryption. Access to systems and reports under our control is restricted to authorized persons. Local data is also subject to the security controls provided by Android and your device. However, no electronic transmission, device, or storage system can be guaranteed to be completely secure.

11. International processing

Google and Supabase may process information outside your country of residence. Privacy and data-protection laws in those countries may differ from those in your country. These providers apply the safeguards described for their services, and Double J Labs remains responsible for using those services consistently with applicable law.

12. Changes to this policy

We may update this Privacy Policy when the Game's features, data practices, service providers, or legal obligations change. The revised policy will be posted at this public URL with an updated "Last updated" date. Material changes will also be disclosed through the Game or another appropriate notice when required by law.

13. Contact

For questions, privacy requests, or data-deletion requests, contact:
Double J Labs
doublejmsoft@gmail.com

Broken Soul (Soulslike Action)

Original policy date: June 2, 2026

This Privacy Policy explains how Double J Labs ("we", "our", or "us") collects, uses, shares, and protects information when you use Broken Soul, our mobile game, websites, and related services (the "Service").

This policy is intended to help explain our data practices, including the data handled by third-party services and SDKs used in the Service. It does not constitute legal advice.

1. Information We Collect

Depending on how you use the Service, we may collect or process the following categories of information:

2. How We Use Information

We use collected information for the following purposes:

3. Third-Party Services and Data Sharing

We do not sell your personal information. We may share or allow processing of information with service providers and SDKs that help us operate the Service. These providers may collect or process information directly from your device as part of their services.

These services may include:

We may also disclose information if required by law, to protect our rights, to prevent fraud or abuse, or to comply with legal obligations.

4. Device Identifiers, Advertising, and Analytics

The Service uses device or other identifiers, including Android Advertising ID, Firebase identifiers, app instance IDs, FCM push tokens, App Check tokens, and Play Integrity tokens. These identifiers are used for app functionality, analytics, advertising, ad measurement, security, fraud prevention, and compliance.

In the current version of the Service, these device, advertising, and analytics identifiers are collected as required for app operation because the Service does not provide a complete in-app opt-out that stops all related SDK collection. Users can control certain device-level settings provided by Android or Google, such as resetting or limiting advertising identifiers where available.

5. User Choices and Account Deletion

You may disable push notifications through your device settings or in-app settings where available. Disabling push notifications may prevent you from receiving certain service messages or event notifications.

You may request deletion of your account and associated data through in-game settings where available or by contacting us at support@brokensoul.xyz. We may need to retain certain information where required by law, for fraud prevention, dispute resolution, security, or legitimate business purposes.

6. Data Retention

We retain information only for as long as necessary to provide the Service, support user accounts, process purchases, maintain rankings and rewards, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce our agreements.

7. Security

We use reasonable technical and organizational measures to protect information, including encrypted transmission where applicable. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided personal information, we will take steps to delete such information where required.

9. International Transfers

Information may be processed and stored in countries other than your country of residence, including by our service providers. These countries may have data protection laws that differ from those in your jurisdiction.

10. Changes to this Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Your continued use of the Service after the updated policy is posted means that you acknowledge the updated policy.

11. Contact

If you have any questions, requests, or concerns about this Privacy Policy or our data practices, please contact us at support@brokensoul.xyz.