Privacy Policy
1. Who We Are and What This Policy Covers
Version dated 2 October 2026. Permanent address: landing.bekvalola.uz/en/privacy.
1.1. This Privacy Policy explains what data is processed when you use the Bek va Lola mobile application (the “App”) and the website landing.bekvalola.uz, why it is needed, and how to manage it.
1.2. Data controller: UNITED SOFT LLC (United Soft), 2A Makhtumkuli Street, Tashkent, Republic of Uzbekistan (“we”). Email for questions about data: support@bekvalola.uz.
1.3. The App is made for children and families. The Policy is addressed to a parent or other legal guardian of the child (the “Parent”).
1.4. The key points in brief:
- you can play without an account; in that case, progress is stored only on the device;
- we do not ask for age, date of birth, gender, photos, or a phone number;
- the App does not use the camera, microphone, contacts, or precise location;
- the App has no chat, no communication between users, and no posting of content by children;
- we do not sell personal data and do not show ads selected based on the child’s interests.
2. What Data We Process
2.1. The amount of data depends on whether the Parent has signed in to an account and whether they have made purchases.
| Category | What exactly | When | Where it is stored |
|---|---|---|---|
| Game progress | Coins, stars, items, character clothing, completed levels, daily rewards and tasks, the point where a cartoon was stopped, language | Always | On the device; when signed in to an account, also on our server |
| Account | Account identifier, email address, Google or Apple identifier, sign-in method | Only if the Parent has signed in with Google or Apple | On our server |
| Profile | The name entered in the profile and an avatar chosen from a ready-made set | Only after signing in to an account | On the device and on our server |
| Purchases | Orders, payment amount and status, App Store and Google Play receipts, Premium period, purchased and rented cartoons, DOPPI balance | When the in-app store is opened and when a purchase is made | On our payment server; a copy on the device |
| Technical identifier | A random installation identifier that is created without your involvement so that the server can tell one installation from another | At launch and when the in-app store is opened | On our server and with the providers listed in Section 4 |
| Notifications | Token for sending notifications, device identifier, device model, platform | When the App is launched | On our server |
| Usage statistics | Events in the App (game launches, completed levels, views, purchases, ad impressions), device model, system and App version, language, country and city based on IP address | Always | With the analytics provider; our copy of the events is stored without being linked to an account |
| Advertising | IP address, device information, impressions and clicks | When ads are shown in the free version | With the advertising provider |
2.2. The name in the profile does not have to be real. We advise against entering the child’s full first and last name.
2.3. When signing in with Apple, you can hide your real email address; in that case, we receive a relay address created by Apple.
2.4. We do not receive or store bank card details. They are processed by the App Store, Google Play, Payme, or Click.
2.5. The payment server determines the country from the IP address in order to show the available payment methods.
2.6. The App does not use the device’s advertising identifier: on Android, the permission for it has been removed from the App; on iOS, we do not request permission to track.
2.7. Drawings created in the “Drawing” game are saved only on the device and are not sent to us.
3. Why We Use Data
3.1. We use data only for the purposes in the table.
| Purpose | Data | Legal basis |
|---|---|---|
| Running the games and saving progress | Game progress | Performance of the Terms of Use |
| Sign-in and transferring progress between devices | Account, profile, game progress | The Parent’s consent, given at sign-in |
| Accepting payment, delivering and restoring purchases | Purchases, technical identifier, account | Performance of the purchase contract and the requirements of accounting law |
| Protection against payment fraud | Purchases, store receipts | Legitimate interest in the security of the service |
| Notifications about new cartoons and events | Notifications | Permission granted in the device’s system |
| Understanding which games and cartoons are in demand, finding errors, comparing interface variants | Usage statistics | Legitimate interest in improving the App |
| Showing ads in the free version and counting impressions | Advertising | Legitimate interest in funding the free version |
| Responding to inquiries | Your email address and the text of your message | Your request |
3.2. We do not use data to build a profile of the child’s interests, and we do not make automated decisions based on it that are significant for you.
3.3. We do not sell personal data and do not share it with third parties for their own marketing.
4. Third-Party Services
4.1. Some data is processed by providers that help the App work. They act on our instructions or under their own privacy policies.
| Provider | Service | Purpose | What data |
|---|---|---|---|
| Firebase Authentication, Cloud Firestore | Sign-in and storage of the account and progress | Account, profile, game progress | |
| Google Analytics for Firebase, BigQuery | Usage statistics | Events, device information, installation identifier, IP address | |
| Firebase Remote Config | Settings and interface variants | Installation identifier | |
| Firebase Cloud Messaging | Notifications | Notification token | |
| Google Sign-In, Google Play | Sign-in and payment on Android | Google account, purchase information | |
| Apple | Sign in with Apple, App Store, notification service | Sign-in, payment, and notifications on iOS | Apple account, purchase information, notification token |
| Unity Technologies | Unity Remote Config, Unity Authentication, Unity In-App Purchasing | Settings and purchases in app stores | Random identifier, device information |
| Unity Technologies | Unity LevelPlay, Unity Ads | Ads in the free version | IP address, device information, impressions and clicks |
| Payme, Click | Payment systems | Payment in Uzbekistan | Order number, amount; you enter card details on their side |
| Cloudflare | File storage and delivery | Loading cartoons and images | IP address |
| Google (Firebase) | Hosting of game assets | Downloading content updates | IP address |
| Google (Firebase) | Hosting of our payment server | Purchase records | Purchases, technical identifier |
4.2. We may disclose data to government authorities if required by law, and to a successor in the event of a reorganization or sale of the business, with the terms of this Policy continuing to apply.
4.3. Links in the App may lead to external websites, for example to a payment page. Those websites are governed by their own policies.
5. Children and Parents
5.1. The App is intended for children, so we collect as little data as possible and do not ask the child to provide information about themselves.
5.2. Account sign-in and real-money payments are protected by a parental gate (a verification task for adults). The account is created by the Parent through their own Google or Apple account; the account data relates to the Parent.
5.3. By signing in to an account, the Parent consents to the processing of account data, profile data, and the child’s game progress on the terms of this Policy.
5.4. Advertising. The advertising service runs in “for children” mode: ads are selected based on the content of the App, not on the user’s behavior. There are no ads in Premium.
5.5. Notifications can be turned off in the device settings at any time.
5.6. The Parent can find out what data is linked to the account, request that it be corrected or deleted, and withdraw consent. The procedure is described in Section 7.
5.7. If you believe that a child has given us personal data without your consent, email support@bekvalola.uz. We will delete it.
6. Retention and Security
6.1. Retention periods:
| Data | Period |
|---|---|
| Progress on the device | Until the App is deleted or its data is cleared |
| Account, profile, and progress on the server | Until the account is deleted at your request |
| Purchase information | 5 years, as required by accounting and tax law |
| Usage statistics | 14 months, then only in aggregated form |
| Notification token | While the App is installed; inactive tokens are deleted after 12 months |
| Correspondence with support | 12 months after the reply |
6.2. Where data is stored. Our payment server is located in the Republic of Uzbekistan. The services of Google, Apple, Unity, and Cloudflare store and process data on servers outside the Republic of Uzbekistan, including in the United States. By using the App, you consent to this transfer.
6.3. Security. Data is transmitted over a secure connection. Only the account owner and those of our employees who need it for their work have access to account data. No system is completely secure; if a breach occurs that affects your data, we will give notice of it in the manner prescribed by law.
7. Your Rights and Data Deletion
7.1. You can:
- find out what data we hold and receive a copy of it;
- request that inaccurate data be corrected;
- request that the account and the data associated with it be deleted;
- withdraw consent to processing or object to it;
- file a complaint with the government authority for personal data protection in your country.
7.2. How to delete data:
| Situation | What to do |
|---|---|
| You played without an account | Delete the App; the progress on the device will be deleted along with it |
| You signed in with Google or Apple | Email support@bekvalola.uz from the account’s email address or use the page landing.bekvalola.uz/en/delete-account |
| You paid via Payme or Click without an account | Email support@bekvalola.uz and include your order number |
7.3. We will delete the data within 3 days after the request is confirmed. We are required to keep purchase information for the period set out in clause 6.1; it will be separated from the deleted account.
7.4. After the account is deleted, the progress, in-game items, and purchases linked to it cannot be restored. A subscription in the App Store or Google Play must be canceled separately.
7.5. We respond to other requests within 3 days. To protect the data, we may ask you to confirm that the account belongs to you.
8. Changes to the Policy
8.1. We update the Policy when the App or the law changes. The new version is published at the permanent address with its effective date.
8.2. If we start collecting new types of data or using data for new purposes, we will notify you in the App before the changes take effect and, where required by law, ask for the Parent’s consent again.
9. Contact
UNITED SOFT LLC (United Soft)
Address: 2A Makhtumkuli Street, Tashkent, Republic of Uzbekistan
Email for questions about data: support@bekvalola.uz
Website: landing.bekvalola.uz
Back to home