Zippy Hills privacy policy

Version 1.0. Effective date: 6 October 2026.

This document explains what Zippy Hills does with your data. The use agreement — what you can do with the app, what costs money and what is not guaranteed — is a separate document: the Terms and conditions.

In brief

• Zippy Hills has no ads, does not track you across apps or websites and does not sell data to anyone.
• No account is needed: we do not ask for your name, email or any other contact details.
• Your progress is saved on your device and, if you use iCloud, in your iCloud, so it carries over to your other devices.
• When you finish a race in the daily challenge, the ghost of that race (how you drove, with no data of yours) is published so that other players can race against it.
• Usage statistics (GameAnalytics) are only sent if you say yes, and you can turn them off whenever you like.
• If you use Game Center, your scores appear on the leaderboards, with your Game Center alias.
• If you let us notify you, we store your device's notification code to send you news and the occasional offer from the game; you can turn this off whenever you like.
• Purchases are charged by Apple, and RevenueCat validates them.

1. Who the data controller is

• Controller: Joan Cama Ribot (Somia Digital)
• Contact email: hola@somiadigital.com

The rest of the owner's identification details are in the legal notice. There is no data protection officer: this activity is not among those for which Article 37 GDPR requires one.

2. The principle: local first

Zippy Hills is a local-first app. All of this lives in the database on your phone and is never copied to any server of ours:

• your progress: the cups, trophies and points of each circuit, your level and missions, your Free Road record, your best result in each daily challenge and your streak;
• the ghosts of your best races (the daily challenge one is also published: section 5);
• your coins, your garage (cars, trails and worlds), what you have equipped and the purchases you have made;
• the daily gift and the tutorial;
• your settings: sound, vibration, text size, colour-blind mode, language, and your answers about statistics and notifications.

The copy in your iCloud. If you are signed in to iCloud, Zippy Hills keeps a copy of it in your iCloud account (Apple's iCloud Key-Value Store), so that you can recover it on your other devices signed in to the same account. This copy is stored by Apple, which acts as an independent controller, and it can only be read by the app from your devices: we have no access to it and it does not go through any server of ours. You can stop the app from using iCloud in your device Settings (your name ▸ iCloud).

If you delete the app and do not use iCloud, all of that goes with it. We have no copy and cannot restore it for you. You can erase all of it in Settings ▸ Erase progress.

3. The permissions the app asks for

Zippy Hills only asks for each permission when it needs it, and always with the system dialog. All of them can be withdrawn whenever you like from the system Settings, and the sections below explain what the app does with each.

4. If you use Game Center

The leaderboards in Zippy Hills belong to Game Center, Apple's service. If you are signed in to it on your phone, the app sends it your scores: your all-time best and your best in each daily challenge, and with the latter, the reference to the ghost of that race; if you are not, it sends nothing. Apple stores them with your Game Center account, and your Game Center friends can see them, as can any player on the global leaderboards, next to your nickname.

Never do we send your name, your email or anything else from the game.

Zippy Hills does not open Game Center on its own: if you are not signed in on the device, it only offers you the sign-in when you open the leaderboards or friends; to show you your friends' leaderboard, Game Center asks your permission to use your friends list, and you can say no. To sign out, go to Settings ▸ Game Center. Apple acts there as an independent controller, under its own privacy policy; the legal basis for what we send it is performance of the contract (Article 6(1)(b) GDPR), because you ask for it by signing in.

Challenges between friends. With Game Center you can also challenge your friends to beat one of your scores (Game Center challenges and activities). Apple runs them entirely: whoever receives the challenge sees your alias and the score to beat, and the app only opens the challenge for them when they come in. We do not know who challenges whom.

5. The ghosts of your races

A ghost is the replay of a race: your screen taps with their timing, one checkpoint per second, the day, the circuit, the score and the version of the game rules, enough to run the race again and nothing more (about 2 kB). When you finish a race in the daily challenge, the game publishes its ghost; and when you challenge a friend with a code (Challenge a friend), it also publishes the ghost of the race you send, stored under that code so your friend can find it.

It is stored in the public database of CloudKit, Apple's cloud service, in the container of Zippy Hills: any player can read it, and that is how you race against someone else's ghost. To upload one you need to be signed in to iCloud on the device; if you are not, none is uploaded. Reading other players' ghosts sends nothing of yours.

A ghost carries no name, email or contact details of yours. CloudKit adds on its own an identifier of your iCloud account that is valid only for this game: it does not tell us who you are and cannot be used to follow you in other apps. When the ghost goes with one of your scores on the Game Center leaderboard, whoever sees it there sees it next to your alias. We can see and delete ghosts from the CloudKit console, and we do nothing with them other than run the game.

Ghosts are deleted automatically after 30 days. If you want one deleted sooner, write to us. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in letting you race against other players, which is what you expect when you play this mode; since ghosts carry no contact details, the impact on you is minimal.

6. Notifications

Golden Hour and the daily gift. If you let us notify you, Zippy Hills reminds you when Golden Hour starts and that you have not yet collected your daily gift. These reminders are local: your phone schedules them and they do not go through any server.

Zippy Hills announcements (push notifications). If you have allowed notifications for Zippy Hills, we store the code Apple assigns to your device so we can send it announcements (the notification "token"), together with the language and the app version, and when we first and last received it, in a service of our own hosted on Cloudflare. We do not store your IP address. We only use it to send you Zippy Hills announcements: what's new and, now and then, an offer; never third-party advertising. It is not linked to any account or to any other data of yours. You can stop receiving them whenever you like in iOS Settings or in the game, in Settings ▸ Notifications, which deletes the code from our server; if you withdraw the permission in Settings, the game has it deleted the next time you open it; codes that Apple tells us are no longer valid are deleted automatically. The app asks for no new permission for this: it only registers the code if you had already granted notifications.

The same announcements, inside the app. Zippy Hills can also show them as a sheet on the main screen. The app fetches it from a public file on a server of ours in the same way for everyone and without sending any identifier, when it opens, and shows it to you only if you have not seen it yet; which ones you have seen is stored on the phone. If it carries an image, the image is downloaded from a server of ours, which sees your IP address, as happens with any image on the internet.

The legal basis for these announcements is your consent (Article 6(1)(a) GDPR), which you give by switching notifications on and withdraw by switching them off.

7. Usage statistics, only with your consent

The first time you open the game, we ask whether you would like to help us improve it with usage statistics. Until you say yes, nothing is sent (the statistics service is not even started), and if you say no, Zippy Hills works exactly the same.

If you say yes, the app sends GameAnalytics technical and usage data so that we can see how the app is used and improve it:

• a pseudonymous identifier of the app, randomly generated, or Apple's identifier for vendors (IDFV), which does not say who you are and cannot be used to track you in other apps;
• game events: when a race starts and ends, which mode and circuit, how long it lasted, the result in bands and the missions completed, when you continue a run and when you finish the tutorial;
• purchases, once they have been credited: the product, the store price and currency, never the purchase identifier, the receipt or any payment details;
• when each session starts and ends, which the tool counts on its own;
• technical data about the device: the model, the system and app version, the language and the kind of screen (phone or tablet), and errors or crashes.

We do not send your name, your email, your precise location, your contacts or the advertising identifier (IDFA).

Legal basis: your consent (Article 6(1)(a) GDPR and, for the identifier stored on the device, Article 22(2) of the Spanish LSSI). You can withdraw it whenever you like in Settings ▸ Statistics. From that moment on, nothing more is sent; withdrawing it does not affect what had already been sent before.

GameAnalytics acts as a processor, on our behalf, and stores the data on cloud servers (Amazon Web Services and Google Cloud). If there are transfers outside the European Economic Area, they are made with the safeguards provided for in the GDPR, such as standard contractual clauses.

8. In-app purchases

Purchases are charged by Apple through your Apple account: we never see your payment details.

To validate each purchase, deliver what you have bought and prevent fraud, the app uses RevenueCat (RevenueCat, Inc., United States), which receives an anonymous buyer identifier generated by the app, the product purchased, the price, the currency, the date, the country or store, and technical data about the app and the device. It is not linked to your identity. RevenueCat acts as a processor, and the transfer to the United States is made with the safeguards provided for in the GDPR.

Legal basis: performance of the purchase you request (Article 6(1)(b) GDPR).

Coins are consumable and are not restored the way permanent purchases are; if you use iCloud, they travel with your progress. Refunds are handled by Apple at reportaproblem.apple.com.

9. The support form on the website

There is a support form at zippyhills.somia.digital/. It only collects data if you fill it in.

• What you put in: your email and your message (both required) and, if you want, your name. We ask for nothing else, and you do not need to include health data or any sensitive data.
• What for: to read your enquiry and answer it. Nothing else: we do not build mailing lists, we do not send newsletters and we do not use those addresses for anything else.
• Who stores it: the site is hosted on Netlify (Netlify, Inc., United States), acting as a data processor. Netlify receives and stores the submission so that we can read it. The transfer outside the European Economic Area is made under the safeguards of Chapter V of the GDPR (standard contractual clauses).
• How long: 12 months at most from when the enquiry arrives. After that it is deleted from Netlify and from our mailbox.
• Legal basis: your consent (Article 6(1)(a) GDPR), given by sending the form, to reply to you; and our legitimate interest (Article 6(1)(f)) in keeping spam out.
• The form sets no cookies, loads no scripts and does no tracking. It carries a hidden trap field for robots, which nobody should fill in.

If you would rather not use the form, write straight to hola@somiadigital.com.

10. Visit statistics for the website

To know how many people visit zippyhills.somia.digital and which pages they read, we use Rybbit, an open-source statistics tool installed on our own server. No analytics company is involved.

• What is recorded: the page you visit, the page you came from, your browser language, the type of device, the browser and operating system, the screen size, and the approximate country, region and city.
• No cookies: it stores nothing in your browser and does not follow you from one site to another.
• Your IP address is not stored: it is used on the spot to work out the approximate location and to calculate an anonymous identifier that changes every day, so that we can count a day's visitors without knowing who they are.
• Where: on a server rented from OVHcloud (OVH Ltd), which acts as processor, in London (United Kingdom), a country with an adequacy decision from the European Commission (Article 45 GDPR). Visits reach it through Netlify, which hosts the site.
• How long: 26 months; then they are deleted.
• Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in knowing how the site is used in order to improve it.

11. For what, on what basis and for how long

What stays on your phone does not reach us, and we do not process it: you are the one responsible for keeping it there. Of what does reach us, this is the complete list:

When the basis is your consent, you can withdraw it whenever you like; withdrawing it does not make unlawful what was done before.

12. Who receives the data

The providers that help us run Zippy Hills process the data on our behalf (they are processors) and only for what we entrust to them. Apple is a case apart: payment, the App Store and the delivery of announcements are handled by Apple as an independent controller, under its own privacy policy.

When a provider processes data outside the European Economic Area, it does so under the safeguards that Chapter V GDPR requires: standard contractual clauses or an adequacy decision. We do not sell or pass on any data to anyone.

13. Your rights

You have the right to access your data, rectify it, erase it, restrict or object to its processing, to data portability and to withdraw consent at any time, and to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your local supervisory authority. We answer within one month at most; if the request is complex, the deadline may be extended by two further months, and we will tell you.

In practice, and because it is faster than writing to us:

• Withdraw your consent to statistics: Settings ▸ Statistics.
• Stop receiving notifications: Settings ▸ Notifications, or your device Settings.
• Erase your progress: Settings ▸ Erase progress, or by deleting the app. You control the copy in your iCloud yourself, from your device Settings.
• Delete a published ghost before it is deleted automatically: write to us.
• Sign out of Game Center: Settings ▸ Game Center.

For anything else, write to hola@somiadigital.com. Because we do not ask you for any contact details, to find your data we will need something that identifies it; if there is nothing, we will tell you so (Article 11 GDPR).

14. Automated decisions

We do not make automated decisions that have legal effects on you or similarly affect you, and we do not profile you (Article 22 GDPR).

15. Minors

The app is rated 4+ on the App Store and asks for no personal data. You must be 14 or older to use Zippy Hills on your own. If you live in a country where the minimum age to consent to the processing of your data is higher, you must be that age.

If you are under 14, you can play with the permission and supervision of the person who holds parental authority or guardianship over you, who is the one who decides whether consent to statistics is given and whether anything can be bought. Purchases are always made by the Apple account holder, who can use "Family Sharing" and "Ask to Buy". The App Store 4+ rating is a rating of the content: it does not replace this age requirement. If you are a parent or guardian and want us to erase data, write to us.

16. Security

We do what is reasonable to protect the little that leaves the phone: all traffic is encrypted. No system is infallible: if there were ever a security breach putting your data at risk, we would notify the supervisory authority and, if it affected you, we would tell you.

17. Changes to this policy

If what the app does changes, this document changes first, not afterwards, and the date at the top moves. Significant changes are announced inside the app, and earlier versions stay published and dated at the bottom of this page.

18. Contact

Write to us at hola@somiadigital.com. The governing version of this document is the Catalan one; the others are translations.