Privacy policy
Last updated 27 October 2026
OUTBREAK: The Signal ("OUTBREAK", "the app") is made by Cognision ("we", "us"). This policy explains what the app collects, why, where it goes and how you can control it. We collect as little as the game needs: there are no names, emails or passwords in OUTBREAK.
Contact: hello@cognision.eu
Summary
| Data | Why | Leaves your phone? |
|---|---|---|
| Precise location | Showing places near you on the map and checking that you've arrived at one | No. Only a coarse ~2 km area is sent, for community events |
| Step count (Health Connect) | Turning walking into Activity Points | Only daily point totals, inside your cloud save |
| Game save | Your progress | Yes, if cloud backup is on (without any location) |
| Anonymous account | Cloud backup and community events | Yes, stored on our server |
| Gameplay statistics | Improving the game | No, unless you tap Share metrics |
| Advertising ID, device and usage data | Showing ads you choose to watch | Yes, to Google AdMob and its partners |
| Purchase record | Unlocking and restoring the No-Ads pack | Yes, to Google Play and RevenueCat |
Location
With your permission, the app reads your location only while it's open (never in the background). It's used on your phone to place locations on the map around you and to check whether you're close enough to explore one for free. Precise coordinates are never sent to our server.
If cloud backup is on, the app sends a coarse area: a grid cell about 2 × 2 km. Our server keeps only your latest cell, to match you with community events near you. You can play without location permission; remote exploration with Activity Points still works.
Steps and Health Connect
With your permission, the app reads your step count from Health Connect, for up to the last 7 days, to award Activity Points. It reads nothing else from Health Connect and writes nothing to it. Step data stays on your phone; only the resulting daily point credits are part of your save.
OUTBREAK's use of information received from Health Connect adheres to the Health Connect Permissions policy, including its Limited Use requirements. Health data is never used for advertising, never sold and never shared with third parties.
Cloud backup and your anonymous account
Cloud backup is on by default and can be turned off in the Journal → Reminders & save. When it's on, our server stores:
- a random account ID and a hashed access token (your recovery code is that token; we can't read it back);
- when the account was created and last seen;
- a copy of your game save, with all map coordinates removed;
- your latest coarse area (see Location);
- your contributions to community events.
The server runs in the EU, on infrastructure we operate. Its access logs record IP addresses and are deleted automatically after 14 days.
Gameplay statistics
The app keeps a short log of game events (for example "location explored" or "choice made") on your phone only. It contains no location or personal data. It's sent to us only if you tap Share metrics in the Journal and choose where to send it.
Ads
OUTBREAK shows rewarded ads only when you tap a button to watch one (for example to return instantly or double a reward). Ads are provided by Google AdMob, which may work with other ad networks to fill them. To show and measure ads, AdMob and its partners may collect your device's advertising ID, IP address, device information and ad interactions. See how Google uses information from apps that use its services.
In the EEA, the UK and Switzerland we ask for your consent before personalised ads, using Google's consent form. You can change your choice at any time under Privacy options in the Journal → Reminders & save. Without consent, you get non-personalised ads. You can also reset or delete your advertising ID in your phone's settings.
Purchases
The No-Ads pack is bought through Google Play; we never see your payment details. To confirm and restore your purchase, the app uses RevenueCat, which receives the purchase receipt and an anonymous app user ID. See RevenueCat's privacy policy.
Legal bases (GDPR)
- Performance of our service: the game save, cloud backup, coarse area and community events you take part in.
- Consent: location and step access (Android permissions you can revoke at any time) and personalised ads.
- Legitimate interests: server logs for security, kept 14 days.
How long we keep data
Cloud data is kept until you delete it or turn cloud backup off with deletion. Server logs are kept 14 days. Data on your phone stays until you uninstall the app or clear its data.
Your rights
You can access, export, correct or delete your data, object to processing, and withdraw consent at any time. Export your save in the Journal → Reminders & save, and delete your cloud data there or as described on Delete your data. For anything else, email hello@cognision.eu with your recovery code so we can find your anonymous account. You also have the right to complain to a data protection authority; in Slovakia that's the Office for Personal Data Protection.
Children
OUTBREAK is not directed at children under 13, and we don't knowingly collect data from them.
We don't
- sell your data;
- share precise location or health data with anyone;
- ask for your name, email, contacts or photos.
Changes
If this policy changes, we'll update the date above and, for significant changes, tell you in the app.