PRIVACY POLICY — AIR DEFENSE: SKY COMMAND

Effective Date: October 24, 2026

Last Updated: November 8th, 2026

Developer / Publisher: The Buddy Company, LLC

Contact Email: contact@thebuddycompanyllc.com

1. Overview & Our Commitment to Your Privacy The Buddy Company, LLC ("we," "us," or "our") operates the mobile application Air Defense: Sky Command (the "App" or "Game") on Android and iOS devices. We respect your privacy and are committed to transparency regarding the limited information collected to operate gameplay features, cloud saves, multiplayer modes, creator referral codes, in-app purchases, and optional rewarded advertisements.

OUR STRICT NO-SALE PLEDGE: We do NOT sell, rent, or trade your personal information or user data to third-party data brokers, marketers, or any other organization for monetary consideration. Information is collected and processed strictly to provide core game functionality, synchronize player progression, facilitate multiplayer matchmaking and leaderboards, attribute creator referral codes, process store transactions, and serve advertisements within the App.

2. Information We Collect Depending on how you play and which features you use, we collect and process the following categories of information:

A. Account & Authentication Data (a) Guest Mode (Anonymous Play): You may play the Game using "Continue as Guest" without providing an email address or real name. When playing as a Guest, Google Firebase Authentication generates an anonymous unique identifier (UID) so your cloud progression, telemetry, and multiplayer sessions can function. (b) Registered Accounts: If you choose to create or link an account via Email/Password, Google Sign-In, or Sign in with Apple, we collect your authentication provider identifier, email address (or Apple private relay email), and basic authentication token to secure your account and merge your local guest progress into your cloud profile.

B. Gameplay, Cloud Save, Telemetry & Commander Dossier Data (a) Commander Profile & Unique Callsign Registry: We store the custom profile details you configure in your Commander Dossier, including your unique Callsign (reserved in our global callsign index so friends and rivals can find or challenge you), Display Name, Motto, selected Branch Emblem, Sector Tag, and system-generated Commander ID (CMD-XXXX-XXXX). (b) Game Progression, Arsenal & Career Telemetry: To support local persistence, cross-device Cloud Save synchronization, game balancing, and customer support (including for Guest accounts), we store your mission stars, campaign theater unlocks, R&D tech tree unlocks, 3-tier platform upgrade levels, in-game virtual currencies (Defense Budget and R&D Cores), depot ammunition stock, career combat statistics, and mid-mission pause snapshots in Google Cloud Firestore.

C. Multiplayer (PvP), Direct Challenges & Global Leaderboard Data (a) Turn-Based PvP ("War Games"), Callsign Challenges & Room Codes: When you participate in ranked matchmaking, direct Callsign 1v1 challenges, or private room-code PvP matches, your public Commander Dossier (Callsign, Rank, Branch Emblem, Sector Tag, and PvP ELO rating), your constructed offensive strike wave parameters, and your defensive intercept score are transmitted via Google Cloud Firestore and Firebase Cloud Messaging (push notifications) so your opponent can receive match alerts, play the match, and view match history. (b) Daily Flashpoint Leaderboards: When you participate in the 24-hour global daily scenario, your score, intercept efficiency metrics, UID, and callsign are recorded to calculate global leaderboard rankings and percentiles.

D. Advertising & Device Identifiers (Google AdMob) (a) Rewarded Video Advertisements: The App uses the Google Mobile Ads SDK (Google AdMob) on Android and iOS to offer optional rewarded video advertisements (such as calling in bonus C-17 supply drops or tactical recon feeds). (b) Ad-Related Data Collected by Google AdMob: To serve ads, limit ad frequency, combat fraud, and measure ad performance, the Google Mobile Ads SDK may collect and process your mobile Advertising ID (Apple IDFA on iOS or Google AAID on Android, subject to your OS permissions and consent), coarse location derived from your IP address, device manufacturer/model, operating system version, and ad interaction events (such as video ad views and clicks).

E. In-App Purchases, Billing Sync & Support-a-Commander (Creator Codes) (a) Store Transactions & Entitlement Sync: All financial transactions for in-app purchases (such as the First-Time Commander Pack, 30-Day Logistics Priority Pass, Tactical HUD Cosmetic Pack, or Defense Budget packs) are processed directly by the Apple App Store or Google Play Store and validated via RevenueCat. We mirror anonymized purchase product IDs, entitlement timestamps, and transaction identifiers to your user profile in Google Cloud Firestore to prevent entitlement loss across devices and verify legitimate purchases. (b) No Financial Card Storage: The Buddy Company, LLC never receives, collects, or stores your credit card number, bank account details, or billing address inside the App. (c) Support-a-Commander (Creator / Referral Code Attribution): If you voluntarily enter a Creator Code in the in-game Store, your account links that Creator Code (supportedCreatorCode) to your profile and RevenueCat attributes. When you complete a verified real-money purchase, an anonymized transaction tally (recording the product tier, date, and net commission amount, without sharing your email address or real name with the creator) is credited to that creator's in-game ledger. If you participate as an approved Creator receiving commission payouts, we collect necessary payout contact details and tax compliance forms (such as PayPal email, IRS Form W-9, or Form W-8BEN) externally via official company email solely for accounting and tax compliance.

F. Push Notifications & Technical Diagnostics (a) Push & Local Notifications: With your permission, we process Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs) device tokens to send alerts when an opponent strikes or intercepts you in PvP, or local reminders when your sector defenses are un-manned. (b) Diagnostics: We collect standard crash logs, error diagnostics, and app version telemetry to maintain 60 FPS simulation stability across Android and iOS devices.

3. How We Use Your Information We use the collected information exclusively for the following operational purposes:

1. Core Game Operation & Cloud Sync: Authenticating your session, saving your progress locally, and syncing your Commander Dossier and arsenal across devices.

2. Multiplayer & Competitive Features: Facilitating Turn-Based PvP matchmaking, Callsign challenges, push notification turn alerts, ELO ratings, and global percentiles in Daily Flashpoint operations.

3. Ad Servicing & Reward Delivery: Displaying optional rewarded video ads through Google AdMob and granting your in-game rewards upon completion.

4. Purchase Fulfillment & Creator Code Attribution: Verifying in-app purchases, syncing entitlements across devices, delivering one-time recruitment bonuses, and calculating Support-a-Commander creator commissions.

5. Security, Anti-Cheat & Support: Enforcing Rules of Engagement, unique callsign integrity, and leaderboard fairness, preventing unauthorized database access, and responding to player support inquiries.

4. Data Sharing & Third-Party Service Providers We do not sell your personal information to any third party. We share limited technical data only with the following trusted infrastructure providers necessary to run the App: (a) Google Firebase (Google LLC): Used for Authentication, Cloud Firestore database storage (cloud saves, telemetry, creator code ledgers, leaderboards, and PvP match states), Cloud Functions, and Cloud Messaging push notifications (https://firebase.google.com/support/privacy). (b) Google AdMob / Google Mobile Ads SDK (Google LLC): Used exclusively to load and display optional rewarded video advertisements (https://policies.google.com/technologies/ads). (c) RevenueCat, Inc. / Apple App Store / Google Play Billing: Used to validate in-app purchase receipts, tag creator code attributes, and manage cross-platform entitlements (https://www.revenuecat.com/privacy). (d) Legal Compliance: We may disclose information if strictly required to do so by law or in response to valid legal process (such as a court order, tax authority requirement, or subpoena).

5. Your Privacy Controls, Ad Consent & Account Deletion Rights You have direct control over your data, advertising preferences, and account existence at all times:

A. How to Delete Your Account & All Associated Data You can permanently delete your account and wipe your personal data at any time through either of two methods:

1. Instant In-App Deletion: Open Air Defense: Sky Command, go to Settings, scroll to the Account Deletion section, and complete the two-step confirmation by typing DELETE. This immediately deletes your user profile, reserved callsign, cloud save, Flashpoint leaderboard scores, and personal identifiers in PvP match records from our active database (non-identifying purchase receipt tokens and aggregated creator accounting ledgers are retained solely for legal tax accounting and so Restore Purchases continues to function if you start a new profile).

2. Web / Email Deletion Request: If you have uninstalled the App or prefer to request deletion externally, send an email to contact@thebuddycompanyllc.com with the subject line "Account Deletion Request - Air Defense: Sky Command" and include either your account email address or your in-game Commander ID (CMD-XXXX-XXXX). We will permanently purge your account and associated cloud records within 7 business days.

B. Managing Advertising Consent & Tracking (ATT / GDPR / CCPA) (a) In-App Privacy & Ad Consent Toggle: You may view and update your advertising and privacy consent preferences at any time inside the App's Settings menu under Privacy and Ad Consent. (b) iOS App Tracking Transparency (ATT): On iOS devices, the App will respect your choice on the system ATT prompt ("Allow App to Request to Track"). If you decline tracking, AdMob will not access your iOS IDFA and will only serve non-personalized contextual advertisements. (c) Android Advertising ID Controls: On Android devices, you can reset or delete your Advertising ID at any time by going to your device Settings → Google → Ads → Delete advertising ID.

C. Regional Privacy Rights (California CCPA/CPRA, Virginia VCDPA, EU/UK GDPR) (a) Right to Know & Access: You have the right to request a copy of the specific data associated with your Commander ID or account. (b) Right to Delete: You have the right to erase your personal data using the in-app DELETE tool or by emailing us. (c) Right to Opt-Out of Sale/Sharing: We do not sell personal data. You may opt out of personalized ad tracking at any time via the in-app Privacy and Ad Consent setting or your device's OS privacy controls. (d) Non-Discrimination: We will never penalize or discriminate against you for exercising your privacy rights.

6. Data Retention & Security (a) Security Measures: All communications between the App and our cloud services (Firebase, RevenueCat, and AdMob) are encrypted in transit using industry-standard HTTPS/TLS protocols. Access to Cloud Firestore documents is restricted by strict server-side authentication security rules. (b) Retention Period: We retain your cloud save and Commander Dossier data for as long as your account remains active so you can resume your progress across devices. Anonymous guest profiles that remain completely inactive for more than 18 months may be automatically purged during routine database maintenance.

7. Children's Privacy (COPPA Compliance) Air Defense: Sky Command is a tactical strategy simulation intended for general audiences and is not directed at children under the age of 13 (or under 16 in applicable jurisdictions). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us at contact@thebuddycompanyllc.com and we will immediately delete the account and all associated data.

8. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect new game features, regulatory requirements, or updates to third-party SDKs. When we make changes, we will update the "Last Updated" date at the top of this page. Continued use of the App after any updates constitutes acceptance of the revised Privacy Policy.

9. Contact Us If you have any questions, concerns, or requests regarding this Privacy Policy, your data, or Air Defense: Sky Command, please contact us at: The Buddy Company, LLC Website: https://www.thebuddycompanyllc.com Email: contact@thebuddycompanyllc.com