Mutabloom privacy policy

Last updated: 12 September 2026

What stays on your device

Your garden, your plants, your journal, your pets, your gems, your streak, your settings and your purchase entitlements are held in a file in Mutabloom's own storage on your iPhone. There is no Mutabloom account to create, nothing to sign up for, and no field anywhere in the game where you type something that is sent to us. Delete the app and that file goes with it.

We do not run a server that holds your game. The only piece of infrastructure we operate is described under Live Activities below, and it holds no game data at all.

Advertising

Mutabloom is free, and advertising is what pays for it. There is exactly one advertising company in the game: Google, through AdMob. There is no mediation layer and no second network. If that ever changes, this page changes before the change ships.

Two kinds of advert appear:

• Rewarded adverts, which you choose to watch in exchange for something — doubling an offline harvest, a growth boost, a shop re-roll, a streak freeze. These never start on their own. You press a button with the reward written on it.
• Interstitial adverts, which appear between things: after closing the shop, after selling a harvest, on leaving the journal. They are capped hard, never appear in your first two sessions, never during a weather event, and never inside a Live Activity.

To serve those adverts, Google collects and processes:

• Device and advertising identifiers. Which identifier, and whether the advertising identifier is available at all, depends on the permissions described in What Mutabloom asks permission for.
• Approximate location, derived from your internet address at roughly city or region level. Not your precise location: Mutabloom never asks for location permission and cannot read your GPS.
• Device and app information: device model, operating system version, language, and which app requested the advert.
• Advert interaction: that an advert was requested, shown, watched to the end, or tapped, which is also how a rewarded advert knows to pay you.

Google's handling of that data is governed by Google's privacy policy and how Google uses information from apps that use its services.

Buying Remove Ads, or holding an active Gardener's Pass, stops every interstitial permanently. It deliberately does not remove the rewarded adverts, because those are rewards rather than interruptions and removing them would remove things you paid nothing for and lose nothing by keeping. While you still have rewarded adverts available, the advertising software still starts, and this section still applies to you.

What Mutabloom asks permission for

App Tracking Transparency

After your first harvest — not on the launch screen, where nobody has any idea what they are agreeing to — iOS asks whether Mutabloom may track you across apps and websites owned by other companies. This is Apple's prompt and Apple enforces the answer.

Say no and nothing about the game changes. Adverts still appear; they are simply chosen without the device advertising identifier, which usually means they are less relevant and pay us less. You can change the answer at any time in iOS Settings → Privacy & Security → Tracking.

Consent in the European Economic Area and the United Kingdom

Where the ePrivacy rules and the GDPR require consent before adverts are personalised or before anything is stored on your device for advertising, Mutabloom shows Google's consent form — the UMP consent form — before it requests a single advert. The choices you make there are yours to change afterwards: the game has a standing Settings → Privacy Options row that reopens the same form.

If you refuse consent, the game still works in full. You get non-personalised adverts, which pay less and are otherwise identical to watch.

United States state privacy laws

There is no prompt at launch in the US states with their own privacy laws, and that is deliberate rather than missing: those laws are opt-out rather than opt-in. The control is standing instead, in the same Settings → Privacy Options row, and that is where you say no to the sale or sharing of personal information for targeted advertising.

Notifications

Mutabloom asks for notification permission when it first has something worth telling you, and it works perfectly well if you refuse. Every notification the game sends is a local notification: it is scheduled on your device by the app, from your own garden's state, and no server of ours is involved and no data leaves your phone to produce it. You can turn off Harvest, Streak, Weather and Gift reminders individually inside the game, and all of them at once in iOS Settings.

Diagnostics and analytics

Mutabloom uses three Google services, all part of Firebase, and all of them see product data rather than personal profiles:

• Firebase Analytics records what happens in the game — a session starting, a seed bought, a harvest with its mutations, a rewarded advert watched, a purchase, a prestige. It is tied to a random app-instance identifier that Google generates, not to your name, your email or your Apple Account. Deleting and reinstalling the app resets it.
• Firebase Crashlytics collects crash reports: what the app was doing when it fell over, the device model and OS version, and a stack trace. It is the only way a crash that happens to you gets fixed for you.
• Firebase Remote Config is how the game's numbers and events are tuned without an app update — advert caps, festival calendars, prices in gems. It sends configuration to your device; it collects nothing about you beyond what is needed to deliver the right configuration.

Google's handling of all three is governed by the Firebase privacy and security policy.

Purchases

Everything Mutabloom sells is sold through Apple, using StoreKit. We never see your payment details. No card number, no billing address, and not the email address of your Apple Account, ever reaches us or the app.

What the app reads is the list of entitlements Apple says your Apple Account holds — whether Remove Ads is owned, whether a Gardener's Pass is currently active — which is also what makes Restore Purchases work on your other devices. Refunds are handled by Apple at reportaproblem.apple.com, not by us.

Game Center

Game Center is optional and the whole game works without it. If you are signed in, Apple handles it, and Apple's privacy policy governs what Apple keeps.

What goes to Apple when you are signed in is your progress towards Mutabloom's achievements and your entries on its leaderboards — Daily Sprint, weekly garden value, rarest harvest. The game receives an opaque player identifier from Apple and the display name you have already chosen for Game Center. Mutabloom never sees the Apple Account behind it, your email address or your password. There is no chat, and nothing you type in the game is sent to another player.

Live Activities and the Dynamic Island

You can put your garden on the Lock Screen and in the Dynamic Island: growth timers, the weather countdown, a harvest-ready count, buttons that water, catch weather or harvest. This is off until you turn it on inside the game.

Turning it on has one privacy consequence, and it is the only piece of server infrastructure Mutabloom has. A worldwide weather event has to flip every player's Live Activity to raining at the same moment, and a plant that finishes growing while your phone is in your pocket has to be able to say so. Both need Apple's push service, so:

• Apple issues an anonymous push token for that Live Activity, and the app sends it to a small service we run. That service stores the token, the broadcast channel it is subscribed to, and a timestamp. No account, no device name, no location, no game data.
• The pushes it sends are game state: the weather that is starting, the plant that is ready. Nothing in a Live Activity is advertising, and Apple's rules do not allow it to be.
• Live Activity tokens expire on their own, and ending a Live Activity or turning the feature off in the game invalidates the token immediately.

The buttons inside a Live Activity run inside Mutabloom on your device. Pressing Catch during a rainstorm changes your save; it does not send us anything.

iCloud save sync

If you are signed in to iCloud and have iCloud Drive on, Mutabloom keeps a copy of your save in your own iCloud storage, in the private container iOS gives the app, so that a new phone picks up the garden the old one left. This is Apple's storage, in your account, counted against your quota, and we cannot read it — not the file, not its contents, not the fact that it exists.

Turn it off for Mutabloom in iOS Settings → your name → iCloud, and the game will keep the save on the device only.

Children

Mutabloom is not a children's app and is not directed to children. It is not in the Kids Category of the App Store, it is designed for and marketed to adults, and its advertising requests are not tagged as child-directed because it is not a child-directed service. We do not knowingly collect personal information from children under 13, or under the equivalent age of digital consent where you live. If you believe a child has given us information, write to the address at the bottom of this page and we will delete it.

Who else is involved

• Google — AdMob advertising, Firebase Analytics, Crashlytics and Remote Config. Privacy policy.
• Apple — the App Store, purchases, Game Center, push notifications for Live Activities, and iCloud sync. Privacy policy.

That is the complete list. Mutabloom contains no other analytics, no attribution SDK, no social login and no advertising network beyond the one named above.

Keeping and deleting

• Your save. Deleting the app deletes the copy on the device. The iCloud copy is removed through iOS Settings → your name → iCloud → Manage Account Storage, where Mutabloom's data can be deleted like any other app's.
• Game Center. Achievements and leaderboard entries belong to your Game Center account rather than to the app, so deleting Mutabloom does not remove them — reinstall and they come back. Apple's Game Center settings are where you manage or reset them.
• Analytics and crash data. Held by Google under their retention policies. Deleting and reinstalling the app gives you a new app-instance identifier, which unlinks future data from past data.
• Live Activity tokens. Deleted when the activity ends, when the token expires, or when the app is deleted.
• Anything else. Write to the address below. Where the law where you live gives you rights to access, correct, delete, or object — the GDPR, the UK GDPR, the CCPA and its relatives — that address is how you exercise them, and we will answer within the period the law allows.

We do not sell personal information for money. Where advertising with the advertising identifier counts as a "sale" or "sharing" under a US state law, the Settings → Privacy Options row and Apple's Tracking setting are the two opt-outs, and either one is enough.

Changes to this page

When the game's behaviour changes, this page is updated before the version that changes it ships, and the date at the top moves. If a change is significant, the game will say so in app rather than leaving it here to be found.

Contact

info@crindustries.xyz