App Privacy Policy
Effective Date: April 15, 2025
Last Updated: April 20, 2026
Thank you for choosing our apps and services. We appreciate your trust and are committed to protecting your privacy. This Privacy Policy explains how we (The Common Ist Sdn Bhd, The Common Ist Bangkok Co.,Ltd, and Superjaai Studio, co-developers of our apps) collect, use, and safeguard your information when you use our mobile games, applications, and marketplace services ("Services"). By accessing or using our Services, you agree to the terms outlined below.
1. About Us
Our Services are co-developed by The Common Ist Sdn Bhd (Malaysia), The Common Ist Bangkok Co.,Ltd (Thailand), and Superjaai Studio (Malaysia). The Common Ist Sdn Bhd leads product development, handles publishing and app distribution. The Common Ist Bangkok Co.,Ltd supports marketplace operations, and Superjaai Studio provides development support. This Privacy Policy applies to all apps and services released under this collaboration, including mobile games, applications and the VIP marketplace platform (Virtual International Plants).
2. Data Controller
For the purposes of applicable data protection laws, The Common Ist Sdn Bhd and The Common Ist Bangkok Co.,Ltd jointly act as data controllers of the information collected through our Services. Superjaai Studio, as a co-developer, operates under the direction of the data controllers and may access data only as necessary to support app development, maintenance, and marketplace operations.
3. Information We Collect
With your consent, we may collect the minimum data necessary to operate, maintain, and improve our Services. This includes:
a. Usage Data
Some of our apps may use Firebase Analytics to collect anonymized data such as crash logs, gameplay behavior, and performance metrics. This data helps us identify bugs and improve the user experience. If analytics are included, your consent may be requested depending on your region and local data protection laws.
b. Advertising Data
Our games display non-personalized ads using Google AdMob. These ads are based on general app context (such as game content or language settings) and are not tailored to individual user behavior or preferences.
We have disabled the use of Apple's advertising identifier (IDFA) for ad tracking on iOS. On Android, your Google Advertising ID (GAID) may still be accessed depending on your device settings and Google Play policy.
In certain jurisdictions, such as the European Union under GDPR, we may be required to request your explicit consent before processing advertising identifiers or related data (e.g., IP address, device model, OS version) for any analytics or advertising-related purposes—even for non-personalized ads. You can manage or withdraw your consent via your device settings or in-game privacy controls, where applicable.
c. SDK Data from Development Tools
Some development tools we use may include third-party libraries that collect anonymized device and usage data for analytics and improvement. We encourage you to review their respective privacy policies:
We do not:
We only disclose personal data:
d. Authentication Data
Some of our apps may use Unity Authentication to allow users to sign in using third-party platforms such as Apple Game Center or Google Play Games, or anonymously. We do not request or collect email addresses or passwords.
For leaderboard display purposes, only the user's platform display name is accessed. This data is used strictly within the app and is not shared or stored beyond the functionality it supports (e.g., leaderboard entries or linking to cloud saves).
For more information on Unity Authentication, visit Unity's Privacy Policy.
e. Marketplace Account & Profile Data
For users of the VIP marketplace, we may collect additional information to facilitate buying and selling such as:
We do not collect or store email addresses, phone numbers, or payment details directly. Payment information is processed securely through the respective app store payment processors, and we do not retain payment card data.
f. Plant Health & Verification Data
For the VIP marketplace live plants platform, we collect plant health and regulatory documentation data during our verification center quality control process:
This data is collected to ensure regulatory compliance, buyer safety, and marketplace integrity. Plant health documentation may be retained longer than standard transaction records to meet import/export requirements and may be shared with relevant regulatory authorities and customs agencies where required by law.
4. Children's Privacy
Our apps are intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has submitted personal data to us, please contact us and we will delete it promptly.
5. In-App Purchases & Marketplace Transactions
Some of our apps may offer optional in-app purchases and the VIP marketplace platform enables live plant sales with platform-managed verification. These transactions are processed securely through the respective payment processors and app stores (Apple App Store or Google Play). We do not collect or retain payment card information directly.
For VIP marketplace transactions, all plants pass through our verification center for quality control, health assessment, and regulatory documentation processing before platform shipment. We may retain limited non-sensitive transaction information for purposes such as user support, order fulfillment and delivery tracking, verification center documentation, fraud prevention and platform security, and regulatory compliance.
6. Data Sharing and Transfers
We do not share your personal data with third parties except as described below:
General Games & Apps:
Data sharing is limited to analytics, crash reporting, and ad delivery via integrated SDKs (Firebase, AdMob, etc.). These third-party services may process anonymized data on servers located outside your country of residence.
VIP Marketplace:
To facilitate marketplace operations, we share limited data with:
International Data Transfers:
Our services operate across Malaysia, Thailand, and other regions. Some of your data may be transferred to and processed in these jurisdictions to support marketplace operations, logistics, verification center processing, and regulatory compliance. We take reasonable steps to ensure these transfers comply with applicable data protection laws.
7. Your Rights and Choices
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data.
You may also:
Please note that deleting your account does not automatically remove your leaderboard entries or marketplace ratings. To have those removed, contact us via the email addresses below.
8. Data Retention
We retain anonymized or aggregate data only as long as needed to operate and improve our Services, or as required to meet legal obligations.
To request deletion of data, please contact us at support@thecommonist.com.
9. Security
We implement reasonable technical, physical, and organizational safeguards to protect your data from unauthorized access, loss, misuse, or alteration. Marketplace transactions, shipping addresses, sensitive profile data, and plant health documentation are encrypted in transit and at rest. However, no method of transmission or storage is completely secure.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, new services (such as the VIP marketplace), or legal requirements. Material updates will be posted in-app or on our official website. Continued use of the Services after changes means you accept the updated terms.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at:
For theCommonist inquiries:
support@thecommonist.com
For VIP inquiries:
support@vipplants.com
+66 95 993 7333
