Privacy Policy
Privacy Policy
Effective: September 14, 2026 · Version 2026-09-14 · NAV STAR SOFTWARE STUDIOS INC.
1. Operator, scope, and contact
Ascend: Rise to Power is operated by NAV STAR SOFTWARE STUDIOS INC., a British Columbia, Canada corporation, which offers the game under the Ascend Game brand (“Nav Star,” “we,” “us,” or “our”). This global policy covers the iPhone game, website, support, and related services offered in Canada, the United States, Australia, and India. Version 1 is not intentionally offered in the EU or UK.
Contact our privacy officer at privacy@ascendrisetopower.com, legal@ascendrisetopower.com, support@ascendrisetopower.com, or safety@ascendrisetopower.com for moderation and player-safety matters. We generally respond to verified privacy and legal requests within 30 calendar days, or sooner when applicable law requires.
2. Eligibility before identifiers
Before we create or transmit a persistent installation or account identifier, you select a country or region and confirm that you meet the minimum age: 13 in the United States and Australia, 14 in Canada, and 18 in India. We do not request a complete birth date. An ineligible response is rejected before persistent data collection. A minor who meets the relevant threshold must have parent or guardian permission where required.
3. Information we process
- Guest or account identifiers, account status, app, device, operating-system, and security information. The guest identifier is pseudonymous personal information: it is linked to gameplay, security, transaction, and account records even though it does not directly contain your name or email address.
- Public display name; gameplay, progression, PvP, battle, leaderboard, alliance, challenge, referral, reward, offer-interaction, and related game records.
- Country or region, age-band and guardian-permission confirmations, separate Terms agreement and Privacy acknowledgment, document versions and content hashes, UTC acceptance time, app/build version, optional-analytics choice, and withdrawal or supersession information.
- First-party analytics events and properties, A/B assignments, session information, platform, app version, and screen information only where optional analytics is permitted.
- Server, authentication, fraud, security, IP-address, user-agent, request, crash, diagnostic, notification-token, Game Center, universal-link, invitation-attribution, moderation, blocking, report, and enforcement records where those features are used. If alliance chat is enabled, ambiguous chat content may be sent to Replit’s Gemini AI Integration for a narrow automated contextual moderation check. The system is fail-closed when Gemini is unavailable or its response is invalid, and automated review can produce false positives or false negatives; we do not promise perfect accuracy.
- If purchases are enabled: StoreKit product, transaction, receipt, entitlement, refund, revocation, reconciliation, tax, fraud, and recovery information. We do not receive payment-card details.
- Support, privacy, deletion, and legal requests and correspondence.
Alliance chat may be available where its automated safety gate is enabled. Deterministic rules remain authoritative and only ambiguous content is processed by Gemini Flash through Replit. If the classifier is unavailable or inconclusive, the message is not published. Display names remain user-generated content and may be filtered, reported, changed, or removed for safety.
4. Purposes, analytics, and choices
We use information to provide and secure the game, save progress, enforce Community Rules, prevent fraud, verify entitlements, answer requests, meet legal obligations, and maintain reliable services. Essential service and security processing is not optional. Optional first-party product analytics is separate from the Terms and may be withdrawn in Settings where available or by contacting us.
We do not sell personal information, share it for cross-context behavioural advertising, use IDFA-based tracking, create advertising profiles, or use third-party advertising. We do not personalize prices. Gameplay-state offers, if shown, do not use sensitive information, age, or protected traits for purchase pressure.
5. Sharing, providers, and cross-border processing
Other players may see your display name and game statistics. Replit provides application hosting, managed PostgreSQL infrastructure, and (if alliance chat is enabled) the Gemini AI Integration provider path used for narrow automated moderation. Apple provides iPhone distribution and, if enabled, StoreKit purchase processing. We use service providers only as needed to operate the services and may disclose information for law, safety, fraud prevention, a corporate transaction, or your direction.
Information, including ambiguous chat content submitted for automated moderation, may be processed outside your country, including by Replit/Gemini in Canada or the United States, using contractual, technical, and organizational safeguards where required. Counsel assesses cross-border processing and provider review and applies written processor safeguards as applicable. We do not list a provider solely because it was used for internal synthetic test data.
6. Website information
The website does not provide a public form, email collection, non-essential cookies, browser storage, or website analytics. It serves an essential first-party JavaScript bundle and may process ordinary hosting and security logs, including IP address, user agent, request time, and request/security information where collected. We retain website security logs for up to 12 months. Fonts are served without a Google Fonts request from this website.
7. Retention and account deletion
- Active profile and gameplay: account lifetime; removed from active systems promptly and no later than 30 days after a valid deletion request.
- Authentication/session material: revoked immediately and deleted or irreversibly invalidated promptly.
- Backups: protected rotation expires within 35 days.
- First-party analytics: 12 months, then deleted or irreversibly aggregated. Security, API, and processing logs: 12 months.
- Support and privacy requests: 24 months after closure. Legal-assent records: 6 years after account closure.
- Purchase, refund, tax, fraud, and legal records: up to 7 years where reasonably required.
- Where chat is enabled: messages 30 days; reports and moderation audit (including bounded provider/model/policy provenance) 180 days unless a safety or legal hold requires longer. Gemini receives only the narrow ambiguous submissions described above; deterministic safe or rejected content is not sent.
Initiate deletion in Settings or contact privacy@ascendrisetopower.com. Access is revoked immediately after a confirmed deletion request. We remove active profile and gameplay information promptly and generally within 30 days. Backups expire through their normal protected rotation within the period stated above. We may retain restricted purchase, refund, fraud, security, legal-compliance, consent, and request records when reasonably required by law or to establish, exercise, or defend legal claims. Retained records are not used to restore deleted gameplay. A documented legal hold affects only relevant records and ends when the hold ends.
8. Rights and four-market information
You may request access, correction, deletion, withdrawal of optional consent, or information about our processing at privacy@ascendrisetopower.com. We may verify a request using information reasonably necessary to protect the account.
United States: where applicable, state law may provide rights to know, correct, delete, and opt out of sale/sharing or targeted advertising. We do not sell or share for targeted advertising. If sale or sharing changes, we will honour Global Privacy Control where legally required.
Canada, including Québec: you may challenge accuracy, withdraw consent subject to legal limits, and complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, Québec’s Commission d’accès à l’information, or another applicable provincial regulator. Québec users can access French materials and information about cross-border processing through the Français links.
Australia: where applicable, you may seek access or correction, complain to us, and then contact the Office of the Australian Information Commissioner.
India: you may exercise applicable notice, access, correction, erasure, consent-withdrawal, nomination, grievance, and complaint rights by contacting our privacy officer. We maintain applicable processing and security records and provide legally required breach notices.
9. Security and policy changes
We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. No security system can guarantee absolute security. We investigate and notify affected people and regulators of breaches when required by law.
Material policy changes receive a new version and notice before they take effect. We seek renewed consent when a processing change requires it. Continued use alone is not acceptance of this Privacy Policy.