Privacy Policy

Welcome to Companion for Palworld (listed on the app stores as "Paldex: Companion for Palworld", referred to here as "the App"), operated by the developer at Droidr ("we", "us", or "our"). This Privacy Policy describes how we collect, use, and share information when you use our mobile application available on Android (Google Play) and iOS (App Store).

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

Creating an account is entirely optional - you can browse all game data without one. If you choose to sign in, we collect the following depending on the method you use:

• Email & Password Sign-In: Your email address and an encrypted password (managed by Firebase Authentication; we never have access to your plaintext password).
• Google Sign-In: Your Google account email address, display name, and a unique identifier provided by Google.
• Apple Sign-In: Your Apple ID email address (or Apple's private relay email if you choose to hide your email), display name, and a unique identifier provided by Apple.
• Guest (Anonymous) Sign-In: No personal information is collected. A temporary anonymous identifier is generated so the App can associate an optional purchase with your session.

1.2 Data Stored in the Cloud

If you are a signed-in user, the following is stored in Google Cloud Firestore, associated with your account identifier, so that a purchase you make is recognised on any device you sign in to:

• Entitlement Status: Whether your account owns the "Remove Ads" (Pro) unlock. This record is written only by our server after it verifies a purchase receipt with Google Play or the App Store - the App itself cannot write it.
• Purchase Records: A minimal audit record of a verified purchase (the store's opaque transaction/order identifier, product id, platform, and a timestamp), used to grant your entitlement and to enforce "one purchase = one account". This contains no payment card details.

Your in-game completion tracking stays on your device. The check-offs in the completion tracker (which Pals you have caught, items collected, technologies unlocked, bosses and dungeons cleared) are stored only in local storage on your device and are not uploaded to our servers.

1.3 Dedicated Server Admin Console

The App includes an optional console for administering your own Palworld dedicated server. If you use it:

• The connection details you enter - a label, host/IP address, port, and the server's Admin Password - are saved in local storage on your device only. They are not transmitted to us or stored on our servers.
• Administration commands are sent directly from your device to the server address you specify, using that server's official REST API. We are not an intermediary and never see your server address or admin password.
• These credentials are stored in the App's local preferences and are not encrypted at rest, so treat any device with the App installed as holding those credentials. You are responsible for safeguarding servers you administer.

1.4 Information Collected Automatically

When you use the App, certain information is collected automatically through third-party SDKs integrated into the App:

• Device Information: Device model, operating system version, unique device identifiers, screen resolution, and language settings.
• Usage Data: App interactions, screens viewed, features used, search queries within the app, session duration, and crash/error reports.
• Advertising Identifier: Google Advertising ID (Android) or Identifier for Advertisers (iOS), used to serve personalized ads. You can reset or opt out of this identifier in your device settings.
• Network Information: IP address (collected by third-party SDKs for analytics and ad serving), connection type.

1.5 Information We Do NOT Collect

• We do not access your contacts, camera, microphone, photos, or location.
• We do not collect payment or credit card information directly. All purchases are processed by Google Play (Android) or Apple App Store (iOS).

2. Third-Party SDKs and Services

The App uses the following third-party services, each of which may collect data as described in their respective privacy policies:

3. How We Use Information

The information collected is used for the following purposes:

• Account Management: To create and manage your user account, authenticate your identity, and enable sign-in across devices.
• Purchase Verification & Entitlement: To verify purchase receipts server-side and grant your "Remove Ads" (Pro) entitlement to your account across devices.
• App Functionality: To load and display game data, images, and the news feed within the App, and to relay server-admin commands to the dedicated server you specify.
• Analytics: To understand how users interact with the App, identify popular features, and improve the user experience.
• Crash Reporting: To identify, diagnose, and fix bugs and crashes to improve app stability.
• Advertising: To display relevant ads within the App. You may purchase the "Remove Ads" option to remove all advertisements.
• Push Notifications: To send you updates about new game content or app features. You can disable notifications in your device settings at any time.
• In-App Purchases: To process purchases such as ad removal and optional tips.

4. Advertising and Ad Personalization

The App uses Google AdMob to display advertisements. AdMob may use your Advertising ID and usage data to serve personalized ads. You can manage your ad preferences:

• Android: Go to Settings > Privacy > Ads > Reset or Delete Advertising ID.
• iOS: Go to Settings > Privacy & Security > Tracking, and disable "Allow Apps to Request to Track".
• Google Ad Settings: Visit adssettings.google.com to manage ad personalization.
• Remove Ads: Purchase the "Remove Ads" option within the App to completely remove all advertisements.

5. Data Storage and Retention

• Account Data: Your Firebase Authentication profile (email, display name, and authentication provider) is retained for as long as your account exists. Upon account deletion, this data is permanently removed.
• Entitlement & Purchase Records: The entitlement and purchase audit records in Cloud Firestore are retained for as long as your account exists (and, for the purchase audit record, as long as needed to support store refund/fraud handling). Upon account deletion, your entitlement record is removed.
• Local Storage: The App stores your preferences (such as ad-free status, completion-tracker check-offs, and saved dedicated-server profiles) locally on your device using SharedPreferences (Android) or NSUserDefaults (iOS). This data never leaves your device. It is not deleted by signing out; you can clear it by clearing the App's storage or uninstalling.
• Analytics Data: Firebase Analytics retains event data for up to 14 months. You can request deletion by contacting us.
• Crash Data: Firebase Crashlytics retains crash reports for 90 days.
• Ad Data: Google AdMob data retention is governed by Google's Privacy Policy.

6. Data Sharing

We do not sell your personal information. Data may be shared with third parties only in the following circumstances:

• Third-Party SDKs: As described in Section 2, certain data is shared with Google (Firebase, AdMob), Apple (StoreKit, Sign-In), and JetBrains (Ktor) as part of their SDK functionality.
• Your Dedicated Server: If you use the Server Admin console, connection details and commands are sent directly to the server address you enter, at your instruction.
• Legal Requirements: If required by law, regulation, or legal process.

7. Account Deletion

You have the right to delete your account and all associated data at any time. To request account deletion:

• Open the App and go to Account settings.
• Tap "Delete Account".
• This will open an email to ved@droidr.tech with a pre-filled deletion request. Please include your account email address and the authentication method you used (Google, Apple, or Email & Password).

Upon receiving your request, we will:

• Delete your Firebase Authentication account (email, display name, and authentication credentials).
• Delete your entitlement record from Cloud Firestore.
• Confirm the deletion via email.

Account deletion is permanent and cannot be reversed. We aim to process all deletion requests within 7 business days.

8. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at ved@droidr.tech and we will promptly delete it.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request information about data collected about you, including your account data and entitlement records.
• Deletion: Request deletion of your account and all associated data as described in Section 7.
• Opt-Out: Opt out of personalized advertising as described in Section 4.
• Data Portability: Request a copy of your data in a portable format.
• Rectification: Request correction of inaccurate account information.

To exercise any of these rights, please contact us at ved@droidr.tech.

10. Security

We take reasonable measures to protect the information collected through the App:

• User authentication is managed by Firebase Authentication, which uses industry-standard security practices including encrypted password storage.
• Data transmission between the App and Firebase services is encrypted using TLS/SSL.
• Access to user data in Firestore is restricted by security rules that ensure users can only read their own entitlement, and that entitlement records can only be written by our server.
• Dedicated-server credentials you enter are stored only in your device's local preferences and are not encrypted at rest; they are your responsibility to protect.

However, no method of electronic transmission or storage is 100% secure. The App does not use non-exempt encryption (as declared via ITSAppUsesNonExemptEncryption = false).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: ved@droidr.tech
• Website: palworld.gamevault.in

Companion for Palworld is an unofficial fan-made app and is not affiliated with or endorsed by Pocketpair, Inc. "Palworld" and related marks are trademarks of their respective owners.

Terms & Conditions →