Privacy Policy
Updated November 7, 2026
In short
Wumbi is on iPhone and Android, and this policy covers both. The game has no ads. We don’t track you and we don’t sell or share data. The game keeps almost everything on your phone. An account appears only if a grown-up turns on “Online friends”, and it has no name, email or phone number — just a random player number.
What stays on your phone
Your pet, collection, pantry, friends, goals and settings are stored on the device. Delete the game and they are deleted too.
iCloud backup (iPhone)
So your pet survives a phone change, the game on iPhone keeps a backup in your personal iCloud (Apple’s storage). We can’t see it. You can delete it in iPhone Settings: Apple ID › iCloud › Manage Storage.
Google Account backup (Android)
On Android, the game’s save and settings go into your phone’s system backup in your Google Account, if backup is on. We can’t see it. It is restored when you install the game on a new phone with the same Google Account. You can manage it in Android settings: Google › Backup (menu names differ slightly from phone to phone). If you turn backup off, Google deletes the phone’s backup, and the game’s copy with it. If online friends are on, the account key goes into this backup too, along with the save.
Meetups nearby
Meetups go directly between phones, without the internet or our servers: between iPhones over Bluetooth and Wi-Fi, between iPhone and Android and between Android phones over Bluetooth LE. For this, the game asks for access to Bluetooth and the local network on iPhone and to “Nearby devices” on Android. On Android 11 and earlier, the system only lets apps search for Bluetooth devices with location access, so the game asks for it too; the game doesn’t read, store or send your location. Your friend sees your pet’s name and look, the places you know, and a random player tag that blocking relies on. Until a meetup is open, your phone shows neighbors only your pet’s silhouette, without a name. If both of you have online friends turned on, the phones also exchange player numbers — that’s how a friend from a meetup becomes an online friend.
Online friends
Online friends let you stay friends between meetups. They are off until a grown-up turns them on — the game asks a question for grown-ups first. Without them, the game works as before and no account is created. When they are turned on, the phone itself creates a random player number and a key — no name, email, phone number or sign-in with Apple or Google. The key stays on the phone; our server only gets its public part, which lets it check that a request came from your phone. On Android, the key goes into your Google Account backup along with the save; on iPhone, it is kept in the phone’s keychain and moves to a new iPhone with that iPhone’s backup. If the key is lost — for example, a new phone is set up without a backup — the account can’t be recovered, and online friends will need to be invited again.
What the server stores
The Wumbi online server (wumbi.apanty.top) stores: the player number and the public part of the key; your pet’s card — its name, look, stage, place and other details from the game, but nothing about you; your list of online friends; invites (a link works for 48 hours, and its record is erased after 4 days); friend requests (they expire after 7 days); the players you’ve blocked; reports (up to 90 days); a meetup mark for becoming friends (10 minutes); and technical signature fingerprints and request counters, kept from a few minutes to a day so no one can replay your requests or flood the server. IP addresses are not recorded with the account, friends or reports. This data is used only for online friends; we don’t share it with anyone or use it for ads. If online friends are on, the server also stores: postcards and gift boxes from friends (the ready-made phrase, the pet’s card and what’s in the box) — for 14 days; visits (to whom, for how many hours, how many times the pet was petted and what treats it got) — for a day after it comes home, or 14 days if the result isn’t collected; online games (who played with whom and what) — for an hour after the game ends. The server only passes game moves on to your friend and doesn’t store them. For notifications — the phone’s notification address, the game language and the type of phone; an address that hasn’t been updated for 60 days is erased. To tell the real game from a fake, the phone goes through a check by Apple (App Attest) or Google (Play Integrity): the server stores only the result of the check, and on iPhone also the App Attest key; Google’s responses aren’t stored. For this check the phone contacts Apple or Google, and the server sends the phone's answer to Google to be decoded; the player number is not passed to them.
Notifications
If you allow notifications, the server sends them through Apple (APNs) and Google (Firebase Cloud Messaging) services — for example, “A friend sent you a gift box”, “Momo came to visit you” or “A friend is inviting you to play”. A notification contains only the name of your friend’s pet and a ready-made phrase. Apple and Google receive the phone’s notification address and the notification text in order to deliver it. While your pet is visiting, on iPhone the server also updates the Live Activity on the Lock Screen the same way. You can turn notifications off in your phone’s settings.
Who sees what
Your pet’s card is seen only by your online friends. With an invite link, anyone who has it sees your pet’s name while the link works — so send it only to people you know. Whoever accepts the link sees only your pet’s name until you say “Yes”, and you see their pet’s card so you can tell who it is. When your pet is visiting, your friend sees it in their game and can pet it and give it treats.
How to erase the account
In the game: the Friends screen, Online friends section › “Turn off online friends” › “Turn off and erase online friends”. The server immediately erases the whole account: the card, friends, invites, requests, postcards and gift boxes, visits, online games, notification addresses, blocks and reports. An account that hasn’t connected to the server for more than a year is erased automatically — including one that was only turned off, or erased while the phone had no internet. Friends from meetups nearby stay in the game on the phone.
Analytics and crashes
On both iPhone and Android, the game sends anonymous signals about how it is played (for example, “a pet hatched”) and crash reports through the TelemetryDeck service. They contain no name, email, phone number or advertising identifier and are not linked to you. A crash report is the game version and a short description of the error; the details stay on the phone.
Reports
If you report a player nearby, we receive random tags of both players, the name of their pet, the reason, the game version and language. A report on an online friend stays on the online server: both player numbers, the reason chosen from a list and the pet’s name at that moment — no text. We keep reports for no more than 90 days and don’t store IP addresses with them.
Children
The game is for all ages. We don’t collect personal data: no name, email, phone number or location. There is no chat: players nearby see pet names and ready-made reactions, and online friends see the pet’s card and postcards with ready-made phrases. Pet names pass a filter — in the game and on the server. Online friends are turned on by a grown-up, and a child can become online friends only with someone they met nearby or exchanged an invite link with.
Your rights
You can erase your online account right in the game (see “How to erase the account”). To delete your reports or ask about data, write to us — we reply within a month, usually sooner.