Galactonautas' Privacy Policy

Last updated August the 28th, 2023

This privacy statement pertains to Galactonautas Games e Softwares Ltda. (referred to as "we," "us," or "our"), trading under the name Galactonautas. In this document, we elucidate the purposes and methods underlying the collection, retention, utilization, and/or sharing ("processing") of your data in connection with your utilization of our offerings ("Services"). This encompasses instances such as:

1. Acquiring and employing our mobile application (Bruce's Gym Tycoon - Idle Game), or any other application developed by us that is linked to this privacy statement;

2. Interacting with us through alternative associated means, encompassing sales, promotional activities, or events;

Should you have any queries or reservations, acquainting yourself with this privacy statement will furnish you with insights into your rights and preferences regarding your privacy. If our policies and practices are not aligned with your accord, we urge you to abstain from using our Services. Should inquiries or uncertainties persist, kindly reach out to us at


This overview offers fundamental highlights extracted from our privacy notice. To delve deeper into specific details concerning any of these aspects, utilize our table of contents below to navigate to your desired section.

Personal data processing
Upon visiting, using, or navigating our Services, we might engage in the processing of personal data, contingent upon the nature of your interactions with us and the Services, the preferences you express, and the specific products and features you employ.

Information from third parties.
We receive information provided by Google Analytics.

Sensitive personal information processing
We do not process sensitive personal information.

Our Information Processing Methods
We undertake the processing of your data to furnish, enhance, and manage our Services, to establish communication with you, ensure security and prevent fraud, and to adhere to legal obligations. Additionally, we might process your data for supplementary purposes upon obtaining your explicit consent. Our data processing activities are exclusively conducted in instances where a valid legal basis exists. Further insights into the intricacies of our information processing approach are expounded upon in our detailed explanation.

Instances and Parties for Personal Data Sharing
In particular scenarios, we might partake in sharing information, specifically with designated third parties. For an in-depth comprehension of the contexts and entities with which we share your personal data, we encourage you to delve into our comprehensive guide outlining the instances and recipients of such data sharing.

Your Entitlements
Your entitlements are contingent upon your geographical location and the applicable privacy legislation, which could bestow certain rights concerning your personal information. For a more detailed understanding of your privacy rights, we recommend exploring further insights into the subject matter.

Exercising Your Entitlements
The most straightforward approach to assert your rights involves initiating a data subject access request or getting in touch with us directly. Any request you make will be duly evaluated and addressed in alignment with the pertinent data protection regulations.

Interested in Further Details Regarding Our Data Utilization?
For a comprehensive understanding of our practices concerning the information we gather, we encourage you to thoroughly peruse our complete privacy notice.

















Personal details shared by you.

In Brief: We gather personal information furnished by you.

We acquire personal information that you willingly furnish when displaying interest in acquiring insights about us or our products and Services, participating in activities within the Services, or making contact with us through other means.

Sensitive Data Handling.
We abstain from processing sensitive information.

Data from Application Use.
In the case of utilizing our application(s), we might also compile the ensuing information if you decide to grant us access or authorization:

1. Details about Mobile Devices.
Automatic accumulation of device specifics (such as mobile device identification, model, manufacturer), operating system, version specifics, system arrangement particulars, device and application identification codes, browser kind and version, hardware model, internet service provider, and/or mobile carrier, as well as Internet Protocol (IP) address (or proxy server). If our application(s) are in use, supplementary data about your mobile device's network association, operating system or platform, your specific mobile device type, the distinct identification code of your mobile device, and data concerning the elements of our application(s) you engaged with may also be collected.

2. Push Notifications.
We may request permission to transmit push notifications pertaining to your account or specific attributes of the application(s). If you prefer not to receive this category of communications, you retain the option to deactivate them within your device's configurations. This data primarily serves to uphold the security and functionality of our application(s), facilitate issue resolution, and serve our internal analytics and reporting objectives. Any personal information you provide should be truthful, comprehensive, and precise, and any modifications to such personal information should be promptly communicated to us.

This data primarily serves to uphold the security and functionality of our application(s), facilitate issue resolution, and serve our internal analytics and reporting objectives. Any personal information you provide should be truthful, comprehensive, and precise, and any modifications to such personal information should be promptly communicated to us.

Automated Data Gathering

In Brief: Particular data, such as your Internet Protocol (IP) address and/or browser and device attributes, is automatically compiled upon your visit to our Services.

We engage in the automatic collection of certain details when you access, use, or navigate through our Services. While this data does not unveil your specific identity (such as your name or contact particulars), it may encompass information about your device and usage, including your IP address, attributes of your browser and device, operating system, language preferences, referring URLs, device denomination, location, country, insights into your interactions and timings concerning our Services, and supplementary technical particulars. This data is primarily required to uphold the security and operational aspects of our Services, and to facilitate our internal analytics and reporting objectives.

The data we amass encompasses:

1. Device Information.
We procure device data, encompassing details about the computer, phone, tablet, or any other device you employ to access our Services. Depending on the particular device in use, this device information may cover facets such as your IP address (or proxy server), identification numbers linked to devices and applications, geographical location, browser type, hardware model, internet service provider, and/or mobile carrier, operating system, as well as system setup details.

2. Log and Usage Data.
Log and usage data comprise service-linked, diagnostic, usage, and performance-related information that our servers automatically gather during your access or utilization of our Services, and which is subsequently documented in log files. Depending on your interactions with us, this log data may incorporate your IP address, particulars concerning your device, browser setup, as well as insights into your activities within the Services (including timestamps associated with your usage, viewed pages and files, searches, and other actions you undertake, such as utilizing specific features). Moreover, device event details (like system operations, error reports occasionally referred to as "crash dumps," and hardware configurations) are also encompassed. 3. Geographical Data. Our collection of geographical data entails information related to your device's location, which could be either precise or approximate. The extent of information collected hinges on the type and adjustments of the device employed to access our Services. For instance, we might employ GPS and alternative technologies to compile geolocation data that conveys your present location (established on your IP address). You possess the option to decline the collection of this information either by withholding access or by deactivating the Location setting on your device. It's important to note that opting out might restrict your access to specific features of the Services.


In Brief: Your information is processed for the provision, enhancement, and management of our Services, communication with you, security and fraud deterrence, and legal compliance. Additionally, your information may be processed for alternative objectives with your agreement.

The processing of your individual data serves a multitude of intentions, contingent upon your interactions with our Services. These encompass:
• To protect our Services. As part of our commitment to maintaining the safety and security of our Services, we may process your information, including monitoring and preventing fraud.

• To save or protect an individual's vital interest. When necessary to prevent harm and safeguard an individual's essential well-being, we may process your information.

• To determine the effectiveness of our marketing and promotional campaigns. We may process your information to gain insights into creating marketing and promotional campaigns that resonate best with you.

• To deliver targeted advertising to you. Tailoring content and advertising to your specific interests, location, and more may involve processing your information.

• To request feedback. We might process your information when seeking feedback and communicating with you about your experiences with our Services.

• To send you marketing and promotional communications. If aligned with your marketing preferences, we may process personal information you provide to us for marketing purposes. You retain the option to unsubscribe from our marketing emails at any time. More details are available in the "WHAT ARE YOUR PRIVACY RIGHTS?" section below.

• To identify usage trends. Understanding how our Services are used is pivotal for enhancement, so we may process data regarding your usage patterns.


In Brief: Your personal information is only processed when we have a valid legal reason to do so, necessitated by applicable law. This encompasses instances such as obtaining your consent, adhering to legal obligations, furnishing services to fulfill contracts, safeguarding your rights, or serving our genuine business interests.

For those in the EU or UK, this section is pertinent to you. In compliance with the General Data Protection Regulation (GDPR) and UK GDPR, we are obligated to elucidate the legitimate legal bases upon which we rely to process your personal information. Consequently, we may ground our personal data processing on the subsequent legal bases:

We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.

Legal Obligations.
Processing your data may be necessary to fulfill our legal commitments. This could entail cooperating with law enforcement bodies or regulatory entities, safeguarding and upholding our legal rights, or revealing your information as evidentiary support in litigation proceedings in which we are involved.

Legitimate Interests.
We may process your information when reasonably essential to attain our genuine business interests, provided that these interests do not override your fundamental rights and liberties. Instances encompass:

• Identifying issues and/or preventing deceitful activities.
• Sending users details about exclusive offers and discounts on our products and services.
• Bolstering our marketing endeavors.
• Grasping how users employ our products and services to augment user experience.
• Creating and presenting tailored, pertinent advertising content for users.
• Analyzing the utilization of our Services to enhance user engagement and retention.

Vital Interests.
Processing your data may be deemed necessary to safeguard your crucial interests or those of a third party, especially in circumstances involving potential threats to an individual's safety.

For those situated in Canada, this segment pertains to you.

We might process your data in situations where you have explicitly granted us specific permission (express consent) to employ your personal information for distinct purposes, or when your consent can be inferred (implied consent). You maintain the option to retract your consent at any time. In exceptional instances, applicable law might authorize us to process your information without your consent, which includes, for instance:

• When collection unmistakably benefits an individual and timely consent cannot be acquired.
• For the purpose of investigations, fraud detection, and prevention.
• In the context of business transactions under specific conditions.
• When it's incorporated within a witness statement and collection is imperative to assess, process, or settle an insurance claim.
• For identification of injured, ill, or deceased individuals, as well as communication with next of kin.
• When reasonable grounds suggest an individual has been, is, or may become a victim of financial abuse.
• When it's reasonable to expect that consent-based collection and usage would jeopardize data availability or accuracy, and the collection serves a related purpose.
• For pursuits linked to investigating breaches of agreements or violations of Canadian or provincial laws.
• When disclosure is mandated to comply with a subpoena, warrant, court order, or court rules concerning record production.
• When the data was generated by an individual in the course of their employment, business, or profession, and collection aligns with the initial information purpose.
• When collection is exclusively for journalistic, artistic, or literary intentions.
• When the information is publicly accessible and conforms to specified regulations.


In Brief: Information may be shared as delineated in this section and/or with the subsequent third parties, under specific circumstances detailed below.

There are scenarios in which we may necessitate sharing your personal information:

Business Transfers.
Your data may be shared or transferred in connection with, or during discussions of, any amalgamation, divestiture of company assets, financial dealings, or the takeover of all or a portion of our business by another company.

Offer Wall.
Our application(s) might showcase a "offer wall" hosted by a third party. Such a wall enables third-party advertisers to extend virtual currency, gifts, or other rewards to users in exchange for the acceptance and fulfillment of an advertising offer. This offer wall could surface within our application(s) and be presented to you based on particular data, such as your geographical region or demographic details. Upon selecting an offer wall, you will be directed to an external website owned by different entities, leading you away from our application(s). A distinctive identifier, like your user ID, will be shared with the offer wall provider to prevent fraudulent activities and appropriately allocate the corresponding reward to your account.


In Brief: We hold no responsibility for the security of information you share with third parties linked to or advertising on our Services, if they are not affiliated with us.

The Services, including our offer wall, might establish connections to third-party websites, online services, or mobile applications, and/or exhibit advertisements from unaffiliated third parties that may link to further websites, services, or applications. As a result, we do not warrant the reliability of any such third parties and will not bear responsibility for any losses or damages stemming from the utilization of these third-party websites, services, or applications. Inclusion of links to third-party websites, services, or applications does not signify our endorsement. We are unable to assure the safety and confidentiality of data shared with third parties. This privacy notice does not extend to data collected by third parties. We disclaim accountability for the content, privacy, security practices, and policies of any third parties, including other websites, services, or applications that might be linked to or from the Services. It is advisable to review the policies of these third parties and to directly engage with them for any inquiries you may have.


In Brief: We retain your data as required to fulfill the purposes specified in this privacy notice, unless law dictates otherwise.

Your personal information will be retained solely for the period necessary to meet the objectives outlined in this privacy notice, unless the law mandates a longer retention period (e.g., tax, accounting, or legal requisites).

Upon the cessation of a legitimate business requirement to process your personal information, we will either delete or anonymize the data. If this proves unfeasible (e.g., due to storage in backup archives), we will securely preserve your personal information and disconnect it from additional processing until such time that deletion becomes feasible.


In Brief: In specific regions such as the EEA, UK, and Canada, you possess rights affording you greater access to and control over your personal information, and you retain the ability to review, modify, or terminate your account.

Certain rights are granted under relevant data protection laws in particular regions (like the EEA, UK, and Canada). These encompass the right to (i) request access and obtain a copy of your personal information, (ii) request rectification or erasure, (iii) impose restrictions on the processing of your personal information, and (iv) if applicable, request data portability. Under specific circumstances, you may also possess the right to object to the processing of your personal information. To initiate such requests, you can reach out to us through the contact information provided in the "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" section below.

Any requests will be addressed and carried out in line with applicable data protection laws. If you are located in the EEA or UK and believe that we are inappropriately processing your personal information, you maintain the right to lodge a complaint with your respective Member State data protection authority or the UK data protection authority.

For individuals in Switzerland, you can contact the Federal Data Protection and Information Commissioner. Withdrawal of consent: In instances where we rely on your consent to process your personal information, whether express or implied consent based on the relevant law, you have the right to retract your consent at any time. To do so, you can get in touch with us using the contact details found in the "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" section below.

It's important to note that this withdrawal won't affect the legality of processing done prior to withdrawal, nor will it impact processing conducted based on legal grounds other than consent when permissible by applicable law. Opting out of marketing and promotional communications: You retain the ability to unsubscribe from our marketing and promotional communications at any time. You can accomplish this by using the provided options or contacting us via the details outlined in the "CONTACT US ABOUT THIS NOTICE" section below. This will lead to your removal from marketing lists. However, it's possible that we may still communicate with you, such as to forward service-related messages essential for account administration and usage, responding to service requests, or other non-marketing objectives.

For queries or remarks concerning your privacy rights, you may reach us via email at


Many web browsers and certain mobile operating systems and applications come equipped with a Do-Not-Track ("DNT") feature or setting that can be activated to indicate your preference against having your online browsing activities monitored and gathered. It is important to note that a consistent technological standard for identifying and executing DNT signals has not yet been conclusively established. Consequently, we do not presently acknowledge DNT browser signals or any other mechanism that inherently conveys your choice to evade online tracking. In case a standardized approach to online tracking is sanctioned in the future, and we are required to adhere to it, we will apprise you of such practices in a revised rendition of this privacy notice.


In Short: If you are a California resident, you possess specific rights regarding your access to personal information.

As stipulated by the California Civil Code Section 1798.83, also referred to as the "Shine The Light" law, our California-resident users are entitled to request and obtain from us, once annually and without charge, details about categories of personal information (if any) that we disclosed to third parties for direct marketing purposes, along with the names and addresses of all third parties with whom we shared personal information in the preceding calendar year. If you are a California resident and wish to initiate such a request, please submit it in writing to us through the provided contact information.

For individuals under 18 years of age, residing in California, and holding a registered account with our Services, you have the right to demand the deletion of undesirable data that you have publicly posted on the Services. To seek the removal of such data, kindly reach out to us via the provided contact information. Include the email address linked to your account and a statement confirming your California residency. We will ensure that the data is not publicly viewable on the Services. However, please be aware that the data may not be fully or comprehensively eliminated from all our systems (e.g., backups, etc.).

CCPA Privacy Notice
The California Code of Regulations defines a "resident" as:
(1) any individual present in the State of California for reasons other than temporary or transitory purposes, and
(2) any individual domiciled in the State of California but temporarily outside the state for transitory reasons.

All other individuals are classified as "non-residents." If this "resident" definition applies to you, certain rights and obligations pertaining to your personal information must be observed.

What categories of personal information do we collect?

In the past twelve (12) months, we have gathered the subsequent categories of personal information:

We might additionally accumulate different personal information beyond these categories when you engage with us in person, online, or through phone or mail in scenarios such as:

• Seeking assistance via our customer support channels.
• Involvement in customer surveys or contests.
• Facilitating the provision of our Services and addressing your inquiries.

How do we utilize and distribute your personal information?

Additional insights into our data gathering and sharing procedures are accessible within this privacy notice. For correspondence, you can reach us via email at, or by referencing the contact details provided at the conclusion of this document.

When utilizing an authorized agent to execute your opt-out right, we might decline requests if the authorized agent does not furnish proof of valid authorization to act on your behalf.

Will your information be divulged to others?

We may reveal your personal information to our service providers in accordance with a written agreement between us and each service provider. Each service provider is a profit-oriented entity that processes the information on our behalf, upholding the same stringent privacy protection responsibilities prescribed by the CCPA.

We may employ your personal information for our internal business objectives, including conducting internal research for technological advancement and demonstration. This does not qualify as the "sale" of your personal information.

In the past twelve (12) months, we have neither disclosed, sold, nor shared any personal information with third parties for business or commercial objectives. Moreover, we will not partake in the sale or sharing of personal information belonging to website visitors, users, and other consumers in the future.

Your rights concerning your personal data

Right to request data deletion - Deletion request

You possess the option to request the deletion of your personal information. If you decide to ask us to delete your personal information, we will honor your request, with certain exceptions as stipulated by law. Such exceptions may include (but are not limited to) instances where another consumer exercises their right to free speech, our compliance obligations arising from legal requirements, or necessary processing to safeguard against unlawful activities.

Right to be informed - Information request

Depending on the circumstances, you have the entitlement to be informed about:

• Whether we gather and utilize your personal information.
• The categories of personal information that we collect.
• The purposes for which we employ the collected personal information.
• Whether we distribute or share personal information with third parties.
• The categories of personal information we have sold, shared, or disclosed for business purposes.
• The categories of third parties to whom the personal information was sold, shared, or disclosed for business purposes.
• The business or commercial rationale for amassing, selling, or sharing personal information.
• The specific personal information pieces we have accumulated regarding you.

As per applicable regulations, we are not mandated to furnish or erase consumer information that has been de-identified as a response to a consumer request, or to re-identify individual data to validate a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer's Privacy Rights
We will not discriminate against you should you exercise your privacy rights.

Right to Restrict Usage and Disclosure of Sensitive Personal Information
We do not process sensitive personal information of consumers.

Verification process

Upon receipt of your request, we will undertake identity verification to ascertain that you are the same individual for whom we possess information in our system. This verification entails requesting you to provide information that we can match with what you have previously furnished. Depending on your request's nature, we might ask for specific details to match against our records, or we might use a communication method (e.g., phone or email) you have previously provided. Additional verification methods could be employed as per the circumstances.

The personal information you supply in your request will solely be utilized to verify your identity or authority to make the request. If feasible, we will aim to avoid seeking further information for verification purposes. However, in cases where we cannot verify your identity through our existing data, we may request supplementary information for both verification and security/fraud prevention purposes. Any such additional information you provide will be deleted upon successful verification.

Other privacy rights

• You have the right to object to the processing of your personal information.
• You can request the correction of your personal data if it is inaccurate or no longer pertinent, or you can ask for the processing of the information to be restricted.
• You have the option to designate an authorized agent to submit a CCPA request on your behalf. We may deny requests from agents that do not provide valid proof of authorization as per CCPA requirements.
• You may request to opt out of future selling or sharing of your personal information with third parties. Once we receive such an opt-out request, we will fulfill it as promptly as possible, within fifteen (15) days from the date of request submission.
To assert these rights, reach out to us via email at, or refer to the contact details at the end of this document. If you have concerns about how we manage your data, we would appreciate your feedback.


If you reside in Virginia, you may have specific rights pertaining to the access and utilization of your personal data. Virginia CDPA Privacy Notice

As per the Virginia Consumer Data Protection Act (CDPA):

"Consumer" refers to a natural person who is a resident of the Commonwealth, acting solely in an individual or household capacity. It excludes a natural person in a commercial or employment context.

"Personal data" encompasses any information that is directly or reasonably linkable to an identified or identifiable natural person. This excludes de-identified data or publicly available information.

"Sale of personal data" entails the exchange of personal data for monetary consideration.

If the term "consumer" applies to you, we are bound by specific rights and obligations concerning your personal data.

The information we gather, use, and reveal about you will differ based on your interactions with us and our Services.

Your rights regarding your personal data

• Right to be informed about whether we process your personal data
• Right to access your personal data
• Right to rectify inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to receive a copy of the personal data you previously shared with us
• Right to opt out of processing your personal data for targeted advertising, the sale of personal data, or profiling for decisions with legal or similarly significant consequences ("profiling")

We have not sold any personal data to third parties for business or commercial purposes. We will not sell personal data in the future from website visitors, users, and other consumers.

Exercising your rights under the Virginia CDPA

Additional details about our data collection and sharing practices are available in this privacy notice. You can reach us via email at, submit a data subject access request, or refer to the contact details at the end of this document.

If you are using an authorized agent to exercise your rights, we may decline requests without valid proof of authorization to act on your behalf.

Verification process

We may require supplementary information to verify your identity and your consumer request. If an authorized agent submits the request, we might need more information to validate your identity before processing the request.

Upon receiving your request, we will respond without undue delay, but within forty-five (45) days of receipt. The response period may be extended by forty-five (45) days if necessary. Any such extension will be communicated along with the reason.

Right to appeal

If we reject your request, we will explain our decision and rationale. If you wish to appeal, email us at Within sixty (60) days of receiving the appeal, we will provide written information on the action taken or not taken, including reasons. If the appeal is denied, you can contact the Attorney General to file a complaint.


In Brief: We will keep this notice up to date to comply with relevant laws.

This privacy notice may be updated periodically. Changes will be reflected by an updated "Revised" date, and the new version will become effective once accessible. In the event of significant changes, we might inform you through prominent notices or direct notifications. It's advisable to regularly review this notice to stay informed about how your information is safeguarded.


For inquiries or feedback about this notice, you can reach us at


Depending on your country's laws, you might have the right to access, modify, or delete your personal information held by us. To request a review, update, or deletion of your personal information, please complete and submit a data subject access request.


Our Services are not designed for or intended to be used by children.

Even if you fall below the age at which a valid consent can be provided for targeted advertising, profiling, and geolocation, you can still access our Services. We will solely gather data from players under the age of 13 (or under 16 in specific jurisdictions within the European Union) when it is deemed necessary for delivering the service and ensuring their protection in accordance with relevant privacy regulations. If you are a parent or legal guardian of a child under the age of 13 (or under 16 in certain European Union jurisdictions) who utilizes our Services, kindly get in touch with us if you have any queries or feedback. Upon your request, we will delete any personal information related to your child, provided we can accurately identify your child, unless you grant us verifiable consent for your child to continue using our games.

We emphasize that we do not collect sensitive personal information from users. Additionally, the data we gather is structured to ensure that it cannot be used to personally identify individuals.

Contact us

If you have any questions about this Privacy Policy, please contact us at: