The short version: your progress stays on your phone, the leaderboard is off unless you turn it on, and the only reason any data leaves the device is to show you an advert or a score table you asked for.
Your save — postings, certifications, roubles, equipment, best grades — is stored locally on your phone. It is never uploaded, and we cannot see it. Deleting the app deletes it.
The shared leaderboard is off by default. Nothing is sent unless you choose to join and pick a handle. If you do join, the only data transmitted is:
No account, no email, no device identifier. Scores are stored in Google Firebase (Firestore). You can leave the leaderboard at any time from the Service Record screen.
The game is free and shows an advert between shifts, served by Google AdMob. AdMob may use your device's advertising identifier to measure and personalise adverts.
iOS asks your permission before any tracking happens, and we deliberately ask at the first advert rather than the moment you open the game, so the question has context. Declining changes nothing about the game — you still see adverts, they are simply generic. You can change your mind any time in Settings → Privacy & Security → Tracking.
In regions where it applies, a consent form from Google's User Messaging Platform appears before the first advert.
Google's own handling of ad data is described at policies.google.com/technologies/partner-sites.
The game is not directed at children under 13 and collects nothing that could identify one.
Because the only thing we ever hold is a handle and a score you chose to publish, removal is simple: leave the leaderboard in-app, or write to the address below and we will delete the row.