NOVA: Find Your Flow

Privacy Policy

Effective Date: October 30, 2026  ·  Last Updated: October 30, 2026

This Privacy Policy explains what information NOVA uses when you play, sign in, appear on Leaderboards, make purchases, or see ads, and the choices you have, including how to turn off personalized ads.

1.Who We Are

NOVA is operated by Charles Boswell, a sole proprietor based in Texas (“we,” “us,” or the “Developer”). NOVA is a MiClikz project.

This Privacy Policy explains what information the NOVA: Find Your Flow mobile application (the “App”) collects and uses when you play, sign in to the optional cloud account, appear on Leaderboards, use crew invites or score challenges, make purchases, or see ads, and the choices and rights you have. It should be read together with the NOVA Terms of Use.

Feature availability. Some features described here, such as purchases, subscriptions, advertising, leaderboards, the season pass, and crew invites, may not be available in every version of the App or in every region. Where a feature is not yet available in the version you use, the parts of this document about that feature do not apply to you until it is.

2.Definitions

  • “Personal Information” means information that identifies, relates to, or could reasonably be linked with an identified or identifiable individual or device.
  • “Service Provider” means a third party that processes Personal Information on our behalf and under our instructions.
  • “Cloud Account” means the optional NOVA account you create or access with Sign in with Apple or by verifying a one-time code sent to your email address.
  • “Display Name” means the name you choose to show with your scores on Leaderboards.
  • “Stardust” means the in-game currency earned through gameplay, rewards, or purchase.

3.Playing Without an Account

Offline and signed-out play. You can play NOVA without an account. Your scores, Stardust, items, levels, badges, and statistics are then stored only on your device and are not sent to us. If ads are enabled and your device is online, Google AdMob may still collect the advertising and device data described below, even when you are not signed in.

Optional cloud account. Before you sign in, the App explains what will be sent to our cloud services. If you sign in, we collect the information described in the next section. When you sign in, the App shows your cloud totals in place of the local-only totals on that device; local-only scores recorded before sign-in are not uploaded or imported.

4.Information We Collect

The categories of Personal Information collected through the App, their sources, and the purposes are:

CategoryExamplesSourcePurpose
Email addressThe email address you enter for a sign-in code, or the email Apple shares with Sign in with Apple (which may be an Apple private relay address)You or AppleSend sign-in codes; create, identify, and authenticate your Cloud Account; respond to account requests
NameThe name Apple shares the first time you use Sign in with Apple, if you choose to share itApple, with your permissionShow who is signed in; suggest a Display Name
Account and authentication dataAccount identifier (UUID), sign-in method, authentication and refresh tokens, account creation and sign-in timestampsSupabase Auth, Apple, and the AppCreate and maintain your signed-in session; secure your Cloud Account
Gameplay and progressRuns (mode, score, hits and misses, multiplier, power-ups and boss counts, duration, timestamp), cloud totals, Stardust balance, unlocked and equipped items, season pass and daily challenge progressThe App, while you are signed inSave and sync progress; run seasons and daily challenges; check scores for cheating
Leaderboard dataYour Display Name, best scores per board and period, rank, and any score reportsYou and the AppShow public Leaderboards; filter names; review reported or suspicious scores
Challenge and invite recordsChallenge codes and target scores; your Invite Code, who invited whom, and reward statusYou and the AppRun Challenge Codes and crew invites; grant rewards once; prevent abuse
Purchase recordsStore name, transaction and original transaction IDs, product, purchase and expiry dates, renewal, refund, and cancellation status, and what you currently own. We do not receive card or payment details.Apple (or Google) and the AppVerify purchases with the App Platform; grant, restore, and sync items and Subscriptions; handle refunds; keep required records
Ad reward recordsVerified rewarded-ad completion records, including a transaction ID and the reward grantedGoogle AdMobGrant rewards only for completed ads; prevent fake rewards
Advertising and device data (collected by Google AdMob)Device advertising identifier (IDFA) only if you allow tracking; other device identifiers; IP address and approximate location derived from it; device and app information; ad interactions; diagnostic and crash data related to adsGoogle AdMob, automatically, through its software in the AppShow and measure ads, limit ad frequency, prevent ad fraud, and, if you consent, personalize ads
Consent choicesYour ad consent and tracking choicesYou, through Google’s consent form and Apple’s tracking promptRespect your choices about personalized ads and tracking
Network and service logsIP address, request and device metadata, timestamps, and error information recorded by our providersOur Service Providers, automaticallyDeliver, secure, and troubleshoot the Services; send and track delivery of sign-in emails
Support communicationsYour email address and the contents of messages you send usYouRespond to support, privacy, and deletion requests

Sign in with Apple. If you use Sign in with Apple, Apple shares a unique identifier and an email address with us, and your name only on your first sign-in if you choose to share it. You can choose to hide your email, in which case Apple gives us a private relay address that forwards to you.

Sign-in emails. Email sign-in codes are sent from nova.miclikz.com through our email Service Provider. We use your email address only for sign-in and account-related messages. We do not send marketing emails or newsletters, do not use email open tracking, and do not import contact lists.

5.Advertising, Tracking, and Your Ad Choices

If you do not have NOVA Plus or Remove Ads, the App shows ads from Google AdMob: banner ads on menu screens and optional rewarded ads you choose to watch. If you have NOVA Plus or Remove Ads, the App does not request ads.

Consent and tracking prompts. Before ads are personalized, the App shows Google’s consent message where required, including choices under U.S. state privacy laws, and then Apple’s App Tracking Transparency prompt. If you choose “Ask App Not to Track,” the App does not access your device’s advertising identifier, and you will still see ads, but they will not be personalized based on tracking. You can change your tracking choice at any time in iOS Settings, and your ad consent choices through the privacy choices option in the App’s settings.

What Google collects. Google AdMob’s software in the App collects the advertising and device data described above, and Google processes it under its own policies, including the Google Privacy Policy. See also How Google uses information from sites or apps that use its services. If you allow tracking, this data may be linked with data from other companies’ apps and websites to personalize ads.

Ad content. We set AdMob’s content filters to suit the App’s age rating.

No third-party analytics. We do not add analytics or attribution software to the App. We do review the gameplay data the App already saves to our database, such as sign-ups, rounds played, modes, scores, return visits, shares, invites, and Stardust, mostly as totals and trends, to understand how the App is used, balance the game, and improve it. Ad networks may collect usage and diagnostic data as described above. Google Analytics runs only on the miclikz.com web pages, which are covered by the MiClikz Website Privacy Policy, not by this Privacy Policy.

What the App does not collect. The App does not collect your precise location, contacts, photos or media, camera, or microphone, and does not offer chat, public feeds, or photo uploads.

6.Purchases

Purchases and Subscriptions are processed by Apple (or Google, for any Android version). We never receive your card or payment details. When you buy something, the App sends the signed transaction to our server, which checks it with Apple’s App Store Server API before granting the item. Apple also sends our server notices about renewals, refunds, and cancellations so your benefits stay accurate. Apple’s handling of your payment information is covered by Apple’s own privacy policy.

7.How We Use Information

We use Personal Information for the following purposes:

  • to send sign-in codes, verify your identity, and maintain your signed-in session;
  • to save, total, and sync your runs, progress, items, and Subscriptions across your signed-in devices;
  • to run Leaderboards, daily challenges, seasons, Challenge Codes, and crew invites, and to grant rewards;
  • to verify purchases and rewarded ads, restore purchases, and handle refunds;
  • to show ads to players without NOVA Plus or Remove Ads, and, with consent, personalized ads;
  • to understand how the App is used, mostly as totals and trends, and to balance and improve the game;
  • to send occasional in-game gifts, such as Stardust, to specific players;
  • to detect cheating, fraud, and abuse, and to review reported or suspicious scores;
  • to carry out reset and deletion requests;
  • to maintain the security, integrity, and basic operation of the App and Services;
  • to respond to your support, privacy, and deletion requests; and
  • to comply with legal obligations, including tax and accounting records, and enforce our NOVA Terms of Use.

Where the law of your jurisdiction requires a legal basis for processing, we rely on the performance of our contract with you (providing the App, purchases, and your Cloud Account), our legitimate interests in operating, securing, and funding the App, compliance with legal obligations, and your consent where it is requested, such as for personalized ads.

8.Leaderboards and Other Things Others Can See

Leaderboards. If you take part in Leaderboards, your Display Name and your scores, ranks, and the board and period they were set in are visible to other players. We never show your email address. Choose a Display Name that does not reveal your real name or contact details if you prefer not to.

Challenge Codes and invites. You can share scores, Challenge Codes, and Invite Codes using your device’s share sheet. You choose the destination; the App does not read your contacts or see who receives your message. Any signed-in player who has a Challenge Code can view its target score until it expires, seven (7) days after creation. When someone uses your Invite Code, we record the link between the two accounts so rewards can be granted once.

9.Service Providers and Other Recipients

We disclose Personal Information only as described below:

  • Supabase. Supabase provides the App’s authentication, database, and server functions, and processes Cloud Account, gameplay, Leaderboard, purchase, and reward data on our behalf as a Service Provider. Our Supabase project is hosted in the United States (US West, Oregon).
  • Resend. Resend delivers sign-in emails on our behalf as a Service Provider and processes your email address, message content, and delivery records. Our sending is hosted in the United States (US East, Northern Virginia).
  • Apple. Apple provides Sign in with Apple, processes App Store purchases and Subscriptions, and sends us transaction and renewal information. Apple handles this information under its own terms and privacy policy.
  • Google AdMob. Google provides ads in the App and collects the advertising and device data described above. Google may use this data for its own purposes as described in its policies, including, if you consent, to personalize ads.
  • Other players. Your Display Name and scores are shown to other players on Leaderboards.
  • Legal and safety. We may disclose information where required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is reasonably necessary to protect the App, our users, or our rights, property, or safety.
  • Business transfers. If the App or its related assets are transferred, information may be transferred as part of that transaction, subject to this Privacy Policy.

10.Sale, Sharing, and Targeted Advertising

We do not sell your Personal Information for money. Under some U.S. state privacy laws, allowing an ad network to collect device data in the App for personalized ads can count as “selling” or “sharing” Personal Information, or as “targeted advertising.” This happens only for players who see ads, and only to the extent you allow tracking and personalized ads. You can opt out at any time by choosing “Ask App Not to Track,” turning off “Allow Apps to Request to Track” in iOS Settings, using the privacy choices option in the App’s settings, or emailing hi@miclikz.com. Getting NOVA Plus or Remove Ads also stops ads in the App.

11.Data Retention

We keep your cloud data, including your email address, name, account data, progress, items, Leaderboard entries, and challenge and invite records, for as long as your Cloud Account is active, until you reset your progress or delete your Cloud Account. We do not currently apply a fixed retention period or automatic deletion schedule to this data. Challenge Codes stop working after seven (7) days, but the underlying records may remain until you reset or delete. Hidden or reported scores may be kept to prevent repeat abuse until you delete your Cloud Account.

Purchase records are kept while needed to provide and restore what you bought and to handle refunds. If you delete your Cloud Account, we delete your purchase and entitlement records from our systems, except limited transaction records we must keep for tax, accounting, fraud-prevention, or legal reasons. Apple keeps its own records of your purchases, which is why you can still restore them with your App Store account.

Offline progress stays on your device until you reset it or remove the App, subject to your device’s behavior. Advertising data collected by Google is kept under Google’s retention practices. Network and service logs and email delivery records are kept by our Service Providers under their own retention practices. Support communications are kept as described below.

12.Reset, Deletion, and Your Choices

  • Reset progress. After you confirm in the App, we remove your run and challenge records and reset your totals. Your Cloud Account and purchases are kept.
  • Delete your Cloud Account. After you confirm in the App, a server function deletes your Cloud Account and its associated records as described above, and the App clears its pending sync queue, stored session, and displayed totals on that device. Deleting your account does not cancel an App Store Subscription; cancel it in your App Store account settings. If you cannot access the App, you may request deletion by emailing hi@miclikz.com from the email address associated with your Cloud Account.
  • Sign in with Apple. You can also stop using Sign in with Apple with NOVA in iOS Settings, under your name, then Sign in with Apple.
  • Ads and tracking. Change your tracking choice in iOS Settings and your ad consent choices in the App’s settings, as described above.
  • Display Name. You can change your Display Name in the App, or stop taking part by deleting your Cloud Account.
  • Play without an account. You can always play without signing in.

Limits of deletion. Reset and deletion do not immediately erase copies held in our Service Providers’ backups, infrastructure logs, or email delivery records, data held by Apple or Google under their own policies, messages you previously shared with others, or data cached on other devices. Other signed-in devices receive a reset the next time they sync. Residual copies are handled under our Service Providers’ retention practices.

You may also request access to or correction of your Cloud Account data by emailing hi@miclikz.com.

13.Device Storage and Backups

Sign-in credentials are stored in device-only iOS Keychain storage on iOS, and, for any Android version, are encrypted with an Android Keystore key. On iOS, Keychain credentials can behave differently from ordinary app storage when the App is removed and reinstalled.

On iOS, App preferences and offline progress may be included in device backups according to your device and iCloud settings. NOVA does not use iCloud sync or any cloud backup other than its own optional Cloud Account progress sync.

14.Security

We use measures designed to protect Personal Information, including encrypted HTTPS connections, secure on-device credential storage, database row-level security so each player can read only their own private records, owner-scoped server functions for changes, server-side checks of purchases, ad rewards, and scores, a public Leaderboard view that shows only Display Names and scores, and keeping administrative credentials out of the App. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

15.U.S. State Privacy Rights

Depending on where you live, including California and other U.S. states with comprehensive privacy laws, you may have the following rights, subject to applicable exceptions:

  • Right to know and access the categories and specific pieces of Personal Information we have collected, the sources, the purposes, and the categories of third parties to whom it is disclosed;
  • Right to delete Personal Information we have collected from you;
  • Right to correct inaccurate Personal Information;
  • Right to opt out of the sale or sharing of Personal Information and of targeted advertising, as described in the Sale, Sharing, and Targeted Advertising section;
  • Right to limit the use of sensitive Personal Information. We do not use sensitive Personal Information for purposes that would require this right; and
  • Right to non-discrimination. We will not discriminate against you for exercising any of these rights. Players who opt out still get the full game, with non-personalized ads.

California disclosures. The App collects the following categories of Personal Information, as described in this policy: identifiers (such as email address, name, account identifier, device and advertising identifiers, and IP address); commercial information (purchase records); internet or other electronic network activity information (gameplay, Leaderboard, and ad interaction data, and service logs); and approximate geolocation derived from IP address by our ad provider. We use them for the purposes described in the How We Use Information section and disclose them to the recipients described in the Service Providers and Other Recipients section. Identifiers and network activity information may be “shared” with Google for cross-context behavioral advertising only where you allow personalized ads. We do not knowingly sell or share the Personal Information of consumers under 16 years of age.

To exercise these rights, email hi@miclikz.com. We will verify your request using information associated with your Cloud Account and respond within the time required by law. You may use an authorized agent where permitted by law, and we may require proof of authorization. If we deny your request, you may appeal by replying to our decision, and we will respond to the appeal as required by law.

16.Children’s Privacy

The App is intended for people aged 13 and older and is not directed to children under 13. We do not knowingly collect Personal Information from children under 13, and children under 13 should not use the App’s cloud, Leaderboard, or purchase features. A parent or guardian who believes a child under 13 has provided Personal Information may contact us at hi@miclikz.com to request review or deletion, and we will take appropriate steps to delete it.

17.Data Location and Availability

We are based in the United States, and the App is currently made available in the United States. The information described in this Privacy Policy is processed and stored in the United States by us and our Service Providers, and by Apple and Google under their own policies. If the App becomes available in other countries or regions, we may update this Privacy Policy with additional information for those regions. If you use the App from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

18.Support Communications

If you email us at hi@miclikz.com, we receive your email address and the contents of your message, along with any information you choose to include. We use this information only to respond to you, handle your request, and keep a record of our correspondence. We keep support communications for as long as needed to respond and for our records, including to document privacy and deletion requests.

19.Do Not Track and Global Privacy Control

The App is a mobile app and does not receive browser “Do Not Track” or Global Privacy Control signals. Use Apple’s tracking setting and the App’s privacy choices described above instead; we honor those choices.

20.Changes to This Privacy Policy

We may update this Privacy Policy as the App changes. We will post the updated version at this location and update the “Last Updated” date above, which shows when the current version took effect. If we make material changes, we will provide notice as required by law, such as in the App.

21.Contact

For privacy questions, requests, or complaints, contact the Developer at hi@miclikz.com.