Privacy Policy

Sum Rush is a maths game made for children, so it collects as little as it can. There is no account, no sign-in, no email address and no typing of names. It has no ads, no analytics, no crash reporting, no tracking and no in-app purchases. The one thing that goes online is the live leagues: a made-up player name, scores and an anonymous player number. Grown-ups can switch the leagues off in Settings, and then the game sends nothing at all.

This policy applies to Sum Rush on iPhone and Android, from version 1.0.0.

What stays on the device

Most of what the game remembers never leaves the phone or tablet. It is kept in the app's own private storage, and we cannot see it:

• Progress: coins, XP, rank, the levels unlocked in each topic, badges, trophies, daily challenge results and personal bests
• The player's creature and the shop items it owns and wears
• The maths coach's notes: which questions were answered, whether they were right and how long they took, so it can find the tricky ones and suggest practice. These notes stay on the device and are never sent anywhere.
• Settings: sound, vibration, keypad layout and the Online leagues switch
• The league sign-in described below, and a copy of the More Games list

Deleting the app deletes all of this. Settings → Start over deletes it too, and gives the player a new anonymous number. The device's own backup (iCloud, Google or a computer) may include the app's files along with everything else it backs up; that is between the device and its Apple or Google account, and we never see it.

The live leagues

Sum Rush has weekly league rooms of 20 players and world leaderboards. They run on Google Firebase (Cloud Firestore and Firebase Anonymous Authentication), under the Bendigo Games account. After a race, the game sends:

• A made-up name. The game invents it (two words and sometimes a number, like “SpeedyOtter42”), and the player can only roll a new one with the dice. Nobody can type a name, so a real name can never reach the boards.
• Scores. Total XP, the number of races played, the best single race, and this week's XP and races.
• A replay of a top race. When a race would make the Top Races board, the game also sends the race's settings (topic, level, times table and mode), how many answers were right and wrong, and the answers typed with their timings, so the score can be checked rather than taken on trust. It describes the race and nothing outside it. These are deleted after 90 days.
• An anonymous player number. A random identifier created by Firebase Anonymous Authentication the first time the game goes online. It keeps one player's scores together and puts them in a league room. It is not linked to any person, email, phone number or account, because there is none.

Other players see the made-up name and the scores. Each week the league server works out who moves up or down a division and writes that back to the player's record. The player number is used only to run the leagues: never for advertising, profiling or contacting anyone.

The leagues are on by default. Switching off Settings → Online leagues stops every network request the leagues make, including the sign-in. The game then shows a practice league of computer players instead.

More Games

Behind the grown-up check in Settings there is a list of our other games. To show it, the game downloads the list and the games' icons from our website (bendigogames.com). The request sends nothing from the game: no name, no score, no number. Tapping a game opens its page in the App Store, which is Apple's, not ours.

The connection itself

Whenever the game talks to Firebase or to our website, those servers see the device's IP address, as any server sees the address of anything that connects to it. We do not store it or use it to identify anyone. Google processes league data as our service provider, on servers that may be outside your country, under Firebase's data processing terms. Our website is hosted by Cloudflare.

Links out of the game

The only links out of the game are in Settings → For grown-ups (this policy, support and More Games), and each one sits behind a grown-up check. They open the device's browser or the App Store, which have their own privacy policies.

What we never do

• No account, email, phone number, real name, address, photos, contacts or files
• No location, camera or microphone, and no permission prompts of any kind
• No advertising, no advertising identifier (IDFA or Android advertising id), no tracking across apps or websites
• No analytics, session recording, crash reporting or telemetry of any kind
• No chat or messages between players
• No purchases: the game is free, with nothing to buy
• Nothing sold, rented or shared with anyone for marketing

Children

Sum Rush is made for children. We do not knowingly collect personal information from anyone. The made-up name cannot identify a child, and the anonymous player number is used only to run the leagues (the internal operation of the game), as the US Children's Online Privacy Protection Act (COPPA) allows. A parent can switch the leagues off at any time, and can ask us to delete a player's league record (see below).

Your rights, and deleting league data

Everything on the device is yours to delete: remove the app, or use Start over. For the league record, email support@bendigogames.com with the player's made-up name as it appears on the Me screen, and we will delete that player's record and races from the leagues. The same address handles any request under the GDPR, the UK GDPR, the Australian Privacy Act or the CCPA. We keep a league record for as long as the leagues run, unless you ask us to delete it.

Changes

If the game ever starts collecting anything new, this page will say so before the version that does it is released, and the date below will change.

Contact

Bendigo Games, Bendigo, Victoria, Australia · support@bendigogames.com

Last updated: 14 November 2026