Privacy Policy
Effective date: October 24, 2026 · Last Updated: November 3, 2026
This Privacy Policy explains how 1LightYear Labs("we", "us", "our") collects, uses, shares and protects information when you use VI6(the "App"), our unofficial companion app for Grand Theft Auto VI, on iPhone, iPad and Android devices. It also explains the choices and rights you have.
VI6 is an independent fan-made app. It is not made, endorsed or approved by Rockstar Games, Inc. or Take-Two Interactive Software, Inc.
If you have any question about this policy or your data, contact us at [email protected] (see Section 17).
1. Summary
- No sign-up, no email, no password. The App gives each installation a random, anonymous account ID. We never ask for your real name, email address or phone number.
- We do not access your device's location (GPS), contacts, microphone or files. The "locations" in the App are positions on the fictional map of the game, not places in the real world.
- Ads and analytics wait for your choice. Where the law requires consent (for example the EEA, the UK and Switzerland), ads are not personalised and analytics stays off unless you agree. On iPhone and iPad, we only use your device's advertising identifier if you allow tracking.
- Pro subscribers see no ads. Payments are handled by Apple or Google. We never see your card or bank details.
- Photos are only sent when you choose to attach one to a spawn location you submit.
- We do not sell your personal information for money. In some US states, using data for personalised ads can count as "selling" or "sharing"; you can opt out (see Section 8).
- You can ask us to delete your data at any time (see Section 14).
2. Who is responsible for your data
The App is operated by:
1LightYear Labs, a trading name of Chaitanya Sharad Mogal (sole proprietor)
Nashik, India
Email: [email protected]
For the purposes of the EU and UK General Data Protection Regulation ("GDPR"), India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and similar laws, we are the controller (or "data fiduciary") of the personal data described in this policy, except where a third-party provider acts as an independent controller of data it collects through its own software (see Section 11).
3. No sign-in: how your account works
The App has no sign-in screen. The first time you open it, our authentication provider (Google Firebase Authentication) silently creates an anonymous account for that installation and gives it a random account ID. That ID is what connects your installation to anything stored on our servers, such as spawn locations you submit or, for Pro subscribers, your backed-up pins.
- The first 8 characters of your account ID are shown in the App under Profile → Settings → Account. You will need them if you ask us to access or delete your data.
- Because the account is anonymous, deleting the App or moving to a new phone creates a new account. Pro subscribers can use Restore purchases to carry their subscription, pins and saved locations across to the new account. To do this, we ask our subscription provider (RevenueCat) which earlier account bought the subscription, and we move that account's data to the new one. We keep a record of the earlier account IDs so a transfer can be checked or undone.
- If two people share one Apple ID or Google account, a restore on one person's device can move the other person's pins to it. Please avoid sharing a store account if this matters to you.
4. Information we collect
4.1 Information you give us
| Information | When it is collected | Where it is kept | Why |
|---|---|---|---|
| Display name (a nickname of up to 60 characters) | Only if you set one under Profile | Our servers | To show it back to you in the App. It is not shown to other users. |
| Game preferences - the console you play on, the edition you own, which character you are playing as, story progress (for spoiler hiding), and display settings such as haptics and reduced motion | When you choose them | On your device; edition owned and story progress may also be stored with your account on our servers | To show the right cheat buttons, item availability and spoilers |
| Map pins - a label, an optional note (up to 500 characters), an icon, a colour and a position on the game map | When you drop a pin | On your device. Pro: also backed up on our servers | To show your pins; for Pro, to back them up and restore them |
| Saved items, saved spawn locations and "My Collection" (items you have ticked off) | When you save or tick something | On your device. Some saved locations and, for Pro, your collection are also stored on our servers | To show your lists, apply the free-plan limits and back them up for Pro |
| Spawn location submissions - the item, its position on the game map, the spawn type, the in-game region, your notes, an optional photo, and the name of a new item if you propose one | When you tap Add a find and submit | Our servers | So we can review it and, if approved, add it to the community map |
| Photos you choose to attach to a submission | Only when you pick or take one | Our cloud storage | To help us check the submission and, if approved, illustrate it |
| Feature requests - a title, description, category and, only if you choose to add one, your email address | When you send one | Our servers | To consider your idea and, if you left an email address, to reply to you about it |
| Content reports - the item, a reason and an optional note | When you report a catalog entry | Our servers | To correct mistakes |
| Emails you send us - your email address, name (if your email shows one), whatever you write, and the App version and operating system version that the App adds to the end of the message (you can delete them before sending) | When you tap Contact us or Email on the Request a Feature screen, or email us | Our email provider | To reply and to help you |
Please do not include personal information (yours or anyone else's) in pin labels, notes, submissions, feature requests or reports - apart from the optional email field on a feature request, which is there for exactly that.
4.2 Information collected automatically
| Information | Collected by | Why |
|---|---|---|
| Account ID (anonymous, random) | Us, through Firebase Authentication | To run your account, keep your data together, apply the free-plan limits and prevent abuse |
| App installation ID (Firebase Installation ID) | Google Firebase | To fetch remote settings, such as whether an old version must be updated |
| Analytics app-instance ID and usage events - the screens you view, how far you get through the welcome tour, items and spawn locations you open, searches you make inside the App (the search words, cut to 100 characters), cheat codes you copy, items you share, rewarded ads you watch to the end, when you reach a free-plan limit, when you open the Pro screen and how a purchase ended, plus your console, edition and whether you are a Pro subscriber. Google Analytics also records some events on its own, such as the first time you open the App, app sessions, app and system updates, and in-app purchases (the product, price and currency) | Google Analytics for Firebase - only with consent where consent is required (see Section 9) | To understand which features are used and to improve the App |
| Advertising identifier - Apple's IDFA (only if you allow tracking) or Google's Android Advertising ID - and ad-interaction data (ads shown, ads watched to the end, rewards earned) | Google AdMob and its mediation partner Meta Audience Network (see Section 8); the advertising identifier is also read by Google Analytics for Firebase once Analytics is on (see Section 9) | To show the rewarded ads that unlock item details, measure them and prevent ad fraud; in Analytics, to count devices and measure the App |
| Approximate location - country, region or city, derived from your IP address, never from GPS | Google AdMob, Meta Audience Network, Google's consent tool and, once it is on, Google Analytics for Firebase | To decide which privacy rules apply to you, to show ads suited to your country or region, to prevent fraud, and to see roughly where the App is used |
| Consent choices - your answers on the consent form and the tracking prompt | Google's User Messaging Platform; stored on your device | To respect your choices |
| Subscription status - which plan you have, when it started, renews or expires, whether it is a trial or in a billing retry, the store it was bought in, and store transaction IDs | Apple or Google, passed to RevenueCat, then to us | To unlock Pro and restore it |
| Device and connection data - IP address, device model, operating system and version, app version, language, time zone, and network request data | Our servers, Cloudflare, Google Firebase, AdMob, Meta Audience Network and RevenueCat, as part of normal internet traffic | To deliver content, keep the service secure, limit abuse (for example rate limiting), and debug problems |
| Crash reports - when the App crashes or hits an error it cannot recover from: what went wrong and where in the App's code, the App version, device model, operating system version, free memory and disk space, whether the App was in the foreground, and a random installation identifier. Crash reports do not include your account ID | Google Firebase Crashlytics | To find and fix crashes and errors |
| Photo metadata | Contained in a photo you choose to send | See the note below |
Note on photo metadata. Photos can carry hidden information ("EXIF metadata") such as the date, the camera model and - if your camera is set to record it - the GPS location where the photo was taken. On iPhone and iPad, the App re-saves the photo before uploading it, which removes this information. On Android, some of it, including any GPS location, can remain in the uploaded file. We do not read or use photo metadata. For your privacy, we recommend attaching in-game screenshots rather than camera photos, or turning off location tagging in your camera settings.
4.3 Information stored only on your device
The App keeps the following in its own storage on your device and does not send it to us unless described above: your preferences, pins (free plan), saved items, ad unlocks (each lasts 12 hours), a cache of the game catalog, and a copy of the game map for offline use. When you share an item, the share image is created on your device and sent through your device's own share sheet; we do not see who you share it with.
5. Information we do not collect
The App does not:
- ask for or collect your real name, email address, phone number, postal address, date of birth or government ID;
- access your device's precise or approximate location (GPS or location services);
- access your contacts, calendar, microphone, messages, call logs, health or fitness data, or browsing history;
- scan, browse or upload your photo library - it only receives the single photo you pick;
- read your clipboard (it only writes to it when you tap Copy);
- collect payment card or bank details;
- collect sensitive personal data such as racial or ethnic origin, religious beliefs, health, sexual orientation or biometric data; or
- collect the Android Settings ID (SSAID) through Google Analytics - we have switched that off.
6. Device permissions
The App asks for a permission only at the moment it is needed, and every permission is optional. If you refuse, the rest of the App keeps working.
| Permission | Platform | Used for | If you refuse |
|---|---|---|---|
| Photos - none needed | iOS, Android | Attaching a screenshot to a spawn location you submit. The App uses your device's own photo picker, which shows your library outside the App and hands over only the photo you choose, so the App does not ask for access to your photo library | - |
| Camera | iOS, Android | Taking a photo of a spot to attach to a submission | You can still attach a saved screenshot, or none |
| Tracking (App Tracking Transparency) | iOS, iPadOS | Letting ad partners use your device's advertising identifier to show more relevant ads | You still see ads and can still unlock everything; the ads are just less relevant |
| Advertising ID (AD_ID) | Android | Used by Google AdMob and Meta Audience Network for ads, measurement and fraud prevention | You can delete or reset it in your Android settings (see Section 8) |
| Internet, vibration | Android | Loading content; haptic feedback (which you can turn off in Settings) | - |
The App does not request microphone access.
7. How we use information
We use information to:
- 1Provide the App - show the map, catalog, cheats and your own pins and lists; unlock item details after a rewarded ad; download and store the map for offline use.
- 2Run Pro - confirm your subscription, remove ads, unlock Pro features, back up your pins and lists, and restore them on a new device.
- 3Run the community map - review your submissions, publish approved spawn locations, and act on reports and feature requests.
- 4Show ads to free users and measure them (see Section 8).
- 5Understand and improve the App through analytics, where permitted (see Section 9).
- 6Keep the App safe - detect and prevent fraud, spam, abuse, invalid ad traffic and attacks; apply rate limits; enforce our Terms of Service.
- 7Keep the App working - find and fix crashes and errors from crash reports, and require an update when an old version can no longer work correctly.
- 8Communicate with you - reply to your emails.
- 9Meet legal obligations - for example tax and accounting records, responding to lawful requests, and handling copyright notices.
We do not use your information for automated decisions that have legal or similarly significant effects on you.
Legal bases (EEA, UK and Switzerland)
| Purpose | Legal basis under the GDPR |
|---|---|
| Providing the App, Pro, backups, restores and your submissions (1–3, 7, 8) | Performance of our contract with you (Art. 6(1)(b)) |
| Personalised ads, the advertising identifier, and storing or reading information on your device for ads | Your consent (Art. 6(1)(a)), collected through Google's consent form |
| Non-personalised ads to free users | Our legitimate interest in funding a free app (Art. 6(1)(f)), together with your consent to device storage where the law requires it |
| Analytics | Your consent (Art. 6(1)(a)) |
| Security, fraud and abuse prevention (6) | Our legitimate interests in protecting the App and its users (Art. 6(1)(f)) |
| Crash reports (7) | Our legitimate interest in keeping the App working (Art. 6(1)(f)). Crash reports are not used for advertising or analytics and carry no account ID |
| Legal obligations (9) | Compliance with a legal obligation (Art. 6(1)(c)) |
You can withdraw consent at any time (see Section 14). Withdrawing consent does not affect processing that took place before.
8. Advertising
Free users can unlock an item's full details by watching a rewarded video ad. Pro subscribers are not shown ads, and the App does not request ads for them.
- Who shows the ads. Ads are served by Google AdMob. AdMob runs an auction in which Meta Audience Network (Meta Platforms) may also bid to fill the ad. These companies receive your advertising identifier (if available), your IP address, device information and ad-interaction data directly from their software in the App, and use it under their own privacy policies.
- Information stored on your device. To serve and measure ads, these third parties may store and read information on your device - such as identifiers and settings kept by their software, which work like cookies on a website - and may use your device's advertising identifier. Where the law requires it, they do this only with your consent (see below). Their privacy policies: Google: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites; Meta Audience Network: https://www.facebook.com/privacy/policy and https://www.facebook.com/ads/about
- Consent. In the EEA, the UK, Switzerland and other places where the law requires it, a consent form from Google's User Messaging Platform appears after the welcome tour, before any ad is requested. You choose whether ads may be personalised and whether information may be stored on your device. In US states with privacy laws that require it, the same tool lets you opt out of the "sale" or "sharing" of personal information for targeted advertising.
- iPhone and iPad tracking. If you have not refused device storage on the consent form, iOS asks whether you allow the App to track you. Your answer only changes how relevant the ads are; it does not change what you can unlock. You can change it at any time in iOS Settings → Privacy & Security → Tracking.
- Android. You can delete or reset your advertising ID in Settings → Privacy → Ads (or Settings → Google → Ads, depending on your device).
- Limited Data Use. We turn on Meta's "Limited Data Use" option, so Meta applies the restrictions required by US state privacy laws to users in those states.
- If you use Facebook or Instagram. Meta may recognise that you use its products and use information it already holds about you to choose the ads it shows you in the App. You can control this in Meta's ad preferences: https://www.facebook.com/adpreferences.
- Google's ad controls. You can see and change how Google personalises ads for you at https://myadcenter.google.com.
- Ad fraud. AdMob and Meta use device and interaction data to detect invalid traffic. Deliberately generating false ad views or clicks breaks our Terms of Service.
We do not choose or control the content of individual ads. If you see an ad you think is inappropriate, please tell us at [email protected].
9. Analytics
We use Google Analytics for Firebase to understand how the App is used. Collection is switched off when the App is installed and turns on only as follows:
| Where you are | Analytics |
|---|---|
| Where no consent is required | On after the consent check |
| EEA, UK, Switzerland: you accepted device storage and measurement on the consent form | On |
| EEA, UK, Switzerland: you refused, or turned those purposes off | Off |
| EEA, UK, Switzerland: you are a Pro subscriber (and so never see the ads consent form) | Off |
| Before you have answered | Waiting - events are held on your device and discarded if you refuse |
What we record is listed in Section 4.2. Once Analytics is on, it also reads your device's advertising identifier (on iPhone and iPad only if you allow tracking), and Google uses your IP address to work out your approximate location. Analytics data is linked to a separate app-instance ID - we do not send your account ID to Analytics. We do not send your display name, pin labels or notes, feature requests, coordinates, or anything else you type to Analytics - the only exception is search words typed into the App's search boxes, which are searches for game content. Google's policy on how it uses data from apps that use its services: https://policies.google.com/technologies/partner-sites.
10. Subscriptions and payments
VI6 Pro is sold as an auto-renewing subscription through the Apple App Store or Google Play. Your payment is processed entirely by Apple or Google under their terms and privacy policies; we never receive your card or bank details, billing address, or store account email.
We use RevenueCat (RevenueCat, Inc.) to manage subscriptions. RevenueCat receives your anonymous account ID, store purchase receipts and transaction IDs, the products you bought, purchase and renewal dates, your country or storefront, device and app information, and IP address, and tells our servers whether you are entitled to Pro. RevenueCat's privacy policy: https://www.revenuecat.com/privacy.
12. Content you submit, and what becomes public
- Spawn location submissions are reviewed by us before anything is published. If we approve a submission, its position, details, notes and photo may appear on the community map for all users, and may be edited by us. Your account ID and display name are never shown with it.
- Feature requests, reports, display names, pins, saved items and your collection are private. Only you (in the App) and we (in our admin tools) can see them.
- Anything you share using the App's Share buttons goes to whoever you choose, through your device's share sheet.
13. How long we keep information
We keep personal information only for as long as we need it for the purposes in this policy, then delete or anonymise it.
| Information | How long we keep it |
|---|---|
| Your account and the data stored with it (profile, pins, saved locations, collection) | While your account is in use. If you ask us to delete it, we delete it within 30 days. An account with no active subscription that has not been used for 24 months may be deleted. |
| Photos that are not used (never submitted, rejected or not reviewed) | Deleted automatically about 30 days after upload |
| Approved submissions and their photos | For as long as they are part of the community map. If you ask us to delete your data, we delete or permanently separate them from your account ID. |
| Pending or rejected submissions, feature requests and reports | Until reviewed and for up to 24 months afterwards, unless you ask us to delete them sooner |
| Records of past account transfers (for Restore purchases) | While the subscription they relate to exists, and up to 24 months afterwards |
| Subscription records | While your subscription is active, and afterwards for as long as tax, accounting or legal rules require |
| Analytics data | No longer than the retention period we set in Google Analytics, which is at most 14 months |
| Crash reports | 90 days (Firebase Crashlytics' retention period) |
| Security and rate-limiting data (such as IP addresses) | Held briefly in memory; our providers keep network logs under their own policies |
| Our server logs (account IDs, error and billing-event messages) | Up to 30 days |
| Emails with us | Up to 24 months after the conversation ends |
| Data on your device | Until you delete it in the App, clear the App's data, or uninstall the App |
| Data held by Google, Meta, RevenueCat, Cloudflare, Apple | According to their own retention policies |
We may keep information for longer where the law requires it, or to establish, exercise or defend legal claims.
14. Your choices, and how to delete your data
In the App
- Ad and analytics consent: Profile → Settings → Ad privacy choices (shown wherever the consent form applies) lets you change or withdraw your choices at any time. Withdrawing consent switches analytics off straight away.
- Tracking (iOS): iOS Settings → Privacy & Security → Tracking.
- Advertising ID (Android): Settings → Privacy → Ads, or Settings → Google → Ads.
- Photos and camera: you can withdraw access in your device's settings at any time.
- Your content: delete individual pins, saved items and collection entries in the App; Settings → Clear everything saved clears your saved list.
- No ads at all: subscribe to Pro.
- Stop all collection: uninstall the App. This deletes everything stored on your device but does not delete data stored on our servers - see below.
Deleting your account and data
Because there is no sign-in, we cannot verify you by email or password. To ask us to delete the data linked to your account:
- 1Open the App and go to Profile → Settings → Account, and note the account code shown (for example "Account 1a2b3c4d").
- 2Email [email protected] with the subject "Delete my VI6 data" and include that code. If you are a Pro subscriber, also include a store receipt or order ID for your subscription - this helps us find data left by earlier installations.
- 3We confirm and complete the deletion within 30 days, and tell you when it is done.
We will delete your anonymous account, your display name, game preferences stored with your account, backed-up pins, saved locations and collection, and your feature requests, reports and pending submissions, and we will delete or permanently separate approved submissions from your account ID. We may keep limited information where the law requires it (for example subscription and tax records). If you have already uninstalled the App, email us anyway with any details you have (such as a store receipt) and we will do our best to find your data.
Deleting your data does not cancel a subscription. Cancel it in your Apple or Google account settings (see our Terms of Service).
15. Your rights by region
Depending on where you live, you may have the right to:
- access the personal information we hold about you and receive a copy;
- correct inaccurate information;
- delete your information;
- object to or restrict certain processing, including processing based on legitimate interests;
- data portability - receive your information in a commonly used, machine-readable format;
- withdraw consent at any time;
- opt out of the "sale" or "sharing" of personal information, and of targeted advertising; and
- complain to a data protection authority.
To use any of these rights, email [email protected] with your account code (see Section 14). We will reply within the time the law requires - usually within 30 days (45 days in US states with such laws). We will not treat you differently for using your rights. If we cannot verify that the data is yours, we may ask for more information or be unable to act on the request.
EEA, UK and Switzerland
You have all the GDPR rights above. You can complain to your local data protection authority - in the EU: https://edpb.europa.eu/about-edpb/about-edpb/members_en; in the UK: the Information Commissioner's Office, https://ico.org.uk; in Switzerland: the FDPIC, https://www.edoeb.admin.ch.
United States (California and other states with privacy laws)
This section applies to residents of California and other US states with consumer privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia).
In the last 12 months we have collected the following categories of personal information:
| Category (California law) | Examples | Disclosed for a business purpose to | "Sold" or "shared" for targeted ads? |
|---|---|---|---|
| Identifiers | Account ID, installation ID, advertising ID, IP address | Service providers in Section 11 | Advertising ID, IP address and device data may be made available to Google and Meta for personalised ads, unless you opt out |
| Commercial information | Subscription plan and history | RevenueCat, Apple, Google | No |
| Internet or other electronic network activity | App usage events, in-app searches, ad interactions | Google, Meta | Ad interactions - as above |
| Approximate geolocation | Country or region derived from IP address | Google, Meta | As above |
| Audio, electronic, visual or similar information | Photos you choose to submit | Cloudflare | No |
| Inferences | Ad-interest inferences made by ad partners | Google, Meta | As above |
We do not collect sensitive personal information as defined by California law. Sources: you, your device, and our service providers and partners. Purposes: those in Section 7. Retention: Section 13.
Opting out of sale, sharing and targeted advertising: use Profile → Settings → Ad privacy choices in the App (shown in states where it applies), turn off tracking on iOS, delete your advertising ID on Android, or email us. You may use an authorised agent to make a request; we may ask for proof of their authority. If we deny a request, you may appeal by replying to our decision; if we deny your appeal, you may contact your state Attorney General.
We do not knowingly sell or share the personal information of consumers under 16.
India
Under the DPDP Act you may access, correct, complete, update and erase your personal data, withdraw consent, nominate another person to exercise your rights, and seek redress for grievances. Grievance contact: [email protected]. If your grievance is not resolved, you may complain to the Data Protection Board of India.
Brazil, Canada, Australia and elsewhere
You may have similar rights under laws such as Brazil's LGPD, Canada's PIPEDA and Australia's Privacy Act. Email us and we will respond as your local law requires.
16. Children, security, transfers and changes
Children
The App is about a video game rated for mature audiences and is intended only for people aged 16 and over - 18 and over in India, or older where the age rating your app store shows for the App is higher (see our Terms of Service). It is not directed at children. We do not knowingly collect personal information from anyone under 16 (or under 18 in India). If you believe someone below these ages has given us personal information, email [email protected] and we will delete it.
Security
We protect information with measures that include encrypted connections (HTTPS/TLS) for all traffic, signed access tokens on every request to our servers, strict server-side access rules, limited administrator access, keeping payment processing with Apple and Google, and checks on uploaded files. No system is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you and the authorities where the law requires.
International transfers
We and our providers process information in the United States, the European Union and other countries, which may have different data protection laws from yours. Where the GDPR or similar laws apply, we rely on safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU-US Data Privacy Framework (where the provider is certified) or adequacy decisions.
Links to other sites
The App links to other websites, such as official Rockstar Games pages and the sources behind catalog entries. Their own privacy policies apply, and we are not responsible for them.
Changes to this policy
We may update this policy, for example when the App or the law changes. We will change the "Last updated" date above and, for significant changes, tell you in the App or the store listing before they take effect. Where the law requires your consent to a change, we will ask for it.
17. Contact us
1LightYear Labs, a trading name of Chaitanya Sharad Mogal (sole proprietor)
Nashik, India
Email: [email protected] or [email protected]
Please include your account code (from Profile → Settings → Account) in any privacy request. We aim to reply within 7 days, and always within the time limit set by law.
App: VI6
Developer: 1LightYear Labs
Legal entity: Chaitanya Sharad Mogal, sole proprietor trading as 1LightYear Labs
Location: Nashik, India
Platform: Android & iOS
Contact: [email protected] · [email protected]