1. Information We Collect

1.1 User-Provided Data

• Optional Account Creation:

• Support Inquiries: Contact details submitted via email/contact forms

1.2 Automatically Collected Data

• Device Data: Android OS version, device model, IP address (anonymized)

• Usage Analytics: Feature interactions, session duration, in-app preferences

• Diagnostics: Crash logs, performance metrics (via Firebase)

• Advertising ID: Google Advertising ID (resettable via device settings)

2. Legal Basis for Processing (GDPR/Global Compliance)

• Contractual Necessity: Data required for core app functionality (e.g., account management, payment processing).

• Legitimate Interests: Service optimization, fraud prevention, and security enhancements.

• Consent: Optional data uses (e.g., personalized ads, marketing emails).

3. Data Sharing & Third Parties

3.1 Essential Service Providers

• Google Firebase: Analytics and crash reporting (data anonymized).

• Google Play Billing: Processes in-app purchases (transaction records retained per Play policy).

3.2 Advertising Networks

• Google AdMob: Serves non-personalized ads; uses encrypted Advertising ID.

• Unity Ads: Contextual ad delivery; complies with IAB TCF 2.0 standards.

3.3 Compliance Disclosures

• Data may be shared if legally mandated (e.g., court orders, regulatory requests).

4. Data Retention

• Active Users: Retained for 36 months post last activity.

• Account Deletion: Full erasure within 90 days (backups purged within 180 days).

• Anonymized Data: Aggregated analytics preserved indefinitely for operational insights.

5. User Rights & Controls

• Access/Portability: Download data via Google Takeout.

• Opt-Out: Disable ad personalization in device settings; revoke app permissions.

• Deletion: Remove account permanently via in-app settings.

• Children: Under 13? Contact DPO at anshusharma9761@gmail.com for data removal.

6. Children’s Privacy

• Age Gate: Blocks account creation for users under 13.

• COPPA Compliance: No collection of personal data from minors; ads filtered via Google’s Designed for Families program.

7. Security Protocols

• Encryption: TLS 1.2+ for data in transit; AES-256 for stored credentials.

• Vulnerability Management: Annual penetration tests; OWASP ASVS compliance.

• Access Controls: Role-based permissions; audit logs for sensitive operations.

8. Policy Updates

• Notification: Summary of material changes emailed to registered users; updated timestamp on Play Store listing.

• Effective Date: Changes apply 30 days post-notification.

Contact Information

• Data Protection Officer: anshusharma9761@gmail.com

• EU Representative: Provided upon request (GDPR Article 27).