Privacy Policy

This Privacy Policy covers all mobile applications published on the Apple App Store and Google Play Store by Peter Mwangi, an independent (indie) developer operating as an individual. References to "we," "our," or "us" throughout this document refer to this developer.

We are the data controller for personal information collected through our apps. If you have any questions, see the Contact Us section at the bottom of this page.

The data we collect depends on how you use our apps. Here is a breakdown:

We do not collect precise GPS location, contacts, photos, camera data, microphone audio, or any sensitive personal information unless it is a core feature of the specific app and you have explicitly granted permission.

We use collected data only for legitimate purposes:

• To provide and maintain app functionality
• To manage your subscription and unlock premium features
• To diagnose crashes and fix bugs
• To understand how features are used so we can improve the apps
• To send important notices (e.g. policy changes, billing issues) — not marketing spam
• To comply with legal obligations

Our apps offer in-app subscriptions managed through the official app stores (Apple App Store / Google Play) and RevenueCat, a subscription management platform.

How It Works

• Payment processing is handled entirely by Apple or Google. We never see or store your payment card details.
• RevenueCat receives your anonymized App Store / Play Store subscriber ID and subscription status so we can unlock premium features in the app.
• RevenueCat may collect device identifiers, purchase history, and subscription events to power this functionality.

Managing Subscriptions

• iOS: Settings → [Your Name] → Subscriptions
• Android: Google Play → Profile → Payments & subscriptions → Subscriptions
• Cancelling a subscription takes effect at the end of the current billing period. We do not offer refunds outside of the platform's own refund policies.

We use a minimal set of trusted third-party services. Each operates under its own privacy policy and security standards:

We are not responsible for the privacy practices of these third-party services. We encourage you to review their policies if you have concerns.

We retain personal data only for as long as necessary to provide our services or comply with legal obligations:

• Account data — retained while your account is active. Deleted within 30 days of account deletion.
• Usage analytics — anonymized and aggregated; retained indefinitely in aggregate form.
• Subscription records — retained as required by tax and accounting regulations (typically 7 years).
• Crash logs — retained for up to 90 days.

You may request deletion of your personal data at any time by contacting us (see Contact Us). Deletion requests are processed within 30 days.

Depending on your location, you may have the following rights regarding your personal data. We honour these rights regardless of where you are based:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request that we delete your personal data ("right to be forgotten").
• Portability — request your data in a machine-readable format.
• Objection — object to certain types of processing, including analytics.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

If you are in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority. For California residents (CCPA/CPRA), you have the additional right to opt out of the sale of personal information — though we do not sell personal data.

Our apps are not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided personal information to us, please contact us immediately and we will delete the data promptly.

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• All data transmitted between your device and our servers is encrypted using TLS (HTTPS).
• Sensitive data stored on your device uses platform-standard encryption (Android Keystore / iOS Secure Enclave where applicable).
• We use industry-standard third-party services (such as RevenueCat) that maintain their own security certifications.
• We limit data access to only what is needed to operate our services.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you discover a security vulnerability, please report it responsibly to peterkagure@gmail.com.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will provide a more prominent notice — such as an in-app notification or an email to registered users.

Your continued use of our apps after a policy change constitutes acceptance of the updated policy. We encourage you to review this page periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out — we aim to respond within 2 business days.