Privacy Policy – 30 Days (challenge yourself)

1. Controller

2. Data stored only on your device

The App stores the following data locally on your device (iOS "UserDefaults" / Android "SharedPreferences"):

• your challenges, daily progress, streaks, calendar entries and levels,
• coins, power-ups, unlocked themes and lucky-wheel status,
• settings such as language, reminder time and whether you finished the introduction,
• technical values such as a randomly assigned test group (A or B) used to compare two variants of the App, and simple usage counters (e.g. how often a screen was opened) that never leave your device.

This data is not transmitted to us or to third parties. We have no access to it. It is processed so that the App works (Art. 6(1)(b) GDPR; storage on your device is strictly necessary for the service you requested, § 25(2) no. 2 TDDDG).

Deletion: Settings → "Delete all my data" removes all of this data from your device. Uninstalling the App also deletes it. Because there is no account and no cloud backup by us, we cannot restore it.

3. Reminders

If you turn on the daily reminder, the App schedules a local notification on your device at the time you choose. On Android 13+ and iOS you are asked for notification permission at that moment. No data is sent to a server for this. You can turn reminders off in the App or in your device settings.

4. Advertising – Google AdMob (free version only)

The free version of the App shows ads (banners, rewarded videos that you can choose to watch for in-app rewards, and full-screen ads). The ads are delivered by Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). If you have 30 Days Pro, the App does not load the advertising SDK's ads and does not show you the consent or tracking dialogs.

Data processed by Google: IP address (from which an approximate location is derived), your device's advertising identifier (IDFA on iOS – only if you allow tracking –, Advertising ID on Android), app-set/vendor identifier, device and operating-system information (model, OS version, language, screen size), app information (app ID, version), information about ads shown and your interactions with them (impressions, clicks, rewarded video completions), and crash and performance diagnostics of the advertising SDK.

Purposes: delivering ads, frequency capping, measuring ad performance, fraud and abuse prevention, and – only with your consent – personalised advertising based on your interests.

Consent (EEA, UK, Switzerland and certain US states): Before ads are loaded for the first time, the App shows Google's consent dialog (Google User Messaging Platform, certified under the IAB Transparency & Consent Framework). There you can accept or refuse personalised advertising and storage of/access to information on your device. You can change your choice at any time in the App under Settings → Privacy & ad choices. If you refuse, Google shows only non-personalised or limited ads, which still require some technical data (e.g. IP address) to be delivered.

App Tracking Transparency (iOS): After the consent dialog, the App briefly explains why it asks and then shows Apple's system prompt asking whether the App may track you. Only if you tap "Allow" can the advertising identifier (IDFA) be used. You see ads either way. You can change this at any time in the iOS settings (the App links there under Settings → Tracking permission). On Android you can reset or delete your Advertising ID in the system settings (Google → Ads).

Legal basis: Personalised advertising and access to information on your device for it: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time with effect for the future. Delivery of non-personalised ads, ad measurement and fraud prevention: our legitimate interest in financing the free version of the App through advertising (Art. 6(1)(f) GDPR).

Google as recipient: Google processes the data in part as an independent controller. Details: https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites. Google may transfer data to the USA; Google LLC is certified under the EU–US Data Privacy Framework (Art. 45 GDPR adequacy decision).

5. In-app purchases – Apple, Google and RevenueCat

You can buy 30 Days Pro (monthly or yearly subscription, or lifetime) and coin packs inside the App.

Payment is handled entirely by Apple (App Store) or Google (Google Play) under their terms and privacy policies. We never receive your name, email address or payment details. Apple: https://www.apple.com/legal/privacy/ – Google: https://policies.google.com/privacy.

RevenueCat: To check whether you have Pro, restore purchases and show the purchase screen, the App uses RevenueCat, a service of RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA, acting as our processor (Art. 28 GDPR). RevenueCat processes: a random anonymous app user ID created by the App (not linked to your name or email), purchase and subscription information from Apple/Google (product, price, currency, purchase date, transaction IDs, renewal and trial status), the App's test group (A/B), and technical data (IP address, country, device model, OS and app version, language). Legal basis: performance of the purchase contract and providing what you bought (Art. 6(1)(b) GDPR) and our legitimate interest in analysing and improving our offer (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU–US Data Privacy Framework where RevenueCat is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). More: https://www.revenuecat.com/privacy.

Purchase records are kept as long as needed to provide Pro and for statutory retention periods (tax and commercial law, up to 10 years). Coins you buy are stored only on your device (see section 2).

6. Other device functions

• Sharing: If you share your score card, the App opens your device's share menu. What you share and with whom is up to you; the App does not send anything itself.
• Ratings: The App may show the App Store / Google Play rating dialog. It is provided by Apple or Google; we do not see who rated.
• Contacting support: If you write to us by email, we process your email address, your message and the app version and device information automatically added to the email, only to answer you (Art. 6(1)(b) and (f) GDPR). We delete it when the request is closed, unless statutory retention applies.

The App does not use your camera, microphone, photos, contacts, precise location or health data, and it contains no analytics or crash-reporting SDK of its own.

7. Children

The App is not directed at children under 13, and we do not knowingly collect personal data from them. In the EEA, consent for personalised advertising from users under 16 (or the lower age set by national law) must be given by a parent or guardian.

8. How long we keep data

• Data on your device: until you delete it in the App or uninstall the App.
• Advertising data at Google: according to Google's retention periods (https://policies.google.com/technologies/retention).
• Purchase data at RevenueCat/Apple/Google: as described in section 5.
• Support emails: as described in section 6.

9. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)) – in the App via Settings → Privacy & ad choices.

Because the App has no account, we usually cannot link data held by Google or RevenueCat to you. If you want us to look up purchase data, send us the anonymous ID or your purchase receipt (Apple/Google order number). You can also delete all on-device data yourself (Settings → Delete all my data).

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

Contact for all privacy requests: support@app-mate.com.

10. Notice for California and other US states

We do not sell personal information for money. However, the use of advertising identifiers and similar data for personalised (cross-context behavioural) advertising by Google may count as "sharing" under the California Consumer Privacy Act and similar state laws. You can opt out at any time in the App under Settings → Privacy & ad choices, by limiting ad tracking/resetting your advertising ID on your device, or by buying Pro (no ads). You also have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights. We do not use sensitive personal information.

11. Changes

We update this policy when the App or the law changes. The current version is always available at this address; the date at the top shows the last change.