Privacy Policy

01Who We Are

Kaleidoku (the "App") is developed and operated by an individual LLC registered in the state of Colorado, United States of America. For the purpose of this Privacy Policy, "we," "us," and "our" refer to that entity.

Our designated privacy contact email is feedback@kaleidoku.com. This Privacy Policy applies to the Kaleidoku mobile application available on the Apple App Store and Google Play Store.

02Information We Collect

We do not collect your name, email address, phone number, physical address, payment card details, or any information that directly identifies you as a person. There is no account registration or login in Kaleidoku.

Information Collected Automatically

The following data may be collected automatically through our third-party service providers:

• Advertising Identifier (IDFA / GAID): On iOS, your device's advertising identifier is collected only if you grant permission via Apple's App Tracking Transparency (ATT) prompt. On Android, Google Play Services may access your Google Advertising ID in accordance with Google's policies.
• Device & Technical Information: Device model, operating system version, app version, language and region settings, and general network information (e.g. connection type). This information is collected in aggregate and is not linked to your identity.
• App Usage Data: Anonymous data about how you interact with the App (e.g. sessions started, levels played, features used), collected by Firebase/AdMob analytics. This data is aggregated and cannot be used to identify you.

Information We Do Not Collect

• Your real name, username, or email address
• Location data beyond broad region (country/language setting)
• Camera, microphone, or contacts access
• Health, financial, or biometric data
• Any data from children under 13 years of age

03Advertising & ATT Consent

Kaleidoku is free to download and displays banner and interstitial advertisements served by Google AdMob. Advertising allows us to offer the App at no cost.

App Tracking Transparency (iOS)

On iOS 14.5 and later, we display Apple's App Tracking Transparency prompt before accessing your Advertising Identifier (IDFA). You may:

• Allow Tracking: Your IDFA is used by AdMob to serve personalized advertisements relevant to your interests.
• Ask App Not to Track: No IDFA is collected. AdMob will serve non-personalized advertisements based on contextual signals only. The App functions identically either way.

You can change your tracking preference at any time in iOS Settings → Privacy & Security → Tracking.

Android

On Android, AdMob may use your Google Advertising ID to personalize ads. You can reset or opt out of ad personalization at any time in Settings → Google → Ads on your device.

Ad-Free Upgrade

Users who purchase the Ad-Free upgrade ($3.99) will not be shown any advertisements. AdMob is not initialized for ad delivery for these users, though anonymous analytics may still be collected.

Google AdMob

AdMob's data practices are governed by Google's Privacy Policy: policies.google.com/privacy. Google may use the data it collects through AdMob across its advertising network as described in that policy.

04Analytics

We use Firebase Analytics (provided by Google) to collect anonymous, aggregated data about how the App is used. This helps us understand which features are popular, identify crashes, and improve the overall experience.

Firebase Analytics data is collected at the aggregate level and does not identify you personally. It includes information such as session duration, feature interactions, and crash reports. You can review Firebase's data practices at firebase.google.com/support/privacy.

05In-App Purchases

Kaleidoku offers two optional in-app purchases:

• Ad-Free Upgrade – $3.99 (one-time, permanent)
• Marble Piece Pack – $0.99 (cosmetic content)

All payments are processed exclusively by Apple (App Store) or Google (Google Play) depending on the platform. We do not receive, store, or process your payment card information at any point. All billing is handled by the respective store's payment infrastructure and governed by their terms and privacy policies.

Purchase records (e.g. whether you have purchased the ad-free upgrade) are stored locally on your device and/or via the platform's receipt validation system. No purchase history is transmitted to or stored on our own servers.

06Children's Privacy

Kaleidoku is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. The App is rated for general audiences but is not specifically designed for or marketed to young children.

If you are a parent or guardian and believe your child has provided personal information through the App, please contact us at feedback@kaleidoku.com and we will take steps to delete such information promptly.

We comply with the Children's Online Privacy Protection Act (COPPA). Our AdMob implementation is configured as non-child-directed, which means Google applies its standard adult audience data practices.

07Data Sharing

We do not sell your personal information. We share data only in the following limited circumstances:

• Google AdMob / Firebase: As described above, AdMob and Firebase collect anonymous analytics and (with your consent on iOS) advertising identifiers. This data is shared with Google's advertising network per Google's Privacy Policy.
• Apple / Google (IAP): Purchase validation data is shared with Apple or Google to verify in-app purchases. We do not store this data ourselves.
• Legal Requirements: We may disclose information if required by law, regulation, or valid legal process (e.g. a court order), or to protect the rights, safety, or property of our users or the public.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data (which is anonymous and aggregated) may transfer to a successor entity, subject to the same protections described in this policy.

Beyond the above, we do not share, sell, rent, or trade any information with third parties for their commercial purposes.

08Data Retention

We do not operate our own servers or databases that store personal data. Accordingly, we have no personal data to retain or delete on our end.

Anonymous analytics data held by Google/Firebase is retained according to Google's standard retention periods, which you can review in the Firebase documentation. Advertising identifiers are managed by your device's operating system and can be reset at any time through your device settings.

Purchase unlock status is stored locally on your device. Uninstalling the App removes this local data; it may be recoverable via the platform's "Restore Purchases" feature if applicable.

09CCPA / CPRA – California Residents

If you are a resident of California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights with respect to your personal information.

Do We Sell Personal Information?

We do not sell your personal information in the traditional sense. However, under the broad CCPA/CPRA definition, sharing your advertising identifier with Google AdMob for cross-context behavioral advertising may constitute "sharing" personal information. You may opt out of this at any time by declining the ATT prompt on iOS, or by opting out of ad personalization in your Android device settings.

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information (as defined by CCPA) through our service providers:

• Identifiers: Advertising identifier (IDFA/GAID), with consent where required
• Internet / Network Activity: Anonymous in-app usage data via Firebase Analytics

We have not collected any other CCPA categories of personal information (e.g. financial data, geolocation, biometric data, health information, or inferences drawn to create a consumer profile).

Exercising Your Rights

To exercise your CCPA/CPRA rights, contact us at feedback@kaleidoku.com with the subject line "California Privacy Request." Because we hold no personal data on our own servers, most requests will be directed to our service providers (Google). We will respond within 45 days as required by law.

10GDPR – European Residents

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable national legislation apply to the processing of your personal data.

Data Controller

The data controller for Kaleidoku is the individual LLC operating the App, contactable at feedback@kaleidoku.com.

Legal Bases for Processing

• Consent (Art. 6(1)(a)): Where we or our service providers collect your advertising identifier for personalized advertising, we rely on your explicit consent via the ATT prompt (iOS) or equivalent mechanism (Android). You may withdraw consent at any time through your device settings.
• Legitimate Interests (Art. 6(1)(f)): Anonymous analytics data is processed on the basis of our legitimate interest in understanding how the App is used and improving it, where such interests are not overridden by your rights.
• Contract Performance (Art. 6(1)(b)): Processing of purchase receipt data to deliver your in-app purchases is necessary to perform our contract with you.

Your Rights Under GDPR

• Right of Access (Art. 15): Request a copy of your personal data we hold.
• Right to Rectification (Art. 16): Request correction of inaccurate data.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data where there is no legitimate reason for its continued processing.
• Right to Restriction of Processing (Art. 18): Request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.

International Data Transfers

Your data may be processed by Google on servers located outside the EEA, including in the United States. Google relies on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses as appropriate safeguards for such transfers. Details are available in Google's Privacy Policy.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at aepd.es. You may also contact the supervisory authority in your country of residence.

Exercising Your GDPR Rights

Submit requests to feedback@kaleidoku.com with the subject line "GDPR Data Request." We will respond within 30 days. Because most personal data is held by Google (not us), we will assist in directing you to the appropriate Google privacy tools where applicable.

11CalOPPA & Do Not Track

The California Online Privacy Protection Act (CalOPPA) requires operators of commercial websites and online services to post a privacy policy and to comply with it. In accordance with CalOPPA:

• We post this Privacy Policy and will notify users of any material changes.
• Users may update their ad tracking preferences through their device's operating system settings at any time.

Do Not Track (DNT)

Some browsers and devices offer a "Do Not Track" (DNT) signal. Because Kaleidoku is a mobile application (not a web browser-based service), standard browser-based DNT signals do not apply. However, we honor the equivalent platform-level opt-out mechanisms: the ATT prompt on iOS and the Ad Personalization setting on Android. Declining tracking through these mechanisms is functionally equivalent to a DNT preference.

12Security

We take reasonable precautions to protect the information handled by Kaleidoku. Because we do not operate our own databases or user accounts, your exposure is limited to the data handled by our third-party providers (Google AdMob and Firebase), both of which maintain industry-standard security practices.

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect any information involved, we cannot guarantee absolute security.

13Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will provide a more prominent notice (such as an in-app notification).

Your continued use of Kaleidoku after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this policy periodically.

14Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

We aim to respond to all privacy-related inquiries within 30 days. For GDPR requests, the statutory response period is 30 days. For CCPA requests, the statutory response period is 45 days.