Privacy-first by design.

Information We Collect

1.1 Information You Provide

When you use our apps, we may collect:

• Account Information: When you sign in using Google or Apple OAuth, we receive your name, email address, and profile picture from your chosen authentication provider.
• User Content: Any content, data, or information you create, upload, or share within our apps.
• Support Communications: Information you provide when contacting our support team.

1.2 Automatically Collected Information

We automatically collect certain information when you use our apps:

• Usage Data: Information about how you interact with our apps, including features used, actions taken, and time spent (collected via Mixpanel).
• Device Information: Device type, operating system version, unique device identifiers, mobile network information, and device settings.
• Purchase Information: Information about in-app purchases, subscriptions, transaction history, and subscription status (collected and managed via RevenueCat).
• Log Data: IP address, browser type, access times, pages viewed, and the page visited before navigating to our apps.
• Analytics Data: App performance metrics, crash reports, and diagnostic data to improve app stability and performance.

1.3 Information from Third Parties

We may receive information from:

• Authentication Providers: Google and Apple provide basic profile information when you sign in.
• App Stores: Apple App Store and Google Play Store may provide information related to app downloads and purchases.

How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: To operate, maintain, and provide you with the features and functionality of our apps.
• Authentication: To verify your identity and manage your account through OAuth providers.
• Payment Processing: To process in-app purchases, manage subscriptions, and provide access to premium features through RevenueCat and platform payment systems.
• Improve Our Apps: To understand how users interact with our apps and make improvements based on usage patterns and feedback.
• Analytics: To analyze app performance, user behavior, and feature usage through Mixpanel analytics.
• Customer Support: To respond to your requests, questions, and provide technical support.
• Security: To detect, prevent, and address technical issues, fraud, and security vulnerabilities.
• Legal Compliance: To comply with legal obligations, enforce our terms, and protect our rights and the rights of our users.
• Communications: To send you service-related notices, updates, and important information about our apps.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We work with third-party service providers who perform services on our behalf:

• Vultr: Cloud hosting infrastructure for our backend services and data storage.
• Supabase: Backend-as-a-service platform for database management, authentication, and real-time functionality.
• Mixpanel: Analytics platform to understand user behavior and improve our apps.
• RevenueCat: In-app purchase and subscription management platform to handle all purchases, subscriptions, and billing.
• Google: OAuth authentication services for sign-in functionality and payment processing through Google Play Store.
• Apple: OAuth authentication services for sign-in functionality and payment processing through Apple App Store.

These service providers have access to your information only to perform specific tasks on our behalf and are obligated not to disclose or use it for other purposes.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency), or to:

• Comply with legal obligations
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the personal safety of users or the public

3.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

Data Retention and Security

4.1 Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained while your account is active and for a reasonable period thereafter for backup and legal compliance purposes.
• Analytics Data: Typically retained for up to 2 years to analyze trends and improve our services.
• Support Communications: Retained for up to 3 years to provide ongoing support and resolve disputes.
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes.

4.2 Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure authentication mechanisms
• Access controls and authentication for our systems
• Secure cloud infrastructure with Vultr and Supabase

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

4.3 International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

Your Rights and Choices

Under applicable data protection laws, including the General Data Protection Regulation (GDPR) if you are in the European Economic Area, you have the following rights:

5.1 Access and Portability

You have the right to request a copy of the personal information we hold about you and to receive it in a structured, commonly used, and machine-readable format.

5.2 Correction

You have the right to request that we correct inaccurate or incomplete personal information about you.

5.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, legitimate interests).

5.4 Restriction and Objection

You have the right to restrict or object to our processing of your personal information in certain circumstances.

5.5 Withdraw Consent

Where we rely on your consent to process your personal information, you have the right to withdraw that consent at any time.

5.6 Lodge a Complaint

You have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or your local data protection authority.

5.7 Managing Your Information

You can manage your information by:

• Updating your account information within the app settings
• Revoking OAuth permissions through your Google or Apple account settings
• Opting out of analytics tracking (where available in app settings)
• Deleting your account through the app or by contacting us

To exercise any of these rights, please contact us at privacy@rainbowunicorn.cz. We will respond to your request within 30 days.

Children's Privacy

Our apps are not intended for children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated Privacy Policy in our apps
• Updating the "Last updated" date at the top of this policy

Your continued use of our apps after any changes indicates your acceptance of the updated Privacy Policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: