Privacy Policy
Privacy Policy
Plain-Language Summary
- We do not sell your personal data to anyone.
- We use advertising SDKs (AdMob, Meta, AppLovin, etc.) that may collect device identifiers for ad personalisation.
- You can opt out of personalised advertising at any time.
- We collect minimal data — only what is necessary to operate the app.
- Children under 13 are protected under COPPA; apps aimed at children serve non-personalised ads only.
- You can contact us at any time to exercise your privacy rights.
Introduction
Welcome. This Privacy Policy is published by Sikandar Altaf, an independent Android application developer operating as SikandarApps ("we", "us", "our", or "Developer"). We are committed to protecting the privacy of everyone who uses our mobile applications.
This document explains in detail what information our apps and their integrated third-party services collect, why they collect it, how it is used, with whom it is shared, and what rights you have as a user. Please read this policy carefully before using any of our apps. By installing and using our applications, you acknowledge that you have read and understood this policy.
We operate primarily as an Android developer publishing applications through the Google Play Store. Our apps may include advertising and analytics services provided by established third-party platforms as detailed below.
Scope & Applicability
This Privacy Policy applies to:
- All Android applications published by Sikandar Altaf on the Google Play Store, now and in the future.
- Any associated websites, landing pages, or support pages operated by us.
- All third-party SDKs and services embedded within our apps, to the extent they are under our control or configuration.
This policy does not apply to third-party websites or services that our apps may link to. We encourage you to read the privacy policies of any external services you visit.
Data We Collect
We categorise the data collected into three types: data collected automatically by the app, data you voluntarily provide, and data collected by integrated third-party SDKs.
3.1 Data Collected Automatically
When you use our apps, certain technical information is collected automatically by the app environment and any integrated SDKs:
| Data Type | Description | Purpose |
|---|---|---|
| Device Information | Device model, manufacturer, OS version, screen size, language, time zone | App compatibility & optimisation |
| Advertising ID | Google Advertising ID (GAID) or Android ID — resettable by the user | Personalised advertising by ad SDKs |
| IP Address | Approximate location derived from IP (country/region level) | Ad geo-targeting, fraud prevention |
| App Usage Data | Session length, features used, crash logs, ANRs | Performance monitoring, bug fixing |
| Network Information | Connection type (WiFi / mobile), carrier name | Network-specific optimisation |
| Sensor Data | Accelerometer, gyroscope (only if used by a specific app) | App functionality (e.g. orientation) |
| Install & Attribution | Referrer data from Google Play, install timestamp | Marketing attribution (if enabled) |
3.2 Data You Voluntarily Provide
Some apps may allow or require you to submit information directly:
- Contact/Feedback: If you email us for support, we receive your email address and the content of your message. We use this only to respond to you.
- In-App Input: If an app has user-generated content (notes, settings, preferences), this data is stored locally on your device unless the app explicitly states cloud sync is enabled.
- Purchases: In-app purchases are processed entirely by Google Play. We do not receive or store your payment information.
3.3 Data Collected by Third-Party SDKs
Our apps integrate several third-party advertising, analytics, and service SDKs. These SDKs operate under their own privacy policies and may collect data independently. A full breakdown of each platform is provided in Sections 5 and 6 below.
Common data collected by these SDKs includes:
- Advertising identifiers (GAID, IDFA equivalent on Android)
- Precise or approximate device location (if permission granted)
- Interaction data with advertisements (impressions, clicks, video views)
- App event data (installs, opens, in-app events)
- Hashed or non-hashed demographic signals used for ad targeting
How We Use Your Data
We use the information collected for the following purposes:
- App Operation: To provide and maintain the core functionality of our apps.
- Performance Monitoring: To detect crashes, bugs, and ANR (App Not Responding) errors and fix them promptly.
- Advertising Revenue: Our apps are free to download. We generate revenue by displaying ads through third-party networks. These networks use device identifiers and behavioural data to show relevant advertisements.
- Analytics: To understand how users interact with our apps so we can improve user experience and features.
- Legal Compliance: To comply with applicable laws, regulations, or enforceable governmental requests.
- Fraud Prevention: To detect and prevent fraudulent activity, abuse, or violations of our Terms of Service.
- User Support: To respond to your support queries or feedback.
We do not use your data for:
- Selling personal data to third-party data brokers.
- Building individual user profiles outside of what is described in this policy.
- Sending unsolicited marketing emails or push notifications without your consent.
Advertising & Monetisation Platforms
Our apps are free and supported by advertising. We work with multiple advertising and mediation platforms, each of which operates under its own data practices. Below is a detailed description of each platform we use or may use:
5.1 Google AdMob Active
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
AdMob is Google's mobile advertising platform. When AdMob is integrated, it may collect and use the following data:
- Google Advertising ID (GAID) — resettable identifier used for ad personalisation
- Device metadata (model, OS version, screen resolution)
- IP address for approximate geo-targeting
- Ad interaction events (impression, click, video completion)
- App activity including session frequency and duration
- Crash data and diagnostics (via Firebase Crashlytics if integrated)
Google may use this data to serve personalised advertisements, measure ad performance, and improve Google's advertising systems. Google is a signatory of the IAB Europe Transparency and Consent Framework (TCF).
Google Privacy Policy | AdMob & User Data | Google Ad Settings
5.2 Meta Audience Network May Be Used
Provider: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
Meta Audience Network delivers ads on behalf of Meta advertisers within third-party apps. Data collected may include:
- Device identifiers (Android Advertising ID)
- IP address and approximate location
- Information about ads shown and your interactions with them
- App usage signals used to infer interests for ad targeting
- If you are a Facebook/Instagram user, Meta may link ad interactions to your social profile for targeting
Meta processes this data under its own legal bases, including legitimate interest and, where required, consent.
Meta Privacy Policy | Meta Ad Preferences | Audience Network & Privacy
5.3 AppLovin / MAX Mediation May Be Used
Provider: AppLovin Corporation, 1100 Page Mill Road, Palo Alto, CA 94304, USA.
AppLovin's MAX is an in-app bidding and mediation platform. AppLovin and its network partners may collect:
- Advertising identifier (GAID)
- Precise or coarse device location (if permission granted)
- Device hardware and software specifications
- Ad interaction data (impressions, clicks, conversions)
- In-app purchase signals and predicted lifetime value (pLTV)
- Behavioural data for contextual and interest-based targeting
AppLovin processes data in accordance with the CCPA, GDPR, and other applicable laws.
AppLovin Privacy Policy | AppLovin Opt-Out
5.4 Unity Ads May Be Used
Provider: Unity Technologies, 30 3rd Street, San Francisco, CA 94103, USA.
Unity Ads delivers video and playable advertisements. Data collected may include:
- Advertising ID and device fingerprint signals
- Gameplay and in-app behaviour data (for game apps)
- App install and event tracking for advertisers
- Session and usage duration
- IP address and inferred geographic location
Unity Privacy Policy | Unity Opt-Out
5.5 IronSource / LevelPlay (by Unity) May Be Used
Provider: ironSource Ltd (acquired by Unity), Tel Aviv, Israel / San Francisco, CA, USA.
IronSource's LevelPlay is a mediation platform. Data collected through its SDK may include:
- Device advertising identifier
- In-app events and revenue data
- Ad performance metrics
- User segment and cohort data for optimisation
- Device and network metadata
IronSource Privacy Policy | IronSource GDPR Guide
5.6 Vungle / Liftoff Monetize May Be Used
Provider: Liftoff Mobile, Inc. (formerly Vungle), 900 Middlefield Road, Redwood City, CA 94063, USA.
Vungle specialises in performance video advertising. Data collected may include:
- Advertising ID and hashed device identifiers
- App and ad interaction data
- In-app purchase signals
- Demographic and interest-based data for targeting
- Geographic data (IP-based)
5.7 MoPub / X (Twitter) Ads Legacy
Note: MoPub has been discontinued. Its functionality has been transferred to X (formerly Twitter) Ads. We may have legacy integrations or may integrate X Ads in the future. X may collect:
- Device and advertising identifiers
- Interaction data linked to X user accounts where applicable
- Behavioural and contextual signals
5.8 InMobi May Be Used
Provider: InMobi Pte Ltd, 30 Cecil Street, #19-08, Prudential Tower, Singapore 049712.
InMobi is a mobile advertising platform. Data collected may include:
- Advertising and device identifiers
- Approximate and precise location (if permission granted)
- Demographic data (age, gender) derived from device signals
- App usage patterns for interest inference
InMobi Privacy Policy | InMobi Opt-Out
5.9 Pangle (TikTok for Business) May Be Used
Provider: Bytedance Pte. Ltd., 1 Raffles Quay, #26-10, One Raffles Quay, Singapore 048583.
Pangle is TikTok's advertising network for third-party apps. Data collected may include:
- Device identifiers, advertising ID, IMEI (where legally permissible)
- IP address, network type, carrier
- App usage and in-app event data
- Facial features or voice data (only if the app uses camera/microphone — Pangle SDK)
Note: Pangle's data handling has been subject to regional legal scrutiny. We will only integrate Pangle where legally compliant.
5.10 Chartboost May Be Used
Provider: Chartboost, Inc. (acquired by Zynga/Take-Two Interactive), San Francisco, CA, USA.
Chartboost provides in-app advertising, particularly for gaming apps. Data collected may include:
- Advertising identifiers
- Gameplay data and in-app purchase signals
- Ad impression and click data
- Device and session metadata
Analytics Services
We may integrate analytics tools to understand how users interact with our apps and to identify performance issues. These tools include:
Analytics data is collected in aggregated or pseudonymised form where possible. We do not use analytics to identify individuals.
App Permissions
Depending on the specific app, we may request the following Android permissions. We only request permissions that are necessary for the app's stated functionality:
| Permission | Why It's Requested | Required? |
|---|---|---|
| INTERNET | Required to display ads and connect to analytics servers | Yes |
| ACCESS_NETWORK_STATE | Checks connectivity before loading ads or content | Yes |
| ACCESS_WIFI_STATE | Determines network type for ad loading optimisation | Yes |
| RECEIVE_BOOT_COMPLETED | Restart reminder/alarm features after device reboot (if app uses alarms) | Optional |
| CAMERA | Only requested if the app has camera functionality (e.g. scanner, QR) | Optional |
| READ_EXTERNAL_STORAGE | Access user-selected files if the app supports file operations | Optional |
| WRITE_EXTERNAL_STORAGE | Save files to device storage if the app supports export | Optional |
| VIBRATE | Haptic feedback for notifications or interactions | Optional |
| POST_NOTIFICATIONS | Send reminders or alerts (Android 13+, requires user consent) | Optional |
| AD_ID | Access Google Advertising ID for personalised ads (Android 13+) | Advertising |
| USE_BIOMETRIC | App lock feature using fingerprint/face unlock (if available) | Optional |
You can revoke any optional permission at any time through your device's Settings → Apps → [App Name] → Permissions.
Data Sharing & Disclosure
We do not sell, trade, or rent your personal information. We may share data in the following limited circumstances:
- With Advertising Partners: As described in Section 5, integrated ad SDKs receive data necessary to serve and measure ads. This is inherent to free, ad-supported apps.
- With Analytics Providers: As described in Section 6, to understand app performance.
- Legal Obligation: If required to do so by law, court order, or government authority.
- Protection of Rights: To protect the safety, rights, or property of our users or the public.
- Business Transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify users via in-app notice or this page.
All third-party SDK partners are contractually required to handle your data in compliance with applicable privacy laws, including GDPR and CCPA.
Data Retention
We retain data only as long as necessary for the purposes described in this policy:
- App-generated local data (e.g. user preferences, notes) is stored on your device and is deleted when you uninstall the app.
- Crash and analytics data is retained by Firebase for up to 90 days by default, after which it is aggregated or deleted.
- Ad network data is retained according to each platform's own retention schedules — typically 13 to 25 months for personalisation purposes.
- Support emails are retained for up to 2 years to maintain a record of our communications, after which they are deleted.
You may request deletion of any data we hold about you by contacting us (see Section 18).
Data Security
We take data security seriously and implement reasonable technical and organisational measures to protect your information. These include:
- Using HTTPS / TLS encryption for all network communications.
- Storing no sensitive personal data on our own servers.
- Limiting access to any support data to authorised personnel only.
- Regularly reviewing and updating our security practices.
However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by law.
Children's Privacy (COPPA)
Protecting children's privacy is extremely important to us. We comply with the Children's Online Privacy Protection Act (COPPA) (USA) and equivalent regulations globally.
- Our general apps are not directed at children under 13. We do not knowingly collect personal information from children under 13.
- Apps that are designed for or likely to attract children are configured to serve non-personalised ads only, in compliance with Google Play's Families Policy and AdMob's child-directed settings.
- For child-directed apps, we do not use interest-based advertising, behavioural tracking, or SDKs that collect personal data for targeting.
- If you believe a child under 13 has provided us personal information, please contact us immediately at sikandaraltaf90@gmail.com and we will delete it promptly.
GDPR — EU / EEA / UK Users
If you are located in the European Union, European Economic Area, or United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to your data. Under GDPR, we act as a data controller for data we collect directly, and the advertising/analytics SDKs are independent data controllers or processors for the data they collect.
Legal Bases for Processing
| Processing Activity | Legal Basis |
|---|---|
| Serving personalised advertisements | Consent (Article 6(1)(a)) |
| Serving non-personalised advertisements | Legitimate Interest (Article 6(1)(f)) |
| Analytics (aggregated/pseudonymised) | Legitimate Interest (Article 6(1)(f)) |
| Crash reporting and diagnostics | Legitimate Interest (Article 6(1)(f)) |
| Responding to support requests | Contract / Legitimate Interest |
| Legal compliance | Legal Obligation (Article 6(1)(c)) |
Consent Management
For EU/EEA/UK users, our apps display a Consent Management Platform (CMP) popup on first launch, built using Google's User Messaging Platform (UMP) SDK. This allows you to accept or decline personalised advertising. Your choice is respected by all integrated ad SDKs.
International Data Transfers
Some of our service providers are located outside the EU/EEA (e.g. in the USA). Data transfers to these countries are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.
Data Protection Authority
If you are in the EU/EEA and believe your GDPR rights have been violated, you have the right to lodge a complaint with your national Data Protection Authority (DPA).
CCPA — California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the CPRA grants you specific rights:
- Right to Know: You can request disclosure of personal information we have collected about you in the past 12 months, including the categories, sources, purposes, and third parties it is shared with.
- Right to Delete: You can request deletion of personal information we hold about you, subject to certain exceptions.
- Right to Opt-Out of Sale or Sharing: We do not "sell" personal data in the traditional sense. However, sharing data with advertising partners for cross-context behavioural advertising may qualify as a "sale" under CCPA. You may opt out via the options in Section 15.
- Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA right.
- Right to Correct: You may request correction of inaccurate personal information.
To exercise your CCPA rights, contact us at sikandaraltaf90@gmail.com. We will respond within 45 days.
Categories of Data Collected (CCPA Disclosure)
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Advertising ID, IP address | Yes (via SDKs) |
| Commercial Information | In-app purchase history | No (handled by Google Play) |
| Internet / Network Activity | App interactions, ad clicks | Yes (via SDKs) |
| Geolocation Data | Approximate location via IP | Yes (via SDKs) |
| Inferences | Interests derived for ad targeting | Yes (by ad partners) |
| Sensitive Personal Information | Financial, health, biometric | No |
Your Privacy Rights
Regardless of your location, you have the following rights with respect to your data:
- Right of Access: Request a copy of personal data we hold about you.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten").
- Right to Rectification: Request correction of inaccurate data.
- Right to Restriction: Request that we restrict processing of your data.
- Right to Portability: Request your data in a machine-readable format (where applicable).
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at sikandaraltaf90@gmail.com. We will respond within 30 days. We may ask you to verify your identity before processing requests.
Opt-Out Options
You have several ways to limit or opt out of personalised advertising:
On Your Device
- Reset Advertising ID: Go to Settings → Google → Ads → Reset Advertising ID. This breaks the link between past and future ad data.
- Opt Out of Personalised Ads: Go to Settings → Google → Ads → Opt out of Ads Personalisation (Android 12 and below) or Settings → Privacy → Ads (Android 13+).
- Delete Advertising ID: On Android 12+, you can delete your Advertising ID entirely via Settings → Privacy → Ads → Delete advertising ID.
Per Advertising Partner
Consent
By downloading and using our apps, you consent to the data practices described in this Privacy Policy, including the collection and use of data by integrated third-party advertising and analytics SDKs.
For users in the EU/EEA/UK, explicit consent for personalised advertising is obtained through an in-app Consent Management Platform (CMP) dialog upon first launch. You may withdraw or update your consent preferences at any time through the app's settings menu (where available) or by contacting us.
For children's apps or when a user is identified as a minor, consent from a parent or legal guardian is required before any data is collected, in accordance with COPPA and applicable local laws.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect:
- Changes in the law or regulatory requirements
- New features or services added to our apps
- New advertising or analytics partners integrated into our apps
- Improvements in our privacy practices
When we make significant changes, we will:
- Update the "Last Updated" date at the top of this page.
- Where feasible, display an in-app notification informing users of the change.
- For material changes affecting your rights, provide at least 30 days' notice where required by law.
We encourage you to review this page periodically. Your continued use of our apps after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us. We are committed to resolving privacy concerns promptly and transparently.
Sikandar Altaf — SikandarApps
Developer & Data Controller
For privacy requests, data deletion, consent withdrawal, or general enquiries:
We aim to respond to all privacy-related requests within 30 days. For CCPA requests, we respond within 45 days. You may also escalate concerns to the relevant Data Protection Authority in your jurisdiction.
Comments
Post a Comment