Privacy Policy

01Introduction

This Privacy Policy explains how Vaalmo ("Vaalmo", "we", "us", "our") collects, uses, shares and protects information when you use our mobile applications (the "Apps") distributed on Google Play, the Apple App Store and other official stores, and our website vaalmo.shop (together, the "Services"). We are the data controller responsible for your personal information.

This policy applies to every App published under the developer name "Vaalmo" unless a specific App has its own privacy policy, in which case that policy applies to that App.

Vaalmo
Email: [email protected]
Website: vaalmo.shop

02Information we collect

Information you provide

Account data (only in Apps that offer accounts): name, email address, username, password (stored in hashed form) and profile details you choose to add.
Content you create in an App, such as notes, settings or files, where the App's features require it.
Support communications: messages you send us by email or the contact form.

Information collected automatically

Device information: device model, operating system and version, language, time zone, app version.
Usage and diagnostics: app interactions, session length, feature usage, crash logs and performance data.
Identifiers: app instance IDs and, in ad-supported Apps, the device advertising identifier (Android Advertising ID / Apple IDFA where you permit tracking).
Approximate location derived from IP address, used for analytics, fraud prevention and ad regulation compliance. We do not collect precise GPS location unless an App's core feature requires it and you grant permission.

Purchase information

In-app purchases and subscriptions are processed by Google Play or Apple. We receive confirmation of the purchase (product, status, transaction token) but never your card or payment details.

03Device permissions

Our Apps request only the permissions needed for their features, and only when you use the related feature. Examples include:

Permission	Why it may be requested
Camera	Only for features such as scanning or taking photos within the App.
Photos / Storage	To let you choose, save or export files you select.
Notifications	To send reminders or updates you enable. You can turn these off at any time.
Internet / Network state	To load content, ads and sync data.
Microphone, Contacts, Location	Only if a specific feature requires it, clearly explained in the App before the request.

You can grant or revoke permissions at any time in your device settings. Data accessed through permissions is processed on your device or used only for the stated feature; it is not sold or used for unrelated purposes.

04How we use information

To provide, operate and maintain the Apps and their features.
To create and manage your account, where applicable.
To process and verify in-app purchases and subscriptions.
To diagnose crashes, fix bugs and improve performance.
To understand usage in aggregate and improve the Apps.
To show advertising in ad-supported Apps, personalised only where you have consented.
To respond to support requests and send important service notices.
To detect and prevent fraud, abuse and security incidents.
To comply with legal obligations and enforce our Terms.

Purpose	Legal basis
Providing App features, accounts and purchases	Performance of a contract
Crash reporting, security, fraud prevention, service improvement	Legitimate interests
Personalised advertising, optional analytics, marketing	Consent (withdraw any time)
Tax, accounting and legal compliance	Legal obligation

06Third-party services and SDKs

Our Apps may use the following trusted third-party services, each with its own privacy policy. Not every App uses every service; each App's store Data Safety section lists exactly what it uses.

Service	Purpose	Policy
Google Play Services	App distribution, purchases, core services	Link
Google Firebase (Analytics, Crashlytics, Authentication, Cloud Messaging, Hosting)	Analytics, crash reports, sign-in, notifications, hosting	Link
Google AdMob	Advertising in ad-supported Apps	Link
Apple App Store / StoreKit	Distribution and purchases on iOS	Link
Meta Audience Network (if used)	Advertising	Link
Unity Ads / AppLovin (if used)	Advertising	Unity · AppLovin

07Advertising

Some of our Apps are free and supported by advertising. Ad partners may collect device identifiers, IP address and ad-interaction data to serve and measure ads.

In the EEA, UK and Switzerland, we request your consent through a Google-certified consent management platform before showing personalised ads.
On iOS, we request permission through Apple's App Tracking Transparency (ATT) prompt before tracking.
Ads are placed so they do not interfere with App use, and we do not use deceptive or disruptive ad formats.
You can reset or delete your advertising ID or limit ad tracking in device settings at any time.

We do not sell your personal information. We share information only with:

Service providers listed above, who process data on our behalf under contractual obligations.
App stores (Google, Apple) as needed to distribute Apps and process purchases.
Authorities when required by law or to protect rights, safety and security — including reporting child sexual abuse material to the appropriate authorities.
Business transfers in a merger, acquisition or asset sale, subject to this policy.

09Data retention

Account data: kept while your account is active; deleted within 30 days of a deletion request.
Crash and diagnostic data: generally retained up to 90 days.
Analytics data: aggregated or pseudonymised, retained no more than 14–26 months.
Support emails: up to 3 years after the enquiry is resolved.
Purchase records: as long as required by tax and accounting law.

10Data security

All data transmitted between our Apps and servers is encrypted in transit using HTTPS/TLS. We use reputable infrastructure providers, access controls and the principle of least privilege. No method is 100% secure, but we take reasonable measures to protect your data and will notify you and authorities of breaches where required by law.

11Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or port your personal information, and to withdraw consent at any time. You can also:

Delete your account and data — see Delete Account & Data.
Revoke permissions in device settings.
Opt out of personalised ads via device settings or in-App consent options.
Uninstall an App to stop all further collection by that App.

To make a request, email [email protected] with the subject "Privacy request". We respond within 30 days. You may also complain to your local data protection authority.

12California & US state privacy rights

Residents of California and other US states with privacy laws have the right to know, delete and correct personal information, and to opt out of its "sale" or "sharing". We do not sell personal information. Where ad SDKs may constitute "sharing" for cross-context behavioural advertising, you can opt out via the in-App consent options or by limiting ad tracking on your device. We do not discriminate against users who exercise their rights.

13Children's privacy

Unless an App is explicitly designed for children and listed in the appropriate store program (such as Google Play's Families program), our Apps are not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. Apps designed for children comply with COPPA, GDPR-K and the Google Play Families Policy, use only certified ad SDKs, and do not show personalised ads. If you believe a child has provided us data, contact us and we will delete it.

14International transfers

Our service providers may process data outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.

15Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date shows the latest revision. Material changes will be communicated in the Apps or on this website.

16Contact us