1. Introduction & Scope

• We do not collect or store your typed text, photos, contacts, precise location, or advertising identifiers.
• Only minimal technical telemetry (e.g., crash logs, usage events, ad IDs if ads enabled) may leave your device.
• Policy complies with GDPR, UK GDPR, CCPA/CPRA, Brazil LGPD, China PIPL, and Apple App Store rules.

2. Information We Collect

• Device information (OS, model).
• App usage events & crash reports.
• Purchase history (subscriptions, unlocks).
• Advertising identifiers (only if ads are enabled).
• All other data (collages, fonts, PDFs, etc.) stays on your device.

3. Third-Party Services

Some features rely on third-party services (analytics, advertising, payments, content delivery). These may process limited technical data strictly to provide functionality. Each provider’s own privacy policy governs their use.

4. Legal Bases

Where applicable (e.g., GDPR/UK GDPR), processing is based on:

• Contractual necessity (to deliver features).
• Legitimate interests (stability, performance, fraud prevention).
• Consent (personalised advertising).

5. How We Use Information

• Operate the apps.
• Diagnose crashes & performance.
• Advertising (basic or personalised with consent).
• Support requests & legal compliance.

6. User Choices & Opt-Outs

Most of our apps run entirely on your device. Your creations (such as collages, fonts, PDFs, or sleep sounds) are stored locally and never uploaded to our servers. Since we do not collect or store personal information, there is nothing for us to delete on your behalf.

If an app displays ads, Apple provides system-level controls:

• Privacy & Security ▶ Tracking: you can deny tracking requests.
• Privacy & Security ▶ Apple Advertising: you can disable personalised ads.

Other than these system settings, no additional opt-out is required because we do not maintain personal data outside your device.

7. Sharing & International Transfers

• We do not sell data.
• Transfers outside your country are safeguarded by SCCs, UK IDTA, or equivalent.

8. Retention

• Crash logs retained up to 24 months.
• Purchase records retained as required by law.
• Data deleted/anonymised upon valid request.

9. Security

• TLS in transit, AES-256 at rest.
• Role-based access control & least-privilege principle.
• Regular penetration tests and audits.

10. Children

Our apps are not directed to children under 13 (or local minimum age). If we learn of data from minors, we will delete it.

11. Your Privacy Rights

Depending on jurisdiction, you may:

• Access, correct, delete your data.
• Restrict or object to processing.
• Request data portability.
• Opt out of targeted ads/data sharing. We respond within 30–45 days after verifying identity.

12. Changes

We may update this Policy. Material changes will be announced in-app or via App Store release notes at least 7 days before effective.

13. U.S. State Privacy Rights (Annex)

Residents of California and other states with privacy statutes have additional rights:

• Opt out of targeted ads, profiling, or data sharing.
• Appeal denied privacy requests.
• Contact shamble.feedback@gmail.com with “State Opt-Out.”

14. Contact

Shamble Inc.