Petalhug
Privacy Policy

Summary

RiverMountain Studio ("we") makes the mobile app Petalhug ("the app"). We do not collect personal data such as your name or contact details. To receive app settings (notices, ad limits and so on), the app uses only a random Firebase installation ID, created per install, through Google Firebase (see "Remote settings"). The app has no account and no server, and everything you enter (tasks, records, moods, room) stays on your phone (the only copy outside it is your own Google backup, if your phone has it on — see "Cloud backup"). The app uses the internet only for ads (when you open the app, the ad library checks consent and gets an ad ready; ads are shown only when you choose to watch one), to check Google Play purchases, and to receive app settings (remote settings).

What the app stores on your phone

• Your to-do list, including tasks you type yourself, and which ones you checked each day
• The mood sticker you picked each day
• Materials, decorations and how your room is arranged
• Settings: language, reminder on/off and reminder time
• Simple counts of the days you opened the app (on your own or from the reminder), shown to you on the Records screen
• The name you gave your pet, which friend you picked, and your daily routine (time of day and weekdays)
• One card image made only when you share a photo card (replaced each time)

To protect your records, the app keeps two copies of your save and a daily backup of the last 3 days, all inside the app's private storage on your phone. We never receive this data. Uninstalling the app, or clearing its storage in your phone settings, deletes it. If Google backup is on for your phone, only this save data (the two save copies and daily backups) may be backed up to your Google account (see "Cloud backup").

One-line journal and moods (from 1.3.0) — the one-line journal entries you write, the moods you pick and your adventure story records are stored only in the app's save file on this phone and, if your phone's Google backup is on, in Android Auto Backup (your own Google account). We never see or receive them, and they are not sent to ads, analytics or remote settings. Photo cards never include your journal text. You can edit or clear entries in the app, and uninstalling the app deletes them.

Phone permissions

• Notifications — only if you allow it. Used for one reminder a day at the time you choose. You can turn it off in the app (Records screen) or in your phone settings, and the app works fully without it.
• Run at startup — to set the daily reminder again after your phone restarts.
• Vibration — for small feedback when you tap.

• Internet and network state — to load ads and to check Google Play purchases.
• Advertising ID — for Google AdMob ads (see "Ads"). You can reset or delete it in your phone settings.
• Google Play billing — to buy decoration bundles and restore purchases.
• Other normal permissions (added by the ad and billing libraries, not asked at install) — mobile network type, keeping background tasks running.

The app does not ask for contacts, location, camera, microphone, or photos.

Sharing

We do not share or sell personal data. Delivering app settings (remote settings) is handled for us by Google LLC's Firebase as our data processor (processing and storage on our behalf; task: delivering settings; processor: Google LLC), which processes the Firebase installation ID, including outside your country (for example in the US) — see "Remote settings". Ads are handled directly by Google (AdMob) and payments by Google Play (see "Ads" and "In-app purchases").

Ads

The app shows ads using Google AdMob. When you open the app, the ad library contacts Google's servers to check consent and get an ad ready. At that time and when you watch an ad, Google (Google LLC, USA) may process your device's advertising ID, approximate location (from your IP address), device information and records of ads viewed or tapped, to show, measure and analyse ads and to prevent fraud. This data is sent to Google's servers in the USA and other countries, and Google's policies decide how long it is kept. We do not receive this data. Ads are only shown when you choose to watch them (for example, to get one more material); not watching never takes anything away. Users in the EEA, UK and Switzerland are asked for consent before ads, and can change it at any time in the app. You can reset or delete your advertising ID in your phone settings. How Google uses data: policies.google.com/technologies/partner-sites

In-app purchases

Payments are handled by Google Play. We do not receive your card or payment details. To restore purchases, the app asks Google Play which items you own.

Remote settings (Firebase)

To change settings such as notices, event dates, daily ad limits and help links without an app update, the app uses Google Firebase Remote Config. When you open the app it fetches these settings. Your tasks, records, moods, pet name and routines are never sent.

• What is processed: the Firebase installation ID (a random number created per install — not the advertising ID) and its auth token, app version, language, OS version, and the IP address used for the connection (Google may infer a country code from it)
• Why: to deliver settings (app functionality)
• Who: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as our service provider (processing and storage on our behalf, outside Korea) — privacy contact firebase.google.com/support/privacy
• Recipient's purpose: processes the data only to deliver settings for us, within our instructions
• Where and when: Google servers in the US and other countries / each time you open the app / over the internet (HTTPS)
• How long: the installation ID is removed from your phone when you uninstall the app; on Google's servers we set no retention period and Firebase's policy applies (Google says data tied to an installation ID is removed within 180 days after the ID is deleted); we do not collect or keep installation IDs and do not link them to your name
• Your choice: with the internet off nothing is sent, and the app works fully with its built-in default settings; you only miss new notices and events delivered by remote settings (no other disadvantage). Uninstalling the app stops it entirely

Photo card sharing

The app can turn your room, pet, growth or postcard screens into a photo card and opens your phone's share sheet only when you tap "Share". You choose where it goes (a messenger, social app, etc.), and from then on that app's policy applies. The card shows your pet's picture, the name you gave it, the date, your logged-day count and (if turned on) a small app name. Nothing is sent to our servers, and the app does not ask for photo or storage permissions for this.

Cloud backup

So you can continue on a new phone, the app uses Android Auto Backup. If Google backup is on for your phone, Android backs up only the save data (your to-dos, records, moods, room, pet name, routine and the other items listed above) to your Google account (Google Drive) and restores it when you install the app on a new phone or transfer between devices. Photo card images and temporary files are not included. This is handled by Google under your Google account settings; we cannot see it and do not receive it. You can turn it off in your phone settings (Google › Backup). Purchases are re-checked with Google Play, not taken from the backup.

Children

The app is intended for users aged 13 and over. We receive no names, contact details or similar information from anyone, including children, and we do not ask for age. The random Firebase installation ID used to receive settings is a number that does not identify a person, and we do not link it to a name or anything else. If a parent or legal guardian of a child under 14 does not want this processing (remote settings), uninstall the app or tell us through the contact below, and we will help as far as we can.

Your choices

Because your data stays on your phone, you are in control of it: you can edit your records in the app, and delete everything by uninstalling the app or clearing its storage.

Security: we have no server or database, and communication between the app and Google is encrypted with HTTPS.

Complaints (Korea): Personal Information Infringement Report Center privacy.kisa.or.kr (118), Personal Information Dispute Mediation Committee kopico.go.kr (1833-6972), National Police Agency cybercrime report ecrm.police.go.kr (182)

If you contact us

If you email us, we use your email address and message only to reply to you, and delete them 1 year after the matter is closed.

Changes

If the app starts handling data differently (for example, by adding ads or purchases), we will update this page and the date above before that version is released.

Contact

RiverMountain Studio · [email protected]