Privacy Policy
Last updated: [DD Month 2026] · Version 2.0 · [Previous version: 21 May 2017]
1. Who we are
This Privacy Policy is issued by [LEGAL ENTITY NAME, e.g. Grow Up Technologies SL], a company registered in Spain, tax ID [NIF], registered office [STREET, CITY, POSTAL CODE, SPAIN] (“we”, “us”, “our”). We publish apps under the brand names Universapp Studio, Mimi Software Studio and Rainbow App Studio. All three names refer to the same company.
Privacy contact: [privacy@universappstudio.com]. We are not required to appoint a Data Protection Officer; the contact above handles every privacy request.
2. Which apps this policy covers
This policy applies to the Android apps we publish on Google Play, listed below. The common sections (3 to 14) apply to all of them. Each app has an annex describing exactly what that app does with your data. Where an annex and a common section differ, the annex prevails for that app.
| App (Google Play name) | Package | Annex |
|---|---|---|
| Kit Negocio: Reseñas | com.mimisoftware.reviewreply |
A |
| Emoji Maker (Instaemojis) | com.mimisoftware.emojicreatoremoticonosemoticones |
B |
| Sounds for WhatsApp | com.plantillatabladesonidos |
C |
| Notification Sound: Ringtone (Notification Sounds) | com.mimi.ringtones.notificationsounds |
D |
[If Effects & Sounds for Messenger or Qustom! are still published, add an annex for each; if they were unpublished, remove them from the listing and delete their old mentions from this page.]
3. In short
- We do not sell your personal data.
- None of our apps asks you to register with a password. Kit Negocio: Reseñas, Sounds for WhatsApp and Emoji Maker use an anonymous account (a random identifier); in Emoji Maker you can link it to Google by tapping the button. Notification Sound: Ringtone signs you in silently with a Google account already on your phone, or anonymously if there is none. With Google we receive your name, email and profile picture. Each annex says what the account is used for.
- Free versions show ads served by Google AdMob and its partners. In the EEA, the UK and Switzerland we ask for your consent before loading any ad and you can change your choice at any time from the app settings.
- Kit Negocio: Reseñas sends the review text you paste to Google’s Gemini model (through Google Cloud Vertex AI, EU region) only to generate reply suggestions. We do not store that text anywhere.
- Sounds and generated replies stay on your device. In Emoji Maker, the emojis you save and your sticker packs are backed up to your account, and emojis you publish are visible to other users; photos you edit are never uploaded.
- You can delete your data from inside each app or by writing to us (section 11 and the deletion page).
4. What data we process and why
The table lists the categories that can apply across our apps. Each annex says which ones apply to that app.
| Category | Examples | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|---|
| App activity & diagnostics | Screens opened, features used, crash reports, device model, OS version, app version, language, country (from IP, not stored) | Keep the app working, fix crashes, understand which features are used | Legitimate interest (service quality) |
| Advertising identifier | Android advertising ID, ad interactions, coarse location derived from IP by the ad network | Show ads, measure them, limit frequency, prevent fraud | Consent (personalised ads, EEA/UK/CH); legitimate interest (non-personalised ads and fraud prevention) |
| Consent records | Your choices in the consent form, timestamp | Prove and honour your choices | Legal obligation |
| Purchases | Google Play purchase token, product bought, status and expiry | Unlock what you paid for, restore purchases, prevent fraud | Contract |
| Account identifiers | Random anonymous user ID; optionally your Google account ID and email if you sign in with Google | Keep your data and purchases together across reinstalls | Contract |
| Content you provide | Review text pasted into Kit Negocio: Reseñas; business profile; photos you open in Emoji Maker | Provide the feature you asked for | Contract |
| Support | Your email and message when you write to us | Answer you | Legitimate interest |
We do not process special categories of data (health, religion, etc.). We do not use your data for automated decisions with legal effects.
Google Play payment details (card numbers, etc.) are handled by Google; we never receive them.
5. How we obtain data
Directly from you (what you type, open or buy), from your device (identifiers and technical data sent by the app and the SDKs it contains), and from Google (purchase status, Play Console aggregated statistics). We do not buy data from third parties.
6. Advertising and your consent
Our free apps show ads through Google AdMob, which may use mediation partners (other ad networks that bid for the ad space). The networks that can serve ads in each app are listed in its annex, with links to their privacy policies.
- In the European Economic Area, the United Kingdom and Switzerland, the first time you open an app we show a consent form provided by Google (the “UMP” consent management platform, certified under the IAB TCF 2.2 framework). No ad SDK is initialised before you answer. You can accept, reject or customise. If you reject, you may see non-personalised ads or no ads.
- You can change or withdraw your choice at any time from Settings → “Privacy & ads” in the app, or by resetting your advertising ID in Android settings (Settings → Google → Ads).
- Ad networks may receive your advertising ID, IP address (used for approximate location and fraud prevention), device type and the ads you interact with. They act as independent controllers for their own measurement; their policies are linked in section 7.
- Our paid or subscription tiers remove ads where the annex says so.
We do not run ads in apps or app sections designed for children (see section 12).
7. Who we share data with
We share data only with the service providers below (“processors” or, for ad networks, independent controllers), only for the purposes above.
| Provider | Service | Data | Policy |
|---|---|---|---|
| Google LLC / Google Ireland Ltd | Firebase (Authentication, Firestore, Cloud Functions, App Check, Remote Config, Analytics, Crashlytics — which ones per annex) | Identifiers, diagnostics, app content as described per annex | https://firebase.google.com/support/privacy |
| Google LLC | Google Cloud Vertex AI (Gemini models), EU region | Review text sent by Kit Negocio: Reseñas (not stored by us; Google does not use it to train models under Cloud terms) | https://cloud.google.com/terms/data-processing-addendum |
| Google LLC | AdMob (ads and measurement) | Advertising ID, IP, device, ad events | https://policies.google.com/privacy · https://support.google.com/admob/answer/6128543 |
| Meta Platforms (Meta Audience Network) | Ad network via AdMob mediation — Notification Sound: Ringtone, Emoji Maker | Advertising ID, IP, device, ad events | https://www.facebook.com/privacy/policy |
| Liftoff Mobile (Liftoff Monetize / Vungle) | Ad network via AdMob mediation — Notification Sound: Ringtone, Emoji Maker | Advertising ID, IP, device, ad events | https://liftoff.io/privacy-policy/ |
| Unity Technologies (ironSource / Unity LevelPlay) | Ad network via AdMob mediation — Notification Sound: Ringtone, Emoji Maker | Advertising ID, IP, device, ad events | https://unity.com/legal/privacy-policy |
| Yandex (Yandex Ads) | Ad network — Notification Sound: Ringtone; Emoji Maker (Russia only, instead of AdMob) | Advertising ID, IP, device, ad events | https://yandex.com/legal/confidential/ |
| [Kit Negocio: Reseñas mediation partners once decided (D-006)] | Ad network via AdMob mediation | Advertising ID, IP, device, ad events | [link] |
| Google LLC | Firebase Cloud Messaging (push), Firebase Cloud Storage (sounds, editor assets, published emojis) | Push token; files you publish (Emoji Maker) | https://firebase.google.com/support/privacy |
| Google LLC | ML Kit (Emoji Maker background remover) | Runs on the device; the model is downloaded through Google Play services; no image leaves the phone | https://developers.google.com/ml-kit/terms |
| Google LLC | Google Play Billing | Purchase tokens and status | https://policies.google.com/privacy |
| Google LLC | Google Play Services (In-App Review, In-App Update, Play Integrity) | Device integrity signals, app version | https://policies.google.com/privacy |
We may also disclose data if the law requires it, or to protect our rights, users or the public. If we sell or merge the business, data may be transferred to the successor under the same commitments.
[For each app, the annex names the exact Firebase products and ad networks it uses. Remove rows that no app uses.]
8. International transfers
Our servers are provided by Google. For Kit Negocio: Reseñas we have configured Google Cloud to process and store data in the European Union (Firestore multi-region eur3; Vertex AI multi-region eu). For Emoji Maker, the Firestore database that holds accounts, profiles and community data is located in the United States (multi-region nam5), while our Cloud Functions run in the EU; uploaded images may also be stored in the US. Google Analytics, Crashlytics, Cloud Messaging and AdMob may process data in the United States for all apps. Google is certified under the EU-U.S. Data Privacy Framework and we rely on the Standard Contractual Clauses included in Google’s data processing terms for any other transfer.
9. How long we keep data
| Data | Retention |
|---|---|
| Review text (Kit Negocio: Reseñas) | Not stored. Used in memory to generate replies and discarded. |
| Generated replies | Only on your device, until you delete them or delete your account. Never on our servers. |
| Business profile, daily usage counters | While your account exists. Deleted immediately when you delete your account. |
| Reports of inappropriate AI output | Kept without any link to your account after you delete it (only a hash of the review, the reply index, the reason and a timestamp). |
| Emoji Maker: account, profile, published emojis, sticker-pack backups, community activity | While the account exists. Inactive anonymous accounts with no data may be purged after 12 months. |
| Anonymous account and purchase records | While your account exists; purchase records as long as Google Play requires for refunds and fraud prevention. |
| Analytics and crash data | As configured in Firebase: [14 months] for Analytics, [90 days] for Crashlytics. [Confirm in Firebase console.] |
| Consent records | As long as the consent is valid, plus the limitation period for legal claims. |
| Support emails | [12 months] after the request is closed. |
10. Security
Data travels encrypted (TLS). Access to our Google Cloud projects is limited to the owner, protected with two-factor authentication. Our backend accepts requests only from genuine installs of our apps (Google Play Integrity / Firebase App Check). Only the server can change usage limits and subscription status. We do not store review text anywhere, so it cannot leak from our systems.
11. Your rights
Under the GDPR and the Spanish LOPDGDD you can ask us to access, correct, delete, port or restrict your data, object to processing based on legitimate interest, and withdraw consent at any time (this does not affect processing before withdrawal). Write to [privacy@universappstudio.com] from the email you want us to reply to, naming the app. We may ask you for the anonymous user ID shown in the app settings to locate your data. We answer within one month.
You can also delete your data yourself:
- Kit Negocio: Reseñas: Settings → “Delete account and data”. Deletion is immediate on our servers and on your device.
- Emoji Maker and Notification Sound: Ringtone: [once published] “Delete account and data” in the app, or by email as described on our deletion page. In Emoji Maker you can already delete each published emoji from your profile.
- Sounds for WhatsApp: uninstalling removes everything on your device; server-side purchase and reward records are deleted on request by email.
- All apps: advertising and analytics identifiers can be reset in Android settings. Full instructions per app: https://universappstudio.com/delete-account/.
If you are not satisfied, you can lodge a complaint with the Spanish supervisory authority, Agencia Española de Protección de Datos (www.aepd.es), or with the authority of your country of residence.
12. Children
Our apps are intended for users aged [16 / 14 in Spain / 13 in the US] and over and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it. [If any app is declared as “designed for families” or targets a mixed audience in Play Console, this section and the ad configuration for that app must change: no personalised ads, certified ad SDKs only. Confirm the target audience of each app in Play Console before publishing.]
13. Changes to this policy
We will post any change on this page with a new “last updated” date and, for material changes, a notice inside the affected app. Previous versions are available on request.
14. Contact
[LEGAL ENTITY NAME] · [ADDRESS] · [privacy@universappstudio.com]
Annex A — Kit Negocio: Reseñas
Package: com.mimisoftware.reviewreply · Publisher brand: Mimi Software Studio · Audience: business owners, 18+
What the app does. You paste a customer review you have received on a platform such as Google, Tripadvisor, Booking.com, Airbnb or TheFork; the app suggests three replies written by an AI model; you copy the one you like and paste it on the platform yourself. The app does not connect to any review platform, does not read your reviews and never writes reviews.
Account. On first launch the app creates an anonymous account with Firebase Authentication: a random identifier with no name, email or phone. Signing in with Google is offered only when you subscribe to Pro, so your subscription can be recovered on another phone; it adds your Google account ID and email to the account.
Data we process
| Data | Where it goes | Purpose | Kept |
|---|---|---|---|
| Review text you paste | Sent over an encrypted connection to our Cloud Function (EU, Belgium) and from there to Google Gemini via Vertex AI (EU multi-region) | Generate three reply suggestions | Not stored. Discarded as soon as the replies are returned. Never written to databases, logs or crash reports. Google processes it under its Cloud data processing terms and does not use it to train models. |
| Generated replies | Your device only (app private storage, excluded from Android backup and device-to-device transfer) | Let you see your previous replies (“Previous replies” screen) offline | Until you tap “Clear history” or “Delete account and data”, or uninstall |
| Business profile (business name, sector, default tone) | Firestore (EU) and a cache on your device | Personalise the replies; optional | Until you change it or delete your account |
| Tone and language choices | With each generation request and in the device history | Generate replies in the tone and language you asked for | As above |
| Daily usage counter | Firestore (EU), written only by our server | Apply the free plan limit (3 generations per day) and an anti-abuse cap | Rolling daily records; deleted with the account |
| Reports of inappropriate AI output | Firestore (EU) | Improve filtering; required by Google Play’s AI-generated content policy | Kept after account deletion without your identifier; contains only a hash of the review (not the text), which reply was reported, the reason you chose and the time |
| Subscription status (Pro) | Firestore (EU), verified by our server with the Google Play Developer API | Unlock unlimited generations without ads | While the subscription or account exists |
| App integrity signals | Firebase App Check / Google Play Integrity | Make sure requests come from a genuine install | Short-lived tokens |
| Advertising ID, ad events | Google AdMob and mediation partners (free plan only, after consent in EEA/UK/CH) | Show and measure ads | Per Google’s and partners’ policies |
| Analytics and crash data | [Firebase Crashlytics — planned; confirm before release] | Fix crashes. Crash reports never include review text or replies. | [90 days] |
| Clipboard | Read only when you tap “Paste”; written when you tap “Copy” | Paste the review, copy a reply | Not stored by us |
AI disclosure. Replies are generated by an AI model (Google Gemini). They can be inaccurate or inappropriate. Review every reply before publishing it; you are responsible for what you post. Each reply has a “Report” button; a report sends only the reason you choose and a hash of the review, never the review text.
Ads. The free plan shows a banner on the main and results screens and occasionally a full-screen ad when you return to the main screen. Never during onboarding, in settings or over the copy and report buttons. Pro removes all ads. Ad networks: Google AdMob and
Permissions. Internet. No access to contacts, location, camera, microphone or files.
Delete your data. Settings → “Delete account and data” deletes the replies stored on your device, your profile, your usage counters and your anonymous account on our servers immediately, and anonymises your reports. Reinstalling creates a new anonymous account. An active Pro subscription must be cancelled separately in Google Play (Subscriptions); deleting the account does not cancel billing. You can also request deletion at https://universappstudio.com/delete-account/.
Annex B — Emoji Maker (Instaemojis)
Package: com.mimisoftware.emojicreatoremoticonosemoticones · Play title: Emoji Maker: Custom DIY Emoji · Version reviewed: 5.1.5.0 (October 2026) · Audience: general, not directed to children
What the app does. You create emojis and stickers by combining pieces or starting from a photo you choose from your gallery or take with the camera; the background remover runs on your device (Google ML Kit, model downloaded through Google Play services). You can save your creations to your phone, share them, and add them as sticker packs to WhatsApp and Telegram. The app also has a community: emojis you save can be published to a public feed where other users can like, download and follow you, and you can block or report other users.
Photos. Photos you open or take are edited on your device and are never uploaded as such. The emojis you save from the editor are uploaded to our Google cloud storage so they can appear in the community and in your profile. A “public visibility” switch, on by default, controls whether the emoji appears in the public feed; switch it off before saving if you want to keep it private. [Owner: today a “private” emoji is still stored in a publicly readable storage path; see findings.]
Account. On first launch the app creates an anonymous account (a random identifier) so your creations and sticker packs can be backed up. Signing in with Google is optional, by tapping the button; it links your anonymous account to your Google account (name, email and profile picture) so you can recover your data on another phone. If you already had a Google-linked account, your anonymous data is merged into it and the anonymous account is deleted.
Data we process
| Data | Where it goes | Purpose | Kept |
|---|---|---|---|
| Photos you open or take | Your device only (private app storage; your gallery under “Pictures/Emoji Maker” when you save an image) | Create emojis and stickers | Until you delete them; saved images stay in your gallery after uninstalling |
| Emojis you save (PNG) and whether they are public | Google cloud storage and Firestore (United States, see section 8); public emojis are visible to every user of the app together with your display name, country flag and profile picture | Your profile, the community feed, likes and downloads | Until you delete the emoji or your account |
| Sticker packs (up to 30) | Backed up automatically to your account in our cloud storage (private to you) | Restore your packs after reinstalling or on another phone | Until you delete them or your account |
| Account (user ID, whether anonymous; with Google also name, email, profile picture), country flag you choose, short description | Firestore | Identify you, show your public profile (name, picture, flag) | While the account exists |
| Community activity: likes, downloads, who you follow and who follows you, users you block | Firestore | Run the community; enforce blocks | While the account exists |
| Reports you send (reported user or content, reason, optional text up to 300 characters) and moderation status | Firestore | Keep the community safe; content with several reports is hidden automatically and can be reviewed by us | Until the case is closed or your account is deleted |
| Purchases (Premium subscription with 3-day trial; one-time piece packs) | Google Play Billing; status verified by our server with the Google Play Developer API and stored with your account | Unlock content and remove ads; restore purchases | While the subscription or account exists |
| Advertising ID, ad events, approximate location from IP | Google AdMob and the ad networks listed below (after consent in EEA/UK/CH) | Show and measure banner, native (in the feed), full-screen and rewarded ads | Per each network’s policy |
| Analytics (screens, create/export/share actions, purchases, ad impressions, device and app version) and crash reports (with your user ID) | Firebase Analytics and Crashlytics, enabled only after the consent form where consent is required | Understand usage and fix crashes | [14 months / 90 days; confirm in Firebase] |
| Push notifications token, time zone, language and app version | Firestore (your account) and Firebase Cloud Messaging | Notify you about followers, likes and downloads, and about new content | While the app is installed |
| Preferences, local sticker packs and images | Your device (included in Android’s cloud backup) | Remember your work and choices | Until you clear the app’s data |
The app requests no camera, photo-library, contacts or location permission: the camera and gallery are opened through the standard Android picker, which gives the app only the image you choose. No device location is used.
Ads. Served by Google AdMob with mediation through Meta Audience Network, Liftoff Monetize (Vungle) and ironSource / Unity LevelPlay; in Russia, by Yandex Ads instead of AdMob. Each network’s privacy policy is linked in section 7. You can change your ad consent at any time from the side menu → “Privacy options” (shown where the law requires it). Premium removes ads.
Permissions. Internet and network state; Google Play billing; write to storage on Android 12 and earlier only (to save to the gallery); vibration; advertising ID; wake lock (notifications); notifications (asked during onboarding). Libraries add Android Privacy Sandbox ad-services, biometric (used by Google sign-in), push-message receipt and install-referrer permissions.
Delete your data. [Target behaviour once the in-app option exists:] Profile → “Delete account and data” removes your account, profile, published emojis and their images, sticker-pack backups, likes, follows, blocks and push tokens from our servers and signs you out; emojis saved to your gallery and sticker packs added to WhatsApp or Telegram remain until you delete them there. Until then, email [customersupport@universappstudio.com] with the subject “Delete account – Emoji Maker” and the email of the Google account you used (or the user ID shown in your profile) and we will delete everything within [7] days. You can already delete individual published emojis from your profile [owner: today this deletes the record but not the image file; see findings]. Cancel any active subscription in Google Play separately. See https://universappstudio.com/delete-account/.
Annex C — Sounds for WhatsApp
Package: com.plantillatabladesonidos · Play title: Sounds for WhatsApp · Audience: general, not directed to children
What the app does. A library of ringtones and notification sounds included inside the app. You can play them, save them to your phone, set them as your default ringtone, notification or alarm sound, add them to favourites and share them with other apps. The app does not read your WhatsApp chats, contacts or files; “WhatsApp” in the name refers to the use you may give the sounds. Sharing uses the standard Android share sheet.
Account. There is no sign-up and no login screen. When you buy the Premium upgrade or when the app checks whether you own it, it creates an anonymous account in Firebase Authentication: a random identifier with no name, email or phone. It cannot be recovered after you uninstall the app or clear its data.
Data we process
| Data | Where it goes | Purpose | Kept |
|---|---|---|---|
| Sounds you save | Your phone’s shared storage (Ringtones, Notifications or Alarms folders) through Android MediaStore; temporary copies in the app’s private storage | Use them as tones, share them | Until you delete them; they stay on your phone after uninstalling |
| System sound settings | Your device | Set the default ringtone, notification or alarm sound when you tap “Set as…” (requires the “Modify system settings” permission, which you grant in Android settings) | — |
| Favourites, onboarding state, reminder settings | Your device (app preferences, included in Android’s cloud backup of the app) | Remember your choices | Until you clear the app’s data or uninstall |
| Anonymous user ID | Firebase Authentication (EU) | Link your Premium purchase to your installation | While the account exists |
| Purchase record (product bought, Google order ID, validation date, premium status) | Firestore (EU), written only by our server after verifying the purchase with Google Play | Unlock Premium (no ads, VIP sounds) and restore it | Indefinitely, unless you ask us to delete it |
| Rewarded-ad records | Firestore (EU), written by our server when you finish a rewarded ad; AdMob receives your anonymous user ID to verify the reward | Grant the reward and prevent fraud | Indefinitely, unless you ask us to delete it |
| Advertising ID, ad events, approximate location from IP | Google AdMob (after consent in EEA/UK/CH) | Show and measure banner, interstitial and rewarded ads | Per Google’s policy |
| Analytics (screens, ad events, reminder and widget usage, device and app version) | Firebase Analytics | Understand usage and improve the app; no personal content is logged | [14 months; confirm in Firebase] |
| Push notifications | Firebase Cloud Messaging token (stored by Google, not by us) | Deliver occasional notifications and the “Sound of the day” reminder you can turn off in Android settings | While the app is installed |
| App integrity signals | Firebase App Check / Google Play Integrity | Make sure requests come from a genuine install | Short-lived tokens |
No crash reporting SDK is used. No contacts, location, camera, microphone or media-library permissions are requested.
Ads. Served by Google AdMob only (no other ad network). Formats: banner, full-screen, rewarded and rewarded full-screen ads. The Premium one-time purchase removes ads.
Permissions. Internet and network state; notifications; modify system settings (to set tones); write to storage on Android 9 and earlier only (to save sounds); advertising ID; wake lock (reminders).
Delete your data. Uninstalling the app or clearing its data removes everything stored on your phone except the sound files you saved to your Ringtones, Notifications or Alarms folders, which you can delete with any file manager. To delete the purchase and reward records linked to your anonymous ID on our servers, email [customersupport@universappstudio.com] from the app’s “Contact” option (or quoting the user ID the app shows) and we will delete them within [7] days; note that deleting the purchase record removes the ability to restore Premium on that installation. See https://universappstudio.com/delete-account/.
Annex D — Notification Sound: Ringtone (Notification Sounds)
Package: com.mimi.ringtones.notificationsounds · Play title: Notification Sound: Ringtone (shown in the app as “Notification Sounds”; previously listed as “Notification Sounds SFX”) · Audience: general, not directed to children
What the app does. A catalogue of notification sounds, ringtones and alarms organised by categories. Sounds are downloaded on demand from our Google cloud storage, can be played, saved, set as default tones, added to favourites and shared.
Account. On first launch the app tries to sign you in silently with a Google account already authorised on your phone (Google One Tap). If none is available it creates an anonymous account. With Google sign-in we store your Google account ID, display name and email; with an anonymous account we store only a random identifier. The account is used to keep your favourites and purchases in the cloud. [Owner: see checklist — the app currently offers no sign-out or account deletion; both are required before publishing.]
Data we process
| Data | Where it goes | Purpose | Kept |
|---|---|---|---|
| Account (user ID; with Google sign-in also name and email) | Firestore | Identify your installation, keep favourites and purchases | While the account exists |
| Favourites | Firestore (your account) and aggregated favourite counts per sound | Show your favourites; rank popular sounds | While the account exists |
| Download counts | Our Cloud Function increments a counter per sound (category and sound ID, linked to your session) | Rank popular sounds | Aggregated indefinitely |
| Sounds you save | Downloaded from Google cloud storage into the app’s private storage; copied to your phone’s Ringtones folder (MediaStore) or to the app’s external folder when you save, set or share | Use them as tones, share them | Until you delete them; saved tones stay after uninstalling |
| System sound settings | Your device | Set default ringtone, notification or alarm sound on request (“Modify system settings” permission) | — |
| Purchases (Premium subscription with monthly, yearly and 3-day-trial plans; premium category one-time purchases) | Google Play Billing; status recorded with your account | Remove ads and unlock categories; restore purchases | While the subscription or account exists |
| Advertising ID, ad events, approximate location from IP | Google AdMob and the ad networks listed below (after consent in EEA/UK/CH) | Show and measure ads | Per each network’s policy |
| Analytics (screens, notification and review prompts, device and app version) | Firebase Analytics | Understand usage and improve the app | [14 months; confirm in Firebase] |
| Push notifications | Firebase Cloud Messaging token (stored by Google); subscription to the “new content” topic | Tell you about new sounds | While the app is installed |
| App integrity signals | Firebase App Check / Google Play Integrity | Make sure requests come from a genuine install | Short-lived tokens |
| Consent choices, onboarding state, premium status cache | Your device (app preferences, included in Android’s cloud backup) | Remember your choices | Until you clear the app’s data |
No crash reporting SDK is used. No contacts, location, camera, microphone or media-library permissions are requested.
Ads. Served by Google AdMob with mediation through Meta Audience Network, Liftoff Monetize (Vungle) and ironSource / Unity LevelPlay, and by Yandex Ads (integrated directly; not initialised until you have answered the consent form). Each network’s privacy policy is linked in section 7. The Premium subscription removes ads.
Permissions. Internet and network state; notifications; modify system settings (to set tones); write to storage on Android 9 and earlier only; advertising ID; wake lock. Libraries add Google Play Billing, push-message receipt, install-referrer and Android Privacy Sandbox ad-services permissions.
Delete your data. [Target behaviour once the in-app option exists:] Settings → “Delete account and data” removes your account, favourites and purchase status from our servers and signs you out; sounds saved to your phone’s folders remain until you delete them. Until then, email [customersupport@universappstudio.com] with the subject “Delete account – Notification Sounds” and the email of the Google account you used (or the user ID shown in the app) and we will delete your account and data within [7] days. Cancel any active subscription in Google Play separately. See https://universappstudio.com/delete-account/.