Privacy Policy for Nyankos

Effective Date: October 12, 2025

Nyankos is a to-do list mobile application ("App") developed by [SAMAESTO] ("we," "us," or "our"). We are committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use the App. The App is designed for a general audience and is not directed to children under the age of 13 (or 16 in certain jurisdictions).

By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

This Privacy Policy complies with applicable privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the General Data Protection Regulation (GDPR) in the European Union, the California Online Privacy Protection Act (CalOPPA), and other applicable global privacy regulations. We do not knowingly collect personal information from children under 13 (or 16 under GDPR), and if we become aware of such collection, we will take steps to delete it.

Information We Collect

Information You Provide

• No Personal Data Collection by Us: The App does not require you to create an account, log in, or provide any personal information such as your name, email address, or contact details. All todo list data (e.g., tasks, notes, deadlines) is stored locally on your device and is not collected, accessed, or transmitted by us.
• No Sync or Backup: The App does not offer synchronization or backup features, so your data remains solely on your device.
• Permissions: The App requests permissions for notifications and alarms to provide task deadline alerts. These permissions do not involve collecting or transmitting any personal data; they are used solely to enable local reminders on your device.

Information Collected Automatically

Although we do not collect personal data directly, the App integrates third-party services that may collect certain information automatically for analytics and advertising purposes. These services are provided by Google and include:

• Firebase Analytics: We use Firebase Analytics to understand how users interact with the App, such as app usage patterns, session duration, and device information. Firebase may collect:
  • Device identifiers (e.g., Android Advertising ID or iOS Identifier for Advertisers).
  • Device information (e.g., model, operating system version, app version).
  • Usage data (e.g., app opens, feature interactions, crashes).
  • Approximate location (derived from IP address).
  This data is pseudonymized and aggregated. We do not access or use this data to identify individual users. For more details, see Google's Privacy Policy: https://policies.google.com/privacy.
• AdMob for Advertising: The App displays advertisements via Google's AdMob service to support free access. AdMob may collect:
  • Device identifiers (e.g., advertising ID).
  • Device information (e.g., type, OS).
  • Ad interaction data (e.g., views, clicks).
  • Approximate location (from IP address) for contextual ads.
  We do not share any user data with AdMob or any third parties beyond what is automatically processed by Google for ad delivery. Ads may be personalized based on Google's data, but we do not provide or share any App-specific data for this purpose. If personalized ads are served, this may involve "sharing" of personal information under CPRA for cross-context behavioral advertising. For more details, see Google's Privacy Policy: https://policies.google.com/privacy.

Under CCPA/CPRA, the categories of personal information that may be collected by these third-party services include:

• Identifiers (e.g., advertising ID).
• Internet or electronic network activity (e.g., app usage, ad interactions).
• Geolocation data (approximate, not precise).
• Inferences drawn from the above (e.g., user preferences for ads).

We do not collect sensitive personal information as defined under CPRA (e.g., precise geolocation, health data, or biometric data).

Do Not Track (DNT) Signals

In compliance with CalOPPA, we disclose that the App does not respond to browser-based DNT signals because it is a mobile app and does not operate via web browsers. However, third-party services like Firebase and AdMob may honor DNT signals in their web-based components; please refer to Google's Privacy Policy for details on how they handle such signals.

How We Use Your Information

• By Us: We do not collect or use any personal information directly. Your todo list data is stored locally and used only by the App on your device to provide its core functionality.
• By Third Parties:
  • Firebase Analytics data is used to improve the App's performance, fix bugs, and analyze usage trends.
  • AdMob data is used to serve relevant advertisements and measure ad effectiveness.

The lawful basis for processing under GDPR (if applicable) is our legitimate interest in app improvement and monetization, or consent where required (e.g., for advertising IDs). We minimize data processing to what is necessary.

Sharing Your Information

• We do not share, sell, rent, or trade any personal information collected through the App with third parties, except as described below.
• With Google: Data collected via Firebase Analytics and AdMob is processed by Google as a service provider. Google may use this data in accordance with its own privacy practices. We do not access this data or share it further.
• Legal Requirements: We may disclose information if required by law, such as in response to a court order, subpoena, or to protect our rights, property, or safety.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Under CCPA/CPRA, we do not "sell" personal information. However, if personalized ads via AdMob constitute "sharing" for behavioral advertising, you have the right to opt out (see "Your Rights" below). In the past 12 months, we have not sold personal information but may have shared identifiers and network activity with Google for advertising purposes.

We do not share information with the developer or any other third parties beyond Google.

Data Storage and Security

• Your todo list data is stored locally on your device and is not transmitted to our servers or any cloud storage.
• Third-party data (via Firebase/AdMob) is stored on Google's secure servers. We implement reasonable security measures to protect against unauthorized access, but no system is completely secure.
• Data retention: Local data persists until you delete it or uninstall the App. Third-party analytics and ad data is retained by Google as per their policies (typically up to 26 months for analytics).

International Data Transfers

If you are in the EU/EEA or other regions, data processed by Google may be transferred to the United States or other countries. Google provides adequate safeguards under GDPR and other applicable laws, including Standard Contractual Clauses. For details, see Google's Data Processing Terms: https://firebase.google.com/terms/data-processing-terms.

Your Privacy Rights

General Rights

You can manage permissions and delete local data via your device settings. Uninstalling the App will remove all local data.

CCPA/CPRA Rights (for California Residents)

Under CCPA/CPRA, you have the right to:

• Know: Request details on personal information collected, categories, sources, purposes, and sharing in the past 12 months.
• Delete: Request deletion of personal information we hold (note: we hold none directly; for third-party data, contact Google).
• Opt-Out of Sale/Sharing: Opt out of the sale or sharing of your personal information. Since we do not sell data, but ads may involve sharing, you can opt out by:
  • Resetting your advertising ID in device settings.
  • Using Google's opt-out tools: https://adssettings.google.com.
• Limit Use of Sensitive Personal Information: We do not collect or use sensitive information.
• Non-Discrimination: We will not discriminate against you for exercising these rights.

To exercise these rights, contact us at the details below. We will respond within 45 days (extendable to 90 days). We may verify your identity if needed.

GDPR and Other Global Privacy Rights

Under GDPR (for EU/EEA residents) and similar laws in other jurisdictions (e.g., UK GDPR, PIPEDA in Canada, LGPD in Brazil), you have the right to:

• Access, rectify, erase, or restrict processing of your personal data.
• Object to processing based on legitimate interests (e.g., analytics).
• Data portability.
• Withdraw consent (if applicable).
• Lodge a complaint with a supervisory authority.

Since we collect no personal data directly, these rights apply primarily to data held by Google. Contact us or Google to exercise them. Our lawful basis for processing is legitimate interest; you can object at any time.

Additional Global Considerations

The App is available globally, and we aim to comply with privacy laws in all jurisdictions where it is offered, including but not limited to:

• Canada (PIPEDA): Similar to GDPR, you have rights to access and correct personal information.
• UK (UK GDPR): Aligned with GDPR rights for UK residents.
• Australia (Privacy Act): Rights to access and correct personal information.
• Brazil (LGPD): Rights to access, delete, and object to data processing.

Contact us for assistance with these rights, and we will direct you to Google, where applicable.

Children's Privacy

The App is for a general audience and not intended for children under 13 (or 16 under GDPR). We do not knowingly collect personal information from children. If you believe we have, contact us to request deletion.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted in the App or via notification, with the updated effective date. Continued use constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy, contact us at: aiazu049@gmail.com.