01Who we are
Fish Factory ("Fish Factory", "we", "us", "our") is an independent mobile development studio registered in Ukraine. We are the developer of the apps that link to this policy and the controller of the personal data described in it.
Contact for any privacy question or request: contact@fishfactory.dev.
02Scope
This policy applies to all mobile applications published by Fish Factory on Google Play and the Apple App Store (the "Apps") and to the website fishfactory.dev (the "Site").
Not every App uses every feature described here. If an App handles data differently — for example, it has no accounts or no purchases — the App's store listing and in-app disclosures describe what applies to that App. Where an in-app notice differs from this policy, the in-app notice for that App prevails.
03Information we collect
We aim to collect only what an App needs to work, stay stable and improve.
Information you provide
- Account details — if an App offers accounts: email address, display name, and sign-in identifiers from the provider you choose (for example, Sign in with Apple or Google).
- Content you create — information you enter or save in an App, such as settings, preferences and other in-app content.
- Messages to us — your email address and anything you include when you contact support.
Information collected automatically
- Usage analytics — screens viewed, features used, session length, and similar interaction events, associated with a pseudonymous app-instance identifier.
- Crash reports and diagnostics — stack traces, app state at the time of a crash, app version, and performance data.
- Device information — device model, operating system version, language, time zone, country or region derived from your IP address, and network type.
Purchases and subscriptions
Payments are processed by Apple (App Store) or Google (Google Play). We never receive or store your full card number or other payment credentials. We receive only what is needed to unlock what you bought: product identifier, purchase or subscription status, renewal and expiry dates, an anonymous transaction identifier, and the storefront country.
Permissions
Some features need device permissions (for example, notifications, camera or photo library). An App asks for a permission only when a feature requires it, and you can withdraw it at any time in your device settings.
What we do not collect
We do not sell your personal data. We do not collect special categories of data (such as health, biometric, or precise location data) unless an App clearly asks you for it and explains why.
The Site
The Site is a static website. It does not use cookies, analytics or advertising trackers. It is hosted on GitHub Pages and loads fonts from Google Fonts; these providers may process your IP address and browser details in their server logs in order to deliver the pages.
04How we use information
- To provide the Apps and their features, including syncing and restoring your data and purchases.
- To verify purchases and manage subscription access.
- To find and fix crashes, bugs and performance problems.
- To understand how features are used so we can improve the Apps.
- To answer support requests and send important service messages.
- To prevent fraud and abuse and to protect the security of the Apps.
- To comply with legal obligations, such as tax and accounting rules.
We do not use your data for automated decision-making that produces legal or similarly significant effects.
05Legal bases
Where the EU or UK General Data Protection Regulation (GDPR) applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the Apps, accounts, purchases and support | Performance of a contract with you |
| Crash reporting, security, fraud prevention, product improvement | Our legitimate interests in running stable and secure Apps |
| Analytics, personalised features or notifications where the law requires opt-in | Your consent, which you can withdraw at any time |
| Tax, accounting and responding to lawful requests | Compliance with a legal obligation |
06Sharing and service providers
We share information only with the parties below, and only as far as needed for the purposes described in this policy.
- App stores and payment platforms — Apple and Google process payments and manage subscriptions under their own privacy policies.
- Infrastructure and tooling providers — companies that provide analytics, crash reporting, subscription management, authentication, cloud hosting or push notifications on our behalf. Depending on the App, these may include services such as Google Firebase (Analytics, Crashlytics, Cloud Messaging) and RevenueCat. They act as our processors and may use the data only to provide their service to us.
- Authorities and legal recipients — when we are required to by law, or when it is necessary to protect our rights, our users or the public.
- Successors — if Fish Factory or an App is involved in a merger, acquisition or transfer of assets, in which case this policy continues to apply to your data.
The specific third-party services used by an App are listed in that App's privacy details on the App Store and in its Data safety section on Google Play.
07International transfers
Our service providers may process data in countries other than the one you live in, including the United States and countries in the European Economic Area. Where data is transferred from the EEA, the UK or Switzerland to a country without an adequacy decision, the transfer relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
08Data retention
We keep personal data only for as long as it is needed for the purposes described above:
- Account data and in-app content — while your account exists, and deleted within 30 days after you delete your account or ask us to.
- Analytics data — up to 14 months, then deleted or aggregated so it no longer identifies you.
- Crash reports — up to 90 days.
- Purchase records — for as long as tax, accounting and consumer-protection laws require.
- Support correspondence — up to 24 months after the request is closed.
Backups that contain deleted data are overwritten on their normal rotation schedule.
09Deleting your data
You can ask us to delete your account and the data associated with it at any time, without having to reinstall or open the App:
- use the account deletion option inside the App, where the App offers accounts; or
- follow the steps on our Data deletion page; or
- email contact@fishfactory.dev with the subject "Data deletion request" and the name of the App.
We complete deletion requests within 30 days. Some records may be kept longer where the law requires it (for example, purchase records for tax purposes). Deleting your account does not cancel an active subscription — cancel it in your App Store or Google Play account settings.
10Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy of it;
- correct inaccurate data or delete your data;
- restrict or object to certain processing, including processing based on legitimate interests;
- withdraw consent at any time, without affecting processing that has already taken place;
- receive your data in a portable format;
- lodge a complaint with your local data protection authority.
To exercise any of these rights, email contact@fishfactory.dev. We respond within 30 days and may ask you to confirm your identity first. We will not treat you differently for exercising your rights.
Controls on your device
- Turn analytics off in the App's settings, where the App provides that option.
- Reset or limit your advertising identifier and manage app tracking in your device's privacy settings.
- Manage permissions and notifications in your device settings.
California and other US states
We do not sell personal information and do not share it for cross-context behavioural advertising. Residents of California and other US states with privacy laws can exercise the rights to know, delete and correct by contacting us at the address above.
11Security
We protect data with measures appropriate to its sensitivity, including encryption in transit (TLS), access controls limited to people who need the data to do their work, and reputable infrastructure providers. No method of transmission or storage is completely secure; if we become aware of a breach that affects your data, we will notify you and the relevant authorities as the law requires.
12Children's privacy
Unless an App's store listing says otherwise, the Apps are not directed to children under 13 (or the minimum age required in your country, up to 16), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
13Changes to this policy
We may update this policy as the Apps and the law change. The "Last updated" date at the top shows when it was last revised. If a change materially affects how we handle your data, we will tell you in the App or by other appropriate means before it takes effect.
14Contact us
Fish Factory
Ukraine
Email: contact@fishfactory.dev
Website: fishfactory.dev
See also: Terms & Conditions · Data deletion