Chromaleon Privacy Policy - Akukita Solutions

1. Who is responsible
Controller: Mario Simón Melchor (Akukita)
Contact email: info@akukita.es
Website: https://akukita.es
Address / Tax ID (NIF): C/Pizarro 20 2-2 Getafe Madrid 28906 47304152Y
This policy explains what data the game Chromaleon: Sort & Paint (“the app”) processes, why, and what rights you have.

2. What stays on your device
Your progress (completed pictures, coins, items, stars), sound, vibration and language settings, and your consent choices are stored only on your device. There are no user accounts or registration. We do not run our own servers that store your progress. If you uninstall the app, this data is deleted.

3. What data leaves your device and who receives it
The app uses Google services. These services send data off your device:

3.1 Advertising: Google AdMob
The app shows ads (banners, interstitials and rewarded videos). AdMob may process:

your advertising ID (Android Advertising ID);
your IP address and the approximate location derived from it;
device data (model, operating system, language, carrier);
ad interactions and performance and diagnostic data.
With your consent, ads may be personalised; without it, only non-personalised ads are shown. Google acts here as an independent controller of that data. More information: https://policies.google.com/technologies/ads

3.2 Analytics and stability: Firebase (Google)
To improve the game we use:

Firebase Analytics: usage events such as starting and finishing a picture, number of moves and stars, levels where you get stuck, use of boosters, screens viewed, offers shown, ads viewed (with estimated revenue) and purchases made (product, amount and currency). It also collects an app installation identifier (not your name or email), device data (model, Android version, language, approximate country) and session length.
Firebase Crashlytics: crash reports and diagnostic data (model, system version, app state at the time of the crash).
Firebase Remote Config: downloads app settings (for example coin prices, difficulty or ad frequency). The installation identifier is used for this.
We do not use this data to identify you. We do not link it to your name, email or phone number.

Google acts here as a data processor on our behalf. More information: https://firebase.google.com/support/privacy

3.3 Purchases: Google Play
In-app purchases are processed by Google Play. We never receive your payment details. We only receive confirmation that you bought a product (and, through Firebase Analytics, the product, amount and currency of each purchase).

4. Consent
If you are in the European Economic Area, the United Kingdom or Switzerland, you will see a consent form (Google User Messaging Platform) the first time you open the app. Firebase data (Analytics, Crashlytics, Remote Config) is only collected if you accept. If you decline, it is not sent, and any ads you see will be non-personalised.

You can change your choice at any time in Settings → Privacy (the button appears where the regulation requires it in your region).

Outside those territories, analytics and crash data are sent without a form; you can limit tracking by resetting or deleting your advertising ID in Android settings.

5. Purposes and legal basis
Purpose Data Legal basis
Showing ads Advertising ID, IP, device data Consent (Art. 6(1)(a) GDPR)
Usage analytics and improving the game Events, installation identifier Consent (Art. 6(1)(a) GDPR)
Detecting and fixing crashes Crash reports, diagnostics Consent (Art. 6(1)(a) GDPR)
Remote game settings Installation identifier Legitimate interest / consent
Managing purchases Data processed by Google Play Performance of a contract (Art. 6(1)(b) GDPR)
6. How long data is kept
Game progress: only on your device, until you delete it or uninstall the app.
Firebase Analytics: event-level data is kept for up to 14 months (it may be less depending on the property settings).
Crashlytics: up to 90 days.
AdMob: according to Google’s policies.
7. International transfers
Google may process data on servers outside the EEA, including the United States. Such transfers rely on the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

8. We do not sell your data
We do not sell or transfer your data to third parties, other than the providers listed above.

9. Children
The app is intended for people aged 13 or over. We do not knowingly collect data from anyone younger. In Spain, for children under 14, data processing requires the consent of a parent or guardian. If you believe a child has provided data, contact us and we will delete it.

10. Your rights
Where applicable, you may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@akukita.es.

Because analytics data is tied to an installation identifier and not to your identity, to handle a request we may need you to provide that identifier. You can also take control in other ways:

Uninstalling the app or clearing its data resets the installation identifier; earlier data can no longer be linked to your device.
Withdrawing consent in Settings → Privacy (if shown) stops further collection.
Resetting your advertising ID in Android Settings → Google → Ads.
If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (https://www.aepd.es) or with the authority in your country.

11. Security
Data is sent encrypted (HTTPS). Progress is saved on your device using safe writes.

12. Changes to this policy
If our data processing changes, we will publish the updated policy here with a new date. For important changes we will notify you in the app.

13. Contact
Mario Simón Melchor (Akukita) · info@akukita.es · https://akukita.es