Privacy Policy

1. Information we collect (and why)

We pocket as little data as possible to keep the App functional, fun, and reliable.

A. Account & authentication data

• What: When you use "Sign in with Apple," we receive a unique, anonymized user identifier. If you choose, Apple also shares your email address (which you can hide using Apple's "Hide My Email" feature).
• Why: To create your secure account via our backend provider (Supabase), allowing you to sync your streak and cheat history across your devices.

B. App content data

• What: The specific items you log within your weekly budget (e.g., date, time, and custom cheat categories like "Alcohol" or "Sweets").
• Why: This is the core functionality of the App — calculating your streaks, keeping track of your remaining budget, and generating your Pro tier charts.

2. Third-party services & data collection

To serve you ads and keep the infrastructure running, we use trusted third-party SDKs. These third parties collect data directly from your device as outlined below.

A. Google AdMob (advertising)

The free version of Cheatah displays advertisements served by Google AdMob. To make this work, the Google Mobile Ads SDK may automatically collect:

• Device identifiers: Advertising ID (IDFA on iOS), IP address, and general device characteristics.
• Usage & diagnostics: In-app ad interactions and non-user-related crash logs.
• Purpose: To deliver, personalize, and measure the performance of advertisements.

B. Supabase (backend cloud infrastructure)

We use Supabase to host our database. Your authentication token and logged items are securely transmitted and stored on Supabase servers. They do not use your data for any marketing purposes.

C. Firebase Crashlytics (crash reporting)

To diagnose and fix bugs, we use Google's Firebase Crashlytics. When the App crashes or encounters a non-fatal error, Crashlytics may collect:

• Crash diagnostics: Stack traces, device model, OS version, app version, and a Firebase-generated install identifier.
• Account identifier: Your Cheatah account UUID, so we can correlate a crash to a specific user when you report a bug.
• Purpose: App stability and debugging. Crash data is retained by Google for up to 90 days.

D. Legal basis for processing (EEA users only)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context:

• Performance of a contract: Processing your account data and logged cheats is necessary to provide the core services of Cheatah.
• Legitimate interests: Processing data via Google AdMob to display contextual or personalized advertisements, and using Firebase Crashlytics to diagnose and fix bugs.

3. Data retention & deletion rights

Your data belongs to you. We store your account details and logged cheats for as long as your account remains active.

Account deletion: You can delete your account and all associated data at any time directly within the App settings. Alternatively, you can contact us at contact@coolbyteslab.com to request permanent data deletion.

Your rights under GDPR and CCPA

Depending on your location, you have rights regarding your personal data, including:

• The right to access, update, or delete the information we have on you.
• The right of rectification if that information is inaccurate.
• The right to object to our processing of your personal data.
• The right to data portability (requesting a copy of your data in a structured format).

4. Children's privacy

Cheatah does not knowingly collect personal data from children under the age of 13. If you believe a child has provided us with personal data, please contact us immediately, and we will take steps to remove it.

5. Changes to this policy

We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

6. Contact us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at:

• Email: contact@coolbyteslab.com
• Company: Cool Bytes Lab