“放空 ZoneOut” (the “App”) is developed and operated by rollitinno (sole developer — referred to as “we”). We respect your privacy. This policy explains what we collect, how we use it, and your rights.

1. What we collect

1.1 What you provide

• Stock Code: a pseudonymous identifier (e.g. TPE-042069) generated locally on your device to distinguish your local data. It cannot be linked back to your real identity.
• Industry preference: a fictional industry tag you pick at sign-up — display-only.
• Session timing: start/end timestamps of each “zone-out” session.
• Timezone: IANA timezone, used for daily attribution.
• Theme / language preference: dark/light, zh-Hant/English.
• Contact information: if you email us, we receive your email address and message content, and use them only to respond to support, legal, privacy, or data requests.

1.2 Automatically collected

• Crash reports: if the App crashes, Firebase Crashlytics auto-sends stack trace + device model + OS version. We attach your pseudonymous Stock Code as user identifier to help debug — no PII.
• Usage events: Firebase Analytics collects usage events (e.g. session_started, score_recalculated) to improve the product. Some events may include your Stock Code as a pseudonymous identifier, but no name, email, phone number, or other direct PII is attached.
• Ad consent state: Google AdMob UMP and iOS ATT may request advertising consent depending on your region and platform. The App does not pass custom targeting keywords or cross-app usage history, and uses non-personalized ad requests by default.

1.3 We never collect

• Name, phone, address, birthday
• Location (GPS, Wi-Fi, cell tower)
• Contacts, photos, calendar
• Health data, microphone, camera
• Financial accounts, passwords

2. Where data is stored

• On your device + our cloud: functional data — session records, Score, K-line, daily stats, morning outlook cards, milestone unlocks, and your Stock Code / timezone / industry — is stored locally in SQLite and synced to our cloud database (Supabase, Tokyo, Japan region), keyed to an anonymous device sign-in identifier and your Stock Code. This sync powers cross-device restore, server-side Score calculation, and aggregate “market index” statistics; it runs automatically on first connection (it is not opt-in). The data stays keyed to the anonymous Stock Code and contains no name / email / phone or other direct personal identifiers.
• Third-party telemetry: anonymous / pseudonymous data from Firebase Crashlytics and Firebase Analytics is sent to Google servers (US / EEA regions).
• Account linking (optional): you may choose to link your account via Apple or Google sign-in (to restore your data on a new device or after reinstalling). If you enable it, we receive that provider’s identifier and the email it supplies (if any). If you don’t, you stay fully anonymous.

3. Ads & third parties

The App shows Google AdMob ads to support the free tier. AdMob is a Google service governed by Google’s own privacy policies.

• iOS: the ATT result determines whether IDFA is available to the Google Mobile Ads SDK. The App does not pass custom targeting keywords or app usage history, and uses non-personalized ad requests by default.
• Android: Google AdMob UMP collects GDPR / EEA / UK consent where required, and ad handling follows your choice.
• EEA / UK users: re-open the UMP consent flow anytime via in-app “Settings → Ad Preferences”.

Third parties used:

• Supabase — cloud data storage (zone-out records, stats, anonymous identity; servers in Tokyo)
• Google AdMob — ads
• Google Firebase Crashlytics — crash reporting
• Google Firebase Analytics — anonymous / pseudonymous usage events
• Apple ATT / SKAdNetwork — iOS ad consent / attribution
• Apple / Google Sign-In — optional account linking (restore on a new device)
• Apple App Store / Google Play — payment processing (if subscriptions are offered in the future)

We do not sell your data to third parties and do not use it for profiling or cross-service tracking.

4. Children

The App targets users aged 13+ (16+ for EEA / UK). We do not knowingly collect data from children. If you are a guardian and believe a child is using the App without permission, use “Settings → Delete Account” in-app to delete the account (this removes both local and cloud data), or contact us for help.

5. Your rights

• Deletion: “Settings → Delete Account” permanently deletes your account and all associated data — both on-device and in the cloud (Supabase): all zone-out records, stats, and identifiers. This cannot be undone. Note: uninstalling the App only removes local data and does not delete cloud records; use “Delete Account” for full deletion.
• Access / correction: your zone-out records and stats are synced to the cloud and tied to your anonymous ticker code; what the App displays reflects this data. Email us for export or correction.
• Opt out of personalised ads: on iOS, “Settings → Privacy & Security → Tracking → 放空 ZoneOut”; on Android, in-app “Settings → Ad Preferences”.
• Crashlytics / Analytics requests: there is no in-app toggle yet. If you want help with existing telemetry or a data request, email us; we will assist according to what can be identified and what the third-party platforms support.

6. Payments & subscriptions

The App is currently free and ad-supported, with no purchases or subscriptions.

If optional subscriptions (e.g. ad removal) are offered in the future, payments will be processed by Apple App Store / Google Play — we never see your card or account info, only the subscription status they return. Refunds go through App Store / Google Play support. Per our product promise, subscriptions do not unlock any feature — all features remain free for everyone; subscriptions only “remove ads + support the product”.

7. Retention

Local and cloud (Supabase) data are kept until you delete your account in-app — deleting the account permanently removes both. Uninstalling the App only clears local data; cloud records remain until you delete the account. Crashlytics defaults to 90 days; Analytics defaults to 14 months. We do not extend the defaults.

8. Changes to this policy

If we materially change this policy, we will notify you in-app and update the “Last updated” date above. Where law or platform policy requires renewed consent, we will ask for it before the applicable change takes effect; otherwise, continued use means you accept the updated policy.

9. Contact us

For privacy questions or data deletion requests:
[email protected]