Privacy policy

1. Who is responsible for your information

Jaren, operating as Sigani Studios, is responsible for GachaTime’s handling of your personal information. The app’s initial release is intended for users in Canada. For support, privacy questions, access or correction requests, or deletion requests, contact jaren@siganistudios.com.

Features can differ between development and public releases. This policy describes local app data and the additional processing associated with accounts, the leaderboard, and rewarded ads when those features are available. Production purchases are not currently offered.

2. Focus sessions and local progress

The app stores session deadlines, completed focus counts, points, spin and reward history, timer settings, selected skins, and display and notification preferences on your device. This information keeps timers and rewards consistent across restarts. GachaTime does not currently block other apps or measure your use of them.

Clearing app data, uninstalling, or losing your device can remove local progress. Signing in does not by itself guarantee that your progress is backed up. Device and operating-system backups may have separate retention behavior.

3. Accounts and cloud features

When account sign-in is available, GachaTime uses Google’s Firebase Authentication. Sign-in can involve an account identifier, email address, and profile information supplied by your chosen sign-in provider. Firebase also processes technical information, including IP addresses and user-agent information, for authentication, security, and abuse prevention. The sign-in screen identifies the available sign-in methods.

We use account information to authenticate you and provide account-specific features. Where cloud backup is offered and you choose to use it, the server associates your account identifier with a saved snapshot of your session, points, reward history, settings, and completed focus count. Authentication alone does not upload a backup. Signing out does not automatically erase device or server data.

Account sign-in and client cloud backup are still being prepared in the current development version. See Firebase’s privacy and security information.

4. Optional leaderboard

If you choose to participate in the leaderboard, the app sends an installation identifier, a credential used to authenticate that installation, and cumulative points to the leaderboard service. An anonymous display name, score, and rank are visible to other participants. Authentication credentials and account email addresses are not public leaderboard fields.

Leaderboard participation is separate from sign-in and local progress. Server requests can also involve IP addresses, timestamps, and technical request information for operation and security. Scores in the current prototype are client-reported and rankings are provisional. Clearing local data does not automatically delete an existing server entry.

5. Rewarded advertising

GachaTime uses Google AdMob / Google Mobile Ads for rewarded ads when live advertising is enabled. Choosing to watch an ad can earn additional in-app spins. You may skip optional rewarded ads and take an eligible break after using your free spins.

The advertising SDK can process IP addresses, device and advertising identifiers, approximate location derived from IP address, app interactions, ad views and clicks, and diagnostic information. This supports ad delivery and measurement, fraud prevention, and service operation. Ad personalization and identifiers depend on the SDK configuration, your device settings, applicable consent requirements, and available privacy choices.

You can decline an optional ad and use device privacy controls. Where the app offers an advertising consent or privacy-options screen, use it to review or change your choices. Consent to optional advertising does not arise merely from reading this policy. Development builds may use simulated or Google test ads; test mode does not guarantee that an advertising SDK processes no data.

See Google’s privacy policy and Mobile Ads data disclosure.

6. Purchases and RevenueCat

Production in-app purchases are not currently offered. GachaTime+ is planned as an optional one-time purchase, rather than an auto-renewing subscription. We will update these disclosures before enabling production billing.

The current development integration can use RevenueCat’s Test Store. In that configuration, RevenueCat processes its app-user identifier, test transaction and product information, and entitlement status to manage access. Its SDK can also process technical information described in RevenueCat’s privacy policy. GachaTime does not receive your full payment-card details.

7. Permissions, this website, and support

On supported Android devices, optional notifications show break countdowns and completion alerts. Notification and precise-alarm permissions are controlled through device settings; lock-screen settings affect visibility. The optional foreground keep-screen-on setting does not monitor other apps.

This website contains no developer-added analytics, advertising scripts, embedded social widgets, contact forms, or site cookies. Azure Static Web Apps serves the pages and processes technical connection information. See the Microsoft Privacy Statement. External links have their own privacy practices.

If you email us, we receive your email address, message, and any information you choose to include. We use that information to respond and handle your request. Please do not send passwords, payment-card details, or unnecessary sensitive information.

8. Sharing and international processing

We use information to operate requested features, save progress, authenticate users, provide optional rankings and ads, respond to support, and protect the service. Providers process information necessary for their functions, and public leaderboard entries are visible to other participants.

We do not sell your account details or focus history. Advertising providers’ collection, sharing, and personalization are described separately above. Information may also be disclosed where required by law or necessary to protect rights, safety, or security. If operation of the app is transferred, personal information may be transferred with it subject to applicable privacy obligations.

Google, RevenueCat, Microsoft, and hosting providers may process information outside Canada, including in the United States. Information processed abroad can be subject to the laws and lawful access requirements of those countries.

9. Retention and security

Local information remains on your device until changed or removed, subject to operating-system behavior. We retain account records, cloud data, and leaderboard entries while needed to provide the relevant service, unless you request deletion or another legal basis requires retention. Support messages and technical records are retained only as needed to resolve requests, maintain security, meet legal obligations, or address disputes. Information no longer needed is deleted or anonymized.

Limited records may need to be retained for legal compliance, fraud prevention, or security. Provider systems and backups can have separate deletion cycles. We explain any applicable retention exception when handling a deletion request. No fixed deletion deadline or removal from every third-party backup is promised by this policy.

We use safeguards appropriate to the information and service, but no system can guarantee complete security.

10. Access, correction, and deletion

To request access to or correction of your personal information, withdraw consent for optional processing, or request deletion of a GachaTime account, backup, or leaderboard entry, email jaren@siganistudios.com. For account deletion, use the subject “GachaTime account deletion” and identify the account email or relevant leaderboard identifier. Do not include your password.

We may need to verify ownership before acting. Account deletion requests cover the account identity and associated app data under our control, subject to permitted retention exceptions. If a leaderboard uses a separate installation identity, include it so we can locate that entry. Uninstalling alone is not an account-deletion request, and deleting server records does not necessarily erase data still on your device.

We handle privacy requests within applicable legal time limits and explain any lawful limitation. Withdrawing consent may prevent a feature from working but does not undo earlier lawful processing. You may also raise a concern with the Office of the Privacy Commissioner of Canada or your applicable provincial privacy authority.

11. Young users

GachaTime is intended for users aged 13 and older and is not directed at children under 13. Users below the age of majority in their province or territory must have a parent or guardian’s permission to use the app. Privacy choices must be understandable to the person providing consent; a minimum age does not replace meaningful consent.

If you believe a child under 13 has provided personal information through the service, contact jaren@siganistudios.com so we can investigate and take appropriate action.

12. Changes and contact

We update this policy when our practices change. The effective date appears above. For material changes, we provide the notice and obtain any additional consent required by applicable law. Contact jaren@siganistudios.com with questions.