Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how Protoboard Studios (“Protoboard Studios”, “we”, “us”, or “our”) collects, uses, shares, and protects information when you use the mobile apps we publish on Google Play and other app stores (our “apps”) and when you visit this website. It applies to every Protoboard Studios app unless an app links to its own, app-specific privacy policy.

Summary

• We collect only what an app needs to work, to keep your account secure, to find and fix bugs, to understand how the app is used, and, in ad-supported apps, to show ads.
• We do not sell your personal information, and we do not use it for purposes unrelated to the app.
• We use Google services (Firebase, Google Analytics for Firebase, and Google AdMob) to run our apps. Google receives some information directly from your device when you use them.
• Ad-supported apps ask for your consent before showing personalized ads where the law requires it, and you can opt out of personalized ads at any time.
• You can delete your account and data from inside the app or from our Delete your account page.

Information we collect

What we collect depends on the app you use and the features you choose to use.

Information you give us

• Account information. If an app lets you create an account, we collect the information needed for the sign-in method you choose: an email address and password, a phone number, or the profile details a sign-in provider such as Google or Apple shares with us (typically your name, email address, and a provider account identifier). Some apps also let you set a display name or profile photo. Passwords are handled by Firebase Authentication and are never visible to us. Some apps offer an anonymous sign-in that creates a random account identifier without any personal details.
• Content you create. Anything you enter or save in an app, such as notes, lists, settings, files, or other items, depending on the app’s features. If the app syncs or backs up your data, this content is stored on our cloud servers; otherwise it stays on your device.
• Purchases. If an app offers in-app purchases or subscriptions, the payment is handled by Google Play. We receive the order details Google Play provides (such as the product purchased, the time, and a purchase token) so we can unlock what you bought and let you restore it. We do not receive your payment card or bank details.
• Communications. When you email us for support or with a privacy request, we receive your email address, the contents of your message, and any information you choose to include.

Information collected automatically

When you use an app, the app and the third-party services it includes (see Third-party services) automatically collect some information from your device:

• Device and app information. Device model and manufacturer, operating system version, screen size, language, time zone, and country, plus the app’s version and package name.
• Identifiers. Random identifiers generated for your installation of an app, such as a Firebase installation ID, a Google Analytics app-instance ID, and a Crashlytics installation identifier; your account identifier if you are signed in; a push notification token if you enable notifications; and, in ad-supported apps, the Android advertising ID and app set ID. These identifiers do not include your name or contact details.
• Usage data. App opens, screens viewed, features used, taps and other interactions, session length, in-app purchase events, and interactions with ads in ad-supported apps.
• Crash and diagnostic data. Crash reports (stack traces and the state of the app at the time of the crash), device state such as available memory and storage, and performance measurements such as app start time and network latency. Where it helps us diagnose a problem, an app may attach your account identifier to a crash report.
• Approximate location. Google services derive a coarse location (country, region, or city) from your IP address. Our apps do not collect precise location from GPS or other sensors unless an app asks for location permission, explains why it needs it, and you grant it.
• IP address and network information. Your IP address and basic network details are received by our servers and by the services described below whenever the app communicates with them.

Information stored only on your device

Apps store preferences, cached content, and offline data on your device. This information stays on your device unless the app syncs it to your account, and it is removed when you clear the app’s data or uninstall the app.

How we use information

We use the information we collect to:

• provide, operate, and maintain the app and its features, including syncing your content across devices when the app supports it;
• create and secure your account, sign you in, and prevent unauthorized access;
• process purchases and subscriptions and let you restore them;
• find and fix crashes, bugs, and performance problems;
• understand how our apps are used so we can improve them and decide what to build next;
• show ads and measure how they perform in ad-supported apps;
• send you notifications you have enabled;
• respond to your questions and support requests;
• detect, prevent, and respond to fraud, abuse, and security issues; and
• comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use information collected in our apps to build profiles of you for purposes unrelated to the app.

Third-party services

We rely on services operated by Google LLC and its affiliates (“Google”) to build and run our apps. Each app uses some, but not all, of the services described below. When you use an app, these services receive information directly from your device. How Google handles that information is described in the Google Privacy Policy, in How Google uses information from sites or apps that use our services, and, for Firebase services, on the Privacy and Security in Firebase page.

For Firebase and Google Analytics, Google processes data on our behalf under Google’s data processing terms. For Google AdMob, Google acts as an independent controller and uses the data it collects in accordance with its own privacy policy.

Firebase Authentication Accounts

If an app lets you create an account or sign in, we use Firebase Authentication to manage it. Depending on the sign-in options the app offers, this involves your email address and password, your phone number (verified by a text message code), or a third-party sign-in provider such as Google Sign-In or Sign in with Apple. Firebase Authentication also records your IP address and user agent when you sign up or sign in, to secure accounts and prevent abuse.

When you sign in with a third-party provider, the provider shares the profile information you authorize (typically your name, email address, and an account identifier) with us, and your use of the provider is governed by its own privacy policy, for example the Google Privacy Policy or Apple’s Privacy Policy.

Firebase databases and storage Accounts

If an app syncs your data, backs it up, or has online features, the content you create and your account identifier are stored in Google Cloud data services: Cloud Firestore, Firebase Realtime Database, Cloud Storage for Firebase, and Cloud Functions for Firebase. Access is controlled by security rules so that your data can be read and changed only by you or, where an app is designed for sharing, by the people you choose to share it with. These services briefly log IP addresses and user agent information to operate and secure the service.

Google Analytics for Firebase

If an app includes analytics, Google Analytics for Firebase collects the usage, device, and app information described above, along with an app-instance ID, a coarse location derived from a masked IP address, and in-app purchase events. In ad-supported apps it may also collect the Android advertising ID, which lets us and Google measure ad performance. We use analytics to understand which features are used, to spot problems, and to make product decisions. Google Analytics data is not tied to your name or email address.

Firebase Crashlytics and Performance Monitoring

If an app includes crash reporting, Firebase Crashlytics collects crash reports: stack traces, the state of the app when it crashed, device metadata, and a Crashlytics installation identifier used to count how many users a problem affects. We may attach custom logs, keys, or your account identifier to help us reproduce and fix specific problems. Firebase Performance Monitoring, where included, collects performance metrics such as app start time, network request latency, and CPU and memory usage, together with device metadata and your IP address. We use this information only to find and fix problems.

Google AdMob

If an app shows ads, it includes the Google Mobile Ads SDK, which is operated by Google AdMob. The SDK collects your Android advertising ID and app set ID, your IP address (used to estimate your general location), device and app information, your interactions with ads (such as views, taps, and video views), and diagnostic information such as app launch time, hang rate, and energy usage. See Advertising for details, including how to opt out of personalized ads.

Other Firebase services

• Firebase Cloud Messaging delivers push notifications using a notification token and Firebase installation ID, along with the app version.
• Firebase Remote Config lets us adjust app settings and features without an update. It receives your country and language codes, time zone, operating system version, and the app’s version and package name.
• Firebase In-App Messaging shows messages inside the app and records whether they were shown, tapped, or dismissed.
• Firebase App Check verifies that requests to our backend come from a genuine copy of the app, using Google Play Integrity attestation tokens. Attestation material is not retained, and tokens expire within seven days.

Google Play

Our apps are distributed through Google Play and use Google Play services on your device. If an app offers purchases, Google Play Billing processes the payment. Google’s handling of your Google account, purchases, and payment details is governed by the Google Privacy Policy.

Advertising

Some of our apps are free to use and supported by ads served through Google AdMob. Ads may be personalized (selected based on your interests, inferred from your activity in our apps and in other apps and websites) or non-personalized (selected based only on context, such as the app you are using, your approximate location, and the content on the current screen).

Third-party vendors, including Google, use identifiers such as the Android advertising ID (and cookies, where ads are shown in a web view) to serve ads based on your prior use of our apps and other apps and websites. Google’s use of advertising identifiers enables it and its partners to serve ads to you based on your use of our apps and of other apps and websites on the Internet. Google explains how it uses this information on the page How Google uses information from sites or apps that use our services.

Google is currently the only advertising network in our apps. If we add other ad networks through AdMob mediation, we will list them here with links to their privacy policies.

Your consent

If you are in the European Economic Area, the United Kingdom, Switzerland, or another region where consent is required, the app will show you a consent message before any personalized ads are served. You can decline; the app will then show only non-personalized or limited ads. You can change your choice at any time from the app’s privacy or ad settings (usually labeled “Privacy options” or “Ad choices”), and the app keeps a record of the choice you made.

Where United States state privacy laws treat personalized advertising as a “sale” or “sharing” of personal information or as “targeted advertising”, you can opt out using the controls below or by contacting us. See Your privacy rights.

Opting out of personalized ads

• On your device. Open Android Settings, go to Privacy › Ads (on some devices, Google › Ads), and choose Delete advertising ID or, on older versions of Android, turn on Opt out of Ads Personalization. When you delete your advertising ID, apps receive a string of zeros instead of an identifier and it can no longer be used to personalize ads. You can also Reset advertising ID to unlink previously collected data from your device.
• In your Google account. Manage personalized ads across Google services at Google Ads Settings.
• Across other companies. Opt out of personalized advertising from participating companies at www.aboutads.info/choices.

Opting out does not remove ads from ad-supported apps; it changes how ads are selected.

How we share information

We share information only in the following circumstances:

• Service providers. With Google, which provides the Firebase, Google Analytics, Google Play, and AdMob services described above. Google processes data for Firebase and Google Analytics on our behalf under its data processing terms, and processes data for AdMob as an independent controller under the Google Privacy Policy.
• Sign-in providers. With the provider you choose (such as Google or Apple) when you sign in through them.
• Other users. If an app has sharing or collaboration features, we share only the content you choose to share and only with the people you choose.
• Legal reasons. When required by law, regulation, legal process, or a governmental request, or when we believe it is necessary to protect the rights, property, or safety of Protoboard Studios, our users, or the public, or to enforce our terms.
• Business transfers. If Protoboard Studios is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent. For any other purpose we describe to you when we collect the information.

We do not sell personal information, and we do not share it with third parties for their own marketing purposes. Serving personalized ads through AdMob may be considered “sharing” under some laws; you can opt out as described under Advertising.

Data security

We take reasonable technical and organizational measures to protect your information:

• All data sent between our apps and our servers or Google’s services is encrypted in transit using Transport Layer Security (TLS).
• Data stored in Firebase and Google Cloud services is encrypted at rest.
• Firebase security rules restrict access to stored data so that your data can be accessed only by you or by the people you share it with. Where used, Firebase App Check blocks requests that do not come from a genuine copy of the app.
• Passwords are stored by Firebase Authentication in hashed form and are never visible to us.
• Access to our backend systems is limited to the people who need it to operate the apps and is protected by multi-factor authentication.
• We collect the minimum information each app needs and remove it when it is no longer required (see Data retention).

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you and the relevant authorities as required by law.

Data retention

We keep information only for as long as it is needed for the purposes described in this policy. Typical retention periods are:

We may keep some information longer where it is necessary to comply with a legal obligation, resolve disputes, prevent fraud and abuse, or enforce our terms. When we do, we keep only what is needed for that purpose.

Delete your account and data Accounts

If an app lets you create an account, you can delete the account and all data associated with it from inside the app (open Settings, then choose Delete account) or, if you no longer have the app installed, by following the steps on our Delete your account page. That page also explains what is deleted, what we may retain, and how to delete data without deleting your account.

Your choices

• App permissions. When an app needs access to something on your device that is not obvious from its features (for example, your camera, location, or contacts), it explains what it needs and why before asking, and only proceeds if you agree. You can change permissions at any time in Android Settings.
• Personalized ads. See Advertising for how to withdraw consent or opt out.
• Analytics and crash reporting. Where an app provides a setting to turn off analytics or crash reporting, you will find it in the app’s settings. Otherwise, contact us.
• Notifications. Turn push notifications on or off in the app’s settings or in Android Settings.
• Marketing. We do not send marketing email.

Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy of it;
• correct information that is inaccurate or incomplete;
• delete your personal information;
• restrict or object to certain processing, including processing based on our legitimate interests;
• receive your information in a portable format;
• withdraw consent at any time, without affecting processing that took place before you withdrew it;
• opt out of personalized advertising, and of any “sale”, “sharing”, or use for targeted advertising or profiling, of your personal information;
• not be discriminated against for exercising your rights; and
• appeal a decision we make about your request, and lodge a complaint with your data protection authority.

To exercise any of these rights, contact us. We will verify your request, usually by confirming that you control the email address or account concerned, and respond within the time required by applicable law (generally within 30 days). You may also use an authorized agent, in which case we may ask for proof that the agent is acting on your behalf.

European Economic Area, United Kingdom, and Switzerland

Protoboard Studios is the controller of the personal data processed in our apps. We process personal data on the following legal bases: performance of our contract with you (providing the app and your account); your consent (personalized ads, optional permissions, and other processing for which we ask); our legitimate interests (keeping our apps secure, fixing bugs, understanding how they are used, and showing non-personalized ads), balanced against your rights; and compliance with legal obligations.

Our service providers may process your data in the United States and other countries outside your own. Where they do, the transfer is protected by safeguards recognized under applicable law, including the European Commission’s standard contractual clauses incorporated in Google’s data processing terms and, where applicable, the EU-US Data Privacy Framework.

United States

If you live in California or another US state with a consumer privacy law, the rights above apply to you as provided by your state’s law. In the past twelve months we have collected the categories of personal information described under Information we collect: identifiers, account and contact details, commercial information (purchases), internet or other network activity (usage, crash, and diagnostic data), and approximate location. We collect them for the purposes described under How we use information and disclose them to the service providers described under How we share information. We do not sell personal information, and we do not knowingly sell or share the personal information of anyone under 16. In ad-supported apps, identifiers and activity data are shared with Google for personalized advertising, which may be considered “sharing” or “targeted advertising” under your state’s law; you can opt out as described under Advertising or by emailing us with the subject “Do not sell or share my personal information”.

Children’s privacy

Unless an app’s Google Play listing states that it is designed for children or families, our apps are not directed to children under 13 (or the higher age of digital consent that applies where you live), and we do not knowingly collect personal information from children. If an app is designed for children or families, its store listing will say so; that app complies with Google Play’s Families policy, shows only non-personalized ads configured for child-directed treatment, and does not collect the advertising ID.

If you believe a child has provided us with personal information without appropriate consent, contact us and we will delete it.

This website

This website does not use cookies, analytics, or advertising trackers. Our hosting provider may log standard technical information (such as IP address and browser type) to deliver and secure the site.

Changes to this policy

We may update this policy from time to time. When we do, we will post the new version at this address and update the “Last updated” date at the top. If a change materially affects how we use your personal information, we will give you notice in the app or, where we have your email address, by email before the change takes effect. Your continued use of an app after the updated policy takes effect means the updated policy applies to you.

Contact

Protoboard Studios is the developer named on our Google Play listings. For questions about this policy, to exercise your privacy rights, or to request deletion of your account or data, email privacy@protoboardstudios.com.