Privacy Policy — WhatToDo (Excellcube)
Effective Date: September 21, 2025
Last Updated: September 21, 2025
1. Who We Are
Excellcube (“we”, “us”, or “our”) provides the iOS application WhatToDo (the “Service”).
Contact: excellcube.games@gmail.com
If you do not agree with this Policy, please do not use the Service.
2. Information We Collect
Collected automatically via the app and integrated SDKs (Firebase, Google Analytics, Crashlytics, Firestore):
Identifiers & Device Data: device model, OS/app version, language, time zone, Apple Advertising Identifier (IDFA) or other device IDs.
Usage, Logs & Diagnostics: app interactions, performance metrics, crash logs, error reports.
Purchase Information: transaction identifiers and purchase status for in-app purchases. We do not receive or store full card numbers; Apple processes payments.
We do not intentionally collect sensitive categories of data.
3. How We Use Information
Provide, operate, and improve the Service (including basic personalization).
Analytics and diagnostics (measure usage, fix bugs, enhance stability and security).
Compliance with legal obligations and enforcement of terms.
We do not use your information for targeted advertising. If this changes, we will update this Policy and, where required, request consent.
4. Third-Party Processors / SDKs
We use Google Firebase (Analytics, Crashlytics, Firestore) to operate and improve the Service. These providers act as our processors under contractual confidentiality and security obligations. Their handling is further governed by their own privacy terms.
5. Sharing and Disclosure
We do not sell your personal information. We may disclose information to:
Service providers noted above;
Authorities when required by law or to protect rights, property, and safety;
Business transferees in connection with a merger, acquisition, or asset sale.
6. International Transfers
Your information may be processed in countries outside your own (including the United States) by our service providers. Where required, we rely on Standard Contractual Clauses or equivalent safeguards. Details are available upon request.
7. Data Retention
We retain data only as long as necessary for the purposes above or as required by law:
Analytics, logs, and diagnostics: up to 12 months.
Purchase references (non-card): up to 3 years (tax/audit/dispute resolution).
Records of privacy requests and responses: up to 3 years.
Upon verified deletion request, we delete or anonymize personal data without undue delay and within 30 days unless a longer period is legally required.
8. Legal Bases (EEA/UK Users)
Where GDPR/UK GDPR applies, we process your information based on:
Legitimate interests (analytics, security, product improvement);
Contract necessity (to provide the Service you use);
Legal obligation (e.g., tax/accounting).
Where required, we obtain consent (e.g., optional features). You may withdraw consent at any time via in-app settings (if available) or by contacting us.
9. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object, or port your data and to opt out of certain processing.
To exercise rights, email excellcube.games@gmail.com. We may need information to verify your identity. We respond within 30 days (GDPR/UK) or within the timeframe required by local law.
10. California Privacy Notice (CPRA)
Categories collected: identifiers (device/advertising IDs), internet/activity data (usage, logs), diagnostics (crash/performance), purchase references.
Purposes: app functionality, analytics/diagnostics, security, compliance.
Disclosures for business purposes: to service providers (Firebase/Google).
Sale/Sharing: We do not “sell” personal information or “share” it for cross-context behavioral advertising.
Rights: access, deletion, correction, portability, and to limit use of sensitive data (not collected). Submit requests at excellcube.games@gmail.com. We will respond within 45 days (may extend once by 45 days when reasonably necessary). We verify requests before acting.
11. Children’s Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us so we can delete it.
12. Security
We implement reasonable technical and organizational measures (encryption in transit, access controls, least-privilege). No method of transmission or storage is 100% secure.
13. Do Not Track
The Service does not respond to Do Not Track signals. We honor applicable regional consent/choice mechanisms where required.
14. Changes to This Policy
We may update this Policy from time to time. Material changes will be communicated in-app or by email when appropriate. Please review the “Last Updated” date.
15. Contact
Excellcube — WhatToDo
Email: excellcube.games@gmail.com