Privacy Policy for Faal

This Privacy Policy explains how the Faal mobile application ("Faal", the "App", "we", "us", or "our") — package name com.randp.faal, available on Google Play and Google TV — collects, uses, shares, and protects information when you use it.

Faal is an entertainment-only fortune-telling app. It offers readings such as coffee cup, tea leaf, palm, candle (wax), and face reading (from photos), as well as dream interpretation, tarot, love, yes/no, and daily / weekly / monthly horoscope readings. Readings are for amusement only and are not a substitute for professional advice of any kind (medical, legal, financial, psychological, or otherwise).

By downloading or using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Who we are (Data Controller)

The App is published by RandP Studio ("the Publisher").

For purposes of the EU/UK General Data Protection Regulation (GDPR) and similar laws, the Publisher acts as the data controller for the limited personal data processed through the App, where such law applies.

2. Scope of this Policy

This Policy applies only to the Faal Android application. It does not apply to any third-party websites, services, or apps that may be linked from the App (for example, the Google Play Store or Google's services), which are governed by their own privacy policies.

3. No account required

Faal does not require you to create an account, sign in, or provide your name, email, phone number, date of birth, address, or any other identifying contact information to use the App.

4. Information we process

We deliberately keep data collection minimal. The App processes the following categories of information:

4.1 Information you provide in order to get a reading

• Photos / images you take or select. For image-based readings (coffee cup, tea leaf, palm, candle/wax, face reading), you can either take a new photo using your device's camera, or pick an existing image from your device gallery. The image is sent to Google's Firebase AI service (Gemini) so that the AI model can generate a fortune-telling response based on the visual content. Images are not stored by us on any server we control.
• Free-text you type. For dream interpretation, you type a description of your dream. This text is sent to Firebase AI to generate a symbolic/mystical interpretation.
• Reading selections. Choices such as the month you select for monthly horoscopes, the tarot card drawn, etc., are sent to Firebase AI as part of the prompt.

We do not ask for and do not intentionally collect any special-category data (e.g. health, religion, biometrics). Please do not include sensitive information in photos or dream text. Face reading uses a selfie only for the purpose of generating the AI-powered reading and is not used for biometric identification, facial recognition, or profiling.

4.2 Data stored only on your device (never uploaded by us)

The following is saved locally using Android's DataStore (encrypted app-private storage) and is never sent to our servers:

• Your chosen app language.
• Your chosen theme (system / light / dark).
• A daily reading counter (used to enforce the free-use limit of 3 readings per day).
• A reading history cache (your most recent daily / weekly / monthly readings, keyed by date/month, so you see the same result within the period instead of generating a new one each time).

You can clear this data at any time by using Android's "Clear storage / Clear data" option in the system app settings, or by uninstalling the App.

Captured camera images are saved to the App's private external-files directory on your device. They are not added to your public gallery, and the App deletes them automatically after a reading is submitted.

4.3 Information collected automatically

When you use the App, the following is collected automatically by the Google / Firebase SDKs integrated into the App:

• Firebase Analytics — Google-assigned app instance ID, app events (e.g. screen views, feature usage), approximate country, language, device model, operating system version, app version, and similar technical information used to understand how the App is used and to improve it.
• Firebase Crashlytics — crash reports, stack traces, and limited device/app state at the time of a crash, used to diagnose and fix bugs.
• Google AdMob — information used to serve and measure ads, including the Android Advertising ID (AAID), a resettable ID used for advertising; approximate (coarse, IP-based) location; device/app information; and ad interaction data. The exact data AdMob collects depends on your consent choice (see Section 7).
• Firebase AI (Google AI / Gemini) — the images, text prompts, and model parameters you submit to generate a reading are processed by Google to produce the AI response. Google may log these requests for service operation, abuse prevention, and quality purposes in accordance with its own terms.

We do not collect precise GPS location.

4.4 Permissions we request

• Internet — required to reach Firebase AI, Firebase, and AdMob.
• Camera (optional) — used only when you explicitly choose to take a photo for an image-based reading. You can deny this permission and still use text-based readings, or use an existing image from your gallery.
• AD_ID — grants the app access to the Android Advertising ID so AdMob can serve and measure ads (subject to your consent and your device's ad-ID settings).

We do not request microphone, contacts, SMS, call log, precise location, health, or any other sensitive permissions.

5. How we use the information

We use the information described above to:

1. Provide the core features — generate image- and text-based fortune readings, dream interpretations, horoscopes, tarot / love / yes-no readings.
2. Enforce free-use limits — e.g. the daily cap of 3 readings, tracked locally on-device.
3. Remember your preferences — language, theme, and cached periodic readings.
4. Improve and secure the App — using Firebase Analytics and Crashlytics to understand usage patterns and fix bugs and crashes.
5. Show advertisements — via Google AdMob, based on your consent and ad-personalization choice.
6. Comply with legal obligations and enforce our terms — for example, responding to valid legal requests.

We do not sell your personal information. We do not use the data you submit for the reading features to build profiles about you for advertising.

6. Legal bases for processing (EU/UK users)

Where GDPR (or the UK GDPR) applies, we rely on the following legal bases:

You can withdraw consent at any time (see Section 7 and Section 10).

7. Advertising and GDPR / consent management

The App shows advertisements through Google AdMob to keep the App free.

On first launch (and again when required), the App uses the Google User Messaging Platform (UMP) to show a consent dialog to users in regions where consent is required (EEA, UK, Switzerland, and similar). You can choose between personalized or non-personalized ads, and manage your vendor/partner choices.

You can change or withdraw your consent at any time through the App's consent settings (where available) and through your device settings:

• Android: Settings → Privacy / Google → Ads, where you can opt out of Ads Personalization and reset your Advertising ID.
• Google Ads Settings: adssettings.google.com

For more on AdMob's data practices, see Google's policies listed in Section 9.

8. Children's privacy

Faal is not directed at children under 13 (or the equivalent minimum age in your country, e.g. 16 in some EU member states) and we do not knowingly collect personal data from them. If you believe a child has provided us with personal information, please contact us at the email above and we will delete it.

The App enables Google's User Messaging Platform consent flow with "tag for under age of consent" set to false, meaning it is not designed for an audience treated as minors for consent purposes. Parents or guardians are responsible for supervising children's device use.

9. Third-party services (processors and their own controllers)

The App relies on the following third-party services. Each is bound by its own privacy policy, which we encourage you to read:

Google may process data in the United States and other countries where it or its sub-processors operate.

10. International data transfers

Because the App uses Google services, your data (including images and text prompts submitted for a reading) may be transferred to and processed in the United States and other countries in which Google or its sub-processors operate. These countries may have data protection laws that differ from those of your country.

When transferring personal data outside the EEA / UK, Google relies on safeguards such as Standard Contractual Clauses and other legally recognized mechanisms. See Google's privacy policy for details.

11. Data retention

• Images and dream text submitted for a reading are processed by Firebase AI to generate the result. We do not store them on servers we control. Google may retain them transiently for service operation and abuse prevention in line with its terms.
• Local preferences and cached readings on your device are kept until you clear the app's data or uninstall the App.
• Analytics / Crashlytics data is retained according to Google's default retention settings for Firebase (typically up to 14 months for Analytics user-level data, and around 90 days for Crashlytics crash records, subject to change by Google).

12. Security

We take reasonable technical and organizational measures to protect your information:

• All network communication with Firebase, Firebase AI, and AdMob uses HTTPS/TLS encryption.
• Local preferences use Android DataStore in the app's private sandboxed storage.
• The Android manifest disables allowBackup and applies data-extraction rules so your app data is not automatically backed up or transferred off-device.
• Camera images are stored in app-private directories and deleted after submission.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

13. Your rights

Depending on where you live (e.g., EEA, UK, California, Brazil, Canada), you may have some or all of the following rights regarding personal data we control:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure / "right to be forgotten" — request deletion of your data.
• Restriction or objection — restrict or object to certain processing, including processing based on legitimate interests or direct marketing.
• Portability — receive your data in a portable format.
• Withdraw consent — where processing is based on consent (e.g., personalized ads, analytics in the EEA), you may withdraw it at any time without affecting prior lawful processing.
• Lodge a complaint — with your local data protection authority (e.g., your country's DPA in the EEA, the ICO in the UK).

Because the App does not require an account, we usually cannot identify you from the data we process. To exercise your rights you may also:

• Clear all local app data via Android Settings → Apps → Faal → Storage → Clear storage.
• Uninstall the App, which removes all locally stored data.
• Reset your Advertising ID and opt out of ad personalization in Android settings.
• Opt out of Google Analytics on a per-device basis using Firebase's opt-out mechanisms.
• Contact us at security@pouyaheydari.dev with a request. Please include enough information for us to identify the request (e.g., device / approximate time of use). We will respond within the timeframes required by applicable law.

California residents (CCPA / CPRA)

We do not sell or "share" for cross-context behavioral advertising personal information in the sense that requires a "Do Not Sell or Share My Personal Information" link under the CCPA/CPRA, beyond Google's ad operations governed by your consent choices in Section 7. California residents have the rights to know, delete, correct, and opt out as described above.

14. Ads disclosure

• Ads in the App are served by Google AdMob.
• Ads may be personalized or non-personalized, depending on your consent choice.
• We do not share the content of your readings, dream text, or uploaded images with advertisers.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where changes are material, we will provide a more prominent notice (for example, in the App or on our store listing). Your continued use of the App after an update constitutes acceptance of the revised Policy.

16. Contact us

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data: