1. Who we are
Krimas is an app for making advent calendars for one person and opening them one day at a time. It is run by [OPERATOR NAME], [COUNTRY] ("we", "us"). This policy explains what the app collects, why, and what you can do about it.
2. What we collect
Your account
A username, a display name and a password. Passwords are stored as a one-way hash, never as you typed them. We don't ask for your email address, phone number, real name or birthday.
The calendars you make
Each calendar's title, colour, number of days and start date, and everything you place on a day: photos (JPEG or PNG), short voice notes you record, text and stickers, and where they sit on the canvas.
Sharing and opening
The share codes you create (each expires after a short time), who claimed a calendar and when, and which days have been opened. The maker sees how many days have been opened.
Feedback you send
The message and its type (idea, bug or question). If you leave "Include device info" ticked, we also get the app version and your phone's model name.
How the app is used
Events such as signing in, creating or sending a calendar and opening a day, linked to an internal account ID, your account type and the date you joined. We use this to see what works and what breaks. It is never used for advertising.
The app asks for your photos, camera or microphone only when you choose to add a photo or record a sound. We don't access your contacts or location.
3. What stays on your phone
Some things never leave your device: your reminder time and which calendars you want reminders for, the reminders themselves (scheduled by your phone, not sent by us), and a local copy of calendars you've received so they open quickly.
4. How we use it
- To run your account and keep it secure.
- To store calendars and deliver each day to the person who claimed it, on its date.
- To enforce limits, such as how many calendars you can make at once.
- To answer feedback and fix problems.
- To understand, in aggregate, how the app is used so we can improve it.
We don't sell your information, show ads, or track you across other apps and websites.
5. Who can see a calendar
Only its maker and the one person who claims it. Anyone holding an unused code can claim the calendar, so share codes only with the person they're for. Once claimed, the code can't be used again. Each of you sees the other's display name, never their username or password.
6. Services we rely on
We use a small number of providers who process data only on our instructions:
- [HOSTING PROVIDER] for servers, the database and file storage, in [REGION].
- Mixpanel for the usage events described above.
- Apple and Google to distribute the app through their stores.
We may disclose information if the law requires it, or to protect people from harm.
7. Keeping and deleting
We keep your information for as long as your account is open, or until you delete it.
- Deleting a calendar nobody has claimed removes it and its code stops working.
- Deleting a calendar someone has claimed removes it from your list. The other person keeps their copy until they remove it too.
- Deleting your account (Account › Delete account) removes your account and the calendars only you can see. Gifts you've sent stay with the people who claimed them, shown as from "deleted".
Once nobody can see a calendar any more, its photos and sounds are erased from storage within [NUMBER] days. Backups roll off within [NUMBER] days. Feedback is kept for [PERIOD].
8. Your choices
- Change your display name or password in Account.
- Get a copy of your data from Account › Privacy and terms › Download my data.
- Turn reminders off in Account › Reminders, or in your phone's settings.
- Delete calendars or your whole account at any time.
Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority. Write to us and we'll reply within [NUMBER] days.
9. Children
Krimas isn't meant for children under [AGE] to sign up on their own. If you think a child has given us information without a parent's permission, contact us and we'll delete it.
10. Changes and contact
If we change this policy we'll update the date at the top, and tell you in the app before a significant change takes effect.