Privacy policy for Android

01Who we are

More Bands is developed by Juris Andersons, who also publishes the Android app on Google Play as an individual developer in Latvia, and who is the data controller for the personal data described in this notice under the General Data Protection Regulation (GDPR).

The iPhone and iPad apps reach the App Store through Coreteam SIA instead. The two are the same product by the same developer, but each store has its own publisher, and each notice names the one that actually answers for it.

02What this notice covers

This notice applies to the More Bands app for Android phones and tablets, distributed through Google Play with the application ID lv.coreteam.moorebands.

The iPhone and iPad apps are a separate implementation with different features — they have no in-app purchase and no network code at all, and they do have a recording feature that Android does not. They and this website are published by Coreteam SIA and covered by the main privacy policy instead. We keep the two notices apart so that neither has to describe the other's behaviour, or the other's publisher, approximately.

03What the app collects

Nothing. The app does not collect, transmit, or store any personal data about you or your child. There is no account to create, no sign-in, no email address to give, no advertising, no analytics, no crash or performance reporting, no attribution or measurement service, and no advertising identifier.

We operate no server and hold no database of users. There is no endpoint anywhere that the app could send your child's play to, because we never built one.

04Network access and why it exists

The app declares Android's internet and network-state permissions. We want to be exact about why, because the honest answer is narrow:

In practice, the app talks to the network in exactly two situations, and in both of them it is Google's library talking to Google Play, not us:

• when the app comes to the foreground, to ask Google Play whether this Google account owns the Full version; and
• when a parent chooses to buy the Full version, to run Google Play's own purchase flow.

Everything else runs offline. Every drawing and every sound is already inside the app when you install it, so a device in airplane mode plays exactly the same — an owned Full version keeps working offline, because the last confirmed answer from Google Play is remembered on the device.

05The Full version purchase

The Country band is free. The other four bands are unlocked together by a single one-time purchase called the Full version. There is no subscription, no consumable, no virtual currency, and no repeat charge.

A child who taps a locked band sees no price and no sales copy. The tap opens the arithmetic parental gate, and only an adult who solves it reaches the page where Google Play's price and the Buy and Restore actions appear.

We never see your payment details. The purchase is a transaction between you and Google, carried out inside Google Play's own flow. We do not receive, process, or store your card number, billing address, Google account address, or any other payment data, and we have no way to ask Google for them.

What the app keeps afterwards is a single yes-or-no on the device: whether the Full version is owned. It carries no order number, no account identifier, and no purchase history.

Because ownership belongs to the Google account that bought it, Restore returns it on any device signed in to that account, and it will not appear on a device signed in to a different one.

06What stays on the device

The app remembers a few things so that the toy behaves the way you left it. All of it is written to the app's own private storage on that one device, is readable only by the app, is never sent to us or to anyone else, and is deleted when the app is deleted:

• your settings, such as sound, stage effects, drag, the quiet button, and atmosphere;
• the optional daily playing-time limit, how much of today's time has been used, and any bonus minutes granted for today;
• the state of the parental gate, including its wrong-answer count and lockout timer; and
• whether the Full version is owned.

None of this identifies anyone. There is no device identifier, advertising identifier, or any other value that could be used to recognise a person or a device.

The app also opts out of Android's backup entirely: nothing in its private storage is included in cloud backup or in device-to-device transfer.

07Microphone and recording

The Android app does not record audio. It does not request the microphone permission, and Android would refuse it access if it tried. The record-your-own-sound feature described in the iPhone and iPad notice does not exist in this app.

08Third-party code in the app

The app ships some third-party code. None of it is an advertising, analytics, attribution, or crash-reporting SDK. For completeness:

• libGDX draws the stage, and Oboe, Signalsmith Stretch, Signalsmith Linear and minimp3 play and shape the audio. All of these run entirely on the device and have no network behaviour.
• Google Play Billing runs the purchase, as described above. Google supplies it together with its own supporting Google Play services components, and any diagnostics those components send go to Google under Google's privacy policy. We receive nothing from them, and we cannot see what they send.

The app's About page lists each component with its copyright and licence, and carries the full licence texts.

09Permissions, in full

This is the complete list of Android permissions in the released app, so that nothing has to be taken on trust:

• android.permission.INTERNET and android.permission.ACCESS_NETWORK_STATE — required by Google's Play Billing library, as described in section 04;
• com.android.vending.BILLING — the permission to offer a Google Play purchase at all; and
• one private permission that Android generates for the app's own internal messaging, which no other app can use and which grants access to nothing on your device.

There is no permission for the microphone, camera, location, contacts, calendar, phone, storage, or notifications, and none is requested at any point.

10When you contact us

This is the only situation in which we receive personal data from you. It happens only if you decide to start it.

The feedback form in the parent area does not send anything itself. It hands your draft to your device's own mail app, where you can see exactly what is being sent before you send it, and where you can change or abandon it. Along with your message, the draft includes the app version, your Android version, and your device model, so that we can reproduce a problem. It contains nothing about how your child played.

If you send it — or write to us directly — we receive your email address and whatever you chose to write. We use it only to answer you and to fix what you told us about. Under the GDPR our legal basis is our legitimate interest in responding to people who contact us and in supporting our own products. We do not add you to a mailing list, we do not send marketing, and we do not share your message with anyone else.

11Children

More Bands is made for young children, so this section matters more than any other in this notice.

We do not knowingly collect personal data from children, because we do not collect personal data from anyone. There is nothing in the app for a child to fill in, nothing to sign up for, no advertising, no social networks, and no way for a child to reach anyone outside the app. Nothing is profiled and nothing is targeted, because nothing is collected.

One link does leave the app: the About page offers to open this notice in your browser. It sits in the parent area, behind the arithmetic gate, so it is reachable by an adult looking for it rather than by the child playing.

The app does contain one purchase, and it is built so that a child cannot stumble into it. Locked bands show a plain, unanimated lock with no price, no discount, no countdown, and no urgency. The arithmetic parental gate stands between that lock and any commercial information at all, and Google Play then asks for its own authentication before taking any money.

Settings, the playing-time limit, and the purchase page sit behind that same gate — an arithmetic question with a lockout after wrong answers — so they are reachable by an adult rather than by the child playing.

If you believe we have somehow received personal data belonging to a child, please email us and we will delete it.

12Google Play

The app is distributed through Google Play. When you download the app or buy the Full version, that transaction is between you and Google. Google acts as its own data controller for it, under Google's privacy policy, and we have no involvement in and no access to it.

What we see from Google are aggregate reports — installs, orders and refunds by country and by day, store reviews, and Android vitals. These contain no personal data and cannot be traced back to an individual buyer or device. A store review shows whatever public name and text the reviewer chose to publish, and we can reply to it in the store; we receive no other contact details with it.

Refunds and purchase problems are handled by Google Play. If you ask us about one by email, we can help you find the right place, but we cannot look up your order.

13How long we keep things

We keep email correspondence for as long as the conversation is useful — normally until the question is answered or the problem is fixed, and at most two years after our last exchange — after which it is deleted. We keep nothing else, because we receive nothing else.

Anything stored on your device is under your control. It lasts until you change the setting or delete the app. Deleting the app does not cancel your Full version: it remains attached to your Google account, and Restore brings it back.

14Security

The strongest protection here is structural: data that is never collected and never transmitted cannot be intercepted, breached, or leaked from a server of ours. We hold no database of users.

The purchase itself runs inside Google Play over Google's own encrypted connection, and we never handle the payment data at all.

The email we do receive sits in a mailbox that only we can access. No method of electronic transmission or storage is completely secure, so we cannot guarantee the security of a message while it travels to us.

15Your rights

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the right to ask for access to your personal data, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you may withdraw it at any time.

In practice these rights concern email you have sent us, since that is the only personal data we hold. Email coreteamlv@gmail.com and we will act on your request within one month. There is no charge, and we do not require you to use a form. For data Google holds about your purchase, please use Google's own privacy tools, since we cannot reach it.

You also have the right to complain to a data protection authority. In Latvia, where we are established, that is the Data State Inspectorate (Datu valsts inspekcija). If you live elsewhere in the EEA or in the UK, you may complain to your own national authority instead.

16United States residents

Residents of California, Colorado, Connecticut, Utah, Virginia, and other states with comparable laws have rights to know about, access, correct, and delete personal information held about them, and to opt out of its sale, sharing, or use for targeted advertising.

We do not sell or share personal information, and we have never done so. We do not use it for targeted advertising and we do not profile anyone. Because the app collects no personal information, the only information any of these requests could reach is email you have sent us. Write to coreteamlv@gmail.com and we will respond within 45 days. If we decline a request, you may reply to appeal the decision and we will answer the appeal in writing.

Some browsers send a Do-Not-Track or Global Privacy Control signal. We honour them by default, in the sense that we do no tracking to switch off.

17Changes to this notice

We update this notice when the app changes or when the law requires it. The date at the top always reflects the current version, and the new version takes effect as soon as it appears here. If a change ever means we start collecting something we do not collect today, we will say so plainly at the top of this page rather than leaving you to find it.

18How to contact us

Questions about this notice, about privacy, or about the app are genuinely welcome, and a real person answers them.