Privacy Policy

Effective 3 September 2026

This policy explains how PartyDay: I Have Never (the “App”) handles information. The data controller is APP BOX EOOD (UIC 207060361), Lazur District, Block 109, Apartment 5, 8000 Burgas, Bulgaria (“APP BOX”, “we”, “us”). Contact: info@appbox.group.

Information kept only on your device

The App does not require an account. Your language, onboarding status, sound preference, and the date on which you used the daily-task feature are stored locally using Apple UserDefaults. You can remove this information by deleting the App or clearing its data through your device.

Usage analytics and crash diagnostics

In normal production use, the App automatically uses Google Firebase Analytics and Firebase Crashlytics to understand which features are useful and to diagnose stability problems. Analytics may process a pseudonymous app-instance identifier, general location derived from a masked IP address, App and device information, language, premium/free status, sessions, screen views, and interactions with onboarding, packs, games, the daily challenge, paywalls, purchases, and purchase restoration. StoreKit purchase events may include a product identifier, product name, price, and outcome.

Crashlytics may process a random Crashlytics installation UUID, Firebase installation ID, session identifier, crash time, stack traces, App version, device model and architecture, operating-system version, available memory and storage, device state, and Analytics breadcrumb events immediately preceding a crash. We do not add player names, contact details, precise location, question text, game answers, or free-form gameplay content to Analytics or Crashlytics.

Advertising storage, advertising user data, and ad personalization are disabled. We do not link Analytics to an advertising identifier, Google Ads account, user account, or data broker, and we do not use the data for targeted advertising or cross-app tracking.

Crashlytics retains crash reports and associated identifiers for 90 days before beginning removal from live and backup systems. Analytics event-level data is retained for no longer than 14 months; aggregated reports that no longer identify an app instance may be kept longer for trend comparison. Learn more in Firebase Privacy and Security, Google Analytics data disclosures, and the Google Privacy Policy.

Purchases

Subscriptions and previous non-consumable purchases are processed by Apple through the App Store. The App receives product identifiers and verified entitlement status so it can unlock content; APP BOX does not receive your payment-card details or Apple Account password. Apple handles purchase information under its App Store Privacy Notice.

Support messages

If you choose to email support, your email address, message, and any information you include are used only to answer and administer your request. Please do not send sensitive personal information. Support correspondence is deleted when it is no longer needed and, unless a longer period is required for a legal claim, no later than 24 months after the request is closed.

Purposes and legal bases

Local settings are processed to provide the App functionality you request.
App Store entitlement status is processed to perform the purchase contract and restore access.
Limited pseudonymous usage analytics are processed for our legitimate interest in measuring feature use and improving the App.
Crash and diagnostic data are processed for our legitimate interest in maintaining a secure, stable, and reliable App.
Support correspondence is processed to respond to your request and for our legitimate interest in maintaining the App.

Sharing and international processing

We do not sell personal information and do not use it for advertising or cross-app tracking. Information is shared only with Apple for purchases, Google for Analytics and Crashlytics, and service providers or authorities when legally required. These providers process information under their own published terms and applicable safeguards. Google may process information on global infrastructure, including outside the EEA, using applicable transfer safeguards.

Your rights

Depending on applicable law, including the GDPR, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Because the App has no account and we do not link Firebase identifiers to your identity, we may be unable to identify a particular Analytics or Crashlytics record without the relevant app-instance information. Email info@appbox.group for privacy requests. You may also complain to the Bulgarian Commission for Personal Data Protection or your local supervisory authority.

Children

The App is intended only for adults aged 18 or older, or any higher age of majority required by local law. It is not directed to children, and some packs contain mature themes. If you believe a child has provided information through a support message or the App, contact us so we can assess and delete it where possible.

Security and changes

We use reasonable technical and organizational safeguards, but no transmission or storage method is completely secure. We may update this policy when the App or legal requirements change. Material changes will be presented in the App or App Store listing, and the effective date above will be updated.

Summary: no account, no advertising, no sale of data, and no cross-app tracking. Limited Firebase usage analytics and crash diagnostics run automatically in production to improve PartyDay.