Privacy Policy

Version 3.3 · Effective 7 October 2026 · Last updated 7 October 2026

This Privacy Policy explains how DQCLabs (“we”, “us”) collects, uses and shares information when you use the Cozy Kalimba app for iOS and Android and the website cozy-kalimba.web.app. For visitors and users in the EU and UK, we are the data controller for the processing described here, except where a third party acts as an independent controller.

1. Information we collect

No account

You do not need to create an account or sign in to use Cozy Kalimba, and we do not operate our own server that stores information about you.

Information that stays on your device

The following is stored only on your device, is not sent to us, and is removed when you delete the app:

• your app settings and preferences;
• your profile, such as a display name, short bio and chosen avatar;
• your favourite songs, learning progress, practice history and badges;
• recordings you make in the app (these are the notes you play, not audio from a microphone);
• songs you have temporarily unlocked by watching a rewarded ad.

The app does not access your microphone, camera, photos, contacts or precise location. If you choose to share a result card, it is passed to the app you pick in your device’s share sheet.

Information that leaves your device

• Usage information, such as app interactions, feature usage (for example, opening songs, lessons and relaxation sessions), purchase events, session activity, and basic device and app information (device model, operating system, app version, language and country). This is collected automatically through Google Firebase Analytics while diagnostics are turned on.
• Crash and diagnostic information, such as crash logs, error reports, the part of the app in use when a problem occurred, and basic device and app information. This is collected automatically through Firebase Crashlytics while diagnostics are turned on.
• Identifiers, such as a random app-instance identifier created by Firebase, an anonymous app user identifier created by RevenueCat, and the device advertising identifier where it is available to ads (see section 3).
• Advertising information in the free version, such as your IP address and the approximate location derived from it, device information, and interactions with ads (for example, views and taps). This is collected by the Google Mobile Ads SDK when ads are requested and shown.
• Purchase information if you buy Premium, such as the product, purchase date, price, store country and entitlement status.

We do not link this information to your name, email address or any account, because the app does not collect them.

Our website

Our website does not use cookies, analytics or advertising scripts. It is hosted on Firebase Hosting, which keeps standard server logs (such as IP address, browser type and pages requested), and it loads fonts from Google Fonts, which receives your IP address. A language choice you make on the site is stored only in your browser.

2. How we use information

• To provide the app — to remember your settings and progress on your device, to check whether your Premium entitlement is active, and to restore purchases.
• To improve reliability — to find, diagnose and fix crashes and errors.
• To understand usage — to see, in aggregate, which features are used so we can improve the app and the user experience.
• To fund the free version — to show, measure and limit the frequency of ads, prevent ad fraud, and, where you have agreed or the law allows, show more relevant ads.
• To support you — to answer questions you send us, and to handle purchase, refund and billing questions.
• To meet legal obligations — for example, keeping financial records.

Under EU and UK data protection law, we rely on our legitimate interests for usage and crash information (which you can switch off at any time), on your consent for personalised advertising and for storing or accessing information on your device for advertising where consent is required, on the performance of a contract for purchases, and on legal obligations for financial records.

We do not sell your personal information, and we do not use it for any purpose not described in this policy.

3. Advertising and consent

The free version of Cozy Kalimba shows ads served by Google AdMob, including optional rewarded ads you can choose to watch to unlock a premium song for a limited time. Ads are turned off while Cozy Premium is active.

Consent

When you open the app, it uses Google’s User Messaging Platform to check whether a consent message is required where you are (for example, in the EEA, the UK and Switzerland). Where it is, the message is shown before ads are requested, and lets you accept, refuse or choose specific purposes and partners. If you do not consent to personalised ads, you may still see non-personalised or limited ads, which use information only to serve, measure and protect ads.

Where a consent option is required for your region, you can review, change or withdraw your choice at any time in Settings → Ad Privacy in the app.

Tracking on iOS (App Tracking Transparency)

On iOS, the app may ask for your permission to track your activity across other companies’ apps and websites for advertising. The device advertising identifier (IDFA) is only available to the app and the Google services it uses if you allow tracking. We show this native iOS choice, when needed, only after any required Google consent message has finished and before the app initializes its advertising SDK or requests an ad. Declining does not limit any feature of the app; eligible non-personalised or limited ads may still be shown. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

Android advertising ID

On Android, the Google Mobile Ads SDK may use your device’s advertising ID. You can reset or delete it in your device settings (usually Settings → Privacy → Ads or Settings → Google → Ads).

Google acts as an independent controller of the advertising information it collects. See How Google uses information from sites or apps that use its services. We receive only aggregate reports from AdMob, such as impressions and earnings, and not information about you individually.

4. Premium purchases

Cozy Premium is an optional one-time lifetime purchase sold through the Apple App Store and Google Play, with no automatic renewal. Payment is processed entirely by Apple or Google. We never receive your card number, billing address or other payment credentials.

We use RevenueCat to confirm whether your Premium entitlement is active, to show the available purchase and price, and to restore purchases on the same store platform and account. RevenueCat receives purchase information from the store (such as the product, purchase date, price, currency, store country and entitlement status), an anonymous app user identifier, basic device and app information, and your IP address. We can see anonymous purchase records, which we use to support customers and keep financial records.

Lifetime purchases have no subscription to cancel and no recurring charge. Deleting the app does not remove your purchase from your store account; you can restore it on the same store platform with the same account. Purchases do not transfer between the App Store and Google Play.

5. Third-party services

The app and website use the following services, which receive or process information as described above:

Service providers that process information on our behalf (Firebase and RevenueCat) do so under data processing terms that require them to protect it with safeguards at least equivalent to those described in this policy and required by applicable law. Google, when serving ads, and Apple and Google, as app stores, handle information under their own privacy policies.

These providers may process information outside your country, including in the United States, using legally recognised transfer safeguards such as Standard Contractual Clauses.

6. Data retention and security

• On your device: kept until you delete the app or clear its data, or reset your progress in the app.
• Usage and crash information: kept for a limited period under the retention settings of Firebase, after which it is deleted or kept only in aggregate, non-identifying form.
• Advertising information: kept by Google under Google’s retention policies.
• Purchase records: kept for as long as needed to provide Premium, handle refunds and meet tax and accounting obligations.
• Emails you send us: kept while we handle your request and for a reasonable period afterwards.

Information sent from the app is encrypted in transit. Information on your device is protected by your operating system’s app isolation and device security. No method of transmission or storage is completely secure, but we limit what is collected to reduce risk.

7. Your choices and privacy rights

Choices in the app

• Usage and crash reports: turn off Settings → Privacy → Help Improve Cozy Kalimba. This is on by default. Turning it off stops analytics collection and crash reporting on that device (crash reporting fully stops from the next launch) and does not limit any feature.
• Ad consent: where available in your region, change or withdraw consent in Settings → Ad Privacy.
• Tracking and advertising ID: use your iOS Tracking setting or Android Ads setting described in section 3.
• No ads: buying Cozy Premium turns ads off.
• On-device data: reset your progress in Settings → Manage Data, or delete the app to remove everything stored on your device.

Your rights

Depending on where you live (including the EEA, the UK and US states such as California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict its processing, to opt out of targeted advertising or “sharing” for advertising, and to withdraw consent at any time. We will not discriminate against you for exercising these rights.

To make a request, email us at the address in section 8. Because the app has no accounts, we may not be able to identify information linked only to a random identifier. For purchase records, include the order or transaction ID from your Apple or Google receipt so we can locate the matching record. Requests about advertising data held by Google can also be made through My Ad Center. You also have the right to complain to your local data protection authority.

8. Children, changes and contact

Children

Cozy Kalimba is not directed at children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy when the app or the services it uses change. We will update the date at the top of this page and, for material changes, let you know in the app or on this website before the changes take effect.

Contact us

For privacy questions or requests, contact DQCLabs, publisher of Cozy Kalimba, at cuong.software.dev@gmail.com.