Randomica Privacy Policy
This is the privacy policy of Randomica, the Android app for letting chance decide (coin, dice, crystal ball and other generators), which you can find on Google Play.
1. Who the controller is
Randomica is made by one person, not by a company: Leonardo Messina, who publishes it on Google Play under the name One Tap Core and is the controller of the personal data described in this policy, except for the data that Google and GitHub process on their own behalf, mentioned in sections 2, 4 and 8. In this policy, "we" means Leonardo Messina.
For any privacy question, write to onetapcoresupport@gmail.com.
2. Data that stays on your phone
Randomica has no accounts, servers, ads or analytics tools. It saves on your phone, in the storage space Android reserves for the app:
- the history of the results of each generator, at most 200 per generator (when one more is added, the oldest is deleted): for each one, the result, the details of the draw (for example the values of the dice, the number drawn, the option picked, the order or the teams with the names you typed) and the date and time;
- the lists you type, of options or of people's names, each with its name, its entries (at most 100) and the date it was last changed;
- the last choices made in each generator, so that you find them again the next time you open the app: for example which dice to roll, the range of numbers and the numbers already drawn, the order of the deck and the cards already drawn, the last list used;
- which tool was open when the app went into the background, and at what time, to reopen it if Android closes the app and you reopen it within half an hour;
- the settings: language, theme, sound effects, music and volumes, vibration, shaking the phone to roll and reduced motion;
- the themes you have bought, with the Google Play receipt for each purchase (the order number when there is one, what you bought, the date and time, the code and status of the purchase), to unlock them even without a connection;
- for the themes you have tried recently without buying them, the time when you can try them again;
- if the app has asked you to rate it on Google Play, your answer (rate, later or don't ask again), the day you answered and how many times it has asked you, to know whether and when to ask you again;
- the version of the terms and conditions you accepted, the date you accepted it, the version of the privacy policy the app showed you and the date it showed it to you.
To use your phone's language unless you have chosen another one, the app reads the languages and regions set on your phone, without saving them. While it is open, it also reads the accelerometer, only to tell whether you are shaking the phone, without saving anything.
They are used only to make the app work the way you set it up. The app does not send them to us or to anyone else: we do not receive them and cannot see them. Android backup to your Google account is turned off for Randomica; however, when you transfer apps and data from one phone to another, Android may also copy this data to the new phone.
The names in lists. The names you type to form teams or to choose whose turn it is are data about other people. They stay on your phone, in the lists and in the history; they do not reach us.
You delete them yourself: a generator's history with "Clear history", a list from your saved lists, everything else by clearing the app's data in Android settings or by uninstalling the app.
3. If you write to us
If you write to onetapcoresupport@gmail.com we receive your email address, the name shown as the sender, what you write and any attachments.
- Why: only to reply to you and to do what you ask. Without an address to reply to, we could not do so.
- Legal basis: answering a request about the app, its purchases or the contract with you, including before you download it (Article 6(1)(b) of Regulation (EU) 2016/679, the "GDPR"); for messages that are not about the app or a contract with you, our legitimate interest in reading and replying to people who write to us (Article 6(1)(f)); complying with a legal obligation when you exercise the rights described in section 7 (Article 6(1)(c)); after we reply, our legitimate interest in keeping the messages for as long as they may be needed to establish or defend a right connected with your request (Article 6(1)(f)).
- How long: while the request is open. After that, only for as long as they may be needed to establish or defend a right connected with that request, that is until that right becomes time-barred (as a rule after ten years, Article 2946 of the Italian Civil Code); if a dispute arises in the meantime, until it is closed.
4. Google Play: download, purchases and reviews
Randomica is bought and downloaded from Google Play. The data of your Google account, of the download and of the payment are processed by Google on its own behalf, under its own privacy policy (policies.google.com/privacy). We do not see the details of your card or other payment method.
To find out which themes you have bought and to show you the prices, the app asks Google Play on your phone, through Google's billing library.
Purchases. If you buy Randomica, a theme or the "All themes" bundle, for each order Google makes available to us in the Google Play Console: the order number, what you bought, the date and time, the price, the taxes and the amount charged, the order status (for example whether it was refunded), the country and the phone model; for some purchases, especially outside the European Economic Area, also the region, city and postal code. We can also look up an order from the email address of the Google account used to make it, for example if you give it to us for a refund.
- Why and on what legal basis: to handle purchases, refunds and requests about them (Article 6(1)(b) GDPR) and for tax obligations (Article 6(1)(c)).
- Who else sees it: whoever helps us with the income tax return, if anyone (for example an accountant), for the reports needed for the return.
- How long: in the Google Play Console it is kept by Google, for the time Google decides. The copies of the reports we download for tax obligations are kept until the deadline for tax audits on the income tax return in which they appear has passed: as a rule, 31 December of the fifth year after the year in which the return is filed.
Reviews. If you leave a review on Google Play, in the Google Play Console we see the name you post it under, the text, the star rating and the date and, when Google provides them, the language set on your phone, your phone's model and characteristics (for example manufacturer, screen, processor and memory), the Android version and the version of Randomica installed. We may reply to you there. We do this on the basis of our legitimate interest in reading comments about the app, using them to improve it and replying (Article 6(1)(f) GDPR). The review stays on Google Play until you or Google delete it; the data that comes with it in the Console is kept by Google, for the time Google decides.
5. If you take part in a test of the app
- If your email address is in a list of testers that we enter in the Google Play Console (the list for a test or the list of licence testers, who can make test purchases without paying), because you give it to us or because the person who invited you to the test does, we use it only to give you access to the test and, if you are a licence tester, to test purchases. We remove it from the list when we close the test we added it for.
- If you send us private feedback from the test through Google Play, we see the feedback and the date and, when Google provides them, your account name, the language, the phone model, the Android version and the version of Randomica. We use it to fix and improve the app. In the Google Play Console it is kept by Google, for the time Google decides.
The legal basis is your participation in the test (Article 6(1)(b) GDPR). If your address is given to us by the person who invited you and you have not yet accepted the test, the legal basis is our legitimate interest in giving you access to the test (Article 6(1)(f)).
6. Who holds the data and transfers outside the European Economic Area
The support mailbox is a Gmail account, provided to Leonardo Messina by Google Ireland Limited (Ireland); purchase, review and test data are in the Google Play Console; the backup copy of the reports we download (section 4) is on Google Drive, also provided by Google. In all three cases the data is held by Google, which may also process it outside the European Economic Area, in particular in the United States through Google LLC.
For the United States, the European Commission's adequacy decision of 10 July 2023 applies (Implementing Decision (EU) 2023/1795, "EU-U.S. Data Privacy Framework"), in which Google LLC participates; for other countries, Google uses the standard contractual clauses approved by the European Commission. You can find them at policies.google.com/privacy/frameworks.
7. Your rights
For the data we hold about you, you can ask us, in the cases and under the conditions of Articles 15 to 21 GDPR, to see it and get a copy, to correct it, to delete it and to restrict its use; for the data you gave us yourself and that we process for a contract with you, also to receive it in a structured, commonly used and machine-readable format. To do so, write to onetapcoresupport@gmail.com.
Right to object. You can object at any time, on grounds relating to your particular situation, to the use of your data that we make on the basis of legitimate interest, by writing to the same address. We do so for the messages in section 3 that are not about the app or a contract with you, for keeping the messages in section 3 after we reply, for the reviews in section 4 and, in section 5, for your email address if it is given to us by the person who invited you to the test, until you accept the test.
We do not have the data that is only on your phone: you see it and delete it yourself, as described in section 2.
If you think we process your data in a way that does not comply with the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the European Economic Area country where you habitually reside, work or where the alleged infringement took place.
8. The website of this policy
This policy and the terms and conditions can also be read online, at artunx.github.io/randomica-legal. The website is hosted on GitHub Pages and uses no cookies, forms or analytics tools: nothing reaches us. For the security of its service, GitHub logs the IP address of whoever visits the pages and processes it on its own behalf, under its privacy statement (docs.github.com/site-policy/privacy-policies/github-general-privacy-statement): for this data, contact GitHub.