Privacy Policy

PRIVACY POLICY

Last Updated: May 5, 2026

Application: The Leprechaun Gold Pot

Data Controller: CAKESCO LTD

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

1. INTRODUCTION

CAKESCO LTD ("Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mobile application The Leprechaun Gold Pot (the "App").

Please read this Privacy Policy carefully. By downloading, installing, or using the App, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use the App.

WHO WE ARE

Controller: CAKESCO LTD

Registered address: 14 STAMFORD WALK STAMFORD LINCOLNSHIRE UNITED KINGDOM PE9 2JE

Privacy contact: misscassandra@cakeappz.co.uk

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2. INFORMATION WE COLLECT

2.1 Information Collected Automatically

When you use the App, we automatically collect certain technical information. This data is processed by the App and transmitted to our third-party processors (Google Firebase and AppsFlyer) described in Section 4.

• Device or Other IDs — Google Advertising ID (GAID / AAID), AppsFlyer ID, Firebase Installation ID, Firebase Cloud Messaging (FCM) token. These identifiers are used for attribution, analytics, and push notifications.

• Device Information — device model, manufacturer, operating system version, system language, time zone, screen resolution, and mobile network / carrier information.

• App Activity / App Interactions — features you interact with, screens viewed, time spent in the App, session start and end times, in-app events, and navigation patterns.

• Crash Logs and Diagnostics — stack traces, error logs, performance metrics, and application state at the time of a crash.

• Approximate Location — derived from your IP address by our third-party processors to infer country / region. We do not collect precise GPS location.

• Installation and Referrer Data — Google Play install referrer and campaign attribution parameters used to measure the effectiveness of marketing campaigns.

• Push Notification Tokens — if you grant permission, we collect an FCM token to deliver notifications. You may withdraw this permission at any time in your device settings.

2.2 Information You Provide

The App does not require account registration. We do not collect your name, surname, password, or payment information unless explicitly stated in a specific feature.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

3. HOW WE USE YOUR INFORMATION

We use the collected information to:

• Operate, maintain, and improve the App and its features.

• Personalise your in-app experience based on usage patterns.

• Send push notifications and in-app messages (only with your permission).

• Detect, prevent, and address technical issues, bugs, and security threats.

• Analyse aggregated usage statistics to understand how users interact with the App.

• Measure the effectiveness of our marketing campaigns (attribution analytics via AppsFlyer).

• Comply with applicable laws and legal obligations.

We do not sell your personal data to third parties.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4. THIRD-PARTY SERVICES

Our App integrates the following third-party SDKs and services that independently collect and process information about you. Each provider acts as an independent data controller or processor and operates under its own privacy policy. Data is transmitted off your device to these providers.

• Google Firebase (Google LLC / Google Ireland Limited)

  Services used: Firebase Analytics, Firebase Crashlytics, Firebase Remote Config, Firebase Cloud Messaging (push notifications), Firebase Installations.

  Data collected: Firebase Installation ID, FCM token, Google Advertising ID (GAID), device and OS information, app version, crash logs, diagnostics, app interactions, approximate location (IP-based).

  Purpose: analytics, crash reporting, feature configuration, push delivery.

  Privacy Policy: https://policies.google.com/privacy

  Data processing terms: https://firebase.google.com/terms/data-processing-terms

• AppsFlyer Ltd

  Services used: mobile attribution SDK, marketing analytics, campaign measurement, install referrer tracking.

  Data collected: AppsFlyer ID, Google Advertising ID (GAID), device and OS information, IP address, approximate location (country / region derived from IP), install and in-app events, app interactions, campaign / referrer parameters.

  Purpose: advertising attribution, fraud prevention, marketing campaign measurement.

  Privacy Policy: https://www.appsflyer.com/legal/services-privacy-policy/

  Opt-out: https://www.appsflyer.com/optout

We encourage you to review the privacy policies of these third-party providers to understand how they handle your data. You can also limit advertising tracking at the operating-system level by resetting or opting out of the Advertising ID in your device settings under Privacy → Ads.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

4A. DATA SAFETY SUMMARY (Google Play)

For transparency and consistency with our Google Play Data Safety declaration, the following table summarises data collected and shared by the App:

Data type                         | Collected | Shared | Purpose

──────────────────────────────────┼───────────┼────────┼─────────────────────────────────

Device or other IDs (GAID,        |   Yes     |  Yes   | Analytics, Advertising, Attribution

  AppsFlyer ID, Installation ID)  |           |        |

App interactions                  |   Yes     |  Yes   | Analytics, Advertising

Crash logs                        |   Yes     |  No    | App functionality, Diagnostics

Diagnostics / Performance         |   Yes     |  No    | App functionality, Diagnostics

Approximate location (from IP)    |   Yes     |  Yes   | Analytics, Advertising

Other app performance data        |   Yes     |  Yes   | Analytics

Security practices:

• All data is encrypted in transit using industry-standard TLS / HTTPS.

• You can request that your data be deleted by contacting us (see Section 12).

• We commit to the Google Play Families Policy where applicable.

• Data collection is essential to the App's core functionality and marketing measurement; it cannot be fully disabled, but you may reset your Advertising ID or uninstall the App at any time.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

5. LEGAL BASIS FOR PROCESSING (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

• Legitimate Interests — to operate and improve the App, detect fraud, and ensure security.

• Consent — for push notifications and personalised analytics (you may withdraw at any time).

• Legal Obligation — when required to comply with applicable law.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

6. DATA RETENTION

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements.

Advertising identifiers (GAID) are processed in accordance with Google's policies. You may reset your advertising ID at any time in your device settings under "Privacy" → "Ads".

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

7. YOUR RIGHTS

Depending on your jurisdiction, you may have the following rights with respect to your personal data:

• Right of Access — to obtain a copy of the personal data we hold about you.

• Right to Rectification — to correct inaccurate or incomplete data.

• Right to Erasure — to request deletion of your personal data ("right to be forgotten").

• Right to Restriction — to request that we limit how we use your data.

• Right to Objection — to object to processing based on legitimate interests.

• Right to Data Portability — to receive your data in a structured, machine-readable format.

• Right to Withdraw Consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, please contact us at misscassandra@cakeappz.co.uk. We will respond within 30 days of receiving your request.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

8. CHILDREN'S PRIVACY

The App is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at misscassandra@cakeappz.co.uk and we will take steps to delete such information.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

9. DATA SECURITY

We implement commercially reasonable technical and organisational measures designed to protect your information from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/HTTPS) and restricted access controls.

However, please be aware that no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

10. INTERNATIONAL DATA TRANSFERS

Your information may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection as your home country. Where we transfer data internationally, we take appropriate safeguards to ensure adequate protection in accordance with applicable law.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by updating the "Last Updated" date at the top of this policy.

Your continued use of the App after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

12. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

CAKESCO LTD

Registered address: 14 STAMFORD WALK STAMFORD LINCOLNSHIRE UNITED KINGDOM PE9 2JE

Email: misscassandra@cakeappz.co.uk

Phone: +447457424205

We will respond to all legitimate enquiries within 30 days.