# Privacy Policy — ColdRoom
**Effective date:** 25 June 2026
**App:** ColdRoom (Android)
**Developer / Data controller:** Michael Trew ("we", "us")
**Contact:** miketrew54@gmail.com
This policy explains what information the ColdRoom ("the app") collects, how it is
used, and who it is shared with. By using the app you agree to this policy.
We have built ColdRoom to collect as little personal information as possible. We do **not**
ask you to create an account, and we do **not** collect your name, email address,
phone number, contacts, photos, or precise location.
---
## 1. Information we process
**a) A random device identifier.**
When you first open the app, it generates a random identifier (a UUID) and stores it on
your device. This identifier is **not** your name, email, phone number, Google account,
or Android Advertising ID, and it is not linked to your real-world identity. We send it
to our backend so we can:
- enforce the daily free-wish limit fairly,
- keep track of any wish packs you have purchased, and
- track the state of your current play "round".
**b) Wish text and chosen objective.**
The free-text "wish" you type, together with the objective you select (e.g. "Rich"), is
sent to our backend and then to our AI provider (Anthropic) so the genie can generate a
response. **Please do not enter personal, sensitive, or confidential information into
the wish box.** We do not use this text to identify you and we do not associate it with
your device identifier for profiling.
**c) App settings and game progress.**
Your preferences (haptics, music, sound effects) and your trophy/progress data are stored
**only on your device** (in local storage). They are not sent to our servers.
**d) Purchases.**
In-app purchases (when available) are processed by **Google Play Billing**. We never
receive or store your payment card details. We store only a count of purchased wishes
associated with your random device identifier.
We do **not** collect analytics, we do **not** show advertising, and we do **not**
include third-party advertising or analytics SDKs.
---
## 2. How we use the information
We use the limited data above solely to:
- operate core game features (generate genie responses to your wishes),
- apply daily usage limits and honour purchased wishes,
- maintain the state of an active game round, and
- provide and improve the app's functionality.
We do **not** sell your data, and we do **not** use it for advertising or cross-app
tracking.
---
## 3. Third parties that process data on our behalf
| **Anthropic, PBC** | Generates genie/AI responses | Your wish text and objective | https://www.anthropic.com/legal/privacy |
| **Cloudflare, Inc.** | Hosts our backend and stores usage counters | Random device identifier, usage counts | https://www.cloudflare.com/privacypolicy/ |
| **Google Play** | App distribution and in-app billing | Purchase transactions (handled by Google) | https://policies.google.com/privacy |
These providers act as data processors and are permitted to use the data only to provide their services to us.
---
## 4. Data retention
- **Daily usage counters:** automatically expire approximately 24 hours after creation.
- **Round state:** automatically expires approximately 1 hour after creation.
- **Purchased-wish balance:** retained against your random device identifier until the
wishes are used, or until you request deletion.
- **On-device data (settings, progress):** removed when you uninstall the app or clear
the app's storage.
- **Wish text** is processed to generate a response and is not stored by us in a form
linked to your identifier. Anthropic's handling of prompt data is governed by its own
policy linked above.
---
## 5. Children's privacy
Genie is not directed to children under 13 (or the equivalent minimum age in your
country). We do not knowingly collect personal information from children. If you believe
a child has provided us information, contact us and we will delete it.
---
## 6. Security
All communication between the app and our backend uses encrypted HTTPS connections. Our
API key for the AI provider is stored only as a server-side secret and is never included
in the app. Because we minimise the data we collect, the risk to you in the event of a
breach is low.
---
## 7. Your choices and rights
- You can stop all data collection by uninstalling the app.
- You can clear local data (settings and progress) via your device's app storage
settings.
- You may request deletion of any data associated with your random device identifier by
emailing us at the address below. Because the identifier is random and unlinked to your
identity, please send the request from the device or include the identifier if known.
Depending on where you live (e.g. the EEA/UK or California), you may have additional
rights to access, correct, or delete personal data, and to lodge a complaint with a
supervisory authority.
---
## 8. International transfers
Our providers may process data on servers located outside your country, including in the
United States. Where required, transfers are made under appropriate safeguards.
---
## 9. Changes to this policy
We may update this policy from time to time. We will revise the "Effective date" above
and, for material changes, provide notice within the app or store listing.
---
## 10. Contact
Questions or requests about this policy or your data:
**miketrew54@gmail.com**