APPXLAB
Legal — Document 01

Privacy Policy

The short version: we don't want your personal data, and we've built the apps so we don't need it.

Last updated 3 August 2026

1. Who we are

AppXLab is an independent software studio run by Said Aazzou in Morocco. This policy covers every mobile application published under the AppXLab name on the Apple App Store and Google Play. In data-protection terms, AppXLab is the data controller for the limited data described below.

Contact: privacy@appxlab.io

2. Which apps this covers

AppCategoryAnalyticsAds
Cognitive training app (in development)Puzzles & brain trainingYesYes, free tier only

Apps are added to this table as they are released. Where an app differs from what is described here, its store listing and this table say so.

3. No account, no personal details

Our apps do not ask for your name, email address, phone number or date of birth, and there is nothing to sign up for. We do not build a profile of you and we cannot identify you from anything we receive.

Where an app lets you type a name — for example onto a shareable result card or a certificate — that text is used only to draw the image on your device. It is not transmitted to us or stored beyond that screen.

4. What stays on your device

Almost everything. Your results, answers, scores, streaks, history, settings and progress are written to a database in your app's private storage on your phone. That data is not uploaded, synced or backed up to us. If you delete the app, it goes with it.

5. What leaves your device

Three things, none of which identifies you personally:

Anonymous usage analytics

We record that events happened — a test was started, a screen was viewed, a purchase completed — so we can tell which parts of an app work. These are counters and short labels. They contain no personal information and no content of your answers.

Crash and performance diagnostics

When an app crashes we receive a technical report: the error, the sequence of code that produced it, and the device model and OS version. This exists so we can fix the crash.

Advertising data (free tier only)

Ad-supported apps request ads from Google AdMob. Serving an ad involves your device's advertising identifier, approximate location derived from your IP address, and standard device information. This is handled by Google, not by us — see §6.

DataPurposeLegal basis (GDPR)Processor
Anonymous app eventsProduct analyticsLegitimate interestGoogle (Firebase Analytics)
Crash & performance reportsFixing defectsLegitimate interestGoogle (Crashlytics)
Configuration valuesFeature flags, tuningLegitimate interestGoogle (Remote Config)
Advertising identifier, IP-derived region, device infoShowing adsConsentGoogle (AdMob)
Purchase receiptUnlocking what you paid forContractApple / Google

6. Advertising and your consent

Ads appear only in the free tier, only at natural breaks, and never during a puzzle, test or task. Buying any paid tier removes them completely.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent through Google's certified consent platform before requesting any ad. You can change your answer at any time from the app's settings screen. If consent is refused or unavailable, we serve no ads at all rather than serving non-consented ones.

On iOS, personalised advertising additionally requires you to allow tracking when the system asks. Declining is fine — you will see non-personalised ads and the app behaves identically in every other respect.

Google's own handling of advertising data is described in their privacy and terms.

7. Purchases

Payments are processed entirely by Apple or Google. We never see your card details, billing address or name. We receive only a confirmation that a purchase for a given product succeeded, which the app stores locally to unlock the feature.

8. Notifications

Some apps can send a daily reminder. This is opt-in, never requested at install, and scheduled entirely on your device — reminders are not pushed from a server and require no data about you. Turn them off in your device's system settings at any time.

9. Your rights

Because we hold no data that identifies you, most access and correction requests have nothing to act on. Concretely:

If you are in the EEA or UK you also have the right to complain to your local data-protection authority.

10. Retention

On-device data stays until you erase it. Analytics and crash data are retained by Google under their standard retention periods and are not linked to an identity we could reverse.

11. Children

Our apps are rated for ages 12 and over and are not directed at children. We do not knowingly collect data from children, and where required we instruct our ad provider to treat users as being under the age of consent.

12. International transfers

Our processors (Google, Apple) operate globally and may process data outside your country, under the safeguards described in their own privacy documentation.

13. Changes to this policy

If this policy changes materially we will update the date at the top and, where the change affects how an app behaves, note it in that app's release notes.

Questions about any of this? Email privacy@appxlab.io. If something here doesn't match what an app actually does, tell us — that's a bug, and we'll fix the app or the policy.