Privacy Policy

1. Who we are

AppXLab is an independent software studio run by Said Aazzou in Morocco. This policy covers every mobile application published under the AppXLab name on the Apple App Store and Google Play. In data-protection terms, AppXLab is the data controller for the limited data described below.

Contact: privacy@appxlab.io

2. Which apps this covers

Apps are added to this table as they are released. Where an app differs from what is described here, its store listing and this table say so.

3. No account, no personal details

Our apps do not ask for your name, email address, phone number or date of birth, and there is nothing to sign up for. We do not build a profile of you and we cannot identify you from anything we receive.

Where an app lets you type a name — for example onto a shareable result card or a certificate — that text is used only to draw the image on your device. It is not transmitted to us or stored beyond that screen.

4. What stays on your device

Almost everything. Your results, answers, scores, streaks, history, settings and progress are written to a database in your app's private storage on your phone. That data is not uploaded, synced or backed up to us. If you delete the app, it goes with it.

5. What leaves your device

Two kinds of data, neither of which includes your name, email address or any account details:

Anonymous usage analytics

We record that events happened — a test was started, a screen was viewed, a purchase completed — so we can tell which parts of an app work. These are counters and short labels. They contain no personal information and no content of your answers. We collect them with Aptabase, an open-source, cookieless analytics tool that we run ourselves on our own server, hosted with OVH in France, so they are not sent to an analytics company.

Crash reports

MindProof does not currently send crash reports to us or to a crash-reporting service. If that changes, we will update this policy first.

Advertising data (free tier only)

Ad-supported apps request ads from Google AdMob, and MindProof requests non-personalized ads only. These ads are chosen from the context of the app and your approximate (city-level) region, not from your past behaviour or interests: we don't use your activity to target ads. Even so, Google's Mobile Ads SDK, which runs inside the app, processes some data to deliver ads. It processes a device identifier (on iOS, the identifier for vendor, which Apple limits to one developer's apps, not the advertising identifier; on Android, the device's advertising ID) for ad delivery, frequency capping (limiting how often you see the same ad), fraud prevention and measurement. It also uses your IP address to estimate your approximate region and to detect invalid activity, and it collects standard device information, information about the ads you see and tap, and performance and crash data about its own code. This is handled by Google, not by us — see §6.

6. Advertising and your consent

Ads appear only in the free tier, only at natural breaks, and never during a puzzle, test or task. Buying any paid tier removes them completely.

MindProof requests non-personalized ads only, everywhere: every ad request (banner, full-screen and rewarded) is flagged as non-personalized, and we use no other ad network. We don't use your activity to target ads, we don't build an advertising profile of you, and the app doesn't ask to track you. Google's Mobile Ads SDK still processes a device identifier, your IP address and basic device information to deliver ads, cap how often you see them, prevent fraud and measure ads (see §5). We don't sell your data.

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent through Google's certified consent platform before requesting any ad. Google requires this consent even for non-personalized ads, because they still store and read information on your device. If consent is refused or not given, the app requests no ads at all rather than serving non-consented ones. You can change your answer at any time from “Privacy & ad choices” in the app's settings, which reopens the consent form.

On iOS, MindProof doesn't show Apple's “Allow app to track” prompt, so Apple doesn't make your device's advertising identifier (IDFA) available to the app or to Google's SDK. Google's SDK uses the identifier for vendor (IDFV) instead, for ad delivery, frequency capping, fraud prevention and measurement. On Android, ads are requested as non-personalized. Google may still use the advertising ID for the same limited purposes, and you can reset or delete it in your device settings.

Google's own handling of advertising data is described in their privacy and terms.

7. Purchases

Payments are processed entirely by Apple or Google. We never see your card details, billing address or name. We receive only a confirmation that a purchase for a given product succeeded, which the app stores locally to unlock the feature.

8. Notifications

Some apps can send a daily reminder. This is opt-in, never requested at install, and scheduled entirely on your device — reminders are not pushed from a server and require no data about you. Turn them off in your device's system settings at any time.

9. Your rights

Because we hold no data that identifies you, most access and correction requests have nothing to act on. Concretely:

• Erasure. Every app has a “delete all my data” action in its settings that wipes the on-device database. Deleting the app has the same effect.
• Advertising identifier. MindProof doesn't ask to track you on iOS, so it does not appear under Privacy & Security → Tracking. On Android you can reset or delete your advertising ID in Settings → Google → Ads (or Settings → Privacy → Ads, depending on the device).
• Ad consent. Withdraw or change it at any time from “Privacy & ad choices” in the app's settings, which reopens the consent form.
• Everything else. Email privacy@appxlab.io and we will answer within 30 days.

If you are in the EEA or UK you also have the right to complain to your local data-protection authority.

10. Retention

On-device data stays until you erase it. Analytics events are kept on our own server for no longer than 14 months, then deleted automatically, and are not linked to an identity we could reverse. Advertising data is retained by Google under their own policies. Encrypted backups of our analytics server are kept for up to 30 days, then deleted automatically and fully erased from storage within a further 6 weeks.

11. Children

MindProof is rated 4+ on the App Store. A 4+ rating means the content is suitable for all ages; it does not mean the app is designed for children. MindProof is a general-audience app and is not designed for or directed at children. Other AppXLab apps carry the age rating shown on their store listings. We do not knowingly collect data from children.

MindProof does not mark its ad requests as child-directed or as coming from users under the age of consent: we don't send an under-age or child-directed setting to Google. It does limit ads to content Google rates as suitable for general audiences (AdMob's “G” maximum ad content rating).

12. International transfers

Our processors (Google, Apple) operate globally and may process data outside your country, under the safeguards described in their own privacy documentation. Our analytics server is hosted with OVH in France (European Union).

13. Third-party protection

Every third party we share data with — currently Google (AdMob) and Apple — is bound by a data processing agreement requiring protection of your data equal to that described in this policy. Our analytics server is run by us and hosted with OVH, which processes the data only on our instructions. Its encrypted backups are stored with Amazon Web Services EMEA SARL (AWS region EU (Paris), France), also only on our instructions. We do not share your data with any other party, and we do not sell it. If we ever add a processor, it will be listed here and held to the same standard.

14. Changes to this policy

If this policy changes materially we will update the date at the top and, where the change affects how an app behaves, note it in that app's release notes.