PRIVACY POLICY
for
Caynax Timer
(com.caynax.timer.stopwatch)

Last updated: 21 September 2026

=== THE SHORT VERSION ===

Caynax Timer is a local-first time tracker. There is no account, no sign-up and
no server belonging to us. Every timer, session, category, tag, goal, note and
setting you create is stored in a database on your own device and is never sent
anywhere by the app.

The app is free and is paid for by advertising. The advertising and the crash
reporting are provided by Google, and those components do collect data. That is
what the rest of this document is about.


=== 1. INFORMATION THE APP ITSELF COLLECTS ===

None. The app has no account system, no login, no user profile and no server to
send anything to.

Your tracked time, activity names, categories, groups, tags, notes, goals,
mood/energy ratings and preferences are held in local storage on your device.
They leave the device only when you explicitly export them:

  - CSV export, JSON backup and the PDF report write to a file in a location you
    choose through Android's own file picker. That is you moving your own data;
    the app does not transmit it.
  - Android's Auto Backup may include the app's database and settings in your
    own Google account backup, if you have that switched on in your device
    settings. This is a system feature, controlled by you, and the backup goes
    to your Google account rather than to us. Device-local state (widget state,
    purchase cache) is deliberately excluded.

Uninstalling the app deletes all of it from the device.


=== 2. SERVICES INSIDE THE APP THAT DO COLLECT DATA ===

2.1 Google AdMob (advertising)
    The free version shows a banner advertisement. AdMob may collect and use
    device identifiers — including the Google Advertising ID — together with
    app-usage and approximate-location signals in order to select and measure
    advertisements. This data is collected by Google, not by us, and is shared
    with Google for advertising and analytics purposes.
    Google's privacy policy: https://policies.google.com/privacy
    AdMob: https://admob.google.com/

    You can reset or delete your Advertising ID at any time in your device's
    Google settings.

2.2 Google User Messaging Platform (advertising consent)
    In the European Economic Area, the United Kingdom and Switzerland, a consent
    form is shown before any advertisement is requested. The app requests no
    advertisement until that form has been answered. You can reopen the form and
    change your answer at any time from the app's About screen, under
    "Ad privacy options".

2.3 Firebase Analytics (usage statistics)
    Used to count anonymous, aggregated usage — which screens are opened and
    which features are used — so the app can be improved. It is switched OFF
    when the app starts and is only enabled after you have accepted the licence
    agreement AND your advertising-consent record permits measurement. If you
    withdraw that consent, collection is switched off again.
    No text you type is ever sent. Activity names, notes, category and tag names
    and search terms are never included in any event; every event and parameter
    the app can send is a fixed value written into the program.
    https://firebase.google.com/support/privacy

2.4 Firebase Crashlytics (crash reports)
    If the app crashes, a diagnostic report — the technical stack trace, the
    device model and the app version — is sent so the fault can be fixed. It is
    switched OFF when the app starts and is enabled only after you have accepted
    the licence agreement. Crash reports contain no content you created.
    https://firebase.google.com/support/privacy

2.5 Google Play Billing (purchases)
    The optional "No ads" and PRO purchases are handled entirely by Google Play.
    Payment details are never seen by the app. The app stores only whether a
    purchase is currently owned, on the device.
    https://policies.google.com/privacy

That is the complete list of outbound network traffic: advertising requests, the
consent form, analytics and crash reports, and Google Play purchase checks.
Nothing else. Tracking your time needs no internet connection at all.


=== 3. PERMISSIONS AND WHY THEY EXIST ===

  - Internet / network state — advertising requests and the consent form.
  - Notifications — the running-timer notification, the Focus Timer phase
    alerts and the optional reminders. The app works without this.
  - Foreground service (special use) — keeps a running stopwatch counting, and
    keeps the home-screen widgets' elapsed time correct, while the app is in
    the background.
  - Run at startup — restores a running timer after the device reboots.
  - Wake lock — keeps the Focus Timer counting down with the screen off.
  - Vibrate — Focus Timer phase-change alerts.
  - Ignore battery optimisations — used only to open the system's own dialog,
    where you decide whether to exempt the app. The app cannot grant this to
    itself, and works (less reliably in the background) if you decline.
  - Billing — the optional in-app purchases.

Some further permissions are added automatically by Google's advertising and
Play libraries, including the Advertising ID permission.


=== 4. CHILDREN ===

Caynax Timer is a general-audience application. It is not directed at children,
and it is declared as such to the advertising network.


=== 5. CHANGES TO THIS POLICY ===

If this policy changes, the revised text is published at the address above with
a new "Last updated" date.


=== 6. CONTACT ===

Questions about this policy, or a request concerning your data:

    caynax@gmail.com
    https://caynax.com