Privacy Policy

1. Who we are

This Privacy Policy describes how WorldScratch (“WorldScratch,” “we,” “us,” or “our”) collects, uses, stores, and shares information when you use the WorldScratch mobile application on Apple iOS and Google Android (the “App”).

WorldScratch is operated by an independent developer. For privacy questions and data requests, contact:

sagishavit1001@gmail.com

App identifiers: com.worldscratch.worldscratch (iOS and Android).

2. Scope

This Policy applies to the WorldScratch App distributed through the Apple App Store and Google Play. It does not cover third-party websites, stores, or services that we do not control (for example, Apple, Google, or device manufacturers), except where we expressly describe how their services interact with the App.

3. Summary

• Your travel journal stays on your device. Visited countries, notes, photos, and game scores are stored locally. We do not operate a WorldScratch account system and do not upload your journal content to our servers.
• We do not sell personal information and do not show advertising in the App.
• Limited analytics. On iOS and Android, the App uses Google Firebase Analytics for aggregate app usage and performance insights. Analytics data is processed by Google; it does not include your notes or photos.
• Photo library access is used only so you can attach photos to countries you have visited. Photos remain on your device.
• You control deletion of journal data from within Settings in the App.

4. Information we process

4.1 Information you create in the App (stored on your device)

When you use WorldScratch, the following content is created and stored on your device only:

We do not receive copies of this journal content. If you back up your device through Apple iCloud, Google backup, or a similar service, those backups are governed by the backup provider’s policies.

4.2 Information collected automatically (analytics)

On supported mobile platforms, WorldScratch initializes Google Firebase Analytics. Firebase Analytics may automatically collect information such as:

• App opens, sessions, and approximate engagement metrics
• Device and app information (for example, OS version, app version, device model, language)
• Instance identifiers used by Google to measure usage
• Other standard Analytics/App Instance data as described in Google’s documentation

We do not send your notes, photos, visited-country lists, or quiz scores to Firebase Analytics as custom events. We do not set a personal user ID in Analytics.

Learn more: Firebase Privacy and Security and Google Privacy Policy.

4.3 Device permissions

• Photo library: Used to let you choose photos to attach to visited countries. We do not upload those photos to WorldScratch servers.
• Internet / network: Used for Firebase Analytics and to load app fonts from Google Fonts when needed.

WorldScratch does not request access to precise location, contacts, microphone, health data, or push-notification messaging as part of core functionality described in this Policy.

4.4 Information we do not collect

• Account registration, usernames, or passwords
• Payment card or billing information (the App has no in-app purchases)
• Advertising identifiers for ads (the App has no ads)
• Precise GPS location for tracking
• Contacts, call logs, SMS, or microphone audio

5. How we use information

6. Legal bases (EEA, UK, Switzerland, and similar laws)

Where required, we rely on the following bases:

• Contract / service delivery: processing needed to provide the App features you request (on-device journal and preferences).
• Legitimate interests: limited analytics to understand how the App is used and to improve it, balanced against your privacy rights.
• Consent: where required by law or platform rules for optional analytics or permissions (for example, photo library access). You may withdraw permission in your device settings; doing so may limit related features.
• Legal obligation: when we must retain or disclose information to comply with applicable law.

7. Sharing and third parties

We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

7.1 Service providers

7.2 Legal and safety disclosures

We may disclose information if required by law, legal process, or to protect the rights, safety, or integrity of users, the App, or others, to the extent such information is available to us.

7.3 Business transfers

If WorldScratch is involved in a merger, acquisition, or asset sale, information under our control may be transferred as part of that transaction, subject to this Policy or equivalent protections.

8. Retention and deletion

• On-device journal, photos, scores, and preferences remain on your device until you delete them in the App, uninstall the App, or clear related device storage/backups.
• In Settings, you can Clear visits & photos (removes journal entries and attached photo files) and Reset game scores.
• Uninstalling the App typically removes App-local data from the device, subject to your OS and any separate backups.
• Firebase Analytics data is retained by Google according to Google’s retention controls and documentation for Firebase/Google Analytics properties.
• Emails you send us are retained only as long as needed to respond and keep a reasonable record of the request, unless a longer period is required by law.

Because WorldScratch does not create online accounts, there is no cloud “account deletion” flow. Deleting on-device data in Settings (or uninstalling) is the primary way to remove your journal content.

9. Security

We design WorldScratch so sensitive journal content stays on your device rather than on our servers. Device-level protections (such as passcodes, biometrics, and OS storage protections) help secure that data. No method of electronic storage is perfectly secure; please keep your device updated and protected.

Analytics traffic to Google uses industry-standard transport security provided by those services.

10. Children’s privacy

WorldScratch is a general-audience travel journal. It is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children for online accounts — the App has no account system.

If you believe a child has provided personal information to us by email, contact us and we will take appropriate steps to delete it. Parents and guardians should supervise device photo-library access and App use as appropriate.

If you offer the App in a region with a higher digital-consent age (for example 16 in some countries), please ensure use complies with local requirements.

11. International data transfers

Your on-device journal content is not transferred by us to WorldScratch servers. Analytics and font requests may be processed on servers operated by Google in the United States and other countries.

Where Google transfers personal data internationally, it relies on appropriate safeguards described in Google’s privacy documentation (such as Standard Contractual Clauses, where applicable). By using the App, you understand that analytics processing may involve transfers outside your country of residence.

12. Your privacy rights

Depending on where you live, you may have rights under laws such as the EU/UK GDPR, California CCPA/CPRA, Brazil LGPD, Canada PIPEDA, Australia’s Privacy Act, and similar frameworks. These may include rights to:

• Access personal information we hold about you
• Correct inaccurate information
• Delete personal information
• Receive a portable copy of certain information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Opt out of “sale” or “sharing” of personal information (we do not sell or share for cross-context behavioral advertising)
• Appeal a denied privacy request, where required by law
• Lodge a complaint with a supervisory authority

12.1 How to exercise rights

• On-device data: use in-App Settings controls (clear visits & photos, reset scores) or uninstall the App.
• Analytics / other requests: email sagishavit1001@gmail.com with the subject “Privacy Request” and describe your request. We may need information to verify the request.

We will respond within the timeframe required by applicable law (often 30–45 days, extendable where permitted).

12.2 California notice (CCPA/CPRA)

In the preceding 12 months, depending on your use of the App:

• Categories collected: identifiers / device information (via analytics); internet or electronic activity (app usage via analytics); customer content you store locally (journal/photos — not collected by us onto our servers).
• Sources: you (on-device content); your device and Google Firebase Analytics (usage metrics).
• Business purposes: providing the App; analytics and improvement; security and debugging via platform providers.
• Sale / share: We do not sell personal information and do not share it for cross-context behavioral advertising.
• Sensitive personal information: We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA beyond what is necessary to provide the App.

California residents may designate an authorized agent to submit requests. We will not discriminate against you for exercising your privacy rights.

12.3 “Do Not Track”

The App does not respond to browser Do Not Track signals. You can limit analytics through platform privacy settings where available, and by limiting network access or uninstalling the App.

13. Apple App Store and Google Play disclosures

This Policy is the public privacy policy URL for WorldScratch on both the Apple App Store and Google Play. Our App Store Privacy Nutrition Labels and Google Play Data safety disclosures are intended to reflect the practices described here, including:

• Local storage of journal content and photos you add
• Collection of App activity / diagnostics-style usage data via Firebase Analytics
• No account system, no ads, and no in-app purchases
• Photo library permission for attaching travel photos

If store labels and this Policy ever differ because of a platform update, this Policy and our response to your privacy email control how we handle requests we can fulfill.

14. Changes to this Policy

We may update this Privacy Policy to reflect product, legal, or operational changes. We will revise the “Last updated” date at the top of this page and, when changes are material, take additional steps as required by law (such as in-App notice or an updated store listing link).

Continued use of the App after an update means you acknowledge the revised Policy, to the extent permitted by law.

15. Contact

For privacy questions, data requests, or complaints about WorldScratch:

WorldScratch — Privacy
Email: sagishavit1001@gmail.com

If you are in the EEA/UK, you may also contact your local data protection authority. If you are in California, you may contact the California Privacy Protection Agency or the California Attorney General.