Privacy Policy
Last updated: April 20, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Interpretation and Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
For the purposes of this Privacy Policy:
- Account means a unique account created for You to access our Service or parts of our Service.
- Application refers to Finger Math, the software program provided by the Company.
- Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Privacy Policy) refers to Finger Math.
- Country refers to: India (Gujarat).
- Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.
- Personal Data (or “Personal Information”) is any information that relates to an identified or identifiable individual. We use “Personal Data” and “Personal Information” interchangeably unless a law uses a specific term.
- Service refers to the Application.
- Service Provider means any natural or legal person who processes the data on behalf of the Company.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
- You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.
Collecting and Using Your Personal Data
Types of Data Collected
Personal Data
While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:
- Email address — used as Your login identifier and to send transactional messages (for example, password reset, if supported).
- Username — a handle You choose at sign-up. It is used to display Your identity inside the Application (for example, on the profile screen and on feedback You submit while signed in).
- Session token — a randomly generated identifier stored on Your device, used to enforce single-device sign-in. It is not shared with any third party other than Our authentication backend.
When You submit feedback through the Service:
- We collect Your rating (1–5 stars), message text, and the application version and platform (Android/iOS).
- If You are signed in, We attach Your username and user ID to the feedback so We can follow up.
- If You are not signed in, You may optionally provide an email address so We can reply. Providing an email is optional.
Usage Data
Usage Data is collected automatically when using the Service.
Usage Data may include Your device’s Internet Protocol (IP) address, operating system, application version, and diagnostic logs that relate to use of the Service. We use the IP address transiently to enforce rate limits on Our backend and to detect abuse; We do not build a persistent profile from it.
We do not use third-party analytics services (for example, Google Analytics, Firebase Analytics, Amplitude, Mixpanel). We do not use advertising or remarketing SDKs. We do not track You across other apps or websites.
Permissions We Do NOT Request
The Application does not request access to Your location (GPS), contacts, camera, photo library, microphone, or any other sensitive device permissions. If a future version of the Application introduces such features, this Privacy Policy will be updated before those features ship.
Use of Your Personal Data
The Company uses Personal Data for the following purposes:
- To provide and maintain our Service, including to monitor the usage of our Service.
- To manage Your Account — to register You as a user of the Service and to authenticate You on each subsequent sign-in.
- To enforce Service security — Your session token, Your IP address (transiently), and App Check device attestation are used to prevent unauthorized access and abuse.
- To contact You — where strictly necessary, by email, regarding changes to the Service, security notices, or responses to feedback You have submitted.
- To manage Your requests — to attend to and respond to Your questions or requests.
- To comply with legal obligations — when required by law, We may retain or disclose Personal Data.
We do not use Your Personal Data to send marketing emails, to profile You for advertising, to sell Your data, or to share it with data brokers.
Sharing Your Personal Data
We may share Your Personal Data in the following limited situations:
- With Service Providers — listed in full in the “Third-Party Service Providers” section below. We share only the minimum data needed for each provider to perform its role.
- For legal reasons — if required by law, a valid legal request, or to protect the rights, property, or safety of the Company, Our users, or the public.
- For business transfers — if the Company is involved in a merger, acquisition, or asset sale. In that event We will provide notice before Your Personal Data is transferred and becomes subject to a different privacy policy.
- With Your consent — We may disclose Your Personal Data for any other purpose with Your explicit consent.
We do not share Your Personal Data with business partners, advertisers, or affiliates for marketing purposes.
Third-Party Service Providers
We use the following Service Providers to operate the Application:
- Google LLC — provides Firebase Authentication, Cloud Firestore (database), Cloud Functions, and Firebase App Check. Your Personal Data is stored in the Google Cloud
asia-south1region (Mumbai, India). Google’s privacy policy: https://policies.google.com/privacy. - Google Play Integrity API — used via Firebase App Check to verify that requests to Our backend originate from a genuine installation of the Application. Google Play Integrity processes device attestation signals as described in Google’s Privacy Policy (above).
No other third parties receive Your Personal Data.
Retention of Your Personal Data
We retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. Different categories of data have different retention windows:
- Account data (email, username, session token) — retained for the lifetime of Your account. When You delete Your account, this data is permanently erased within a reasonable period not exceeding 30 days.
- Quiz progress and review sessions — retained for the lifetime of Your account. Deleted together with Your account.
- Feedback submissions — retained indefinitely for the purpose of improving the Service. However, if You delete Your account, Your username and user ID are removed from any feedback You previously submitted; the feedback content remains but is no longer identifiable as Yours.
- Server logs (IP addresses, rate-limit records, diagnostic logs) — retained for up to 30 days for security and abuse prevention, then deleted.
- Backups — residual copies may persist in encrypted backups for a limited period and are restored only if necessary for disaster recovery or legal compliance.
Transfer of Your Personal Data
Your Personal Data is processed at Our backend location, which is Google Cloud’s asia-south1 region in Mumbai, India. Depending on Your location, this may involve a transfer of Your data outside of Your country, state, or province.
Where required by applicable law, We ensure that international transfers of Personal Data are subject to appropriate safeguards. The Company will take all steps reasonably necessary to ensure Your data is treated securely and in accordance with this Privacy Policy.
Delete Your Personal Data
You have the right to delete Your Personal Data.
You can delete Your account at any time directly from within the Application:
- Sign in to Your account.
- Open the drawer menu and tap Profile.
- Tap Delete Account and confirm.
Account deletion is immediate and permanent. The following will happen:
- Your Firebase Authentication account is deleted.
- Your user record is deleted from Our database.
- Your quiz progress and review history are deleted.
- Feedback You submitted while signed in is anonymized — Your username and user ID are removed, but the feedback content is retained to help improve the Service.
You may also contact Us at the email below to request deletion, access, correction, or a copy of Your Personal Data. We will respond within the timeframe required by applicable law (typically 30 days under GDPR).
Security of Your Personal Data
We implement the following safeguards:
- Passwords are never stored by Us; authentication is handled by Firebase Authentication and passwords are managed by Google.
- Requests to Our backend are protected by Firebase App Check (Play Integrity) and per-endpoint rate limits.
- All data in transit is encrypted via HTTPS.
- Session tokens are stored on Your device using Expo Secure Store, which uses the platform’s secure keystore (Android Keystore / iOS Keychain).
No method of transmission over the Internet or electronic storage is 100% secure. While We use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.
Your Rights Under GDPR (for users in the European Economic Area)
If You are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, You have the following rights under the General Data Protection Regulation (GDPR):
- Right of access — request a copy of the Personal Data We hold about You.
- Right to rectification — request correction of inaccurate Personal Data.
- Right to erasure (“right to be forgotten”) — request deletion of Your Personal Data. You can exercise this right directly via the in-app “Delete Account” flow.
- Right to data portability — request Your Personal Data in a machine-readable format.
- Right to restrict processing — request that We limit how We process Your Personal Data.
- Right to object — object to processing based on Our legitimate interests.
- Right to withdraw consent — withdraw any consent You previously gave.
- Right to lodge a complaint — with Your local supervisory authority if You believe We have violated Your rights.
Legal basis for processing: We process Your Personal Data on the following legal bases:
- Contract — to provide the Service You have signed up for (account, quiz, review).
- Legitimate interest — to secure the Service (App Check, rate limits, abuse prevention) and to improve the Service via feedback You voluntarily submit.
- Consent — for any optional processing. You may withdraw consent at any time.
To exercise any of these rights, email support@omeecron.tech with the subject line “Privacy Request” and describe which right You wish to exercise. We will respond within 30 days.
Children’s Privacy
The Service is not directed to children under the age of 16. We do not knowingly collect Personal Data from children under 16. Our sign-up flow requires You to confirm You are at least 16 years old and to accept this Privacy Policy before an account can be created.
If You are a parent or guardian and You believe that Your child under 16 has provided Us with Personal Data, please contact Us at support@omeecron.tech and We will delete that data promptly.
If We learn that We have collected Personal Data from a child under 16 without verified parental consent, We will take steps to delete that information.
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party’s site. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services. We strongly advise You to review the Privacy Policy of every site You visit.
Changes to this Privacy Policy
We may update Our Privacy Policy from time to time. We will notify You of material changes by updating the “Last updated” date at the top of this Privacy Policy and, where appropriate, by posting a prominent notice inside the Application prior to the change becoming effective.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, or to exercise any of Your privacy rights described above, You can contact us:
- By email: support@omeecron.tech