Privacy Policy.
What I collect, what I don't, and why — written in plain language.
The short version
KIHUTech apps and this website are operated by Tran Hoai Hung, an independent developer based in Ho Chi Minh City, Vietnam. I collect the minimum data needed to run the apps, never sell your data, and explain everything below in plain English. If a section is unclear, email support@kihutech.com and I will rewrite it.
Who this applies to
This policy covers everything I publish under the KIHUTech name: the website at kihutech.com, the mobile apps (Bloom Survivors, Poppin, SnapFit, Missions, IdeaBox), and any future apps unless they ship with their own policy. It applies to anyone aged 13 or older — see the Children's Privacy section if you are under 13.
What I collect
Four categories: (1) Data you give me directly — email address, message contents, account details if you create an account. (2) Data your device sends automatically — device model, OS version, app version, language, anonymous identifier, crash logs, basic usage events (which screens you open). In ad-supported apps, the ad provider may also receive your device's advertising ID and an approximate (city or region level) location. (3) Data created by you inside the app — tasks, notes, ideas, photos. Category 3 stays on your device unless you explicitly sync it; I never read it on my servers. (4) Purchase history — if you buy something inside an app, such as Remove Ads, which products you bought. It is linked to an anonymous app user ID, not to your name or email, and is used only to deliver your purchase and restore it on a new device.
How I use your data
To operate the apps (sync your data across devices if enabled), deliver and restore in-app purchases, fix bugs (crash logs help me reproduce issues), improve features (usage analytics shows me which features are used), and reply when you contact me. Apart from personalized ads in ad-supported apps, which only happen if you allow tracking (see Google AdMob below), I do not use your data for behavioural advertising, profiling, automated decisions, or training AI models — yours or anyone else's.
Third-party services I use
Firebase (Google) — analytics, crash reporting, hosting. Anthropic Claude — only when you use AI features in IdeaBox; your prompts are sent to Anthropic for processing and not retained for training. Apple App Store and Google Play — store-level download metrics and reviews handled by Apple/Google directly. Apple In-App Purchase & RevenueCat — purchases are processed by Apple; I never see your payment details. RevenueCat (revenuecat.com) checks and records purchases using an anonymous app user ID and your purchase history, so a purchase can be restored on a new device. RevenueCat privacy policy: https://www.revenuecat.com/privacy. Google AdMob — in ad-supported apps such as Big Coffee and Paint Reveal. AdMob may collect your advertising ID, approximate location, and ad interactions. On iOS, ads are personalized only if you allow tracking in Apple's App Tracking Transparency prompt; otherwise you see non-personalized ads. Google's privacy policy: https://policies.google.com/privacy. YouTube — trailers embedded on kihutech.com load only when you press play.
Cookies and local storage
The website stores your theme preference (light/dark) and language preference in local storage, and uses Google Analytics through Firebase to count visits, which sets analytics cookies. There are no advertising cookies on the website. Embedded YouTube players may set their own cookies once you press play — that is controlled by YouTube, not me. You can clear cookies and local storage from your browser at any time without breaking the site.
How your data is protected
All network traffic uses HTTPS/TLS. Stored data sits on Firebase infrastructure (Google Cloud), which is SOC 2 / ISO 27001 certified. I keep the minimum data I need and follow industry-standard security practices, but no system is perfectly secure. If a breach happens that affects your data, I will notify you within 72 hours as required by GDPR.
How long I keep data
Account data: kept while your account is active, deleted within 30 days of you closing it (sooner on request). Email correspondence: kept up to 2 years for support history. Crash logs and analytics: anonymised after 14 months. Content you create (tasks, ideas, photos): kept until you delete it manually, then permanently removed within 30 days. Backups may retain data up to 90 days before being fully purged.
International data transfers
I operate from Vietnam. Firebase servers are located in the United States and Europe (Google Cloud regions). When you use the apps, your data may be transferred to and processed in these countries. For users in the European Economic Area, the United Kingdom, and Switzerland, transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission.
Your rights
Regardless of where you live, you can ask what data I hold on you, request a correction, request a copy in a portable format, or request full deletion. Email support@kihutech.com — I aim to respond within 7 days, never longer than 30. Under GDPR (EU/UK) you also have the right to restrict processing, object to processing, and lodge a complaint with your local data protection authority. Under CCPA/CPRA (California) you have the right to know, delete, correct, and opt out of any sale or sharing — I do not sell or share data for cross-context behavioural advertising.
Children's privacy
KIHUTech apps and this website are not directed at children under 13 (or the equivalent minimum age in your jurisdiction — 16 in some EU countries). I do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided me with data, contact support@kihutech.com and I will delete it immediately.
Do not sell or share my data
I do not sell your personal data. The only sharing for cross-context behavioural advertising is through Google AdMob in ad-supported apps, and only if you allow it: on iOS through the App Tracking Transparency prompt, on Android through your device's ad personalization setting. You can turn it off at any time in iOS Settings › Privacy & Security › Tracking, or in Android Settings › Google › Ads.
Changes to this policy
I will update this policy when the apps change in ways that affect privacy. Material changes will be announced in-app and by email at least 30 days before they take effect. Minor wording fixes will be posted here with a new 'Last updated' date. The full revision history is available on request.
Contact and complaints
All privacy questions, data requests, and complaints: support@kihutech.com. Postal address available on request. If you are in the EEA and unhappy with my response, you may also contact your national Data Protection Authority. If you are in the UK, the Information Commissioner's Office (ICO). If you are in California, the California Privacy Protection Agency (CPPA).
Three promises.
Three principles I'll stick to, regardless of what's convenient for the business.
Minimum data
I only collect what's truly needed. If a feature can run without your data, it does.
Plain language
No legal jargon where it can be avoided. Any material changes get a 30-day notice and a clear summary.
You're in control
Ask me to delete anything, anytime. I respond within 7 days, never longer than 30.
Privacy questions?
If anything here is unclear or you want me to explain further, just reach out.