Privacy Policy

At Cozy River Studios ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our applications, including Calm Brush: Kanji and any future apps (collectively, "our Services") across all platforms including iOS App Store, Google Play Store, Steam, and other distribution platforms.

By using our Services, you agree to the collection and use of information in accordance with this policy. This policy complies with GDPR, CCPA, COPPA, and platform-specific requirements.

Information We Collect

Information You Provide

• Account information (if you create an account): username and email address
• Support requests: name, email, and message content when you contact us
• Feedback and feature requests you submit

Information Collected Automatically

• Device information: device type, operating system version, and unique device identifiers
• Usage data: app features used, session duration, and interaction patterns
• Performance data: app crashes, errors, and performance metrics
• Learning progress: practice statistics, completion rates, and achievement data (stored locally)

Information from Platform Stores

• Purchase history and subscription status (managed by platform store: Apple, Google, Steam)
• Receipt validation data for premium features
• Platform-specific user IDs for account management
• Achievement and gameplay statistics (Steam only)

How We Use Your Information

We use the collected information to:

• Provide and maintain our Services
• Personalize your learning experience
• Process in-app purchases and manage subscriptions
• Respond to support requests and communicate with you
• Improve our apps and develop new features
• Ensure app security and prevent fraud
• Comply with legal obligations
• Send important updates about our Services (non-marketing)

Data Storage and Security

We prioritize your data security:

• Learning progress is stored locally on your device by default
• Optional cloud sync uses platform-specific encrypted services (iCloud for iOS, Google Drive for Android, Steam Cloud)
• All data transmission uses TLS 1.3 or higher encryption
• Data at rest is encrypted using AES-256 encryption
• Access to personal information is restricted to authorized personnel only
• We regularly review and update our security practices
• Annual security audits are performed by third-party specialists

While we implement robust security measures, no method of electronic storage is 100% secure. We cannot guarantee absolute security but commit to protecting your information to the best of our ability.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in these circumstances:

• Service Providers: With trusted third parties who assist in operating our Services (e.g., analytics, crash reporting)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• Aggregated Data: Non-personal, aggregated statistics may be shared publicly

Third-Party Services

Our apps may use the following third-party services:

• Platform Stores: Apple App Store, Google Play Store, Steam for app distribution and purchases
• Cloud Services: iCloud (iOS), Google Drive (Android), Steam Cloud for optional data sync
• Payment Processors: Platform-specific payment systems (Apple Pay, Google Pay, Steam Wallet)
• Analytics Services: Anonymous usage statistics to improve our apps (opt-out available)
• Crash Reporting: To identify and fix technical issues

These services have their own privacy policies. We encourage you to review them. We do not share personal data with third parties for advertising purposes.

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information within 30 days
• Portability: Receive your data in a portable format (JSON/CSV)
• Opt-out: Decline certain data collection (may limit app functionality)
• Withdraw Consent: Change your mind about data processing
• Account Deletion: Permanently delete your account and all associated data

To exercise these rights, please contact us at hello@cozyriverstudios.com. We will respond within 30 days. You can also manage many settings directly in the app.

Children's Privacy

Our apps are designed to be appropriate for all ages. However, we take special precautions with children's data:

• We do not knowingly collect personal information from children under 13 without parental consent
• No social features or user-generated content sharing for users under 13
• No targeted advertising or behavioral tracking
• Parental controls available for account management
• COPPA compliant in the United States

If you are a parent or guardian and believe your child under 13 has provided us with personal information without consent, please contact us immediately at hello@cozyriverstudios.com.

International Data Transfers

If you use our Services from outside the United States, please note that your information may be transferred to, stored, and processed in the United States or other countries. By using our Services, you consent to such transfers.

California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to equal service and price

We do not sell personal information. To exercise your CCPA rights, contact us at hello@cozyriverstudios.com

European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: Consent, legitimate interests, or contractual necessity
• Right to lodge a complaint with supervisory authorities
• Right to object to processing based on legitimate interests
• Right to restriction of processing

Data Retention and Deletion

We retain personal information only as long as necessary:

• Active account data: Retained while account is active
• Inactive accounts: Deleted after 2 years of inactivity
• Analytics data: Anonymized after 12 months
• Crash reports: Deleted after 90 days
• Support tickets: Retained for 2 years

Account Deletion Process:

• Request deletion via app settings or email
• 30-day grace period for account recovery
• All personal data permanently deleted after grace period
• Some anonymized data may be retained for legal compliance

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may provide additional notice through the app or via email.