Privacy Policy

Applies to the mobile game Taktuno for iOS and Android (app ID com.taktuno.app).
Effective: 29 September 2026 · Last updated: 11 October 2026

1. Short version

Taktuno's core gameplay and detailed timing statistics run locally on your device. There is no Taktuno account or game backend. Optional product analytics is described in section 4a; it is currently not enabled in production. When offered, it requires your separate choice and is not needed to play.

Depending on the features you use and your choices, data may leave your device through Google AdMob for advertising, Apple App Store or Google Play for the one-time Taktuno Pro purchase, and Apple Game Center or Google Play Games for platform authentication and, only after you enable Game Services, achievements and eligible best scores. Optional Google Analytics for Firebase is a separate service for understanding app use when enabled and consented to.

You can review your advertising choices in the app under Settings → PRIVACY OPTIONS. The separate usage-analytics controls described below are prepared for a future release.

2. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Alexander Linack
Ackerstr. 13A
85757 Karlsfeld
Germany
Email: privacy@taktuno.app

We are not required to appoint a data protection officer.

3. Data stored on your device

The app writes the following to its private app storage (Android: SharedPreferences; iOS: NSUserDefaults). The detailed local records below are not uploaded as a gameplay history. Optional coarse usage events and SDK data are described separately in section 4a; optional Game Services submissions are described in section 6:

The app uses your device clock and time zone to determine the local calendar day for Daily Runs and ad pacing, and to schedule optional Daily Run reminders. These local reminder and calendar calculations do not request or use device location permission. Provider processing of IP-derived approximate region is described separately below.

Uninstalling normally removes the app’s local storage; a personal device backup may retain eligible data as described below. Removing local storage does not erase information already held by a provider. On Android you can also clear it via System settings → Apps → Taktuno → Storage → Clear data.

Device backups: your operating system may include some core progress, statistics and settings in your personal Android or Apple device backup. Taktuno deliberately excludes its dedicated retention data from backup: Daily Run daily results and access rewards, streaks and Streak Freezes, reminder choices and offer state, XP/rank progression, weekly challenge state and related local progression cues. Android also excludes the native reminder preferences and cached purchase entitlement from cloud backup and device transfer; iOS marks the dedicated retention preferences file as excluded from backup. The separate analytics-purpose acceptance and history-category store is also excluded from backup. These exclusions prevent stale consent or time-sensitive state from being treated as a current decision or reward. The backup belongs to your Google or Apple account and is not accessible to us.

4. Advertising (Google AdMob)

The free version shows full-screen interstitial ads between eligible sessions, limited by an on-device pacing rule. It also offers opt-in rewarded ads: the first Daily Run of a local day is free, and a player may choose to watch a separate rewarded ad to unlock each additional run that day. After an eligible streak break, a rewarded ad can also be chosen once to restore that streak within the displayed restoration window. A Daily Run does not also trigger an interstitial. There are no banner ads. Taktuno Pro removes advertising completely, provides unlimited Daily Runs and performs an eligible streak restore without an ad.

Ads are delivered by Google AdMob, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For ad delivery, frequency capping, fraud prevention, analytics and measurement, Google may process in particular: IP address and an approximate region derived from it, device and app identifiers, device model and operating system version, app version, language, ad data, app and ad interactions, crash information and performance diagnostics.

Advertising identifiers differ by platform

• iOS: the app does not ask for App Tracking Transparency permission and does not access the IDFA. The app does not supply an IDFA for advertising. Other SDK information and provider processing are described above; the absence of IDFA alone does not establish that all processing is anonymous.
• Android: the Google Mobile Ads SDK can access the Android Advertising ID (permission com.google.android.gms.permission.AD_ID). Where you have given consent, this identifier may be used for personalised advertising. Without the required consent, those personalisation signals may not be used; whether an ad can be requested and which restricted ad mode is available depends on the applicable consent and Google’s configuration.

Non-personalised ads still involve limited processing for frequency capping, fraud prevention and aggregated reporting.

Legal basis and consent

Where consent is required — in particular in the EEA, the United Kingdom and Switzerland — it is obtained before ads are requested via the Google User Messaging Platform (UMP), an IAB TCF-compatible consent management platform. Legal basis: Art. 6(1)(a) GDPR, and § 25(1) TDDDG for storing and accessing information on your device.

You can review, change or withdraw your consent at any time under Settings → PRIVACY OPTIONS in the app. Withdrawal does not affect the lawfulness of processing carried out beforehand. On Android you can additionally reset or delete your advertising ID under Settings → Google → Ads; Taktuno does not request ATT permission or access IDFA on iOS; the iOS Tracking setting is not a control for product analytics.

Further information from Google

• Google Privacy Policy: policies.google.com/privacy
• How Google uses data from apps that use its services: policies.google.com/technologies/partner-sites
• Advertising partners that may receive data are listed inside the consent dialog and at support.google.com/admob/answer/9012903.

SKAdNetwork (iOS)

On iOS the app declares Apple's SKAdNetwork identifiers. SKAdNetwork provides attribution postbacks under Apple’s framework, separately from our optional product analytics. Declaring these advertising-network identifiers does not enable IDFA access, grant analytics consent or prove that every advertising processing path is anonymous. See Apple’s SKAdNetwork documentation.

4a. Optional usage analytics (Google Analytics for Firebase)

Current availability: product analytics is not enabled in production as of 11 October 2026. This section explains the optional feature prepared for a future app release. It will be offered only after its privacy settings and consent flow have been verified. Local statistics, gameplay, reminders, Pro purchases and Game Services do not depend on agreeing to analytics.

Purpose and information involved

With your permission, we use Google Analytics for Firebase to understand which screens and modes are used, whether the optional tutorial is completed, how rounds and multi-round runs progress, and whether players return. This helps us improve the game. The information is pseudonymous, not anonymous simply because we do not ask for your name; aggregated reports are distinct from the underlying events and identifiers.

• App events: logical screen views, tutorial start/completion, the first actual round of a mode, round starts/completions, full run completion, an explicit return to the menu from an unfinished run, and an actual tap opening the app from a Daily Run reminder. Reminder delivery, dismissing a notification or simply bringing the app to the foreground is not counted as a reminder opening. Fixed parameters describe the mode, entry route, round category and completed-round count. Backgrounding alone is not labelled as abandonment.
• History at measurement start: only whether local history was present, absent or unknown. This does not reveal history entries or prove a new installation. Earlier gameplay is not sent retrospectively.
• SDK information: a pseudonymous app-instance identifier and SDK session/engagement information, together with technical information such as app version, platform, device/OS information, language and approximate regional information. Network connections also involve an IP address. SDK-generated events can include initial-use, session/engagement and, depending on the applicable store/ad integration, purchase or ad-impression information. These are separate from our own fixed game events.

Our game-event payloads do not contain your custom challenge names, player names or platform player IDs, account fingerprints, raw timing measurements, detailed scores, reminder times or complete local statistics. We do not set a cross-device analytics user ID. The intended analytics configuration excludes advertising personalisation, remarketing, Google Signals and Google Ads exports; analytics is separate from the existing AdMob advertising described in section 4. On iOS this feature uses an analytics product without IDFA access and does not introduce an ATT prompt. The absence of IDFA alone is not a guarantee that no personal data is processed.

Your choice and legal basis

Analytics remains off without a valid, explicit analytics choice in the Google UMP privacy dialog. An advertising choice, notification permission, Pro purchase or Game Services opt-in is not analytics consent. You may decline or withdraw under Settings → Usage analytics → PRIVACY OPTIONS without losing game features. Withdrawal stops future product measurement; later permission does not send earlier unmeasured actions. It does not by itself delete events already received by Google.

For optional product analytics, the legal bases are consent under Art. 6(1)(a) GDPR and, for storing or accessing information on your device where applicable, § 25(1) TDDDG. Withdrawal does not affect the lawfulness of processing before withdrawal. Google processes analytics data on our behalf under the applicable Google Analytics data processing terms; Google Analytics has separate terms from other Firebase services.

Recipient, retention and international processing

The analytics recipient is Google, including Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its service providers, including Google LLC in the United States. Processing may take place outside the EEA. The applicable transfer safeguards are described in section 12; see also Google’s Firebase privacy information.

Retention before activation: our analytics property is configured for 14 months of user- and event-level retention, with “Reset on new activity” disabled (verified 10 October 2026). Analytics collection remains inactive in the production app; the configured retention does not activate collection. Google’s retention setting does not apply to standard aggregated reports, and data expiry is processed periodically. It is not a promise that every Google report or copy is deleted exactly 14 months after collection. See Google Analytics retention information.

Access and deletion requests

Contact privacy@taktuno.app for an analytics access or deletion request. You may also use support@taktuno.app, the address opened by the app’s Privacy contact action. Say which right you wish to exercise and, if available, provide the analytics app-instance identifier and your platform. Do not send your password, store receipt, game-service player ID or detailed gameplay history for this purpose.

When analytics is active and an existing identifier is available, use Settings → Usage analytics → Copy identifier for privacy request. The app only makes an existing identifier available transiently in that view; it does not enable analytics or create an identifier for a request. Copying places it on your device clipboard, but does not send an email, make a request or confirm deletion. You choose whether to send it to us. Leaving the view clears the app’s transient copy; a clipboard copy may remain under your operating system’s clipboard controls.

If you want to request deletion of earlier analytics data, copy the identifier before withdrawing consent, resetting app data or uninstalling, if it is available. You can withdraw at any time; you do not have to keep analytics on to make a request. Withdrawal/reset or uninstalling can make the earlier identifier unavailable, and a later installation or permission can have a different identifier. You may still contact us without one; we will explain what can be located without collecting additional identifiers solely to identify you.

A local SDK reset stops use of its previous measurement identity; it is not a server-side deletion request. We assess requests and, where the information can be associated with the relevant analytics identifier, use Google’s applicable access/export or deletion controls and explain the outcome and limits. Deletion of identifiable records does not necessarily remove already aggregated reports. We do not promise complete retrospective deletion of every report. Requests concerning independent advertising, store or gaming-profile processing may also need to be addressed to the relevant provider.

5. In-app purchase (Taktuno Pro)

Taktuno Pro (product ID com.taktuno.app.pro) is a one-time, non-consumable purchase. It is processed exclusively by the platform operator — Apple (StoreKit) or Google (Google Play Billing). Payment details are entered in the platform's own interface and are never transmitted to us. We receive no name, address or payment data.

Taktuno Pro removes all ads, provides unlimited Daily Runs, increases the Streak Freeze bank from one to three and unlocks the Sunrise theme. An eligible streak restore does not require an ad for Pro players.

The app receives only the information whether a valid purchase exists and stores that flag locally. When you tap "Restore purchases", the app asks Apple or Google whether your account holds the entitlement. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

The platform operators act as independent controllers for the payment process: Apple Privacy Policy · Google Privacy Policy.

6. Game Center and Google Play Games

The App integrates the gaming service native to your platform: Game Center on iOS and Google Play Games on Android. The platform may authenticate its signed-in gaming profile when the integration is enabled in a released build. On Android this authentication is silent and automatic for existing Play Games profiles; the platform may show its own profile or sign-in interface. Platform authentication is separate from Taktuno's optional progress-sharing choice.

After successful platform authentication, the App temporarily reads the native player ID to detect account changes. It combines that ID with a random, device-local secret to create a salted SHA-256 fingerprint. The raw player ID is not stored, logged or sent to a Taktuno server, and the fingerprint never leaves your device.

Achievement progress and the eligible best scores for Classic Precision, Speed Variation Precision, 2× Precision and Daily Run are submitted only after you select Connect in Taktuno Settings and confirm the disclosure. The recipient stores them with your native gaming profile and may display achievements, rankings and profile information according to your Game Center or Play Games visibility settings. Taktuno does not request friends, avatars, email addresses, cloud saves, multiplayer data or server authentication codes.

You can select Turn Off in Taktuno Settings at any time. This prevents future Taktuno submissions but keeps your local progress. It does not remove information already stored by Apple or Google. Delete previously shared achievements, scores or gaming-profile data through the native Game Center or Google Play Games profile and the associated platform-account controls.

For the user-requested sharing feature, the legal basis for our transient processing is Art. 6(1)(b) GDPR (providing the requested feature). Platform authentication, profile visibility, fraud prevention, retention and deletion are also governed by the platform operator's terms and privacy policy. Apple and Google act independently for their gaming platforms: Apple Privacy Policy · Google Privacy Policy.

7. Sharing a result

After selected Daily Run and Precision Five results, and from the weekly review, you can tap "Share". The app locally creates a square image card from the result already shown to you and supplies it together with localized result text and the Taktuno website link to your operating system's share sheet. Depending on the card, this can include a score or deviation, streak, rank, number of sessions, weekly comparison and best day. It contains no account identifier or hidden gameplay history.

On Android the image is written temporarily to the app's private share cache under a non-identifying file name and is made readable only to the recipient app you choose; stale share files are cleaned up. On iOS the image is created in memory. Nothing is uploaded by Taktuno or sent to another app until you choose a destination yourself. The receiving app's own privacy policy applies from that point on. Sharing is entirely optional.

8. Data processed by the app stores

When you download, install or update the app, Apple or Google process data such as your account identifier, download history, device type and — where you enable it — crash and performance diagnostics. This happens under the responsibility of the platform operator. Store-console reporting is separate from optional Firebase product analytics and from any support correspondence you send us. Store platforms may provide aggregated reports and diagnostics under their own settings and policies.

9. Permissions

Daily Run reminders: The app may softly offer reminders after you begin playing. You can enable or disable them and choose the daily reminder time under Settings → DAILY REMINDER. You can also choose a second, later “run still open” reminder; it is scheduled only for an open Daily Run while your streak is at least two days. Both reminders are optional, use your device's local time zone and are cancelled for a day once that day's run is complete. Enabling reminders requests the operating system's notification permission; declining does not affect gameplay. The app does not register for remote push notifications, obtain a push token, or send reminder preferences or gameplay data to us for this feature. You can also turn notifications off in your device settings.

Android: POST_NOTIFICATIONS is requested on Android 13 and later when you choose to enable reminders. RECEIVE_BOOT_COMPLETED lets the app restore an enabled reminder after a device restart; it does not give the app access to your files or contacts. The app also uses VIBRATE for haptic feedback, plus INTERNET, ACCESS_NETWORK_STATE and the advertising-ID permission required by the Google Mobile Ads SDK. Google Play Games uses the platform's gaming profile and network connection as described in section 6.

iOS: The app requests notification authorization only when you choose to enable reminders. Haptics use the system Taptic engine without a separate permission prompt. The Game Center entitlement enables the optional platform features described in section 6.

The app does not access contacts, photos, microphone, camera, location, health data, calendar or files, and it does not request any tracking permission.

10. Children and young people

Taktuno is a general-audience game intended for ages 13 and over, without a child-directed focus. A store age rating does not establish that every user can validly consent to optional data processing.

Where Art. 8 GDPR applies, the age for a child’s own consent depends on national law, with 16 as the GDPR default and permitted national thresholds down to 13; below the applicable age, authorisation from a holder of parental responsibility is required. A Google UMP privacy choice is not age verification or proof of parental authorisation. We do not collect birth dates or introduce a separate age or parent flow through this feature. Product analytics remains disabled while the handling required for the actual audience is being assessed.

Parents can manage purchases through Apple Screen Time or Google Play family controls. If you believe a child has provided personal data through a service used by this app, contact privacy@taktuno.app so we can assess the concern and the appropriate provider controls.

11. Information for residents of US states

This section applies if you live in California, Colorado, Connecticut, Virginia, Utah or another US state with comparable privacy legislation.

We do not sell personal information. Optional product analytics is described separately in section 4a and is not intended for cross-context advertising or sale/sharing; the existing advertising service has its own processing below. In the free version, our advertising partner Google may use identifiers, device information and ad interaction data for advertising purposes. Under the CPRA this may qualify as "sharing" for cross-context behavioural advertising. Apple or Google may also process gaming-profile data when you use the native Game Services described in section 6.

To opt out, open Settings → PRIVACY OPTIONS in the app, where the applicable Google privacy message is shown, and/or reset or delete your advertising ID in your device settings. On iOS Taktuno does not request ATT permission or access IDFA. This does not mean that no other SDK information is processed.

Depending on your state, you may have the right to know, delete, correct, and to opt out of targeted advertising or the sale/sharing of personal information, and to appeal a refused request. For optional product analytics, contact us using the request process in section 4a. Requests for data held independently by the advertising, store or gaming-platform provider may also need to go to Google or Apple. You can contact us at privacy@taktuno.app and we will point you to the relevant controls. We do not discriminate against users who exercise these rights.

12. Transfers to third countries

Google and Apple may process data on servers outside the European Economic Area, in particular in the United States. Where applicable, Google relies on the EU–US Data Privacy Framework for covered transfers to certified US entities and/or the European Commission’s standard contractual clauses under Art. 46 GDPR. The safeguards and provider roles depend on the service; optional Google Analytics processing is covered by its applicable data processing terms, not a blanket assumption that all Firebase services have identical terms. Contact us for information about the safeguards relevant to your request.

13. Retention

Data on your device stays until you delete it or uninstall the app. Timing statistics are capped at the 120 most recent sessions; older sessions are overwritten automatically. Some core data may also remain in your personal device backup, subject to the exclusions described in section 3 and your platform backup settings. Optional product-analytics retention and its currently pending activation are described in section 4a. Advertising, billing and gaming-platform data has separate provider retention rules and account controls. Privacy-request correspondence is used to assess and answer your request and to meet applicable legal obligations; please include only what is needed.

14. Your rights

You have the rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Where processing rests on consent, you may withdraw it at any time with effect for the future.

We are responsible for handling rights requests concerning processing we control, including optional product analytics and privacy correspondence. Use the contact below; for analytics, the existing app-instance identifier can help us locate relevant records as explained in section 4a. If we cannot associate data with you, we will explain the limitation under Art. 11 GDPR rather than promise a search or deletion we cannot perform. Independent provider processing has separate request channels.

You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

15. Changes to this policy

We update this policy when the app or the legal situation changes. The current version is always at taktuno.app/privacy; the date at the top shows the version in force.

16. Contact

Privacy enquiries: privacy@taktuno.app
Postal address: see section 2 and the imprint.