Privacy Policy

PIXORA Play: a summary for parents

PIXORA Play is a child-focused colouring, drawing and puzzle app. It has no advertising, subscription or Premium tier. Original content is free; extra colouring packs can be bought once. There is no child account, login, chat or social sharing feature.

Purchases are presented behind a parent arithmetic check and completed through Google Play. The check is a safeguard against accidental access, not identity verification or a substitute for Google Play purchase authentication.

Artwork and progress on your device

Colouring pictures you save, your drawing canvas and puzzle progress are stored in the app’s local storage. PIXORA Play does not upload these drawings or gameplay progress to PIXORA or RevenueCat. View Picture displays an in-app preview; it does not export to your photo library or request media access.

Clearing app data or uninstalling may remove local work. Android backup is enabled, so device backup or transfer may preserve or restore some app data, depending on your Android settings and device. We cannot promise that uninstalling erases every backup. Use your device’s backup controls to manage those copies.

Purchases and RevenueCat

We use Google Play Billing and RevenueCat to retrieve products and prices, validate purchases, check permanent pack entitlements and restore purchases. Google Play handles payment information. PIXORA Play does not receive your payment-card details.

RevenueCat creates an anonymous app-user identifier when no account identifier is supplied. It processes purchase history, product and entitlement information, purchase tokens and technical information such as app/SDK and operating-system versions, device information, locale and network connection information. Purchase records also support RevenueCat’s purchase reporting.

The purchase SDK starts when the Android app opens, before a parent enters the purchase screen, to check whether paid packs are already owned. This can involve network requests even if you do not make a new purchase. Free packs do not depend on a successful purchase-service connection. Existing access can use information cached by the SDK where available; restoration or refreshed access may need a connection.

RevenueCat processes app-user data on PIXORA’s behalf. Its services may process data outside your country, including in the United States, under its contractual data-protection arrangements. See RevenueCat’s privacy information, its Data Processing Addendum and Google’s privacy policy.

RevenueCat also uses Google Block Store to back up an anonymous purchase identifier when purchases exist, with cloud backup requested where supported. It can recover or associate that identifier during purchase/restoration flows to help retain access after reinstall or device changes. This is separate from backup of your drawings.

Information the app does not request

PIXORA Play does not ask for a name, email address, phone number, date of birth or account login. It does not request access to contacts, location, camera, microphone or your photos/media library. It has no advertising-ID permission and does not invoke advertising-ID or attribution collection APIs. The anonymous purchase identifier described above is separate from an advertising ID.

The parent challenge answer is checked in memory and is not saved or sent to a server. The app’s font is bundled locally, so starting Play does not request fonts from Google. If you choose to email us, we receive your email address and the information you include; please do not send a child’s personal details unnecessarily.

Retention, deletion and your rights

Local artwork and progress remain until removed through app/device controls, subject to backup and restore as described above. Purchase and entitlement records may remain with RevenueCat and Google Play to provide access and restoration and to meet applicable contractual, accounting, fraud-prevention or legal requirements. Uninstalling does not delete store transaction records.

For access, correction, deletion or other privacy enquiries, a parent or guardian can contact hello@pixora.es. We may need enough purchase information to locate the relevant record; do not send payment-card details. We can request deletion of records we control, subject to applicable retention requirements, but cannot promise deletion of Google Play records we do not control. Deletion may affect our ability to restore pack access.

Depending on applicable law, you may also request restriction or portability, object to processing, or withdraw consent where consent applies. You may contact the Spanish Data Protection Authority, AEPD, about a concern.

Security

RevenueCat uses TLS to protect data in transit. Payment details are handled by Google Play. Protect access to your device and its backups; no storage or transmission method can guarantee absolute security.

PIXORA Budget

PIXORA Budget is a personal-finance record-keeping app with free features and an optional Premium subscription. It does not require an account or login and has no advertising or social features. The following describes the Android app; browser differences are noted where relevant.

Financial records on your device

Transactions, balances, account names, plans and budgets, investment accounts and movements, gain/loss values, categories, notes, preferences, currencies and manually entered exchange rates are stored locally in the app’s database. Budget does not automatically upload these financial records to PIXORA or RevenueCat. It does not fetch live exchange rates or connect to your bank.

Transfers in Budget are bookkeeping entries between accounts you create; they do not move real money. Investment tracking records values and movements you enter and does not execute trades. Budget does not provide banking, lending, brokerage or exchange services.

Premium subscriptions and purchase information

Google Play Billing and RevenueCat provide subscription products and localized prices, validate purchases, check Premium access and subscription status, and restore purchases. Google Play handles payment details; PIXORA Budget does not receive your payment-card details.

RevenueCat creates an anonymous customer identifier. It processes this identifier, purchase history, purchase tokens, product and subscription information, and entitlement state. Requests also contain technical information such as app and SDK versions, Android version, device model and brand, and language/locale. The services receive network connection information, including an IP address. This purchase information is separate from your personal budgeting ledger.

The purchase SDK starts when the Android app opens so previously purchased Premium access can be checked. Network requests can therefore occur without opening the subscription card or making a new purchase. Free features remain usable when the purchase service is unavailable. RevenueCat may use its cached purchase information where available; refreshed subscription status and restoration may need a connection. Purchase information also supports purchase reporting.

RevenueCat processes purchase information on PIXORA’s behalf and may process it outside your country, including in the United States, under its contractual data-protection arrangements. See RevenueCat’s privacy information, its Data Processing Addendum, and Google’s privacy policy.

Recovering purchase access

RevenueCat uses Google Block Store to save an anonymous purchase identifier when purchase history exists, requesting cloud backup where supported. It can retrieve and associate that identifier during restoration to help recover access after reinstalling or changing devices. Availability depends on Google Play services and device/backup settings. This purchase-identifier mechanism does not back up your Budget ledger, exported files or App Lock PIN.

App Lock and security

Optional App Lock controls access to Budget. On Android, a salted PIN verifier is encrypted with AES-GCM using an Android Keystore key and stored in the app’s no-backup area. App Lock does not encrypt the financial database itself. The browser version uses a different local-storage PIN mechanism and does not have this Android Keystore protection.

RevenueCat protects purchase communications with TLS; Google Play handles payment information. Keep your device and any files you export secure. No storage or transmission method can guarantee absolute security.

Android backup and your own exports

Budget intentionally disables normal Android application backup. We cannot guarantee identical behavior for every manufacturer’s device-transfer tools. The separate purchase-identifier recovery described above should not be mistaken for a backup of your financial records.

You can export a JSON backup and import a JSON file you select. On Android, export creates a temporary file in the app’s cache and opens the system sharing options. In a browser, it downloads a file. The export function does not encrypt the backup or automatically upload it to PIXORA. If you save or share it elsewhere, its storage, security and retention depend on the destination you choose. Exported copies exist independently of the app; protect them and remove unwanted copies yourself.

Information Budget does not request

Budget has no bank login and does not request access to location, contacts, camera, microphone, phone state or your media library. Its own code does not request advertising identifiers or call RevenueCat attribution APIs, and the Android app has no advertising-ID permission. There is no app analytics implementation or startup request to a remote font service. Names or notes you choose to enter in your local finance records stay local unless you export them.

Retention, deletion and enquiries

Local records remain until you delete them through app controls, reset the app, clear its data or uninstall it, subject to the device behavior described above. Deleting app data does not remove files you previously exported or saved elsewhere.

RevenueCat and Google Play may retain subscription and purchase records to provide access and restoration and meet applicable service, accounting, fraud-prevention or legal requirements. Removing Budget does not cancel a subscription or erase store transaction records. Manage subscription cancellation through Google Play.

For access, correction, deletion or other privacy enquiries, contact hello@pixora.es. We may need limited purchase information to locate an anonymous purchase record; do not send your PIN, financial backup or payment-card details. We can address records we control, subject to applicable retention requirements, but cannot promise deletion of Google Play records outside our control. Deleting purchase records may affect restoration and does not itself cancel a Google Play subscription. Email enquiries include the email address and information you choose to send.

Depending on applicable law, you may also request restriction or portability, object to processing, or withdraw consent where consent applies. You can contact the Spanish Data Protection Authority, AEPD, about a concern.

Budget’s Privacy Policy action opens this HTTPS page in a browser. It does not send your financial records or PIN with the link. The website and browser process connection information as described below.