Flua Launcher Global Privacy Policy

This Global Privacy Policy explains how Thiago de Medeiros Mendes, based in João Pessoa, Paraíba, Brazil (we, us, or our), processes personal data when you use the Flua Launcher Android application (the App).

We are the controller of the personal data described in this Policy. For privacy questions or to exercise your rights, contact us at contact@flualauncher.com. Additional rights may apply depending on where you live; see Section 11 (Regional disclosures).

1. Summary

Flua Launcher is designed to keep your launcher content on your device. We do not sell personal data, do not serve advertising, and disable collection of the Android advertising identifier in Firebase Analytics.

The App uses Firebase Analytics for optional, pseudonymous usage analytics only when you opt in during onboarding or later in Settings > About > Legal. You can withdraw that choice there at any time. The App also uses Google Play for optional purchases, Google Drive for Android system backup and for the App's separate optional backup feature, a self-hosted Quackback feedback portal hosted on Railway when you choose to use it, and Cloudflare R2 to deliver curated wallpapers. These providers may process data in multiple countries.

2. Data we process

2.1 Data stored on your device

The App stores launcher data locally to provide its features, including:

• settings for layout, appearance, fonts, icons, widgets, wallpapers, and presets;
• your selected Home shortcuts and folders, including app package identifiers and any folder labels you create;
• local references to selected wallpapers and, when necessary, locally stored wallpaper image files;
• widget configuration, including selected calendar identifiers for an agenda widget;
• Premium trial and entitlement state; and
• an installation-specific random identifier used only to help manage backup snapshots.

This data is not sent directly to us merely because you use the App. Some eligible local data may be backed up by Android as described in Section 2.4.

2.2 App, device, and analytics data

When you opt in to Firebase Analytics, Google Firebase processes pseudonymous technical and usage data. This can include app-instance and device identifiers, IP address, device model, operating-system and App version, language or region, and interactions with the App. This data is not anonymous because identifiers and connection data may distinguish an App installation or device. If you do not opt in, the App keeps Firebase Analytics collection disabled.

We send carefully limited analytics events and properties, such as:

• whether you are on free, trial, or Premium access;
• aggregate counts of Home items, folders, and widgets;
• selected layout and visual settings, such as display mode, font family, colors, spacing, and enabled features;
• whether backup and notification access are enabled;
• the selected icon-pack package identifier;
• onboarding progress, feature-use events, paywall views, purchase-flow status, and product identifier; and
• technical error category and operation name.

We deliberately do not send your installed-app list, selected app package list, folder names, notification content, calendar-event content, Google Drive access tokens, purchase tokens, or exception messages to Firebase Analytics.

2.3 Notifications and calendar data

If you grant notification access, the App reads active notifications to show notification badges and a shortcut sheet. If you grant calendar access, the App reads calendar names and events to provide the agenda widget. The App processes this data on your device for those features and does not send it to us or to Firebase Analytics.

You can revoke these permissions at any time in Android settings. Revoking a permission disables the related feature.

2.4 Android system backup

The App participates in Android's system backup and device-transfer mechanisms. Depending on your device, Android version, manufacturer, and Google account settings, Android may automatically back up eligible App preferences and files to storage associated with your Google account or transfer them directly to another device. Google and your device manufacturer control these system services; the App does not receive your Google login or directly access the system backup created by Android.

The App excludes selected operational, backup-coordination, scheduling, Premium-entitlement, and background-work data from Android system backup. Other eligible local settings and files may be included. You can manage Android backup through your device or Google account settings. Android system backup is separate from the optional Flua Launcher backup described below.

2.5 Optional Flua Launcher backup

If you choose to enable Flua Launcher's Google Drive backup, the App creates versioned backup snapshots in the private appDataFolder of the Google account you authorize. A snapshot can include launcher settings, Home organization, presets and schedules, widget configuration, wallpaper references, and embedded wallpaper image data when needed to restore a local image.

The App requests only the Google Drive drive.appdata scope. It does not request access to your ordinary Google Drive files. Google processes the authorization and stores the backup under the terms and privacy policies applicable to your Google account. You can disable this backup in the App and choose whether to keep or delete existing Flua Launcher snapshots. Those controls do not delete a separate Android system backup.

2.6 Purchases

Premium purchases are processed by Google Play Billing. Google Play may process your Google account, order information, payment method, payment status, purchase token, and related fraud-prevention information. The App receives the purchase state needed to provide access, stores a local entitlement flag, and does not transmit purchase tokens to our servers.

We do not receive or store your full payment-card information.

2.7 Support and feedback

When you follow the App's feedback link, you access the Flua Launcher feedback portal at feedback.flualauncher.com. It runs a self-hosted installation of Quackback and is operated by us as a support and feedback channel; Railway provides the cloud infrastructure that hosts it.

The portal permits anonymous participation. You do not need to create an account, provide your name, or provide an email address to submit feedback, vote, or comment where those features are available. The portal may still process a session or other pseudonymous identifier and technical connection information, such as IP address, browser type, device information, timestamps, and essential cookies, to operate the service, prevent abuse, and maintain the session. It also processes the content you choose to submit, including feedback, votes, comments, screenshots, attachments, and any personal information you include. Posts and comments may be visible publicly; do not submit confidential information, payment data, or personal data you do not want to share.

2.8 Wallpaper delivery and external links

The App retrieves its curated wallpaper catalog and images from Cloudflare R2. Cloudflare may receive standard connection data, such as your IP address and request metadata, when delivering those files. External links are opened outside the App and are governed by the destination's privacy practices.

3. Purposes and legal bases

Where applicable law requires a legal basis, we rely on the bases shown below. The exact name and scope of a legal basis may vary by jurisdiction.

For optional usage analytics, we request consent during onboarding and provide a persistent control in Settings > About > Legal. You can withdraw consent there at any time. Withdrawal disables future Firebase Analytics collection without affecting processing carried out before withdrawal. Declining or withdrawing analytics consent does not affect the App's core features.

Where we rely on legitimate interests, those interests include operating, securing, supporting, and improving the App. We balance those interests against your rights and use data-minimizing measures, including local processing and optional analytics.

4. Sources of personal data

We receive data:

• from you, when you choose settings, enable backup, make a purchase, or contact support;
• automatically from the App or your device, but only for the technical operations described in this Policy;
• from Google Play, for purchase and entitlement status; and
• from service providers, when needed to operate support, analytics, backup, and content delivery.

We do not use personal data for automated decisions that produce legal or similarly significant effects, and we do not create advertising profiles.

5. How we disclose data

We do not sell personal data or share it for cross-context behavioral advertising. We disclose or make data available only as described below:

We may also disclose data where necessary to comply with law, protect rights or safety, investigate fraud or security incidents, or complete a lawful business reorganization, subject to applicable law.

6. International processing and transfers

We are based in Brazil. Google, Firebase, Railway, Cloudflare, device manufacturers, and their service providers may process data in Brazil, the United States, and other countries where they operate. Those countries may have privacy laws that differ from the laws where you live.

Where transfer restrictions apply, we use or rely on a legally recognized mechanism appropriate to the service and transfer, such as an adequacy decision, contractual safeguards including applicable standard contractual clauses, or another mechanism permitted by law. For Firebase services, Google's applicable data-processing terms incorporate data-transfer solutions and standard contractual clauses for restricted European transfers where required. You may contact us to request information about safeguards relevant to your personal data.

7. Retention

• On-device launcher data: retained until you change or delete it, clear the App's data, or uninstall the App.
• Android system backup: retained according to Android, Google, your device manufacturer, and your account settings. We cannot directly view or delete this system-controlled backup.
• Flua Launcher Google Drive backups: the automatic backup feature keeps the five newest snapshots plus up to four weekly recovery points. Snapshots remain until replaced under that rotation or deleted by you through the App, subject to Google Drive behavior.
• Analytics data: user-level and event-level analytics data is retained for no more than 14 months. Aggregated reports that no longer identify or single out an App instance may be retained for longer for historical product analysis.
• Support and feedback: retained while the submission remains useful for support, product development, community history, dispute resolution, or legal compliance. You may request deletion, subject to applicable law and technical limitations for content that has already been incorporated into the product or de-identified. For anonymous submissions, include the post URL or enough detail for us to locate the content.
• Purchase records: retained by Google Play under Google's policies. We retain any records we separately create only as needed for support, accounting, tax, legal, and fraud-prevention purposes.

When retention ends, we delete or de-identify data where reasonably possible. Backup copies and provider systems may take additional time to cycle out data.

8. Security

We use reasonable technical and organizational measures intended to protect data. Network requests use encrypted connections where the relevant provider supports HTTPS, access to services is limited, and analytics collection is disabled unless you opt in. No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.

Keep your device, Android account, Google account, and backups secure. Do not post sensitive information in the support forum.

9. Your choices and privacy rights

Depending on applicable law, you may have the right to:

• know whether and how we process your personal data and obtain access to it;
• correct inaccurate or incomplete data;
• request deletion, anonymization, blocking, or restriction;
• obtain portability where applicable;
• object to certain processing or ask us to review it;
• withdraw consent at any time;
• receive information about disclosures and international-transfer safeguards;
• appeal our response where applicable; and
• complain to a competent privacy or data-protection authority.

To make a request, email contact@flualauncher.com with the subject line Privacy Request. Describe your request and provide enough information for us to locate the relevant data and reasonably verify that the request concerns you. We will use verification information only to handle the request. You may use an authorized agent where applicable law permits, but we may request proof of authorization and verification of your identity.

We will respond within the period required by applicable law. If we deny a request, we will explain the reason and any available appeal or complaint process. We will not discriminate against you for exercising a privacy right.

Some data remains only on your device or is controlled directly by third parties. You can manage App data and Android permissions in Android settings, Android system backup in your device or Google account settings, Google Play purchases in Google Play, Flua Launcher backups in the App, and feedback-portal submissions through the portal where available. To request access to or deletion of an anonymous submission, contact us with the post URL or enough detail to locate it. We will explain relevant limits when responding to a request.

10. Children

The App is intended for people aged 13 and older and is not directed to children under 13. We do not knowingly collect personal data from a child under 13. If you are under the age at which you can independently consent to data processing or enter into a binding agreement where you live, use the App only with the authorization of a parent or legal guardian and do not enable optional analytics or submit information to the support forum unless they approve.

If a parent or guardian believes that a child under 13 provided personal data through analytics, the support forum, or another connected service, contact us at contact@flualauncher.com. We will investigate and take appropriate steps, including deletion where required and reasonably possible.

11. Regional disclosures

These disclosures supplement the rest of this Policy. They apply only when the listed law governs our processing and do not limit rights available under another applicable law.

11.1 Brazil

Under Brazil's General Data Protection Law (LGPD), the controller is Thiago de Medeiros Mendes. The purposes and legal bases for processing are described in Section 3. Depending on the circumstances, we rely on consent, performance of a contract or preliminary procedures you request, legitimate interests, exercise of rights, and compliance with legal or regulatory obligations.

You may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability where applicable, information about sharing, review of certain automated decisions, and revocation of consent. You may also object to unlawful processing and complain to the Autoridade Nacional de Proteção de Dados (ANPD).

11.2 European Economic Area, United Kingdom, and Switzerland

For processing governed by European data-protection law, the legal bases are described in Section 3. You may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may complain to the data-protection authority where you live, work, or believe an infringement occurred.

Where required, we conduct a balancing assessment before relying on legitimate interests. We do not conduct solely automated decision-making that produces legal or similarly significant effects. For questions or requests, contact the controller directly using the details in Section 13.

11.3 United States

Depending on the state where you live and whether the relevant law applies to us, you may have rights to know, access, correct, delete, or obtain a portable copy of personal data and to appeal a denied request. We do not sell personal data, share it for cross-context behavioral advertising, use it for targeted advertising, or process it for qualifying automated decisions. We therefore do not provide a sale, sharing, or targeted-advertising opt-out mechanism.

For California residents, the categories collected in the preceding 12 months may include identifiers, internet or other electronic-network activity, commercial information related to purchase status, and information you submit to support. The sources, business purposes, and categories of recipients are described in Sections 2, 4, and 5. We do not use or disclose sensitive personal information for purposes that require a right to limit under California law.

11.4 Canada

Where Canadian privacy law applies, you may request access to and correction of personal information we hold about you and challenge our compliance. We obtain meaningful consent where required and limit collection, use, and disclosure to identified and appropriate purposes. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice.

12. Changes to this Policy

We may update this Policy to reflect changes to the App, legal requirements, or our data practices. We will publish the updated Policy with a revised Last updated date and provide additional notice before material changes where required by law.

13. Contact

Thiago de Medeiros Mendes João Pessoa, Paraíba, Brazil contact@flualauncher.com