Privacy
KADA Fidget Deck Privacy Policy
Effective and last updated: August 20, 2026
Contact: kefu@tulincloud.com
Address: Room 504, Liangchuang Business Center (Shilehui), No. 526 Longping East Road, Shengping Community, Longcheng Subdistrict, Longgang District, Shenzhen, China
1. Scope
This policy explains how we process personal information when you use KADA Fidget Deck, its accounts, digital entitlements, purchases, and support services. External marketplaces and Apple services process information under their own policies.
2. Information we process
| Category | Information |
|---|---|
| Account and identity | Internal user ID, preferred language, and a hash of the guest installation credential; email, password hash, and verification status for email accounts; Apple user identifier, possible private relay email, and display name for Sign in with Apple; and a keyed digest used to prevent repeat newcomer rewards. |
| Transactions and digital entitlements | Product ID, provider transaction ID, amount and currency, purchase/refund time and status, membership/toy/skin entitlements, Gear Coin ledger entries, and necessary audit records. Complete payment-card numbers are handled by Apple or the payment provider and are not received by us. |
| Device, network, and security | Device platform, app version, optional device label, IP/network summary, request ID, session timing, failure codes, and server operational logs. |
| Support | Contact details, issue descriptions, attachments, and resolution records that you choose to send by email. |
The current app does not request access to your camera, microphone, precise location, contacts, photo library, or advertising identifier. Toy touch input, audio output, haptic output, screen contents, and raw touch paths are processed locally and are not uploaded as ordinary analytics.
3. Why we use it
- Provide guest, email, and Sign in with Apple accounts and secure sessions.
- Confirm purchases, maintain balances and entitlements, restore purchases, process refunds, and retain auditable transaction records.
- Deliver app versions, toy catalog policies, digital assets, and requested support.
- Prevent abuse, protect accounts, troubleshoot failures, and meet legal obligations.
4. Service providers and external parties
- Apple: Sign in with Apple, App Store in-app purchases, refunds, and server notifications. Apple independently processes relevant account, device, and transaction information.
- Alibaba Cloud services: application hosting, databases, cache, object delivery, and transactional email. Providers process only the information required to provide contracted infrastructure and communication services.
- Taobao, JD.com, or another destination marketplace: only when you choose to open an external physical-product link. The destination handles its own accounts, orders, shipping, and after-sales data.
We do not sell personal information and do not use personal information for cross-app behavioral advertising.
5. Storage and retention
Core service data is intended to be stored on infrastructure located in mainland China. Apple and other independently chosen external services may process information in other regions under their own terms. Account information is kept while the account is active. Session and security records are kept only as needed for security and dispute handling. After account deletion, the account is permanently disabled and profile, former identity display data, feedback, transaction, order, refund, currency-ledger, security, and deletion records remain available only for authorized audit, reconciliation, dispute handling, and legal obligations. Password hashes, active login bindings, sessions, and OAuth refresh credentials are removed or revoked. A keyed identity digest is retained to prevent repeated newcomer rewards.
6. Your choices and rights
You may request access, a copy, correction, deletion, restriction, or an explanation of our processing. You may delete an eligible registered account in the app. Visit Privacy Choices for instructions. Consent can be withdrawn where consent is the legal basis, without affecting prior lawful processing.
7. Children
The service is not directed to children under 14. The current release does not provide a guardian-consent flow for child accounts, so children under 14 should not register, sign in, or make digital purchases. A guardian who believes a child provided information should contact us so we can verify and delete it as required.
8. Security and incidents
We use access controls, encrypted transport, credential hashing or encryption, token expiration, audit trails, and limited administrative access. No system is risk-free. If an incident may materially affect your rights, we will take remedial measures and provide legally required notice.
9. Changes
We will publish changes on this page. For material changes, we will provide prominent notice and obtain renewed consent where required.