Privacy Policy

01Who we are

This Privacy Policy applies to the Factopus mobile application for iOS and Android, including the web version of the App at app.factopus.app (together, the "App"), the website at factopus.app (the "Site"), and related services (together, the "Service"). Factopus is operated by VVDev LLC, a limited liability company registered in the State of Wyoming, United States ("VVDev", "we", "us", "our").

For the purposes of the EU/UK General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act, and similar privacy laws, VVDev LLC is the controller of your personal data and is responsible for how it is handled.

Contact details for the controller:

• VVDev LLC, a Wyoming limited liability company
• Postal address: 30 N Gould St #22306, Sheridan, WY 82801, United States
• Email (privacy questions & data requests): privacy@factopus.app
• Email (legal): legal@factopus.app
• Email (general support): support@factopus.app

Contacting us from the EU or UK. VVDev LLC is established in the United States. Write to us at privacy@factopus.app with any question or request about your personal data, and we will answer within the time limits set by the GDPR and UK GDPR.

02Scope of this policy

This policy describes how we collect, use, disclose, and protect personal data when you download the App, open its web version in a browser, visit the Site, or otherwise interact with the Service. It does not apply to third-party websites, services, or apps that we don't control — even if we link to them.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

03What data we collect

Factopus works without an account. There is no sign-up, no login, no password, and no sign-in with Apple or Google. We do not ask for your name, email address, or phone number to use the App. Here is everything we do hold:

a) What you set in the App

• Learning preferences — the topics you choose, your learning goal and daily target, and similar settings. These are stored on your device and, whenever the App is online, synced to our servers under an anonymous identifier.
• Support emails — if you write to us, we receive your address and whatever you tell us. We use them to answer you, and for nothing else.

b) What builds up as you read

• Learning progress — lessons started and finished, quiz answers, facts you save, streaks, and badges. All of it hangs off an anonymous identifier generated on your device, not off your identity.
• Server logs — when the App or the Site talks to our servers, our hosting providers record the IP address, the rough region it points to, device type, operating system, app version, and the time of the request. We use these logs to keep the Service running and to spot abuse. They expire on our providers' standard schedule.

Why keep a copy on our servers at all, if it can't move to a new phone? Because that copy is what the App reads and writes while you use it, and because it tells us which lessons work and which quiz questions are broken. It is not a backup: the identifier that points to your record lives only on your device, so once that device is gone, the record is an orphan nobody can open — including us.

c) Subscriptions

When you buy a Factopus subscription, Apple or Google processes the payment. We receive the purchase receipt and the status of your subscription — active, expired, refunded — so the App knows whether to unlock paid content. Your card number never reaches us.

04How we collect data

We collect data when you:

• Open or use the App, or visit the Site;
• Pick your topics and settings, read lessons, or answer quizzes;
• Buy or manage a subscription through the App Store or Google Play;
• Email us for support or feedback.

We do not buy data about you from data brokers, and we receive none from social networks or advertising partners.

05How we use data

Purpose	Examples
Provide the Service	Show the topics you picked, save your progress and streak, pick up where you stopped on that device.
Process subscriptions	Validate App Store and Google Play receipts and unlock paid content.
Reminders	Show the daily reminder if you switch it on. You can turn it off in the App or in your device settings.
Keep things running	Diagnose failures, stop abuse of our servers, maintain backups.
Improve the lessons	Use aggregated counts that identify no one — how often a lesson gets finished, which quiz question everyone fails — to fix and rewrite content.
Answer you	Reply to support emails you send us.
Legal & safety	Comply with law, enforce our Terms, respond to lawful requests.

We do not use your data for advertising, and we send no marketing email. There is no mailing list, because the App never asks for your address.

06Legal bases (GDPR / UK GDPR)

If you're in the European Economic Area, the UK, Switzerland, or another jurisdiction with GDPR-style rules, we process your personal data under these legal bases:

• Contract — to give you the App and the lessons you came for, and to deliver a subscription you bought (Art. 6(1)(b) GDPR).
• Legitimate interests — to keep the Service running, secure, and free of abuse, and to improve our lessons using aggregated counts that identify no one (Art. 6(1)(f) GDPR).
• Legal obligation — where we have to keep records or answer a lawful request (Art. 6(1)(c) GDPR).

We do not rely on consent as a legal basis, because we run no third-party analytics, no advertising, no tracking, and no marketing email. If that ever changes, we will update this policy and ask your permission before it starts.

Automated decision-making. The App suggests what to read next from the topics you picked and the lessons you finished. That has no legal or similarly significant effect on you, and changing your topics changes the suggestions. We do not carry out automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.

07Who we share data with

We do not sell your personal data, and we do not share it for advertising. Four companies touch data from Factopus, and here they are:

• Supabase — our backend: the database and file storage that hold the lessons and your anonymous progress records.
• Vercel — hosting for factopus.app, for the web version of the App, and for our API endpoints. Keeps standard request logs.
• Apple — runs the App Store, handles the purchase flow on iOS, and passes us the receipt and your subscription status.
• Google — the same, for Google Play on Android.

Beyond those, data leaves us only in three situations: to our lawyers or accountants where a matter requires it; to authorities, if we must answer a valid legal request, enforce our Terms, or protect someone's safety; and to a buyer, if VVDev LLC is ever part of a merger, acquisition, or asset sale — in which case this policy travels with the data.

The four are not in the same role. Supabase and Vercel act as our processors under data processing agreements: they may handle your data only on our instructions, and they are contractually required to protect it to at least the standard set out in this policy. Apple and Google are not our processors. For anything bought in the App Store or on Google Play they act as independent controllers, they decide for themselves what to do with the payment details you give them, and their own privacy policies govern that. All that comes back to us is a receipt and a subscription status.

08International transfers

VVDev LLC is established in the United States, and both Supabase and Vercel store our data on servers in the United States (region us-east-1). If you use Factopus from the European Economic Area, the United Kingdom, or Switzerland, your data is therefore transferred to the United States.

For those transfers we rely on the European Commission's Standard Contractual Clauses and, for the UK, the UK International Data Transfer Addendum, concluded with each provider as part of their data processing agreement. Given how little we hold — an anonymous identifier and a record of which lessons you read — the risk such a transfer poses to you is low.

09Data retention

We keep data only for as long as it is doing something useful:

• Progress and preferences — kept while you use the App. Deleting your data in the App removes them at once; uninstalling removes everything held on the device.
• Anonymous identifier — deleted together with the progress stored under it.
• Server logs — short-lived, on our providers' standard schedule, typically no more than 30 days.
• Support emails — up to 2 years after we close your request.
• Purchase records — receipt and subscription status, for as long as tax, accounting, and consumer-protection law requires, usually 6 to 10 years.

Where you send us a deletion request and there is something we can act on, we finish within 30 days, apart from records the law obliges us to keep. Section 11 explains why an emailed request is the weaker route, and what to do instead.

10Security

We use industry-standard measures to protect your personal data, including:

• Encryption in transit (TLS/HTTPS) for all connections between the App, our servers, and third-party integrations.
• Encryption at rest for sensitive data stored by our cloud providers.
• Access controls, logging, and the principle of least privilege for our team.
• Regular backups of the data our servers hold.

No system is 100% secure. If we ever learn of a breach affecting your personal data, we will notify the competent authority as required by applicable law and post a notice in the App and on the Site. We hold no email address to write to, so that notice is how you would hear about it.

11Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Delete your personal data (a.k.a. "right to be forgotten");
• Restrict or object to certain processing;
• Withdraw consent at any time where processing is based on consent;
• Portability — receive your data in a machine-readable format;
• Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@factopus.app. We respond within one month. Where local law sets a different deadline we follow it — for California requests, that is 45 days. If a request turns out to be complicated, we may take longer, and we will tell you why inside the first month.

For the full picture, see our Account & Data Deletion page.

12California rights (CCPA / CPRA)

If you live in California, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to know what personal information we collect, use, and disclose;
• Right to delete personal information we've collected;
• Right to correct inaccurate personal information;
• Right to opt-out of "sale" or "sharing" of personal information for cross-context behavioral advertising;
• Right to limit use of sensitive personal information;
• Right to non-discrimination for exercising your rights.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as California law defines those terms. We have not done either in the preceding 12 months, and we do not collect sensitive personal information as defined by the CPRA. Since there is no sale and no sharing, we offer no "Do Not Sell or Share My Personal Information" link — there would be nothing behind it to switch off. To exercise your California rights, email privacy@factopus.app; we answer within 45 days.

13Children's privacy

Factopus is made for readers aged 13 and up, and it will carry a 13+ age rating in the App Store and on Google Play. We do not knowingly collect personal data from anyone younger.

Because the App has no accounts and asks for no personal details, there is very little for a child to hand over. If you believe a child has sent us personal data anyway — through a support email, for instance — contact privacy@factopus.app and we will delete it.

14Advertising & tracking identifiers

Factopus shows no ads, on any plan. We do not use the IDFA on iOS or the Advertising ID on Android. The App never shows the App Tracking Transparency prompt, because there is nothing to ask you about: no analytics SDK, no attribution SDK, no advertising SDK. Nothing in Factopus follows you into other companies' apps or websites.

If that ever changes — say we start measuring our own ad campaigns — we will update this policy first and, where Apple's rules or the law require it, ask your permission before anything starts.

15Third-party services we use

The whole list, and what each one sees:

Provider	What it does	What it can see
Supabase	Database and file storage for lessons and progress	Anonymous identifier, learning progress, request metadata
Vercel	Hosting for factopus.app, the web version of the App, and our API	IP address and request metadata in server logs
Apple (App Store)	App distribution and in-app purchases	Purchase and subscription data, as an independent controller under Apple's own privacy policy
Google (Google Play)	App distribution and in-app purchases	Purchase and subscription data, as an independent controller under Google's own privacy policy

There is no fifth entry. No analytics platform, no crash-reporting SDK, no advertising or attribution partner, no helpdesk tool. Supabase and Vercel are bound by data processing agreements and may handle data only on our instructions; Apple and Google act as independent controllers for store purchases, under their own policies, as Section 7 explains. If we ever add a provider, this table changes before the provider goes live.

16Cookies & local storage

factopus.app sets no cookies at all. No analytics script, no advertising pixel, and therefore no cookie banner — there would be nothing to consent to. Our host records the standard server logs described in Section 3.

Inside the App — including the web version, which runs in your browser — we use local storage to hold your settings, your progress, and the anonymous identifier. None of it is shared with anyone, and it disappears when you delete your data in the App or uninstall it.

17Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll tell you inside the App and post a notice on the Site before the changes take effect — we have no mailing list to write to, since the App never collects your address. The "Last updated" date at the top always reflects the latest version.

18Contact & complaints

If you have questions, requests, or complaints about this Privacy Policy or our data practices, contact us first — we'll do our best to resolve things quickly.