Privacy Policy

Effective Date: April 10, 2026
Company: Lost Seraph LLC

  1. Introduction

This Privacy Policy explains how Lost Seraph LLC (“we”, “us”, “our”) collects, uses, shares, and protects information when you use our mobile application. We minimize data collection, avoid collecting free‑form user content in analytics events, and require contractual safeguards with all service providers.

By using the app, you agree to the practices described in this Privacy Policy.

  1. Information We Collect

2.1 Story‑Level Event Names

We collect event names that indicate which stories users interact with (for example, Forewarning).
We do not collect:

  • Free‑form user text
  • Custom event parameter values
  • Chapter‑level analytics beyond the single “story” indicator we intentionally track
  • User‑generated content

Purpose:
To understand which stories users are interested in, improve content, and guide product decisions.

2.2 In‑App Purchases and Subscriptions

We collect:

  • App Store purchase receipts
  • Subscription status
  • Transaction identifiers

Purpose:
To validate purchases, manage subscriptions, provide support, and prevent fraud.

2.3 Remote Configuration Metadata

We collect:

  • Firebase Remote Config keys and values
  • Configuration fetch metadata

Purpose:
To enable feature flags, content updates, and A/B testing without shipping a new app version.

2.4 On‑Demand Resource Metadata (Apple ODR)

We collect:

  • Asset tags
  • Delivery metadata handled by Apple

Purpose:
To deliver large assets efficiently and reduce app size.

2.5 Diagnostics and Performance Data

We may collect:

  • Crash logs
  • Performance metrics
  • Device type and OS version

Purpose:
To maintain app stability and improve performance.

2.6 Identifiers and Tracking (ATT/IDFA)

We request App Tracking Transparency (ATT) permission only if we or a third‑party SDK need access to the IDFA for advertising or attribution.

  • If you deny ATT: No IDFA is collected.
  • If you accept ATT: IDFA may be used for attribution and advertising measurement under strict contractual safeguards.

No cross‑app tracking occurs before consent.

  1. How We Use Information

We use collected information to:

  • Understand which stories users engage with
  • Improve content and product design
  • Validate purchases and manage subscriptions
  • Deliver remote configurations and assets
  • Measure attribution and marketing performance
  • Maintain app stability and security

We do not use event names to infer sensitive characteristics or personal identity.

  1. Third‑Party Processors and Data Processing Agreements

We use third‑party processors to provide essential services.
Each processor operates under a Data Processing Agreement (DPA) or equivalent contractual terms.

4.1 AppsFlyer (Attribution & Analytics)

Used for install attribution and analytics.
We send event names only.
We do not enable AppsFlyer Data Locker or raw data exports.

AppsFlyer Privacy Policy

4.2 Google Firebase Remote Config

Used for feature flags and configuration.
Does not receive custom event parameters from your app.

Google Firebase Privacy & Security

4.3 Apple Services

  • On‑Demand Resources (ODR) for asset delivery
  • In‑App Purchases / Subscriptions for billing and validation

Apple Privacy Policy

4.4 Agencies and Subcontractors

Any agency that manages integrations or campaigns must operate under a DPA before processing data.

4.5 No Sale of Personal Data

We do not sell personal data.
If this changes, we will update this policy and provide required notices.

5. Advertising & Marketing Partners

We use the following networks to find new readers. These partners may use your device ID to measure ad effectiveness:

6. Children’s Privacy

  • The app is not intended for children under 13.
  • We do not knowingly collect personal information from children under 13.
  • If you believe a child has provided personal information, contact us and we will delete it as required by law.
  • If future features require parental consent, we will obtain verifiable parental consent before collecting any child data.

7.2 Washington Privacy Rights & Health Data Disclaimer

7.3 Washington Resident Rights

If you are a Washington resident, you may have additional privacy rights under state law.
To exercise these rights, email support@lostseraph.com with “Washington Privacy Request” in the subject line.

7.4 Health Data Disclaimer

  • The app does not collect health or medical data.
  • If you voluntarily provide health‑related information (for example, in a support request), we treat it as sensitive data.
  • Sensitive data is processed only with explicit consent and only under appropriate contractual safeguards.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights:

8.1 Right to Know

You may request:

  • Categories of personal information collected
  • Sources of information
  • Purposes for collection
  • Categories of third parties who receive information

8.2 Right to Access

You may request a copy of your personal information.

8.3 Right to Delete

You may request deletion of personal information, subject to legal exceptions.

8.4 Right to Correct

You may request correction of inaccurate personal information.

8.5 Right to Opt‑Out of Sale/Sharing

We do not sell or share personal information for cross‑context behavioral advertising.

8.6 Right to Non‑Discrimination

We will not discriminate against you for exercising your privacy rights.

To exercise any California rights, email support@lostseraph.com with “California Privacy Request” in the subject line.

9. Data Retention, Security, and International Transfers

9.1 Retention

  • Event names: retained only as long as necessary for analytics and product improvement
  • Purchase receipts: retained as needed for billing and support
  • Remote Config and ODR metadata: retained as required for app functionality

9.2 Security

We implement industry‑standard technical and organizational measures to protect data.

9.3 International Transfers

Processors may transfer data across borders.
We rely on DPAs and legally recognized transfer mechanisms to protect data.

10. Your Rights and Choices

You may:

  • Deny ATT tracking
  • Request access, correction, or deletion of your data
  • Request information about processors
  • Request data portability where required by law

To exercise rights, contact support@lostseraph.com.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices, processors, or legal requirements.
When we make material changes, we will update the effective date and provide notice as required.

12. Contact

For privacy questions or requests:
Email: support@lostseraph.com
Include your name, request type, and any relevant device or account identifiers.