Effective Date: October 19, 2022
v 3.0.7
H’Appile Interactive (“us”, “we”, or “our”) operates the Crinkle application (hereinafter referred to as the “Service”).
H’Appile Interactive is dedicated to protecting your privacy and making transparent how we use your data and its purpose for our service.
This page informs you of our policies regarding the collection, use and disclosure of personal data when you use our Service and the choices you have associated with that data. We use your data to provide and improve the Service.
Please note, Individuals must be able to consent to the processing of personal data to use the Service, i.e. be at least 13 years of age in the US, or greater if their respective jurisdiction requires (i.e. 16 years of age in the EEA, etc.) to be able to consent to personal data processing and use.
1 / DEFINITIONS:
Unless otherwise defined in this Privacy Policy, the terms and language used in this Privacy Policy have the same meanings as in our Terms and Conditions.
–Service, Service is the iOS and/or iPadOS based Crinkle application operated by H’Appile Interactive, including all associated and/or affiliated backend services such as servers and/or data architectures/infrastructures, apis, websites, etc.
–You, You as referred to in this policy is meant to encompass the broad definition of a "user". In some instances this may mean simply yourself as an individual and may in other cases encompass an organization or group of individuals if you are representing such and advocating the use of the service in such place and/or on behalf of.
–Personal Data, Personal Data means data about a living individual who can be identified from those data (or from those and other information either in our possession or likely to come into our possession).
–Usage Data, Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit, action on a page, IP address, software version, etc).
–Cookies, Cookies are small files stored on your device (computer or mobile device).
–Data Controller, Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. For the purpose of this Privacy Policy, we are a Data Controller of your Personal Data.
–Data Processors (or Service Providers), Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
–Data Subject (or User), Data Subject is any living individual who is using our Service and is the subject of Personal Data.
–Children/Child for the purpose of this policy refers to individuals who are under the age of ability to consent to Personal Data processing in their jurisdiction (e.g. < 13 in the USA; < 16 in California, USA; < 16 in parts of the EEA, etc). Please refer to your state’s or jurisdiction’s specific requirements.
2 / INFORMATION COLLECTION AND USE:
We collect several different types of information for various purposes to provide and improve our Service to you.
Types of Data Collected:
2.1 / Personal Data
While using our Service, we may ask for and/or store certain personally identifiable information that can be used to contact or identify you (“Personal Data”). Personally identifiable information may include, but is not limited to:
-email address
-cookies and usage data
-your legal name (only for Registered Authors, as outlined in terms of service section 2.1.6)
-region you reside in (only for Registered Authors, as outlined in terms of service section 2.1.6)
2.2 / Device, Geographic, Usage Data
When you access the Service with a mobile device, we may collect certain information automatically, including, but not limited to, the type of mobile device you use, your mobile device unique ID, vendor unique device ID, the IP address of your mobile device, the geolocation of your use, the local timezone of your use, your mobile operating system version, the currently installed app version, the type of mobile Internet browser you use, the timestamp/date of your use, actions taken on the service, and other diagnostic data (“Usage Data”).
2.3 / Crash Reports
To improve and diagnose crashes of our service or application, we may collect crash logs and information when/if the platform experiences a crash during you use. This information may includes things such as operating system state (i.e. memory use, CPU use, etc), device state (like orientation, etc.) and specific "traces" or logs of activity (i.e. actions within the app like screen transitions/sequences, taps, etc.) leading up to and at the time of crash.
2.4 / Service & Tracking Data
We may collect service data. This may include the content and/or works, etc. that may be generated by your use of the service, etc. More details and depth on this type of data generation and our rights to, etc. are detailed in our Terms of Service.
We may also track things such as the frequency of and/or attributing of content you’ve recently accessed, used, modified, etc. on the service (i.e. tracking page reads). We use this service data and/or tracking metrics for the facilitation of our service. We do not share personally identifiable tracking information with other users (unless initiated by your request), however we may use these metrics for ranking works on popularity, trending stats, monetization calculations for authors, etc.
2.5 / Tracking Data
We may use cookies and/or similar tracking technologies to track the activity on our Service and hold/cache certain information.
2.5.1 / Cookies
Cookies usually exist in web and browser based environments.
Cookies are small pieces of data that are stored by your browser when a site is visited to track and store information associated with your activity to help improve your browsing experience, capture analytics, perform authentication, store cache records, etc.
Since our Service primarily exists on a native iOS or iPadOS mobile application, we don’t directly use cookies in the Crinkle app.
However, our adjacent platforms such as website (i.e. crinklestories.com) or links from within our app that direct to crinklestories.com and/or any other subdomains or websites associated with our service may use the following Cookies:
-Session Cookies.
-Preference Cookies.
-Security Cookies.
-Advertising Cookies.
2.5.2 / Others
Other tracking technologies may also be used such as beacons, tags, pixels, and scripts to collect and track information and to improve and analyze our Service.
2.5.3 / Advertising Identifier (i.e. IFA)
The Advertising Identifier on your device may be shared with third party advertisers to track and target personalized advertisements based on your use and/or ad clicks. This is again mentioned later section 11.3 for Advertising.
You can limit the specific use of this by advertisers, in regard to how they serving ads based on on your device if you wish to opt out of personalized ads and limit such tracking. The setting can be modified within the "Settings" app on your iOS or IPadOS devices. You can find instructions for how to do so here https://support.apple.com/en-us/HT205223.
The advertising identifier (IFA) may also be used by third party services as a means of attribution to detect if you’ve installed the application by clicking through from another website or service, i.e. clicking on an online ad for Crinkle and then downloading the application from the app store.
3 / USE OF DATA:
Crinkle and H’Appile Interactive uses the collected data for various purposes:
-To provide and maintain our Service
-To notify you about changes to our Service
-To allow you to participate in interactive features of our Service when you choose to do so
-To provide customer support
-To gather analysis/stats or valuable information so we can improve and learn about our Service
-To monitor the usage and/or compliance of our Service and it’s features
-To detect, prevent and address technical issues
4 / LEGAL BASIS FOR PROCESSING PERSONAL DATA UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR):
If you are from the European Economic Area (EEA), the legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.
Crinkle may process your Personal Data because:
-We need to perform a contract with you
-You have given us permission to do so
-The processing is in our legitimate interests and it is not overridden by your rights
-For payment processing purposes
-To comply with the law
5 / RETENTION OF DATA:
Crinkle will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.
Crinkle will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.
6 / TRANSFER OF DATA:
Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.
If you are located outside The United States and choose to provide information to us, please note that we transfer the data, including Personal Data, to The United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.
Crinkle will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.
7 / DISCLOSURE OF DATA:
7.1 / Business Transaction
If Crinkle is involved in a merger, acquisition or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
7.2 / Disclosure for Law Enforcement
Under certain circumstances, Crinkle may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
7.3 / Legal Requirements
Crinkle may disclose your Personal Data in the good faith belief that such action is necessary to:
-To comply with a legal obligation
-To protect and defend the rights or property of Crinkle/H’Appile Interactive
-To prevent or investigate possible wrongdoing in connection with the Service
-To protect the personal safety of users of the Service or the public
-To protect against legal liability
8 / SECURITY OF DATA:
The security of your data is very important to us.
For data transmission to/from the app and our servers or any third party apis we use commercial and industry wide standard encryption protocols such as https calls (i.e. http using SSL or TLS) to protect your data.
For data storage we always design database schema and security rules with careful privacy considerations. We employ security rules on our Firebase database (see 11.2 for more on Firebase) to ensure only you have access to your personally identifiable information.
In the unforeseen event of breach or database integrity being compromised and we become aware of such that personally identifiable information is at risk or has been exposed, we will take appropriate steps to notify all users impacted.
It is important though to remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we always strive and dedicated ourselves to protecting your Personal Data, we cannot guarantee its absolute security.
9 / OUR POLICY ON "DO NOT TRACK" SIGNALS UNDER THE CALIFORNIA PROTECTION ACT (CalOPPA):
We do not support Do Not Track (“DNT”). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.
10 / YOUR DATA PROTECTION RIGHTS UNDER THE GENERAL DATA PROTECTION REGULATION (GDPR):
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Crinkle aims to take reasonable steps to allow you to correct, amend, delete or limit the use of your Personal Data.
If you wish to be informed about what Personal Data we hold about you and if you want it to be removed from our systems, please contact us at support@crinklestories.com.
In certain circumstances, you have the following data protection rights:
-The right to access, update or delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
-The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
-The right to object. You have the right to object to our processing of your Personal Data.
-The right of restriction. You have the right to request that we restrict the processing of your personal information.
-The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
-The right to withdraw consent. You also have the right to withdraw your consent at any time where Crinkle relied on your consent to process your personal information.
Please note that we may ask you to verify your identity before responding to such requests.
You have the right to complain to a Data Protection Authority about our collection and use of your Personal Data. For more information, please contact your local data protection authority in the European Economic Area (EEA).
11 / SERVICES & THIRD PARTY PROVIDERS:
We may employ third party companies and individuals to help facilitate our Service (“Service Providers”), to provide one or more services on our behalf, perform or improve Service-related services or assist us in analyzing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
11.1 / ANALYTICS/MARKETING:
We may use third-party Service Providers to monitor and analyze the use of our Service including,
–Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.You may opt-out of certain Google Analytics features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy?hl=en. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en.
–Firebase Analytics is a service provided by Google Inc. You may review Google’s privacy policy and learn about opting-out of certain Firebase features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy?hl=en. We also encourage you to review the Google’s policy for safeguarding your data: https://support.google.com/analytics/answer/6004245. For more information on what type of information Firebase collects, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en
–Firebase Crashlytics is a web analytics service offered by Google that monitors, collects, logs, tracks, and analyzes crash reports (such as those outlined previously in section 2.3) so Crinkle can better understand and improve our service as we grow and work to keep the platform robust. You may review Google’s privacy policy and learn about opting-out of certain Firebase features through your mobile device settings, such as your device advertising settings or by following the instructions provided by Google in their Privacy Policy: https://policies.google.com/privacy?hl=en.
–Lumos Apps is a mobile app publisher we may work with. Lumos Apps helps us with publishing services and related. Through the course of our business interactions and to facilitate Lumos Apps’ services in the legitimate interest of growing, improving, and sustaining our apps, Lumos Apps may have access to and/or we may share one or more of the following: IDFA (if authorized/available), IDFV, Contextual/Device Data, Ad/UA Performance Data, and App Data/Service Usage Data. https://lumosapps.notion.site/Privacy-Policy-8b600c2f92df45f6b4cf3e9a931692d4
11.2 / DATABASE:
Firebase by Google Inc. – We may use third-party service provider Firebase to store and maintain content and works on our service. User information including email, user profile ID, etc may be stored in the database and/or shared with Google in order to facilitate this storage service.
We encourage you to review the Firebase privacy and security standards https://firebase.google.com/support/privacy.
11.3 / ADVERTISING:
We may use third-party Service Providers to show advertisements to you to help support and market our products, including:
AdMob by Google Inc. – AdMob by Google service may use tracking of your device based on Advertising Identifier (IFA) to help personalize ads. You can find instructions for how to limit tracking of and personalized ads by disabling and restricting the use of your devices Advertising Identifier (i.e. IFA) and more details here https://support.apple.com/en-us/HT205223. For more information on how Google uses the collected information, please visit the “How Google uses data when you use our partners’ sites or app” page: http://www.google.com/policies/privacy/partners/ or visit the Privacy Policy of Google: http://www.google.com/policies/privacy/.
Facebook by Meta Platforms Inc. – Facebook by Meta Platforms Inc. may use tracking of your device based on Advertising Identifier (IFA) to help personalize ads and using cookies or the "Facebook Pixel" on our website and in your browser environment. These identifiers and tracking tools may also help attribute installs of the app from a previously interacted with advertisement (e.g. an ad clicked on social media, etc.). You can find instructions for how to limit tracking of and personalized ads by disabling and restricting the use of your devices Advertising Identifier (i.e. IFA) and more details here https://support.apple.com/en-us/HT205223. For more information on how Meta uses the collected information and what the Facebook Pixel is, please visit https://www.facebook.com/business/learn/facebook-ads-pixel and their privacy policy here https://www.facebook.com/privacy/explanation.
11.4 / PAYMENTS:
We may provide paid products and/or services within the Service. In this case, we use third-party services for payment processing (e.g. payment processors).
We may also issue payments to users on our service for their work as Registered Authors (i.e. independent contractors on our behalf). You can learn more about Registered Authors in our Terms of Service section 2.1.6.
We will NEVER store or collect your payment card details and/or any personal banking information directly. We will also NEVER contact your regarding such details or ask for them. If you have provided this to our third party payment processors outside of our service, then this information is stored directly by our third-party payment processors whose use of your personal information is governed by their Privacy Policy. These payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of payment information.
Apple In-App Payments/Purchases – We work with Apple as a payment processor for in-app purchases. Their Privacy Policy can be viewed at https://www.apple.com/legal/privacy/en-ww/.
PayPal Inc. – We use PayPal inc. to facilitate payments to our Registered Authors. Their Privacy Policy can be viewed at https://www.paypal.com/us/webapps/mpp/ua/privacy-full.
Note for payments to Registered Authors we may store and share your legal name, region of residence, and email address on file with our payment processor (PayPal) to facilitate payments. We may also share your amount of revenue with PayPal so they can facilitate appropriate payment. We may also share these such details with any local or regulatory bodies in your Jurisdiction and/or any Jurisdictions which we operate for any legal/compliance basis required by law (i.e. tax collection, etc).
11.5 / AUTHENTICATION:
Facebook, Google, Apple Sign In – We may utilize third party services by Facebook, Google, and Apple to allow users to create profiles and save, manage user profiles and accounts. Use of these login services is completely optional and voluntary. Crinkle does not own or manage any OAuth and/or other protocols/encryption used in these services, and has no access to your password. Thus Crinkle cannot be responsible for any loss of and/or invalidation/corruption of your login/credentials.
You may delete your profile and associated authentication credentials anytime you choose while logged in within the settings menu of the application.
11.6 / PUSH NOTIFICATIONS:
Apple Push Notifications – Crinkle may send push notifications if enabled and authorized on devices where users allow. These notifications are sent using Apple Push Notifications service and framework and using a device token issued by Apple. We may send information, stats, and/or reminders about the state(s), properties, or attributes of works/contents you are authoring or reading and/or actions pending your attention in the Crinkle application. We’ll never send any private personally identifiable information in our push notifications.
11.7 / COVER PHOTOS AND IMAGES:
Crinkle uses the Unsplash API to provide selection of third party images for Cover backgrounds. As part of the API terms and integration with our service, we make requests to and updates to the Unsplash API regarding images our users select, view, download, etc. We may share this information with Unsplash and their community (i.e. photographers, etc) about which images you use, view, download, etc. while on our service. This data helps the Unsplash community by letting photographers track how popular their images are, etc. You can read more about the Unsplash API terms here https://unsplash.com/api-terms and privacy policy https://unsplash.com/privacy.
11.8 / EMAIL SERVICE:
If you’ve provided us with your email and/or given us authorization to, or have made a request for response from us (i.e. support inquiry, signup verification, etc.), we may send you email(s). Email(s) may be sent for a variety of reasons including administrative (i.e. transactional/relationship driven emails) such as verified author email validation or support/service related inquiries/notifications, and also for commercial (i.e promotional/news based) updates like informing of new app features or promotions of such, etc. If you wish to opt out of or revoke your authorization for receipt of commercial based emails, you may do so in the settings menu of the app and/or by clicking the unsubscribe link at the bottom of any email you receive from us. Note this opting out does not apply to solely administrative driven content and emails, i.e. email validation when signing up as a registered author, payment/documentation related needs or updates, etc. that are required to facilitate our service/compliance.
To facilitate the above such email(s):
1) Our service may use a third party email service mailgun and api integration to send email on our behalf. You can view mailgun’s privacy policy here https://www.mailgun.com/privacy-policy/.
2) We also use the google gmail based platform as our email inbox and to store, retrieve, reply to, compose, etc. messages. You can view gmail’s privacy policy here https://policies.google.com/privacy?hl=en.
3) Finally, we provide our website hosted by WordPress, and we offer the ability to communicate initially for support via a support form on our website. If you choose to use this form, we may share your email and any other entered details such as name, etc with WordPress to facilitate your communication with us. You can view WordPress’s privacy policy here https://wordpress.org/about/privacy/.
As such outlined in the above 1, 2, 3 , we may provide and/or store your email address, and associated correspondences received from, to and on the above service(s) for the sole purpose of sending you email(s) on our behalf and related tasks(i.e. address books, lists, etc) and/or log histories of such.
11.9 / LINKS TO OTHER SITES:
Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
12 / DATA AGGREGATION AND SERVICE STATISTICS:
Information or data points/statistics obtained from your use of the Service, along with that of other users, may be combined and processed into aggregated Service metrics. These metrics are always stripped of any personal identifiers, anonymized, and never include any Personal Information. Examples of such may include, but are not limited to, derived statistics such as organic vs. inorganic install breakdowns, most successful ad campaigns or product placements in the app, revenue channel splits, retention cohorts, DAU counts, country-wide/large geo regional breakdown of such metrics, etc. These “big picture” or “aggregated” statistics may be shared and used in any way we deem fit for the Service or in our interest.
13 / YOUR CRINKLE ALIAS(ES):
Your Crinkle alias is considered public and may be shared or shown in the service, on adjacent platforms or screenshots in promotions and advertisements, in invites you send from Crinkle to others on your behalf to join works, etc. You understand and agree/grant permission that your alias may be shown or shared via, but not necessarily limited to, the above stated means without any additional notification.
For more definition of and details on your Crinkle Alias please refer to Terms of Service section 4.
14 / CHILDREN’S PRIVACY:
We take Children’s privacy very seriously. Crinkle is not directed towards use by Children.
Crinkle requires users to be of the age and ability to consent to personal data processing and acceptance of the terms and privacy policies by an adult of 18 years or older, who affirms responsibility/oversight for all users on their device(s). If however, we become aware that we have collected Personal Data unintentionally somehow from Children without verification of parental or guardian consent, we take steps to remove that information from our servers.
If you are a parent or guardian and you are concerned that your Child has provided us with Personal Data without your consent, please contact us.
15 / CHANGES TO THIS PRIVACY POLICY:
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. We will let you know via a prominent notice on our Service, and update the “effective date” and version at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
16 / CONTACT US:
All questions and concerns regarding this Privacy Policy may be submitted to H’Appile Interactive at:
Data Protection Officer
H’Appile Interactive, LLC
2711 Legion Rd
PO Box 8184
Erie, PA 16506
privacy@happileinteractive.com
Representation for data subjects in the EU and the UK:
We value your privacy and your rights as a data subject and have therefore appointed Prighter as our privacy representative and your point of contact.
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative Prighter or make use of your data subject rights, https://prighter.com/q/14912091663
EU Headquarters Schellinggasse 3
1010 Vienna
AUSTRIA
UK Office 20 Mortlake Mortlake High Street
London, SW14 8JN
UNITED KINGDOM