Privacy Policy

Applies to the DoomSunder Android app (package uk.co.doomsunder). This is a draft for owner and solicitor review; bracketed items are to be confirmed before publication.

Who we are

DoomSunder is provided by Illuminate UX Ltd ("we", "us"), a company registered in England & Wales (company number [COMPANY NUMBER]), registered office [REGISTERED ADDRESS].

Contact: [email protected]. We are the data controller for the limited processing described below.

The short version

DoomSunder has no user accounts, no advertising, and no tracking. Data leaves your device in only two cases - both your deliberate choice:

• Feedback you choose to send through the in-app Rookery - an anonymous message delivered via a third-party form service.
• Optional anonymous usage statistics - a once-daily set of anonymous counts, off by default. As of this policy's date the feature is dormant and public builds transmit nothing even when enabled.

Subscription payments are handled entirely by Google Play; we never see your payment details. The onboarding Oath promises "Nothing leaves unless you send it" - that is the standard this policy holds the app to.

Data that stays on your device

The following is processed locally and is never transmitted to us or any third party:

• Your name (optional) - a display name you type during setup, or skip as a "nameless wanderer". Device-local only.
• Watched apps - package names and labels of apps you monitor, plus the per-session and daily limits you set. Device-local database.
• Settings & preferences - sound, haptics, scanlines, patrol mode, curfew schedules, commitment tier, lock duration, quest types, colours.
• Usage event log - monitoring events (limit reached, quest completed, lock started) with timestamps and the relevant package name. Drives your stats and streaks. It does not record what you do inside any app.
• In-app economy - gold balance, lifetime totals, owned/equipped items, virtue minutes, clean days, rank.

The app sets android:allowBackup="false", so Android's cloud backup does not copy any of this to Google's servers.

Data you choose to send: anonymous feedback ("The Rookery")

If you use the Rookery and tap "Release the Raven", a single HTTPS POST is sent to Web3Forms (web3forms.com) containing: the feedback text you wrote, the category you selected, and your app version, Android OS version and device model (e.g. "Pixel 9").

We do not send your name, email, advertising ID, location, or any persistent device identifier. Submissions are one-way and anonymous - we cannot identify or retract a message after it is sent.

• Legal basis (UK GDPR Art. 6(1)(f)): our legitimate interest in receiving feedback you voluntarily send.
• If you never open the Rookery or never tap send, no data ever leaves your device.

Optional anonymous usage statistics (off by default)

DoomSunder includes an optional "Share anonymous stats" setting, offered once during onboarding and available in Settings. It is off by default, and completing setup never depends on it.

Current status: dormant. No statistics service is connected; even switched on, public builds transmit nothing. We will update this policy before any statistics service is activated.

If active and opted-in, the app sends at most one snapshot per day, containing only: counts of quests set/completed/dodged; the number (never names) of watched apps and curfew windows; minutes reclaimed and gold earned/spent; which cosmetic items are owned/equipped; and days since install. A snapshot contains no name, email, device or advertising identifier, location, app names, individual timestamps or content.

• Legal basis (UK GDPR Art. 6(1)(a)): your consent via the opt-in toggle. Switch it off any time and the app stops sending immediately.

Subscription billing

DoomSunder offers a paid subscription (a 7-day free trial, then a monthly or annual plan) through Google Play. All payment processing is handled by Google Play - we do not receive or store your card details, billing address, or Google credentials. Google Play tells the app whether your subscription is active; that result is cached locally. Your use of Google Play is governed by Google's privacy policy.

Permissions and what they do

• Usage Access - reads how long each app is in the foreground so limits can be enforced. Granted manually by you. Does not reveal what you do inside an app.
• Draw over other apps - shows the full-screen quest overlay. Cannot read or record the underlying app.
• Vibrate - a haptic pulse when the overlay appears.
• Internet - used only for the voluntary Rookery feedback and (if opted-in, once activated) the daily anonymous snapshot. No background collection, syncing or tracking.
• Foreground Service - keeps monitoring running so limits are checked in real time (Android shows a persistent notification).
• Run at startup - restarts monitoring after a reboot.

We deliberately do not request QUERY_ALL_PACKAGES and do not use an Android Accessibility Service.

What we do NOT collect

• No email or password - there are no accounts
• No location, contacts, camera or microphone
• No content of the apps you use
• No advertising identifiers
• No third-party analytics, crash-reporting or advertising SDKs (no Firebase, Crashlytics, Amplitude or equivalent)

Data retention and deletion

All your data lives on your device - there is no server-side account or copy to delete. To remove everything, uninstall DoomSunder; Android deletes the app's local storage as part of uninstall. Rookery feedback is kept in our support inbox as long as needed to act on it, then deleted; because it's anonymous we cannot identify a specific submission to delete on request.

Your rights

Because we hold no personal data that identifies you, there is normally nothing to retrieve, correct or erase. For on-device data you are in control: change it in settings or uninstall. If you believe we hold personal data about you, contact [email protected]. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Children

DoomSunder is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal information from anyone under 18.

Contact

Illuminate UX Ltd - [email protected]