Privacy Policy

Last updated · May 13, 2026

This Privacy Policy explains how Nante Studio ("we", "us", or "our") handles your information across all of our products and services, including mobile apps, websites, tools, and games (collectively, the "Services").

1. Information We Collect

Depending on the Service, we may collect the following types of information:

Account Information: Email, name, or third-party login IDs (e.g., Apple Sign In, Google Sign In). We do not store passwords directly.
Usage Data: Logs, device info, crash reports, and interaction data (e.g., clicks, screen views, session duration).
User Content: Content you create, upload, or generate within our apps, including text, images, saved progress, settings, and feedback.
Advertising Data: Device advertising identifier (GAID/IDFA), ad interaction data, and advertising preferences.
Analytics Data: Anonymous engagement metrics and app usage statistics.
AI Interaction Data: Prompts, inputs, and responses when using AI-powered features.
Images and Media: Photos or images you provide for processing (e.g., for image editing or generation features). Unless otherwise specified, images are processed and not permanently stored.
Health and Fitness Data: Step counts, activity data, or other health-related information in apps that provide fitness features. This data is used solely for app functionality.
Ad Monetization and Campaign Data (AdPulse): When you use AdPulse, we access your Google AdMob earnings data (read-only, scope admob.readonly) and Google Ads campaign performance data (read-only, scope adwords) through Google APIs using your authenticated account. We store an encrypted OAuth refresh token (AES-256-GCM) and daily revenue/spend summary snapshots on our servers (Cloudflare D1, APAC region) so that scheduled push-notification crons can fetch yesterday's numbers on your behalf. We do not sell, share, or use this data for any purpose other than displaying it to you in-app and powering the alerts you enable. See the dedicated AdPulse — Detailed Data Handling section below.

2. How We Use Your Data

To operate, maintain, and improve our Services
To provide customer support and respond to inquiries
To personalize your experience and content
To display advertisements (with your consent where required)
To analyze usage patterns and optimize performance
To detect and prevent fraud, abuse, and security incidents
To comply with legal obligations

3. Children's Privacy

Our Services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@nantestudio.com and we will delete such information promptly.

4. Legal Basis for Processing

For users in the European Economic Area, UK, and Switzerland:

Consent: For personalized advertising and marketing communications
Legitimate Interest: For analytics, security, and service improvement
Contract Performance: To provide the Services you've requested
Legal Obligation: To comply with applicable laws

5. Advertising and Your Choices

We use Google AdMob to display advertisements. This may involve collecting your device's advertising identifier to show personalized ads.

Your choices:

Opt out of personalized ads through our in-app consent dialogs (where applicable)
Reset your advertising ID in your device settings (iOS/Android)
Visit Google Ad Settings to manage ad personalization

6. Data Retention

We retain your data only as long as necessary to provide our Services or as required by law. When you delete your account or request data deletion, we will remove your personal data within 30 days, except where we are legally required to retain it.

7. Data Security

We implement industry-standard security measures including encryption, secure APIs, and access controls.
User passwords are never stored in plain text.
We do not sell your personal data to third parties.

Data Breach Notification: In the event of a data breach affecting your personal information, we will notify affected users and relevant authorities as required by applicable law.

8. Third-Party Services

We integrate with the following third-party services:

Firebase: Analytics, authentication, crash reporting
Supabase: Database and authentication (in select apps)
OpenAI: AI-powered features and content generation
Google AdMob: In-app advertising
Apple/Google Sign-In: Authentication services
Sentry: Error tracking and performance monitoring
Cloudflare: Content delivery and security

Each third-party service has its own privacy policy governing its use of your data.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

All Users:

Access your personal data
Request correction of inaccurate data
Request deletion of your data
Withdraw consent for data processing

EEA, UK, and Switzerland Users (GDPR):

Right to data portability (receive data in machine-readable format)
Right to object to processing based on legitimate interests
Right to lodge a complaint with a supervisory authority

California Residents (CCPA):

Right to know what personal information is collected
Right to know whether personal information is sold or disclosed
Right to opt out of the sale of personal information (Note: We do not sell your data)
Right to non-discrimination for exercising privacy rights

To exercise any of these rights, contact us at contact@nantestudio.com

10. International Data Transfers

Your data may be transferred to and processed in countries outside your region, including the United States and Republic of Korea. We ensure appropriate safeguards for such transfers, including standard contractual clauses where required.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through our Services or website. Your continued use of our Services after changes become effective constitutes acceptance of the updated policy.

12. AdPulse — Detailed Data Handling

AdPulse is a dashboard for ad publishers that reads your own Google AdMob and Google Ads data. Because the data accessed is sensitive (revenue figures, advertising spend), this section documents exactly what AdPulse stores and where. AdPulse is the only product in our portfolio that touches data under these Google API scopes; if you do not use AdPulse, nothing in this section applies to you.

Data we read from your Google account:

AdMob: daily earnings per app, impressions per app, publisher account ID. Scope https://www.googleapis.com/auth/admob.readonly.
Google Ads: daily campaign spend, campaign metadata, customer ID, account currency code. Scope https://www.googleapis.com/auth/adwords.
Account identity: email address, display name, profile picture URL (Google Sign-In standard fields). Used only to identify your account to our push-notification server and show you who is signed in.

Data stored on our servers (Cloudflare D1, APAC region):

An encrypted OAuth refresh token (AES-256-GCM with a per-deployment key) so that the daily push-notification cron can fetch yesterday's data on schedule without asking you to open the app. The token is decrypted only inside the Cloudflare Worker process at the moment of API call; it never leaves the Worker in plain text.
An APNs device token for delivering push notifications to your specific iPhone/iPad.
Your selected AdMob publisher ID and Google Ads customer ID, if your Google account has access to more than one.
Daily summary snapshots — yesterday's revenue, spend, top-app ROAS — required for the revenue-anomaly and ROAS-danger alerts, which compare today's numbers against history. Snapshots are retained for 90 days.
Your push-notification preferences (which of the 5 alert types you have enabled).

Data stored on your device (Apple SwiftData, App Group container):

The full revenue/spend history that AdPulse has fetched for you, going back as far as your AdMob and Google Ads accounts have data. This is your data, kept locally for offline access and fast app launch.
Badge unlock records (gamification milestones).

Data we do not collect:

Your Google password — OAuth handles authentication; we never see it.
Other Google data — our scopes are strictly limited to AdMob and Google Ads. We do not have access to Gmail, Drive, Contacts, Calendar, or any other Google service.
Information about the end-users of your own apps.
Any data unrelated to your ad-monetization performance.

Retention, deletion, and revocation:

Sign out from AdPulse Settings — clears the device token and stops push notifications immediately. Encrypted refresh token is also removed from our servers.
Delete your account via AdPulse Settings → Delete Account, or email contact@nantestudio.com — removes your encrypted refresh token, device token, and all summary snapshots from our servers within 30 days.
Uninstall AdPulse — wipes the on-device cache immediately. Note: this does not by itself remove server-side records; pair with Sign Out or Delete Account to fully revoke.
Revoke OAuth grant at myaccount.google.com/permissions — invalidates the refresh token on Google's side. Our subsequent attempts to use it will fail; we will clear the stored token within 24 hours.

Third-party sharing:

None. AdPulse-scoped data (your AdMob revenue, Google Ads spend, refresh token) is not shared with advertisers, analytics services, or any third party. It is used exclusively to render your dashboard and send the alerts you've enabled.
Crash reports and anonymous usage diagnostics flow to Apple via standard iOS telemetry only if you have opted in at the operating-system level (Settings → Privacy & Security → Analytics & Improvements). These reports do not include AdMob or Google Ads data.

Google API Services User Data Policy:

AdPulse's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us at:

Nante Studio
contact@nantestudio.com