Privacy Policy
This policy explains what data the Android app Fate in a Cup (called Gatara in some countries), published by IQPixel (“we”, “us”), processes, why, and what your choices are. The app lets you photograph a coffee cup and receive an entertaining, AI-generated “reading” of it.
1. Who is responsible
IQPixel is responsible for this app. Contact: srdjan.pavlica@gmail.com
2. No account, no name, no email
You do not create an account and we do not ask for your name, email address or phone number. When you first open the app, Google Firebase Authentication creates a random, anonymous user ID. It is used only to keep your credit balance. We cannot link it to your identity.
3. Data we process
- Cup photos. The photo you take or pick from your gallery is kept only on your phone (in the app’s private cache, where only the most recent photo is kept) and is sent, compressed, to Google Gemini (through Firebase AI Logic) to generate your reading. We do not store your photos or readings on our servers. We use Gemini’s paid service, under which Google does not use this content to train its models; Google may keep it for a limited time to detect abuse, as described in Google’s terms.
- Credits and purchases. In Google Cloud Firestore we store, under your anonymous ID: your credit balance, the time of the last free daily credit, how many ad rewards you received in the last 24 hours, and, for each purchase, the product (15 or 50 credits), the Google Play order ID, the time and a one-way hash of the purchase token (used to prevent the same purchase from being counted twice).
- Payments. Purchases are processed by Google Play. We never receive your card or bank details.
- Ads. The app shows optional rewarded video ads through Google AdMob. AdMob may collect device identifiers such as the advertising ID, IP address, device and app information and ad interactions, to show and measure ads and prevent fraud. In the EEA, the UK and Switzerland you are asked for consent first, and you can change your choice at any time in the app menu (🌐 → Privacy settings). You can also reset or delete your advertising ID in your Android settings.
- App security. Firebase App Check with Google Play Integrity checks that requests come from the genuine app on a genuine device. This involves device and app integrity signals processed by Google.
- On your device only. Your language choice. If you share your “fate card”, the image is passed to the app you choose through Android’s share menu; we do not receive it.
- Technical data. Like any online service, Google’s servers receive technical data such as your IP address and device information when the app connects to them.
The app uses the camera only when you take a photo. It does not use analytics or crash-reporting tools, does not access your contacts or location, and we do not sell your data.
4. Why we process data (legal bases)
- To provide the app and the service you request: readings, credits and purchases (performance of a contract).
- To protect the app and prevent fraud and abuse (legitimate interest).
- To show personalised ads where required by law, only with your consent; you can withdraw it at any time.
5. Service providers
All processing is done through Google services acting on our behalf or under their own terms: Firebase Authentication, Cloud Firestore, Firebase AI Logic / Gemini API, Firebase App Check, Google Play Billing and Google AdMob. Google may process data in the EU, the USA and other countries, using the safeguards described in its terms. More: Google Privacy Policy, Firebase privacy, How Google uses data from apps that use its services.
6. How long we keep data
Your credit record is kept while you use the app, so your credits are not lost. Purchase records are kept as long as needed for accounting, refunds and fraud prevention. Uninstalling the app or clearing its data removes everything stored on your phone; note that it also disconnects your phone from your anonymous ID, so remaining credits cannot be restored.
7. Your rights
Depending on where you live (for example under the EU GDPR or Serbia’s Law on Personal Data Protection), you may have the right to access, correct or delete your data, to object to or restrict processing, to data portability, and to withdraw consent. Write to us at the email above. Because the app is anonymous we may need your help to find your record. You also have the right to complain to your data protection authority (in Serbia: the Commissioner for Information of Public Importance and Personal Data Protection).
8. Age requirement
The app is intended only for adults aged 18 and over. It is not directed at anyone under 18, and we do not knowingly process their data. If you believe a minor has used the app, contact us and we will help remove any related data.
9. Changes
If we change this policy, we will update this page and the effective date above.
Politika privatnosti
Ova politika objašnjava koje podatke obrađuje Android aplikacija Gatara (u drugim zemljama Fate in a Cup), čiji je izdavač IQPixel („mi“), zašto ih obrađuje i koje izbore imate. Aplikacija vam omogućava da fotografišete šoljicu kafe i dobijete zabavno „gatanje“ koje pravi veštačka inteligencija.
1. Ko je odgovoran
Za aplikaciju je odgovoran IQPixel. Kontakt: srdjan.pavlica@gmail.com
2. Bez naloga, imena i e-pošte
Ne pravite nalog i ne tražimo vaše ime, e-poštu ni broj telefona. Pri prvom pokretanju Google Firebase Authentication pravi nasumičan, anonimni ID korisnika. Koristi se samo za čuvanje stanja žetona i ne možemo ga povezati sa vašim identitetom.
3. Podaci koje obrađujemo
- Fotografije šoljice. Fotografija koju napravite ili izaberete iz galerije čuva se samo na vašem telefonu (u privatnom kešu aplikacije, gde se drži samo poslednja slika) i šalje se, smanjena, servisu Google Gemini (preko Firebase AI Logic) da bi nastalo gatanje. Ne čuvamo vaše fotografije niti gatanja na našim serverima. Koristimo plaćenu uslugu Gemini, uz koju Google ne koristi ovaj sadržaj za treniranje svojih modela; Google ga može čuvati ograničeno vreme radi otkrivanja zloupotreba, kako je navedeno u njegovim uslovima.
- Žetoni i kupovine. U Google Cloud Firestore-u pod vašim anonimnim ID-om čuvamo: broj žetona, vreme poslednjeg besplatnog dnevnog žetona, koliko ste nagrada za reklame dobili u poslednja 24 sata, a za svaku kupovinu: paket (15 ili 50 žetona), Google Play broj porudžbine, vreme i jednosmerni heš tokena kupovine (da se ista kupovina ne bi računala dva puta).
- Plaćanje. Kupovine obrađuje Google Play. Nikada ne dobijamo podatke vaše kartice ili računa.
- Reklame. Aplikacija prikazuje neobavezne video reklame sa nagradom preko Google AdMob-a. AdMob može prikupljati identifikatore uređaja kao što je ID za oglašavanje, IP adresu, podatke o uređaju i aplikaciji i interakcije sa reklamama, radi prikazivanja i merenja reklama i sprečavanja prevara. U EEA, Ujedinjenom Kraljevstvu i Švajcarskoj prvo se traži vaša saglasnost, a izbor možete promeniti bilo kada u meniju aplikacije (🌐 → Podešavanja privatnosti). ID za oglašavanje možete resetovati ili obrisati u podešavanjima Androida.
- Bezbednost aplikacije. Firebase App Check sa Google Play Integrity proverava da zahtevi dolaze iz prave aplikacije na pravom uređaju. Pri tome Google obrađuje signale o integritetu uređaja i aplikacije.
- Samo na vašem uređaju. Izabrani jezik. Ako podelite „karticu sudbine“, slika se preko Androidovog menija za deljenje predaje aplikaciji koju izaberete; mi je ne dobijamo.
- Tehnički podaci. Kao kod svake onlajn usluge, Google-ovi serveri dobijaju tehničke podatke kao što su IP adresa i podaci o uređaju kada se aplikacija poveže sa njima.
Aplikacija koristi kameru samo kada fotografišete. Ne koristi alate za analitiku ni prijavu grešaka, ne pristupa kontaktima ni lokaciji, i ne prodajemo vaše podatke.
4. Zašto obrađujemo podatke (pravni osnov)
- Da bismo pružili aplikaciju i uslugu koju tražite: gatanje, žetone i kupovine (izvršenje ugovora).
- Da bismo zaštitili aplikaciju i sprečili prevare i zloupotrebe (legitimni interes).
- Personalizovane reklame, gde to zakon zahteva, samo uz vašu saglasnost, koju možete povući bilo kada.
5. Pružaoci usluga
Sva obrada se vrši preko Google usluga koje rade u naše ime ili po sopstvenim uslovima: Firebase Authentication, Cloud Firestore, Firebase AI Logic / Gemini API, Firebase App Check, Google Play Billing i Google AdMob. Google može obrađivati podatke u EU, SAD i drugim zemljama, uz mere zaštite opisane u njegovim uslovima. Više: Google politika privatnosti, Firebase privatnost, Kako Google koristi podatke iz aplikacija.
6. Koliko dugo čuvamo podatke
Zapis o žetonima čuvamo dok koristite aplikaciju, da ne biste izgubili žetone. Zapise o kupovinama čuvamo koliko je potrebno za knjigovodstvo, povraćaj novca i sprečavanje prevara. Brisanjem aplikacije ili njenih podataka briše se sve što je sačuvano na telefonu; time se telefon odvaja i od anonimnog ID-a, pa preostali žetoni ne mogu da se vrate.
7. Vaša prava
U zavisnosti od toga gde živite (na primer po Zakonu o zaštiti podataka o ličnosti Republike Srbije ili GDPR-u u EU), imate pravo na pristup, ispravku i brisanje podataka, prigovor ili ograničenje obrade, prenosivost podataka i povlačenje saglasnosti. Pišite nam na gornju adresu. Pošto je aplikacija anonimna, možda će nam trebati vaša pomoć da pronađemo vaš zapis. Imate i pravo da podnesete pritužbu nadležnom organu (u Srbiji: Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti).
8. Uzrast
Aplikacija je namenjena isključivo punoletnim osobama (18+). Nije namenjena licima mlađim od 18 godina i ne obrađujemo svesno njihove podatke. Ako smatrate da je aplikaciju koristilo maloletno lice, javite nam se i pomoći ćemo da se povezani podaci uklone.
9. Izmene
Ako promenimo ovu politiku, ažuriraćemo ovu stranicu i datum na vrhu.