Privacy Policy

1. Introduction

This Privacy Policy explains how Nosa Studio ("we", "us", "our") handles personal data when you use the Namenstag mobile application ("the App") for Android, distributed via Google Play. We are based in Switzerland, and we comply with the EU General Data Protection Regulation (GDPR) for users in the European Economic Area as well as the Swiss Federal Act on Data Protection (revFADP) for users in Switzerland.

The App is designed with privacy in mind: no account is required, and the personal data read from your device stays on your device. We do not sell, rent, or share your personal data with third parties for marketing or advertising.

2. Data We Collect

2.1 Contact data (read locally, stored on your device)

If you grant the contacts permission, the App reads the first name of each contact from your device's address book in order to match it against its built-in name day calendar. This processing happens entirely on your device. Contact data is not transmitted off your device and is not uploaded to any server.

• The contacts permission is optional. You can use the App without granting it.
• You can revoke the permission at any time in Android system settings.
• Revoking the permission removes the App's ability to access your contacts immediately.

2.2 In-app purchase data

When you subscribe to the premium tier or make a one-time purchase, the transaction is processed by Google Play Billing. We receive a purchase token from Google Play that allows the App to verify your subscription status. We do not see or store your payment card details.

2.3 Anonymous usage analytics

The App uses PostHog to collect anonymous usage analytics that help us understand which features are used and where users encounter issues. The data sent is anonymous and contains no personally identifying information (no names, no email addresses, no contact lists, no precise location). Examples of events we may collect:

• Onboarding completion
• Selected country/calendar
• Anonymous feature interaction counters
• Crash and error diagnostics

PostHog assigns a randomly generated identifier to each install. This identifier is reset when the App's data is cleared or the App is uninstalled.

3. How We Use Data

• To provide the core feature: matching first names from your contacts against the name day calendar so the App can show you upcoming celebrations.
• To verify purchases: processing Google Play purchase tokens to enable premium features for paying users.
• To improve the App: analyzing aggregated, anonymous usage patterns to fix bugs and prioritize features.

4. Third-Party Services

The App relies on the following processors:

4.1 Google Play (Google LLC / Google Ireland Ltd)

Google Play handles app distribution, in-app purchase processing, and subscription management. Google's processing of your payment and account information is governed by Google's privacy policy: policies.google.com/privacy.

4.2 PostHog (PostHog Inc.)

PostHog is the analytics provider we use for anonymous product analytics and crash diagnostics. Our PostHog instance is configured to operate without collecting personally identifying information. PostHog's privacy policy is available at: posthog.com/privacy.

5. Data Retention

• Contact data: kept on your device only for as long as the contacts permission is granted. Removed immediately when you revoke the permission, clear app data, or uninstall the App.
• Subscription / purchase tokens: retained for as long as your subscription is active, and for up to 24 months thereafter for accounting and audit purposes.
• Anonymous analytics: retained by PostHog for up to 12 months, then aggregated or deleted.

6. Your Rights (GDPR / revFADP)

If you are located in the EEA, the UK, or Switzerland, you have the following rights regarding your personal data:

• Right of access — to confirm whether we process your data and obtain a copy.
• Right to rectification — to correct inaccurate data we hold about you.
• Right to erasure ("right to be forgotten") — to request deletion of your data.
• Right to restriction of processing — to limit how we process your data.
• Right to data portability — to receive your data in a machine-readable format.
• Right to object — to processing based on legitimate interests.
• Right to withdraw consent — at any time, where processing is based on consent.
• Right to lodge a complaint — with a supervisory authority. In Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local Data Protection Authority.

Because the App does not require an account and does not transmit identifying contact data off your device, the most direct way to exercise erasure is to uninstall the App or clear its data in Android system settings. For other rights, or if you want a record of any analytics events associated with your install, contact us at the address below.

7. Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal data from children. If you believe a child has used the App in a way that resulted in data being collected, please contact us so we can remove the relevant data.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the App's release notes on Google Play and/or via an in-app notice. The "Last updated" date at the top of this document reflects the most recent revision.

9. Contact Us

For data-protection requests (access, correction, deletion, portability, objection), please include "Privacy Request" in the subject line and let us know which right you are exercising. We aim to respond within 30 days.