🎯 Privacy Policy — Roulette Stat Master

Effective date: 12 May 2026  |  Last updated: 12 May 2026

1. Who We Are

Roulette Stat Master ("the App", "we", "us", "our") is published by Manav Arora. The App is a pure educational, statistical, and pattern-analysis study tool for European roulette outcome data. It is intended only for users aged 18 years and older in jurisdictions where such educational software is permitted.

2. What This App Is — and Is Not

This App IS:

• An offline-first statistical and pattern-analysis tool
• An educational study application for roulette outcome data
• A purely analytical software product with optional subscription-based premium features

This App IS NOT:

• A gambling app
• A real-money gaming service
• A betting, wagering, or staking platform
• A money-deposit or bankroll wallet
• An "online money game" or "online money gaming service" as defined under any applicable law, including but not limited to India's Promotion and Regulation of Online Gaming Act, 2025

The App does not accept deposits, hold balances, place bets, or facilitate financial transactions of any kind beyond the standard in-app subscription processed by Google Play.

3. Information We Collect

3.1 Information stored locally on your device (never sent to us)

• Spin-by-spin session data (the roulette numbers 0–36 you enter)
• Saved sessions and history
• Bankroll, base bet, and P&L tracking (if enabled — for local simulation only)
• App preferences (theme, language, prediction mode)
• Walkthrough completion state
• Optional OpenAI / Gemini API key (encrypted via Android Keystore / iOS Keychain — only stored if you enable External AI)

This data never leaves your device unless you explicitly export it (using the Share button in session history).

3.2 Information sent to Google Firebase (anonymous, no personal identifiers)

• Crash reports (Firebase Crashlytics): When the App crashes, an anonymous crash report containing the stack trace, app version, device model, and OS version is sent to Firebase to help us diagnose bugs. No personal information, no session data, no payment information is included.
• Aggregate screen-view analytics (Firebase Analytics): Anonymous, aggregated screen-view events (e.g., which screen was opened) and app version are sent to Firebase. This data cannot be used to identify you.
• App Check attestation tokens (Firebase App Check): Each network call is signed with a Play Integrity (Android) or DeviceCheck (iOS) attestation token to prove the call is coming from a genuine, unmodified copy of the App. These tokens are ephemeral (~1 hour) and contain no personal data.

3.3 Information sent to our Firebase backend for anti-piracy/license validation

To enforce the daily free-prediction limit and prevent abuse, the App sends the following over HTTPS to our Firebase Cloud Functions:

• A hashed device identifier (Android ID or device fingerprint, transmitted as a one-way SHA-256 hash stored at prediction_guards/<hash> in Firebase Realtime Database). The hash cannot be reversed to identify you.
• Your current free-prediction count for the day
• Your UTC offset (used to detect clock tampering)

For subscription verification:

• The Google Play purchase token and product ID (used once to verify your subscription with Google Play, then discarded)
• No payment details, name, email, or address are received by us

3.4 What we do NOT collect

• ❌ No personal information (name, email, phone, address)
• ❌ No advertising IDs (the Android Advertising ID permission is explicitly removed in the App manifest)
• ❌ No third-party advertising or tracking SDKs (Facebook, Mixpanel, AdMob, AppsFlyer, etc.)
• ❌ No location, contacts, camera, microphone, calendar, or storage access
• ❌ No SMS, call logs, or browsing history
• ❌ No biometric or health data

4. Permissions We Use

• Internet — required only for: (a) verifying premium purchases with Google Play, (b) verifying subscription validity and enforcing the free-prediction limit via our Firebase Cloud Functions backend, (c) sending anonymous crash and analytics data to Firebase, (d) optional "External AI" mode if you connect your own ChatGPT or Gemini API key.
• Billing (implicit) — required to process premium subscription purchases through Google Play.

The App does not request or use: location, contacts, camera, microphone, storage (beyond app sandbox), phone, SMS, accounts, or advertising-ID permissions.

5. External AI Mode (Optional, Off By Default)

If you choose to enable the optional External AI mode in Settings, you supply your own OpenAI (ChatGPT) or Google (Gemini) API key. When this mode is active:

• Your API key is stored encrypted on your device (Android Keystore / iOS Keychain) and never transmitted to us.
• A summary of your spin history (totals per color, dozen distribution, recent streaks, last 20 numbers) is sent directly to OpenAI or Google servers from your device — never via our servers.
• No personal information, device identifiers, or payment details are included.
• Communications are governed by OpenAI's or Google's privacy policy, depending on which provider you choose.
• Disabling External AI in Settings clears the cached predictions and the stored key from your device.

6. How We Use Information

• To operate, maintain, and improve App functionality on your device
• To verify premium subscriptions through Google Play
• To enforce the daily free-prediction limit and prevent piracy/abuse
• To diagnose crashes and improve app stability
• To comply with legal obligations

We do not use any data for advertising profiling, behavioural targeting, marketing, or any commercial purpose other than App operation.

7. Data Sharing

We do not sell, rent, lease, or share your personal data with any third parties.

The only third parties involved are:

• Google Play — for subscription processing and Billing API. Governed by Google's Privacy Policy.
• Google Firebase (Crashlytics, Analytics, App Check, Cloud Functions, Realtime Database) — used for crash reporting, anonymous analytics, anti-abuse attestation, and subscription verification. Only hashed identifiers, anonymous crash/analytics data, and subscription tokens are transmitted. No personal data is sent. Governed by Google's Privacy Policy.
• OpenAI / Google AI — only if you voluntarily enable External AI mode with your own API key.

8. Data Security

• Spin sessions, preferences, and your API key (if any) are stored locally on your device — your information is as secure as your device itself.
• API keys for the optional External AI mode are stored in hardware-backed secure storage (Android Keystore / iOS Keychain).
• All network communication uses HTTPS / TLS encryption.
• Our Firebase Cloud Functions require a valid Firebase App Check token on every request, preventing repackaged or modified versions of the App from accessing the backend.
• Server-stored device identifiers are SHA-256 hashed before being written to the database — they cannot be reversed to identify a person.
• We do not store passwords because we do not require accounts.

No system is 100% secure, but our offline-first architecture and minimal-data backend minimise exposure.

9. Data Retention

• Local on-device data: retained until you uninstall the App or clear app data.
• Firebase Crashlytics: anonymous crash data is retained by Firebase for up to 90 days per Google's standard policy.
• Firebase Analytics: anonymous analytics events are retained by Firebase for up to 14 months per Google's standard policy.
• Anti-piracy record: the hashed device record at prediction_guards/<hash> remains until deletion is requested (see Data Deletion page).
• Subscription verification: purchase tokens are discarded after one-time verification; only the subscription state is cached locally on your device.

10. Your Rights

Depending on your jurisdiction (e.g., EU/UK GDPR, California CCPA), you may have the following rights regarding your personal data:

• Right to access any data we hold (we hold only an anonymous hashed device record — see Data Deletion page)
• Right to correct data (edit it directly in the App or uninstall)
• Right to delete data (see our Data Deletion page)
• Right to opt out (uninstall the App; disable Google Play Services analytics in your device settings)
• Right to data portability (use the Share / Export feature in Session History)
• Right to lodge a complaint with your local data protection authority

To exercise any of these rights, email us at apps3mb@gmail.com. We respond within 30 days.

11. Children's Privacy

This App is strictly for users 18 years and older. We do not knowingly collect personal information from anyone under 18.

If you are a parent or guardian and believe a minor has used this App, please contact us immediately at apps3mb@gmail.com.

12. Legal Compliance

The App and its operators comply with applicable laws in the jurisdictions where the App is available. The App is not available in India and is therefore not subject to India's Promotion and Regulation of Online Gaming Act, 2025 or related rules. The App contains no functionality that would constitute an "online money game" or "online money gaming service" under that Act.

The App makes no representation that it is legal in every jurisdiction. Users are solely responsible for ensuring that their use of the App complies with all laws applicable in their location.

13. No Real-Money Gaming Disclaimer

Roulette Stat Master is a statistical study and pattern-analysis tool only.

• It does not involve real-money gambling.
• It does not accept deposits, bets, or wagers.
• It does not facilitate any financial transactions related to gaming.
• It is intended solely for educational and entertainment purposes for users 18+.
• Past patterns and statistics do not predict future outcomes.

14. Changes to This Policy

We may update this policy from time to time. The "Effective date" at the top reflects the latest version. Material changes will be highlighted on this page. Continued use of the App after an update constitutes acceptance of the updated policy.