Privacy Policy

Who We Are

Krackin Software is an independent indie app studio operating at krackinsoftware.com. We build and publish mobile, desktop, and web applications for iOS, Android, Windows, and the browser. Krackin Software is owned and run by a single developer — when you contact us, you are talking directly to the person who built your app.

For privacy matters, you can reach us at privacy@krackinsoftware.com.

Apps Covered by This Policy

This Privacy Policy applies to all current and future applications published by Krackin Software, including:

This policy applies to all versions of these apps on the Apple App Store, Google Play Store, Microsoft Store, and the web.

Data We Collect

Our apps are designed to be offline-first. The vast majority of data you enter stays on your device and is never transmitted to us or any external server. Here is a precise breakdown:

Data stored locally on your device

All of the following is stored in a local SQLite database or in the app's private storage on your device. It does not leave your device:

• Nom Tac Toe: Game settings (theme, difficulty, board size), local match history, win/loss counters, and any nicknames you choose for local play.
• PawYears: Pet names, species, breed, birthday, photos you add, and watering or care reminders.
• FuelRun: Fuel entries, trip distance and fuel economy values, local preferences, and app settings.
• GradePath: Course names, assignments, grade targets, and saved calculator settings.
• FairShare: Bill amount, tip split settings, saved presets, and local session preferences.
• Poker Night: Cash-game, tournament, player-history, and Series records stay local unless the host explicitly publishes a hosted clock or Series share. Published Series fields are described in section 10A.
• Future apps: Each future app will store its own data locally and the specifics will be documented here when it launches.

App settings and preferences

App preferences (such as theme choices, notification times, and Pro unlock status) are stored using the operating system's secure local storage (iOS NSUserDefaults / Android SharedPreferences / Windows app data). These do not leave your device.

Crash reports (anonymous, optional)

If an app crashes, your operating system may offer to send a crash report to Apple, Google, or Microsoft. These reports may be forwarded to us through App Store Connect, Google Play Console, or Partner Center. They contain technical information about what the app was doing when it crashed — they do not contain any of the personal data you entered into the app. You can disable crash reporting in your device's Privacy settings.

App store analytics (aggregate only)

Apple, Google, and Microsoft provide us with aggregate, anonymized analytics about app downloads, active users, and in-app purchase revenue through their developer consoles. This data is statistical only — it cannot be used to identify you individually.

Optional app update notifications

If you choose to sign up on our website for an app launch or update notice, we store the email address you enter and the app number it relates to. For Poker Night, that app number is 5. This list is used only to send the requested app availability update; it is not a newsletter list, is not sold, and is not used for advertising or unrelated follow-up.

Data We Do Not Collect

• Your name, email address, or any account credentials through our apps — our apps require no account or sign-in. The only email exception is the optional website app-update notification form described in section 03.
• Your location or GPS data, with one opt-in, on-device exception: ShopMate's optional store reminders (Pro+) use your location only on your device to trigger a local notification and never transmit it. See section 11.
• Your contacts or address book
• Your browsing history
• Your device serial number or MAC address
• Your microphone or audio data
• Any usage analytics or in-app behavioral tracking
• Any data for the purpose of personalized or targeted advertising

We do not use any third-party analytics SDKs (such as Firebase Analytics, Mixpanel, Amplitude, or similar services) in any of our apps. We do use a non-personalized advertising SDK in the Free tier of some apps — see section 07.

This list describes our apps. This website measures aggregate page traffic, which is described in section 04a. That measurement sets no cookies and creates no identifier for you, so it cannot follow you between pages, between visits, or into any app.

Website Traffic Measurement

This website counts page views so we can tell which pages are worth keeping and which are not. We built this deliberately narrow, because we would rather have less data than have data that identifies you.

When you open a page here, we record:

• The page path you opened (for example /apps/shopmate.html) — never the query string or the part after #
• The page title
• The host name of the site that linked you here, if any (for example duckduckgo.com) — never the full referring URL
• Whether your browser window is small, medium, or large — a three-way bucket, not your screen size
• Page-load speed measurements (Core Web Vitals) and any JavaScript error the page throws
• Your browser and operating system family (for example “Chrome on Windows”), which the monitoring service derives from the standard User-Agent header your browser sends to every website

We keep these records for 30 days, then they are deleted automatically.

• No cookies. It sets none, and it reads none.
• No identifier of any kind. We assign no visitor ID and no session ID, and we store nothing in your browser. Each page view is sent as an independent record with nothing tying it to any other.
• No IP address, and no location. The beacon tells the monitoring service to ignore your IP address entirely, so no address is stored and no city, region, or country is derived from one.
• No third-party analytics platform. The data goes to Microsoft Azure Application Insights, the same infrastructure-monitoring service that hosts this site — not to an advertising or analytics company, and it is never sold, shared, or combined with anything else.
• No cross-site or cross-app tracking. There is no identifier to carry between sites, and nothing here is linked to any of our apps.

The practical consequence is that we can see a page was viewed 400 times last month. We cannot see who viewed it, where in the world they were, or what they looked at before or after.

We want to be precise about one limit rather than overclaim. Because we record your browser and operating system family alongside the page and the referring host, two records that happen to share all of those values look alike — so we cannot promise that records could never be grouped by someone determined to try. What we can say is that we assign nothing to you, store nothing on your device, and hold no location or IP address, so there is no identifier for us or anyone else to follow, and we make no attempt to link records together.

Because we cannot identify you, we cannot single out your data to retrieve or delete it — there is nothing there that is yours. If you would rather not be counted at all, you have three options that all work: turn on Global Privacy Control or “Do Not Track” in your browser (we check both and send nothing when either is set), use any content blocker, or block JavaScript. The site works exactly the same in every case.

This section applies to this website only. Our apps remain as described in section 04: no usage analytics, no behavioral tracking, no analytics SDKs.

Device Permissions

Some apps request access to device features. Here is a complete list of what each app may request and why:

All permissions are requested at the time they are needed with a clear explanation in the app. You can revoke any permission at any time in your device's Settings app. Revoking a permission may limit certain features but will not prevent the core functionality of the app from working.

In-App Purchases

Several of our apps offer a one-time “Pro” or “Premium” upgrade via in-app purchase. All payment processing is handled entirely by Apple (App Store), Google (Google Play), or Microsoft (Microsoft Store). Krackin Software does not receive, store, or have any access to your payment card number, billing address, or any other financial information.

When you make a purchase, the platform records the transaction and provides us only with a confirmation that the purchase was made successfully. This confirmation is used solely to unlock the Pro features in the app.

Purchase records are maintained by the platforms in accordance with their own privacy policies:

• Apple Privacy Policy
• Google Privacy Policy
• Microsoft Privacy Statement

Pro unlock status is stored locally on your device. You can restore your purchase on any device signed into the same store account using the “Restore Purchase” button in the About screen of each app.

Advertising

Some of our apps offer a Free tier that displays advertising. Ads are shown only in the Free tier and only to help cover the costs of running and improving these apps (developer accounts, server hosting, build tooling, store fees, and the rest). If you do not want to see ads, you can remove them at any time by upgrading to the Ad-Free or Premium tier from the in-app store.

How ads work in our apps

• Non-personalized by default. We request non-personalized ads from the ad network. Non-personalized ads are not tailored to your browsing history or interests; they are selected based only on coarse, non-identifying signals such as the current app and approximate page context.
• Consent handling where required by law or platform policy. In regions that require consent (such as the European Economic Area, the United Kingdom, and Switzerland), ad requests are handled according to platform and ad-network consent requirements. Available controls can vary by platform version and app release.
• No ad network in the Ad-Free or Premium tiers. If you upgrade, the ad SDK is not initialized at all on your device.
• No ads to children. We do not knowingly target ads to children under 13, in line with section 13 below.

Ad provider

We use Google AdMob (a Google service) to serve ads in the Free tier. When the AdMob SDK is active on your device, the SDK may process your device's resettable advertising identifier (AAID on Android, IDFA on iOS, and Advertising ID on Windows) to request and present ads, and Google may process a limited set of signals described in the Google Privacy & Terms documentation (such as advertising identifiers, coarse IP-based location, and ad event timing). Krackin Software itself does not build user profiles from these identifiers and does not separately sell your advertising identifier.

You can reset or limit your advertising identifier at any time through your device settings:

• iOS: Settings > Privacy & Security > Tracking, and Settings > Privacy & Security > Apple Advertising.
• Android: Settings > Privacy > Ads (or Settings > Google > Ads).
• Windows: Settings > Privacy & security > General.

Krackin Software apps do not currently provide an in-app privacy options or consent-management entry. Use your device-level ad and tracking settings above to review or limit ad-related identifiers and personalized advertising controls.

The cleanest way to disable ads completely in our apps is to upgrade to the Ad-Free or Premium tier. We appreciate it — that's how a one-person studio keeps the lights on.

Notifications

Apps that offer reminders (currently PawYears) use local notifications only. This means:

• Notifications are scheduled and delivered entirely on your device
• No notification server or push notification service is used
• No data is transmitted to any server in order to send you a notification
• Notification content (such as your pet's name or reminder text) never leaves your device

You can disable notifications for any of our apps at any time in your device's Settings > Notifications.

Online Multiplayer & Game Server

Nom Tac Toe offers optional online multiplayer matches. Online play is opt-in: you have to explicitly create or join an online room to enable any network traffic. Solo play, local two-player play, and offline use of the app never contact the game server.

What is transmitted

When you create or join an online match, the following is sent to the Krackin Software game server (hosted on Microsoft Azure):

• A short randomly-generated room code
• Game state (moves, board configuration, whose turn it is, win/draw status)
• The nickname you choose for the match (you do not have to use your real name)
• Approximate timing information needed to keep both players in sync

What is not transmitted

• Your name, email address, or any other account information — there is no account system
• Your IP address is visible to the server as part of normal internet routing, but it is not logged for analytics or sold to third parties; it is used only to deliver moves to the correct player and to apply standard abuse-protection rate limits
• Any other locally-stored data (settings, themes, match history)

Retention

Match data is held in memory on the game server only for the duration of an active match. When a match ends or a room times out, the server discards it. We do not maintain a long-term database of match results, chat content, or player identifiers.

Shared Packing Lists

PackMate offers an optional shared packing list so you can pack for a trip together with other people. Sharing is opt-in: you have to explicitly create or join a shared list to enable any network traffic. Using PackMate on your own, offline, never contacts our servers. There is no account and no sign-in — sharing works through an anonymous, randomly-generated share code.

What is transmitted

When you create or join a shared packing list, the following is sent to the Krackin Software sync service (hosted on Microsoft Azure):

• A short randomly-generated share code and the corresponding list identifier
• Packing-list item text and category labels
• The checked / packed state of each item
• Trip metadata you add to the list (such as the trip name or dates)
• For family trips, the number of children and their ages — only if you have entered them — so packing quantities stay in sync for everyone
• Approximate timing information needed to keep everyone's copy in sync

What is not transmitted

• Your name, email address, or any other account information — there is no account system
• Your IP address is visible to the server as part of normal internet routing, but it is not logged for analytics or sold to third parties; it is used only to deliver list updates to the right shared list and to apply standard abuse-protection rate limits
• Any other locally-stored data (settings, themes, or non-shared trips and lists)

Where it is stored

Shared-list data is stored on first-party Microsoft Azure infrastructure operated by Krackin Software. It is not shared with any third party, and we do not enable any product analytics on top of it.

Retention and deletion

A shared list is kept only while it is in use. To stop sharing and remove your contribution, leave or delete the shared list from within PackMate — this detaches your device from the shared list. When a shared list is no longer in use, the server discards it. Because sharing is account-less, we hold no profile that ties a shared list back to you.

Poker Night Series Sharing

Poker Night lets a Series host publish an optional, read-only leaderboard for people who have the share link. Publishing is opt-in. Local Series records are not uploaded until the host chooses to share. There is no account or sign-in.

What is transmitted

When the host publishes or updates a Series share, Poker Night sends the following to the Krackin Software sync service hosted on Microsoft Azure:

• The Series name, status, schedule name, drop-worst setting, optional grand-prize text, optional notes, optional champion name, and display currency symbol
• Event sequence, date, status, points multiplier, and winner display name where available
• Player display names, rank, per-event points, total and dropped points, grand total, times cashed, winnings, and prop winnings
• A randomly generated public share code, an internal Series identifier, revision and update timestamps, and an expiry timestamp

Public-code access and security

Anyone who receives the short share code or link can read the published Series snapshot until it expires. Treat the link as public and do not publish names, notes, prizes, or results you do not want link recipients to see. Updating the share requires a separate high-entropy admin token held by the publishing device; the server stores only a one-way hash of that token. The public viewer cannot edit the Series.

The service receives an IP address through normal internet routing and uses it with the share code for abuse-protection rate limits. We do not use those values for product analytics, advertising, or cross-app tracking.

We monitor these hosted services for errors so we can fix them. When a request fails, our operational monitoring records the failing web address, which includes the share code, together with the error. This applies to failed requests only — successful ones are not recorded — and these error records are deleted automatically after 30 days. They are used solely to diagnose faults, never for analytics or advertising. This is the same reason we ask you to treat a share link as public: anyone holding the code can read the snapshot.

Retention and deletion

A newly published or updated Series share expires after 60 days by default. A requested expiry is capped at 366 days from the latest publish. Expired links stop returning the snapshot, and automated cleanup deletes the stored Series row and public-code index after a 7-day cleanup grace period. Because access is account-less, the current app does not provide an account dashboard or immediate server-delete button. To end public access, stop distributing the link and allow it to expire; contact privacy@krackinsoftware.com with the share code if earlier removal is needed.

Store Reminders (On-Device Location)

ShopMate offers an optional store-reminder feature that can notify you when you arrive at a store you have saved to an active shopping list. It is opt-in and is part of the ShopMate Pro+ upgrade. The feature is available wherever ShopMate is distributed. Using ShopMate without turning on store reminders never accesses your location, and the rest of the app works fully without it. Unlike shared packing lists, this feature transmits nothing: your location is used only on your device and never leaves it.

How it works

When you save a store location to a shopping list and enable store reminders, ShopMate uses your device's precise location through the operating system's geofencing services (Android geofencing and iOS region monitoring) to detect when you arrive at that store while the list still has items left to buy. At that point it shows a local notification on your device. The location check happens entirely on the device, the same way an on-device alarm or reminder works.

What is not transmitted

• Your location never leaves your device — it is not sent to Krackin Software or to any server
• There is no account, no sign-in, and no profile that records where you shop
• No map provider, map tiles, or third-party location service is contacted
• The store coordinates you save and the reminder itself stay in the app's private on-device storage

Turning it off

You are always in control. You can turn store reminders off with the in-app toggle in ShopMate's settings, and you can revoke the location permission at any time in your device's Settings app. Disabling store reminders or location access does not affect the rest of ShopMate — your lists and everything else keep working.

Third-Party Services

Our apps do not integrate with third-party analytics platforms or social media SDKs. We do use one third-party advertising SDK (Google AdMob) in the Free tier of some apps, as described in section 07.

The following limited third-party interactions occur through the operating system or through infrastructure providers we use to run the game server, not through code that builds a profile of you:

• Apple App Store / Google Play Store / Microsoft Store: Used for app distribution and in-app purchase processing. Governed by their respective privacy policies.
• iOS StoreKit / Android Billing Library / Microsoft Store Services SDK: Native libraries used for in-app purchase verification. No additional analytics SDK is installed.
• Google AdMob (Free tier only): Serves non-personalized ads in the Free tier of some apps and may process ad identifiers and related ad-delivery signals as described by Google. Initialized only when you have not upgraded to Ad-Free or Premium, with consent handling applied where required by law or platform policy. See section 07 and the Google partner sites & apps documentation.
• Microsoft Azure: Hosts the Nom Tac Toe online multiplayer game server, opt-in sync features, hosted Poker Night clock and Series sharing, and optional app-update notification storage. Azure's standard infrastructure logging applies. We additionally use Azure Application Insights — Microsoft's own operational monitoring for the services we already run there — to record errors and failed requests so we can fix them, and to count page views on this website as described in section 04a. We do not enable product analytics on top of Series share content, and error records are not used to build a profile of you.

Children's Privacy

Krackin Software apps are designed for general audiences and are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

The apps themselves do not require registration, accounts, or personal data submission. Optional website app-update forms are intended for adults who want a launch notice, and we do not knowingly collect those email addresses from children under 13.

Apps like Nom Tac Toe and PawYears are family-friendly — that's intentional. Data entered (pet names, nicknames, photos) is stored only on the family's device and is never transmitted, with two limited, opt-in exceptions: online-multiplayer game state (section 09) and shared packing lists (section 10).

If you add children to a PackMate family trip and then share that list, the number of children and their ages are transmitted as part of the shared list so packing quantities stay in sync. That data is account-less, is not tied to a child's identity, is used only to keep the shared list current, and is removed when the shared list is left or deleted (see section 10). If you would rather not transmit it, simply do not share that list.

ShopMate's optional store reminders (section 11) use your location only on your device to show a local notification. That location is never transmitted, so nothing about where a family shops ever leaves the device, and the COPPA posture above is unchanged.

If you believe a child under 13 has somehow provided us with personal information, please contact us at privacy@krackinsoftware.com and we will address it promptly.

Data Retention and Deletion

Because all data is stored locally on your device, you are in complete control of your data at all times.

• To delete data within the app: Use the delete or edit functions built into each app (swipe to delete, long press, or settings menu).
• To delete all data for an app: Delete the app from your device. This permanently removes all locally stored data including the SQLite database, saved photos, and preferences.
• Reinstalling the app: Reinstalling an app starts with a completely fresh, empty database. No data is backed up to our servers.

Note: If you use iCloud, Google One, or Windows Backup to back up your device, app data may be included in those device backups. This is governed by Apple's, Google's, or Microsoft's backup policies, not ours. You can exclude individual apps from backup in your device settings.

We do not retain your local app data on our servers because we do not collect that data from you in the first place, except for ephemeral online-match state and opt-in sync or sharing features described above. Poker Night Series shares use the 60-day default expiry, 366-day publish cap, and 7-day cleanup grace described in section 10A. Optional app-update notification emails are retained until the requested launch/update notice has been sent or until you ask us to delete them.

Your Rights

Depending on where you live, you may have various rights regarding personal data under laws such as GDPR (EU/UK), CCPA (California), and others. Because we generally do not collect personal data, most of these rights are automatically satisfied. If you signed up for an optional app update notification, contact us and we can confirm, correct, or delete that email entry.

If you are an EU or UK resident and have any concerns under GDPR, or a California resident with concerns under CCPA, please contact us at privacy@krackinsoftware.com. We will respond within 30 days.

You have the right to:

• Know what personal data we hold about you — in most cases, the answer is none
• Access any personal data we hold — contact us and we will confirm what (if anything) we have
• Delete your data — delete the app from your device. Contact us if you believe we hold anything else
• Opt out of sale of your personal data — we do not sell personal data and never have

Security

Because our apps store data locally on your device, the security of your data is largely determined by the security of your device. We recommend:

• Using a strong passcode, Face ID, fingerprint, or Windows Hello on your device
• Keeping your device's operating system up to date
• Not sharing your device with people you don't trust

Local app data is stored in the app's sandboxed private directory, which other apps cannot access. On iOS, this directory is encrypted by default when the device is locked (data protection class: Complete). On Android, data is stored in internal storage protected by the Android sandbox. On Windows, data is stored under the app's per-user package data folder.

Any internet requests made by our apps or website forms (including online multiplayer, opt-in sync features, hosted clock and Series sharing, and app-update notifications) use HTTPS encryption.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. If changes are material, we will note them within the apps themselves on the next update release.

We encourage you to review this page periodically. Continued use of our apps after any changes constitutes your acceptance of the updated policy.

This policy is hosted at: krackinsoftware.com/privacy.html

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle data, please reach out. We are a small independent operation and we take privacy concerns seriously.

We aim to respond to all privacy-related inquiries within 5 business days.