01. Data Controller & Corporate Identity

This Privacy Policy explains how VEOSTA ("we", "us", or "our") collects, uses, protects, and discloses information when you access or interact with our official website (veosta.com), our mobile applications, and our games.

If you have any questions, inquiries, or privacy-related requests, our dedicated Data Protection Officer (DPO) and privacy desk can be contacted directly at:

02. Scope & Applications Covered

This Privacy Policy applies universally to all active, published, and future software products, digital utilities, mobile applications, casual games, and web services published or operated by VEOSTA ("Parent Company") across global distribution platforms, including the Apple App Store, Google Play Store, and web environments:

• Mobile Utility & Productivity Applications: All current and future personal productivity apps, document suites, daily habit trackers, lifestyle utilities, and tools released under VEOSTA developer accounts.
• Mobile Games & Interactive Entertainment: All casual, arcade, 3D physics, puzzle, and offline gaming titles published by VEOSTA across mobile app marketplaces.
• Community Platforms & Web Services: Interactive participatory features, community polling modules, the official VEOSTA website (veosta.com), and related support services.

03. Strict On-Device Local Processing (Zero-Knowledge Architecture)

In accordance with our Security & Legal Compliance Blueprint, we enforce strict local-first execution models to minimize data exposure:

• Zero-Cloud Local Utility Processing: Document manipulations, page merging, splitting, image processing, local conversions, compression, and file modifications across our utility applications are performed exclusively inside the local memory sandbox of your personal device. VEOSTA does not operate server-side conversion pipelines; your files, text, images, signatures, and document metadata are never transmitted to, inspected by, or stored on VEOSTA servers or any third-party cloud storage.
• Local Storage for Routines & Personal Data: Personal routines, habits, streak metrics, logs, and custom user configurations are stored locally on your device (using native hardware-isolated storage such as iOS Keychain or Android Encrypted Keystore for protected credentials) by default.
• Offline Games Independence: Offline games published by VEOSTA function completely without requiring an internet connection. High scores, level progress, unlocked achievements, and game states are preserved exclusively in local sandboxed device storage.

04. Categories of Data We May Collect & Lawful Basis

Depending on how you interact with our apps and website, we collect only the minimum data required:

• Diagnostic & Technical Data: Anonymized operating system version, device model, language preference, and crash traces via Google Firebase Crashlytics. Crashlytics is configured with developer telemetry filtering and strict PII scrubbers (no email addresses, exact coordinates, or passwords are ever captured). Lawful basis: Legitimate Interest (GDPR Art. 6(1)(f)) in maintaining app reliability and bug remediation.
• User-Submitted Information: Your email address if you voluntarily subscribe to our VEOSTA product launch newsletter via the website. Lawful basis: Consent (GDPR Art. 6(1)(a)), which you may withdraw at any time via 1-click unsubscribe.
• Community & Interactive Participation: For applications featuring community voting, interactive arenas, or user polls, we process user-submitted selections or votes solely to compute aggregate outcomes and prevent fraudulent duplication, using anonymized identifiers.
• Zero Keystroke / Session Replay Recording: In strict compliance with California CIPA § 631 and wiretapping jurisprudence, VEOSTA does NOT deploy session replay or keystroke recording SDKs. We never record your text input keystrokes or screen interactions.

05. Authorized Third-Party Data Processors

To deliver our mobile applications, we collaborate with vetted global infrastructure partners under strict Data Processing Agreements (DPAs):

• Google Firebase / Google Cloud: Serverless backend hosting, Firestore database (locked with row-level security rules request.auth.uid == resource.data.userId), and Crashlytics analytics.
• Google AdMob & UMP: Mobile advertising mediation and European User Messaging Platform (UMP) consent management.
• Apple Inc.: App Store distribution, in-app billing through Apple StoreKit, and App Tracking Transparency (ATT) framework.
• Google LLC: Google Play Store distribution, Android Play Integrity verification, and Google Play Billing.

06. Advertising, Consent & Tracking Transparency (Apple ATT & Google UMP)

We respect your right to control personalized advertising:

• Apple App Tracking Transparency (ATT): On iOS devices, our apps will never track your activity across other companies' apps or websites without your affirmative permission via the native iOS ATT dialog.
• Google AdMob UMP (EU/UK): For users residing in the European Economic Area (EEA) and the United Kingdom, Google's User Messaging Platform SDK is triggered on first launch to capture granular consent before any advertising or analytics identifiers are processed.
• Self-Hosted Typography: In compliance with the Regional Court of Munich ruling (Landgericht München, Case 3 O 17493/20), our web properties self-host web fonts locally from our own origin domain ('self') with zero dynamic IP leakage to remote font CDNs.

07. Children's Privacy (COPPA Compliance)

VEOSTA applications and websites are strictly designed for general audiences and individuals aged 13 years and older (or 16 years where applicable under European member state law).

We do not knowingly or intentionally collect personal information from children under 13 years of age. In the event that we learn that personal data from a child under 13 has been collected without verified parental consent, we will immediately take steps to purge such data from our servers within 48 hours. If you believe a minor under 13 has provided us with personal information, please alert us immediately at [email protected].

08. European Data Subject Rights (GDPR / UK GDPR)

If you are located within the EEA or UK, Chapter III of the GDPR grants you comprehensive enforceable rights:

• Right of Access (Art. 15): Request a complete copy of any personal data we hold concerning you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data from our servers. You may trigger account and data deletion directly within the settings menu of any account-enabled VEOSTA app or by contacting us.
• Right to Restriction of Processing (Art. 18): Request temporary limitation of processing in certain dispute circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, machine-readable format (JSON).
• Right to Object (Art. 21): Object at any time to processing based on legitimate interests or direct marketing.

09. California Privacy Disclosures (CCPA / CPRA)

Under the California Consumer Privacy Act as amended by the CPRA (Cal. Civ. Code § 1798.100 et seq.):

• No Sale or Sharing of Personal Information: VEOSTA does NOT sell your personal information, nor do we share your personal information for cross-context behavioral advertising without your explicit opt-in.
• Right to Know & Delete: California residents have the right to request disclosure of categories of data collected and request permanent deletion without discrimination.
• Shine the Light (Cal. Civ. Code § 1798.83): We do not disclose personal information to third parties for their direct marketing purposes.

10. Data Retention & Erasure Schedule

We retain personal data only for as long as strictly necessary to fulfill the purposes outlined in this policy:

• Newsletter Subscriptions: Retained until the user opts out or clicks the 1-click unsubscribe link.
• Account Credentials & User Profiles: Purged immediately upon user-initiated account deletion, or after 24 months of total inactivity.
• Transaction & Compliance Records: Kept for the minimum statutory period mandated by tax and accounting legislation (up to 7 years), stored in access-restricted archives.

11. Enterprise-Grade Security Architecture

We maintain rigorous technical, physical, and administrative safeguards designed to protect your data against accidental loss, unauthorized access, and malicious tampering:

• All web and API data transmissions are enforced over modern HTTPS / TLS 1.3 encryption with HSTS.
• Database access is strictly governed by Firebase Security Rules enforcing row-level isolation (request.auth.uid == resource.data.userId) with default-deny rules.
• Administrative access requires multi-factor authentication (MFA) and is governed by Firebase Custom Claims, preventing client-side privilege escalation.
• Code builds are protected by automated CI/CD security pipelines, dependency vulnerability scanners (Dependabot), and minification/obfuscation.

12. Policy Updates & Contact Information

We reserve the right to update this Privacy Policy periodically to reflect enhancements in our architecture, emerging legal precedents, or newly published apps. Material updates will be highlighted via our website and app update release notes.

For any privacy inquiries or to exercise your statutory rights, please contact our legal desk:

01. Acceptance of Terms & Eligibility

These Terms of Service ("Terms") constitute a legally binding agreement between you ("User", "you") and VEOSTA ("we", "us", "our"). These Terms govern your access to and use of all websites, mobile applications, digital utility suites, casual and offline games, and online services published or operated by VEOSTA across all platforms and application stores (collectively, the "Services").

By accessing, downloading, installing, or using any part of the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you must not access or use our Services.

Age Requirement: You certify that you are at least 13 years of age (or 16 years of age in jurisdictions where required by law). If you are between the ages of 13 and the legal age of majority in your jurisdiction, you represent that your parent or legal guardian has reviewed and agreed to these Terms on your behalf.

02. Limited License & Intellectual Property

Subject to your strict compliance with these Terms, VEOSTA grants you a non-exclusive, non-transferable, revocable, limited personal license to download, install, and use the Services solely for your personal, non-commercial entertainment and utility purposes on compatible personal devices.

Exclusive Ownership: All rights, title, and interest in and to the Services—including all software code, game physics engines, art assets, 3D renderings, characters, UI designs, animations, sound effects, musical compositions, brand emblems, and the trademarks VEOSTA and "THE NEXT NEVER ENDS"—are the exclusive intellectual property of VEOSTA and its licensors, protected by international copyright, trademark, trade secret, and patent laws.

Restrictions: You expressly agree that you shall NOT:

• Reverse engineer, decompile, disassemble, decipher, or attempt to derive the source code of any VEOSTA software;
• Modify, adapt, translate, or create derivative works based upon the Services;
• Circumvent, disable, or tamper with any digital rights management (DRM), anti-cheat, or security mechanisms;
• Use bots, automated scripts, scrapers, or exploits to access, automate, or scrape game levels, polls, or assets;
• Rent, lease, lend, sell, sublicense, distribute, or commercially exploit any part of the Services without prior written authorization.

03. User Conduct & Acceptable Use Policy

You agree to use our Services only for lawful purposes in accordance with these Terms. In interactive features, community arenas, social voting modules, and user communication channels within the Services, you agree that you shall not post, submit, or transmit any content or conduct that:

• Is defamatory, obscene, pornographic, sexually explicit, abusive, or violently graphic;
• Promotes hate speech, discrimination, harassment, violence, or harm against any individual or protected group;
• Infringes upon any patent, trademark, trade secret, copyright, privacy, or publicity rights of any third party;
• Contains computer viruses, Trojan horses, malware, or destructive code;
• Impersonates any person, brand, or entity, including VEOSTA representatives.

VEOSTA reserves the right, at its sole discretion, to monitor, review, flag, delete, or suspend any user account or content that violates these standards, without prior notice.

04. User-Generated Content & DMCA Safe Harbor (17 U.S.C. § 512)

If you submit content to our interactive features, community voting modules, feedback channels, or public forums across the Services, you grant VEOSTA a worldwide, perpetual, irrevocable, royalty-free, sublicensable license to host, display, distribute, and reproduce such content in connection with operating the Services.

Notice of Copyright Infringement (DMCA): VEOSTA respects the intellectual property of others. If you believe your copyrighted work has been copied or posted in a manner that constitutes infringement, please submit a formal DMCA takedown notification to our designated copyright contact:

05. In-App Purchases & Subscriptions (California ARL Compliance)

Certain features, cosmetic items, virtual currencies, or premium utilities within our applications may be offered for purchase via in-app purchases (IAP).

• Platform Billing Authority: All in-app transactions are processed and billed directly through the authorized native storefront: Apple App Store (Apple StoreKit) or Google Play Store (Google Play Billing). VEOSTA does not store or process your credit card numbers.
• Auto-Renewal Terms (California ARL & Global Standards): If you purchase an ongoing recurring subscription, the subscription will automatically continue and renew at the end of each billing period (e.g. monthly or annually) at the stated fee until canceled by you.
• 1-Click Online Cancellation: You may cancel auto-renewal at any time prior to the end of the current billing cycle directly via your device settings (Apple: Settings > Apple ID > Subscriptions; Google: Google Play > Payments & Subscriptions).
• Refund Policy: All purchase transactions are governed by the refund rules of Apple and Google. Except where mandated by local consumer protection statutes, all sales of virtual goods and digital currency are final and non-refundable.

06. DISCLAIMER OF WARRANTIES ("AS IS" & "AS AVAILABLE")

TO THE MAXIMUM EXTENT PERMITTED UNDER APPLICABLE LAW, THE SERVICES ARE PROVIDED TO YOU ON AN "AS IS" AND "AS AVAILABLE" BASIS, WITH ALL FAULTS, DEFECTS, AND WITHOUT WARRANTY OF ANY KIND.

VEOSTA, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AND LICENSORS EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, ACCURACY, AND NON-INFRINGEMENT.

WITHOUT LIMITING THE FOREGOING, VEOSTA DOES NOT WARRANT THAT THE SERVICES WILL MEET YOUR REQUIREMENTS, OPERATE WITHOUT INTERRUPTION, BE SECURE, TIMELY, ERROR-FREE, COMPATIBLE WITH ALL HARDWARE OR OPERATING SYSTEMS, OR THAT ANY DEFECTS WILL BE CORRECTED.

07. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL VEOSTA, ITS DIRECTORS, EMPLOYEES, PARTNERS, AGENTS, SUPPLIERS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES WHATSOEVER, INCLUDING WITHOUT LIMITATION DAMAGES FOR LOSS OF PROFITS, DATA LOSS, DEVICE DAMAGE, GOODWILL, WORK STOPPAGE, SYSTEM FAILURE, OR ANY OTHER COMMERCIAL LOSSES, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OR INABILITY TO USE THE SERVICES.

IN NO EVENT SHALL VEOSTA'S TOTAL AGGREGATE LIABILITY ARISING FROM OR RELATING TO THESE TERMS OR THE SERVICES EXCEED THE TOTAL AMOUNT ACTUALLY PAID BY YOU TO VEOSTA IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR FIFTY UNITED STATES DOLLARS ($50.00 USD), WHICHEVER IS GREATER.

08. Indemnification

You agree to defend, indemnify, and hold harmless VEOSTA, its subsidiaries, affiliates, officers, directors, agents, contractors, and employees from and against any third-party claims, liabilities, damages, judgments, awards, losses, costs, expenses, or legal fees arising out of or relating to: (a) your violation of these Terms; (b) your misuse of the Services; (c) any content you post in our interactive forums; or (d) your infringement of any third party's legal rights.

09. MANDATORY BINDING INDIVIDUAL ARBITRATION & CLASS ACTION WAIVER

PLEASE READ THIS SECTION WITH UTMOST ATTENTION. IT MANDATES ARBITRATION OF DISPUTES AND LIMITS THE MANNER IN WHICH YOU CAN SEEK RELIEF FROM VEOSTA.

• Informal Resolution: Before initiating arbitration, you and VEOSTA agree to attempt to resolve any dispute, claim, or controversy informally for at least thirty (30) days by providing written notice to [email protected].
• Binding Individual Arbitration: If the dispute cannot be resolved informally, any dispute arising out of or relating to these Terms or the Services shall be settled exclusively by final and binding individual arbitration administered by an established, independent arbitration association in accordance with its Commercial Arbitration Rules.
• CLASS ACTION WAIVER: YOU AND VEOSTA EXPRESSLY AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING. THE ARBITRATOR SHALL NOT CONSOLIDATE CLAIMS OF MORE THAN ONE INDIVIDUAL.

10. Governing Law & Jurisdiction

These Terms and any dispute arising out of or related to these Terms or the Services shall be governed by and construed in accordance with applicable governing law, without regard to conflict of law principles. The United Nations Convention on Contracts for the International Sale of Goods (CISG) is expressly disclaimed and shall not apply.

11. Severability & Entire Agreement

These Terms, together with our Privacy Policy, constitute the sole and entire agreement between you and VEOSTA regarding the Services. If any provision of these Terms is determined by an arbitrator or court of competent jurisdiction to be invalid, illegal, or unenforceable, that provision will be enforced to the maximum extent permissible, and the remaining provisions of these Terms shall remain in full force and effect.

12. Legal Contact Information

For any questions, legal notices, or formal communications regarding these Terms of Service, please contact: