Privacy Policy

Last updated: July 31, 2026 · Version 3.5.0

Taymay Co., LTD built the Taymay applications (each an "Application" or "Service") as free apps. This Service is provided by Taymay Co., LTD at no cost and is intended for use as is.

This page informs you of our policies regarding the collection, use, and disclosure of Personal Information for anyone who decides to use our Service. By using our Service, you agree to the collection and use of information in accordance with this policy. The Personal Information we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions unless otherwise defined here.

Scope of This Policy

This Privacy Policy is published by Taymay Co., LTD and applies to every mobile application published by Taymay Co., LTD on Google Play under the developer account "Taymay", as well as to the website taymay.io. The name of the application you are using, together with its Google Play listing and its Data safety declaration, identifies it as one of the applications covered by this policy.

Where a section of this policy applies only to certain applications — for example the sections on location, contacts, installed apps, browsing history, or All Files Access — this is stated explicitly in that section. If an application is released after the date of this policy, it is covered by this policy from its first publication.

Data Controller and Contact Details

The data controller responsible for the processing of your personal data described in this Privacy Policy is:

• Entity: Taymay Co., LTD (developer account "Taymay" on Google Play)
• Website: https://taymay.io
• Contact e-mail: contact@taymay.io

For any question, request, or complaint regarding privacy and personal data — including the rights described in the "Your Data Protection Rights" section — you may contact our Data Protection Officer (DPO):

• Data Protection Officer: Privacy Team, Taymay Co., LTD
• E-mail: contact@taymay.io (please use the subject line "DPO — Privacy Request")

We answer privacy requests within 30 days of receipt. If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.

Information Collection and Use

For a better experience, while using our Service, we may collect or process certain information, including but not limited to:

• Device and technical information (device model, operating system version, app configuration);
• Network information, including your Internet Protocol ("IP") address;
• Location information (approximate and, where permitted, precise location), as described in the "Location Information" section below;
• Usage and diagnostic data used to operate and improve the Service.

The information we collect is retained by us and used as described in this Privacy Policy. The app also uses third-party services that may collect information used to identify you.

Links to the privacy policies of third-party service providers used by the app:

• Google Play Services
• AdMob
• Google Analytics for Firebase
• Firebase Crashlytics
• Facebook
• Clicky
• Flurry Analytics
• Appodeal
• Unity
• Sentry
• AppLovin
• Vungle
• AdColony
• Adjust
• Godot

Categories of Personal Information We Collect

The table below lists every category of personal information that our applications, or the third-party SDKs embedded in them, may collect. It is aligned with the Data safety section we publish on Google Play and with the categories defined by the CCPA/CPRA. A category is collected only by the apps whose features require it — most of our apps collect only the identifiers, diagnostics, and app-activity rows.

We do not collect sensitive personal information as defined by the CCPA/CPRA (such as government identifiers, precise health data, racial or ethnic origin, religious beliefs, or the contents of your private communications), and we do not use personal information for purposes other than those disclosed above. We do not knowingly sell personal information for money. We collect the categories marked above — in particular Device ID, User ID, Diagnostics and app activity, Contacts, Installed apps, and Web browsing history — and they are declared in the Data safety form of each application on Google Play; this policy and that form are kept consistent with each other, and where an application does not use a feature that requires a category, that category is neither declared nor collected for that application. Where the sharing of advertising identifiers with our advertising partners for cross-context behavioural advertising qualifies as a "sale" or "share" under US state privacy laws, you may opt out as described in the "Consent Management" and "Your Data Protection Rights" sections.

Consistency with the Google Play Data Safety Section

For every application we publish, the Data safety section on its Google Play listing and this Privacy Policy are maintained together and describe the same practices. In particular:

• User ID — where an application generates a pseudonymous in-app or Firebase identifier, it is declared as collected both here (see the table above) and in the Data safety form of that application.
• Diagnostics and app activity — crash logs, performance traces, and usage events are declared as collected in both places for every application that embeds a crash-reporting or analytics SDK.
• Contacts, Installed apps, and Web browsing history — declared in both places, and only for the applications whose declared feature requires them, as described in the table above.
• Where an application does not use a feature that requires a category, that category is declared as not collected in its Data safety form and is not collected by that application, even though this policy describes it for our other applications.

If you find any discrepancy between this policy and a Data safety declaration, please write to contact@taymay.io and we will correct it.

Changes to SDKs, Endpoints, Permissions, and Data Types

Our applications are updated regularly, and an update may add, replace, or remove a third-party SDK, a network endpoint that data is sent to, an Android permission, or a category of data being processed. We manage such changes as follows:

• Before an update is published, we review the SDKs it embeds, the endpoints they contact, the permissions declared in the manifest, and the data types processed, so that any change is intentional and necessary for a feature.
• Any change that affects the data we or our partners collect is reflected in this Privacy Policy — including the third-party list and the categories table above — and in the application's Data safety declaration, at or before the release of that update.
• New endpoints are limited to our own servers and to the advertising, analytics, and crash-reporting providers listed in this policy, and are contacted over encrypted connections (see "Security and Encryption of Data in Transit").
• An SDK, permission, endpoint, or data type that is no longer required by a feature is removed rather than kept "just in case".
• The version and the date at the top of this policy are updated at each revision, so you can tell when the practices described here last changed.

Location Information

Our Service, and certain third-party SDKs integrated into it (including the advertising and analytics providers listed above), may access and collect location information from your device. Depending on the permissions you grant, this may include:

• Approximate (coarse) location — derived from your network connection or IP address.
• Precise (fine) location — derived from GPS, collected only if you explicitly grant the corresponding device permission.

We and our partners use location information for purposes such as:

• Recommending and connecting you to the most suitable or nearest server for the Service;
• Complying with regional, legal, and licensing requirements;
• Delivering, personalizing, and measuring advertising through third-party advertising partners;
• Analytics, fraud prevention, and improving the performance and reliability of the Service.

Some third-party advertising and analytics SDKs may independently access approximate or precise location for ad personalization, attribution, and measurement, in accordance with their own privacy policies linked above.

You can enable or disable location access at any time through your device settings. Disabling location may limit certain features, such as automatic server selection. We do not sell your precise location data.

Device Permissions and File Access

Some of our applications request device permissions in order to deliver their core functionality. Every permission is requested only when the related feature is used, and you may revoke it at any time in Android Settings → Apps → Permissions.

• Storage / Media (READ_MEDIA_IMAGES, READ_MEDIA_VIDEO, READ_MEDIA_AUDIO) — to open, display, edit, or export the photos, videos, and audio files you select.
• Camera — only for apps whose feature requires capturing or scanning (for example document scanning or camera translation).
• Location — as described in the "Location Information" section.
• Notifications — to display task progress and the alerts you enable.
• Contacts (READ_CONTACTS) — requested only by apps whose declared feature needs a contact (call-themed apps, caller-ID and prank-call apps, and file-sharing apps that let you pick a recipient). Contact data is read on-device at the moment you use the feature and is never uploaded, stored on our servers, sold, or shared.
• Query all packages (QUERY_ALL_PACKAGES) — requested only by app lockers/vaults, launchers and icon themes, app managers, cleaners, and screen-mirroring apps, so that the app can list the applications installed on your device for you to choose from. The list never leaves your device.
• Microphone / Record audio — only for apps whose feature requires it (screen recorder, voice-based tools), and only while that feature is active.
• Legacy storage (READ_EXTERNAL_STORAGE) — declared only for compatibility with devices running Android 9 (API 28) or older, and limited with android:maxSdkVersion="28". On Android 10 and later our apps use scoped storage, the granular media permissions above, and the Storage Access Framework, so this permission is neither requested nor used.

Data minimisation. We keep the set of permissions our applications declare as small as their features allow, and we review it at every release. Where a task can be completed without a permission we use the platform alternative instead — for example invoking the system camera through the ACTION_IMAGE_CAPTURE / ACTION_VIDEO_CAPTURE intent rather than requesting the CAMERA permission, and the Storage Access Framework or the photo picker rather than broad storage permissions. A permission that is no longer needed is removed in the next update.

All Files Access (MANAGE_EXTERNAL_STORAGE)

A limited number of our applications — namely file managers, document/PDF readers and tools, file transfer, and backup/cleaning utilities — request the All Files Access (MANAGE_EXTERNAL_STORAGE) permission. This permission is requested only where it is essential to the app's core purpose, in line with the Google Play All Files Access policy, and is used exclusively for the following:

• Browsing, searching, and managing files across the whole shared storage of the device, which is the declared core function of a file manager or document reader (the scoped-storage APIs and the Storage Access Framework cannot enumerate arbitrary folders or perform bulk operations).
• Opening documents of any type and from any folder (PDF, Office, archives) that were not created by our app.
• Copying, moving, renaming, compressing, extracting, and deleting files at your explicit request.
• Sending and receiving files between devices in our file-transfer apps.
• Locating junk, cache, and duplicate files so that you can review and choose what to remove.

What we do not do with this permission: we do not read, scan, index, upload, transmit, sell, or share the content of your files with us or with any third party. All file operations are performed locally on your device. Your files are never sent to our servers, and file content is never used for advertising, analytics, or profiling. Granting All Files Access is optional; if you decline it, the app remains usable but folder-wide browsing and bulk file operations will be unavailable.

Consent Management (Google UMP / GDPR & Advertising Consent)

Our applications display advertising delivered by Google AdMob and other partners listed above. Where required by law, we obtain your consent before any personalized advertising identifier or personal data is used for advertising purposes.

• We use the Google User Messaging Platform (UMP) SDK, an IAB TCF v2.2-compliant Consent Management Platform, to present a consent form on first launch to users in the European Economic Area, the United Kingdom, and other regions with equivalent requirements.
• The form lets you accept or refuse the use of your data for personalized advertising, and to review the individual purposes and the list of advertising vendors.
• If you refuse, ads are still shown but are non-personalized — served on the basis of contextual signals and coarse location only, without an advertising profile.
• Your consent choice (the TCF consent string) is stored locally on your device and transmitted to advertising partners so they can honour it.
• You may change or withdraw your consent at any time from within the app, via Settings → Privacy Settings (or Settings → Advertising / Consent), which re-opens the same consent form. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
• Independently of the consent form, you can reset or delete your advertising identifier in Android Settings → Google → Ads, where you may also opt out of ad personalization for the whole device.

For users in California and other US states with comparable laws, our advertising partners honour applicable opt-out signals. We do not knowingly "sell" or "share" personal information as those terms are defined by the CCPA/CPRA; you may nevertheless send an opt-out request to contact@taymay.io.

Legal Basis for Processing

If you are located in the European Economic Area, the United Kingdom, Switzerland, or another region with equivalent legislation, we process your personal data only when we have a lawful basis to do so under Article 6 of the GDPR (and the corresponding provisions of the UK GDPR and, for Brazil, Article 7 of the LGPD). The basis we rely on depends on the purpose:

Where we rely on legitimate interests, you have the right to object at any time (see "Your Data Protection Rights"). Where we rely on consent, refusing or withdrawing it never blocks access to the app's core features — only personalized advertising and any optional feature that strictly requires the data will be unavailable.

International Data Transfers

Our service providers, including Google, may process personal data on servers located outside your country, in particular in the United States. When personal data is transferred out of the European Economic Area, the United Kingdom, or Brazil, the transfer is protected by an approved safeguard — typically the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum), or the provider's certification under the EU–US Data Privacy Framework. You may request a copy of the relevant safeguard by e-mailing contact@taymay.io.

Your Data Protection Rights

Depending on where you live — in particular under the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended (CCPA/CPRA) — you have the following rights over your personal data:

• Right of access — to obtain confirmation of whether we process your data and receive a copy of it.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure ("right to be forgotten") — to request deletion of your data, as described in the "Data Retention and Deletion" section.
• Right to restriction of processing — to ask us to limit how we use your data while a request is being examined.
• Right to object — to object to processing based on our legitimate interests, including profiling for advertising purposes.
• Right to data portability — to receive the data you provided in a structured, commonly used, machine-readable format.
• Right to withdraw consent — at any time, where processing is based on consent (see "Consent Management" above).
• Right to non-discrimination — we will not degrade the Service or charge you a different price because you exercised your rights.
• Right to know / opt out of sale or sharing (California) — to know which categories of personal information are collected, disclosed, or shared, and to opt out of "sharing" for cross-context behavioural advertising.
• Right to lodge a complaint — with your national data protection supervisory authority.

To exercise any of these rights, e-mail contact@taymay.io with the subject "Privacy Request", stating the app name and, where available, your advertising identifier or in-app user ID so we can locate the relevant data. Exercising your rights is free of charge; we may ask for additional information solely to verify your identity, and we respond within 30 days (extendable once by a further 30 days for complex requests, in which case we will inform you). Authorised agents may submit requests on your behalf with written proof of authorisation.

Additional rights by region

• European Economic Area, United Kingdom and Switzerland (GDPR / UK GDPR) — all of the rights listed above apply, together with the right not to be subject to a decision based solely on automated processing that produces legal effects; we do not carry out such automated decision-making. You may lodge a complaint with your national supervisory authority (a list is published at edpb.europa.eu; in the UK, the Information Commissioner's Office at ico.org.uk).
• Brazil (LGPD — Lei Geral de Proteção de Dados, Law No. 13.709/2018) — if you are in Brazil you have, under Article 18 of the LGPD, the right to confirmation that processing takes place; access to your data; correction of incomplete, inaccurate, or out-of-date data; anonymisation, blocking, or deletion of unnecessary or excessive data or data processed in breach of the law; portability to another provider; deletion of data processed on the basis of your consent; information about the public and private entities with which we shared your data; information about the possibility of refusing consent and the consequences of refusal; and the right to revoke consent at any time. You may also petition the Brazilian data protection authority (ANPD) at gov.br/anpd. Requests may be sent to contact@taymay.io and are answered within the statutory deadline.
• Virginia, United States (VCDPA — Virginia Consumer Data Protection Act) — Virginia residents have the right, under the VCDPA, to confirm whether we process their personal data and to access it; to correct inaccuracies; to delete personal data provided by or obtained about them; to obtain a portable copy; and to opt out of the processing of personal data for targeted advertising, for the sale of personal data, or for profiling in furtherance of decisions producing legal or similarly significant effects. We do not sell personal data for monetary consideration and we do not carry out such profiling; you may opt out of targeted advertising through the in-app consent form or by resetting your advertising identifier. If we decline a request, you may appeal by replying to our response within 30 days; we will inform you of the outcome in writing within 60 days, and if the appeal is denied you may contact the Virginia Attorney General at oag.state.va.us.
• California, United States (CCPA / CPRA) — in addition to the rights above, you have the right to know the categories of personal information collected, the sources, the business purpose, and the categories of third parties to whom it is disclosed (all set out in the "Categories of Personal Information We Collect" section); the right to opt out of the "sale" or "sharing" of personal information; the right to limit the use of sensitive personal information (we collect none); and the right to non-discrimination. We honour the Global Privacy Control (GPC) and other browser- or device-level opt-out signals where they are transmitted to us.
• Other US states (Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon, Montana, and comparable state laws) — residents of these states have substantially the same rights of access, correction, deletion, portability, and opt-out of targeted advertising and sale as described for Virginia and California, and may exercise them through the same contact address.
• Other jurisdictions — if the law of your country grants you comparable rights (for example Canada's PIPEDA, Australia's Privacy Act, South Africa's POPIA, South Korea's PIPA, or Japan's APPI), we will honour them on the same terms.

Data Retention and Deletion

We keep personal data only for as long as it is necessary for the purposes described in this Privacy Policy, and no longer than the periods below:

• Content you create or open in the app (documents, photos, videos, notes, settings) — stored only on your device; we never receive a copy. It is deleted when you delete it or uninstall the application.
• Diagnostic and crash data (Firebase Crashlytics) — retained up to 90 days, then deleted automatically.
• Analytics and usage data (Google Analytics for Firebase) — retained for a maximum of 14 months from the last activity, then deleted automatically.
• Advertising identifiers and related data — retained by the advertising partners listed above according to their own retention policies, generally not more than 13 months.
• Location data — used transiently for the purpose it was collected for and not stored by us in an identifiable form beyond the diagnostic/analytics periods above.
• Support correspondence — retained for up to 24 months after the request is closed, to handle follow-ups and meet legal obligations.

When a retention period expires, data is deleted or irreversibly anonymised. We may retain data for longer only where required by applicable law or to establish, exercise, or defend legal claims.

How to request deletion of your data

• In-app: clear the application's data and cache in Android Settings → Apps → [app name] → Storage, or uninstall the app, to remove all locally stored data.
• By e-mail: send a request to contact@taymay.io with the subject "Data Deletion Request", stating the app name and your advertising identifier or in-app user ID. We will delete the associated data and instruct our processors to do the same within 30 days, and confirm to you once it is done.
• Advertising data: resetting or deleting your advertising identifier in Android Settings → Google → Ads severs the link between your device and any previously collected advertising data.

Log Data

Whenever you use our Service, in the case of an error in the app, we collect data and information (through third-party products) on your phone called Log Data. This Log Data may include information such as your device IP address, device name, operating system version, the configuration of the app when using our Service, the time and date of your use of the Service, and other statistics.

Cookies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites you visit and are stored on your device's internal memory.

This Service does not use these "cookies" explicitly. However, the app may use third-party code and libraries that use "cookies" to collect information and improve their services. You may choose to accept or refuse these cookies. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

Service Providers

We may employ third-party companies and individuals for the following reasons:

• To facilitate our Service;
• To provide the Service on our behalf;
• To perform Service-related services; or
• To assist us in analyzing how our Service is used.

These third parties may have access to your Personal Information — including, for advertising and analytics providers, your location information — in order to perform the tasks assigned to them on our behalf. They are obligated not to disclose or use the information for any other purpose.

Security and Encryption of Data in Transit

We value your trust in providing us your Personal Information, so we strive to use commercially acceptable means of protecting it.

• Data in transit is encrypted. All network traffic between our applications, our website, and our own servers is sent over HTTPS/TLS 1.2 or higher. Our applications enable Android's cleartext-traffic restrictions (android:usesCleartextTraffic="false" with a network security configuration), so plain HTTP requests to our endpoints are blocked by the platform.
• Third-party SDKs. The advertising, analytics, and crash-reporting SDKs listed above transmit their data to their own endpoints over encrypted connections in accordance with their published security practices. Where a legacy SDK or an ad creative served by a partner is observed to use an unencrypted connection, we update or remove that SDK.
• Data at rest. Content you create or open stays on your device and is protected by Android's own storage encryption. On our servers we store only aggregate, non-identifying data, on hosts with restricted access.

Remember, however, that no method of transmission over the internet, or method of electronic storage, is 100% secure and reliable, and we cannot guarantee its absolute security. If you believe you have found a security issue, please e-mail contact@taymay.io.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. We strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we immediately delete it from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we can take the necessary actions.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. You are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page.

Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at contact@taymay.io.