1 Introduction & Developer Identity

Welcome to Tocotaca ("we", "us", or "our"). We develop and publish kid-friendly, educational mobile applications and family media, available through the Google Play Store (CH Play) and on our official website at https://tocotaca.com.

This Privacy Policy explains how our mobile applications handle technical information, how Google AdMob displays advertisements, and confirms our strict policy against collecting personal data. By downloading, installing, or playing any Tocotaca application, you acknowledge and agree to the practices described in this document.

2 Information We Collect & Why We Collect It

To deliver a reliable, crash-free experience and optimize user interface graphics across thousands of Android device models, our applications collect only the following strictly limited, non-identifying technical data:

A. Crash Logs & Error Diagnostic Data (Nhật ký lỗi)

When an unexpected error or crash occurs while using our application, an automated crash report may be generated. This technical report includes:

• Stack traces and error codes: The specific code function or memory exception that caused the app to crash.
• State of the application at the time of failure: Active screen, memory footprint, and background thread state.
• Application metadata: Package name, application version number, and build identifier.

Purpose: Used exclusively to identify bugs, fix software glitches, prevent memory leaks, and issue timely stability updates via Google Play.

B. Device & Display Specifications (Phiên bản Android & Màn hình)

To ensure our educational games and visual animations render crisply across phones, foldables, and tablets, the application inspects the following non-personal device metrics:

• Android Operating System Version & API Level: E.g., Android 11, 12, 13, 14, 15 (API 30–35), ensuring compatibility with system libraries.
• Screen Resolution & Pixel Dimensions: Display width and height in physical pixels (e.g., 1080×2400, 1440×3200).
• Screen Density (DPI): Display density bucket (e.g., mdpi, hdpi, xhdpi, xxhdpi, xxxhdpi) to load correct graphic assets.
• Screen Orientation: Portrait or landscape display mode.
• Device Hardware Model & Manufacturer: E.g., Samsung Galaxy, Xiaomi, Google Pixel, purely to reproduce hardware-specific rendering anomalies.

Purpose: To ensure UI scaling, responsive touch-target sizing for little fingers, and eliminate graphical clipping or distortion on varied screen aspect ratios.

C. Advertising Identifiers (Google AdMob SDK)

To support free development and hosting, our applications may integrate the Google Mobile Ads SDK (AdMob). The SDK may process:

• Google Advertising ID (AAID / GAID): A user-resettable pseudonymous identifier provided by Google Play Services for ad frequency capping and fraud prevention.
• General IP Address: Processed ephemerally by Google servers to serve regionally appropriate ads and protect against fraudulent click bots.
• Ad Interaction Metrics: Non-identifying metrics on ad impressions, views, and clicks.

3 Affirmation: What We DO NOT Collect

To eliminate any doubt, our applications explicitly DO NOT access or collect:

• No Real Names or User Accounts: You do not need to register an account, log in, or provide a username to enjoy our games.
• No Contact Information: We do not ask for or collect your email address, telephone number, or postal address (unless you manually send a support email to us).
• No Precise Location Data: We do NOT access GPS coordinates, cell tower tracking, or fine Wi-Fi location.
• No Contact Lists or Address Books: We have zero access to your device's contacts or phone directory.
• No Media Files or Storage: We do NOT read your personal photos, videos, music files, or device documents.
• No Microphone, Camera, or Sensors: We never record audio, take photos, or access camera sensors.
• No Financial or Payment Credentials: We do NOT process credit cards or bank accounts. Any optional in-app purchases are handled 100% securely through Google Play Billing.
• No Biometric Data: No fingerprint, face recognition, or voice biometric data is ever requested or processed.

4 Third-Party Advertising & Google AdMob

We partner with Google AdMob (operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to display advertisements in free versions of our applications.

Google AdMob uses automated SDKs to deliver banner ads, interstitial full-screen ads, or rewarded video ads. Data collected by Google AdMob is governed by Google's Privacy Policy:

• Google Privacy Policy: https://policies.google.com/privacy
• How Google Uses Information From Apps: https://policies.google.com/technologies/ads
• Google AdMob Policies & Restrictions: https://support.google.com/admob/answer/6128543

In applications directed toward children or participating in Google Play's Designed for Families program, we configure AdMob ad requests with child-directed flags (such as tagForChildDirectedTreatment = true and tagForUnderAgeOfConsent = true). Under these settings, behavioral profiling and remarketing are disabled, and only contextually appropriate, family-safe advertisements are displayed.

5 Children’s Privacy (COPPA & Google Play Families Policy)

Protecting children's online privacy is our utmost priority. Our applications are built from the ground up to comply strictly with the Children’s Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR-K), and the Google Play Families Policy.

• We do not knowingly solicit, collect, or store personally identifiable information from children under the age of 13 (or under 16 in the European Union).
• We do not condition a child's participation in any activity on the disclosure of more information than is strictly necessary.
• All in-app advertisements (where present) are filtered to ensure content is suitable for young audiences, containing no mature, violent, or sensitive categories.
• If a parent or legal guardian believes that their child has inadvertently provided personal information to us, please contact us immediately at [email protected]. We will promptly investigate and permanently delete such records.

6 Data Storage, Retention & Security

We hold security to the highest industry standards:

• Encryption in Transit: All diagnostic metrics and ad communications are transmitted over modern cryptographic protocols (HTTPS / TLS 1.2+).
• Data Retention Period: Aggregated crash data and technical diagnostics stored in Google Play Console (Android Vitals) are automatically retained for a limited time (typically between 30 and 90 days) before being permanently purged. We do not maintain external databases of device identifiers.
• No Data Brokering: We never sell, lease, trade, or monetize user data with data brokers or marketing firms.

7 Your Rights & How to Opt-Out of Ads

You have complete control over how your device handles advertising identifiers. You can reset or delete your Android Advertising ID at any time directly through your phone's settings:

Under international data protection regulations (including GDPR and CCPA), you also have the right to request information about any data we hold regarding customer support inquiries. To exercise these rights, please email us at [email protected].

8 Policy Updates & Amendments

We may periodically update this Privacy Policy to reflect app enhancements, new features, or revisions in Google Play policies. Any changes will be published on this page with an updated "Effective Date" at the top. We encourage you to review this page periodically to stay informed about how we safeguard your family's privacy.

9 Contact Information & Legal Inquiries

If you have any questions, comments, or concerns regarding this Privacy Policy, our data practices, or your child's privacy, please feel free to reach out to us: