Privacy Policy of Quick Pass Generator

1. Introduction and Scope

This Privacy Policy applies to your use of the Android mobile application "Quick Pass Generator" (hereinafter referred to as the "Application"), developed by MIRAE CREATIVE NCE, LLC (hereinafter referred to as the "Service Provider"). This Application is offered as a free service on an "AS IS" basis, intended to provide users with secure and efficient password generation features. By using the Application, you acknowledge that you have read, understood, and agreed to all terms of this Privacy Policy.

2. Types and Methods of Information Collection

We adhere to the principle of data minimization and only collect necessary data to provide and improve our services.

2.1 Automatically Collected Information We may automatically collect the following non-personally identifiable information when you use the Application:

- Device information: brand, model, OS version, language, resolution, Android ID, and unique identifiers (e.g., IMEI, OAID if applicable);

- Network information: IP address, access type (WiFi/cellular), carrier info;

- Usage data: access timestamps, session duration, click behavior, screen flow, password generation counts;

- System logs: app version, crash reports, error stacks, and ANR logs.

Note: We do not collect or store the actual content of generated passwords. Passwords are generated and processed locally on your device only.

2.2 Information You Provide

You may provide us with personal information in certain situations, such as:

- Sending feedback or inquiries, including your email address (e.g., [email protected]);

- Verifying your identity when exercising privacy rights (e.g., deletion or data access requests).

2.3 Tracking Technologies

While we do not use traditional cookies, we may utilize SDKs or analytics tools like Firebase Analytics to understand usage trends and improve the user experience. Data collected is used solely for internal improvements and not for advertising or profiling purposes.

3. Purpose and Legal Basis of Data Use

In compliance with GDPR Article 6 and CCPA requirements, we process collected data for the following purposes:

- Password generation and user preference storage: based on contractual necessity.

- UI/UX and performance optimization: based on our legitimate interest to improve service quality.

- Service updates, notices, or security alerts: based on our legal obligations.

- Responding to user feedback and requests: based on both contractual necessity and our legitimate interest.

- Security, fraud detection and investigation: based on our legitimate interest and legal obligations.

- Compliance with applicable regulations: based on legal obligation.

We do not engage in profiling or automated decision-making based on your data.

4. Data Sharing and Disclosure

We do not sell or rent your personal data. However, we may share data under the following circumstances:

4.1 Third-Party SDKs and Services

The Application integrates external services for analytics, rendering, and platform support. These include:

- Google Play Services: used for installation and runtime support. See their policy: https://policies.google.com/privacy

- Unity: used for UI and rendering engine support. See their policy: https://unity.com/legal/privacy-policy

- Firebase Crashlytics (optional): used for crash analytics and diagnostics. See their policy: https://firebase.google.com/support/privacy

These third parties are only permitted to access the data necessary to perform their functions and are bound by their own privacy policies.

4.2 Legal Requirements

We may disclose your information to comply with legal obligations or government requests, enforce our terms, or protect rights, property, or safety.

4.3 Business Transfers

If our business undergoes restructuring, merger, or acquisition, your information may be transferred to the successor entity, which will be bound by this Policy.

5. Data Storage and International Transfers

5.1 Storage Locations and Retention

Your data may be stored on servers located in or outside your country (e.g., the United States). Retention periods:

- Usage logs and crash reports: 6–12 months with anonymization thereafter;

- User-provided contact info: retained until request for deletion or service termination;

- Legally required data: retained as per applicable law.

5.2 Cross-Border Transfers

We ensure data transfer security via:

- Standard Contractual Clauses (SCCs);

- Explicit user consent;

- Appropriate organizational and technical safeguards.

6. Data Security Measures

We use industry-standard protection methods, including:

- TLS/HTTPS encrypted communication;

- Local Android Keystore encryption for preferences;

- Access control and least privilege policy;

- Security audits and system log monitoring;

- Breach notification and incident response plan (72-hour rule under GDPR).

7. Children’s Privacy

The Application is not directed at or intended for children under 13. We do not knowingly collect personal information from minors. If we become aware of such collection, we will delete the data promptly. Parents or guardians can contact us for assistance at [email protected].

8. Your Rights

Under the GDPR and CCPA, you have the right to:

- Access: View your data held by us;

- Rectify: Correct inaccuracies;

- Erase: Request data deletion (except where legally retained);

- Restrict/Withdraw consent: Limit processing or withdraw consent at any time;

- Portability: Request data copy in machine-readable format;

- Object (GDPR): Refuse processing based on legitimate interest;

- Non-discrimination (CCPA): Equal access regardless of data requests;

- Opt-out: Prevent sale or third-party sharing (though we do not sell any data).

Requests can be sent to: [email protected]

9. Opt-Out Mechanisms

To stop data collection:

- Uninstall the Application via standard Android procedures;

- Contact us to request deletion of feedback-related contact data;

- Disable permissions or notifications in system settings.

10. Updates to This Policy

This Privacy Policy may be updated to reflect changes in business, law, or technology. Major updates will be notified via:

- In-app notifications;

- App store update logs;

- Onboarding dialogs upon version updates.

Continued use of the Application constitutes acceptance of the revised policy.

11. Commitment and DPO Contact

We do not:

- Engage in behavior profiling;

- Track or log generated password content;

- Send push ads or marketing without consent.

For privacy-related inquiries, please contact our Data Protection Officer:

Email: [email protected]

12. Effective Date

This policy takes effect on: May 19, 2025.