Privacy Policy

Last updated: October 10, 2026

This Privacy Policy explains how information is handled when you use CubeSteps: Cube Solver & Guide (the "App") and its related support pages. The App is developed and operated by Pham Quang Trung, an independent developer based in Vietnam ("we", "us", or "our"). Contact phamcham.dev@gmail.com for privacy questions.

Privacy at a Glance

1. Information Handled by the App

Puzzle information and local preferences

Puzzle colors you enter or scan, solution steps, and simulator activity are processed on your device. The App stores preferences such as your selected language and a cached Pro entitlement locally. We do not operate a cloud account or a cloud backup service for your puzzle activity. Your operating system may include local app data in device backups according to your device and platform settings.

Camera scanning

If you choose to scan a puzzle, the App requests camera permission and processes live camera frames locally to detect sticker colors. The scanning feature does not save photos or videos to your photo library, transmit camera images to our servers, or record audio. You can enter colors manually instead.

Purchases

The App uses RevenueCat to check, restore, and manage Pro purchases. RevenueCat and the applicable app store process purchase history, transaction and product identifiers, entitlement status, and an app user identifier generated by RevenueCat. They may also process technical information needed to deliver their services, such as app version, platform, locale, and network information. This helps validate purchases, prevent fraud, make purchased features available, and provide purchase reports and purchase-related analytics. The purchase service may communicate with RevenueCat to check entitlements even if you are not making a new purchase. We do not receive your full payment-card details.

Analytics and crash reports

The App uses Google Firebase Analytics and Crashlytics in release builds. Firebase Analytics may process app-instance identifiers, app interactions, app and device information, and approximate location derived from network information. Firebase Crashlytics processes crash reports, stack traces, diagnostic information, and installation identifiers to help us find and fix errors. We do not set a name, email address, or account identifier in Firebase. The App does not upload camera images or manually entered puzzle colors to these services. Advertising ID support and advertising-related consent are disabled. We do not use this information for targeted advertising or cross-app tracking.

Support and website visits

If you email us, we receive your email address, message, and any attachments or diagnostic information you choose to send. Please send only information needed to resolve your request. When you visit these web pages, our hosting provider may process standard access information, such as your IP address, browser information, requested page, and request time, to serve and protect the website.

2. Device Permissions

Camera access is optional and used for puzzle scanning. You can decline or revoke access in your device settings; manual color entry remains available. The App does not require microphone, contacts, or location access for its puzzle features.

3. Why We Process Information

Depending on your location and the activity, the legal basis for processing may be providing the service you request, your consent, our legitimate interests in service security and support, or compliance with law. You can withdraw camera permission at any time through your device settings.

4. Service Providers and Disclosure

Google Firebase provides app analytics and crash reporting. These services process information under the applicable Google Analytics and Firebase terms and privacy practices. See Firebase's privacy information and Google's Privacy Policy.

RevenueCat provides purchase validation and entitlement management. Apple and Google provide app distribution, billing, purchase restoration, and related platform services. Our website hosting and email providers process information needed to deliver web pages and support communications. These services have their own privacy practices. Review RevenueCat's Privacy Policy, Apple's Privacy Policy, and Google's Privacy Policy.

Providers processing personal information on our behalf are required to protect it consistently with this Policy, applicable privacy law, and applicable app store privacy requirements, including an equivalent level of protection. RevenueCat's processing on our behalf is covered by its Data Processing Addendum, which addresses processing instructions, confidentiality, security, subprocessors, and assistance with privacy requests. App stores may also process information independently to operate your store account and billing.

We may disclose information when necessary to comply with a valid legal request, prevent abuse, protect users, or establish or defend legal rights. If ownership of the App changes, any transferred information remains subject to privacy protections and notice requirements under applicable law.

5. Retention and Deletion

Local preferences remain until you clear the App's data or uninstall it, subject to any backups controlled by your platform. Puzzle state held only in memory is discarded when the relevant session ends. Purchase records are retained by our purchase providers under their own retention policies and as needed to verify entitlements, prevent fraud, and meet legal obligations. Support messages are kept only as long as needed to handle your request, resolve disputes, or meet legal obligations.

Analytics information is retained according to the Google Analytics property's retention settings and applicable service policies. Firebase states that Crashlytics retains crash traces and associated installation identifiers for 90 days before beginning removal from live and backup systems. See Firebase's retention information. Contact us about information available to us through these services. Because the App does not create a user account or set a personal user identifier in Firebase, we may be unable to associate a particular analytics event or crash report with you.

To request deletion of support, analytics, crash-report, or purchase-related information available to us, email phamcham.dev@gmail.com. We may request limited information to locate and verify the relevant records. For RevenueCat records, this may include a purchase reference or the RevenueCat app user identifier associated with your installation. Please do not send passwords or full payment-card details. We will handle valid requests within the period required by applicable law and work with our processors to carry out deletion where required. Deleting purchase-related data does not by itself cancel a subscription or request a refund. Uninstalling the App does not delete store purchase history or records held by RevenueCat. Some records may need to be retained by law or for purchase verification. Device backups can be managed through your platform settings.

6. International Processing and Security

Our service providers may process information outside your country. Their terms and privacy notices describe applicable transfer safeguards. We use appropriate access restrictions and rely on platform protections for local app data. No storage or transmission system is completely secure.

7. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing, withdraw consent, request a portable copy of information, or complain to a data-protection authority. Contact us to make a request. We may verify your identity and limit a request only as permitted by law. For information held independently by a platform or service provider, you may also need to contact that provider.

8. Children

A parent or guardian should supervise a child's use of the App and any purchases or support communications. We do not ask children to create an account or submit personal details to use puzzle features. If you believe a child has provided personal information to us without required parental consent, contact us so we can review and delete it as appropriate.

9. Links and Changes to this Policy

Links to external websites are governed by those websites' policies. We may update this Policy when the App or our providers change. The updated version will appear on this page with a revised date, and we will provide additional notice where required by law.

10. Contact

For privacy questions or requests, email phamcham.dev@gmail.com with "CubeSteps Privacy" in the subject line.