[ENCRYPTED DOCUMENT]

Privacy Policy: Ghost Frequency

Last Updated: March 24, 2026

1. DATA CONTROLLER

For the purposes of the GDPR, the developer of Ghost Frequency acts as the Data Controller. Our contact for data inquiries is: [Insert Your Email/Contact Here].

2. THE "GHOST" DEFAULT (NO DATA PROCESSING)

By default, this watch face follows the principle of Privacy by Design. No personal data, fitness metrics, or biometric sensor data is collected, stored on our servers, or shared with third parties. All processing happens locally on your device.

3. OPTIONAL CLOUD SYNC (LEGAL BASIS: CONSENT)

If you explicitly enable "Store Progress to Server", we process data based on your Consent (GDPR Article 6(1)(a)).

• Pseudonymous ID: We use a randomly generated Device ID. This is considered "pseudonymous data" under EU law. It is not linked to your name or email.
• Stored Data: Only your Quest Progress (ID, XP, Level).
• Data Location: [Insert Server Location, e.g., "Servers located in the EU"].

4. YOUR RIGHTS (EU USERS)

Under the GDPR, you have the following rights regarding your digital footprint:

• Right to Erasure: You can delete your cloud-synced data at any time via the app settings.
• Right to Access: You can view your current progress status directly on the interface.
• Right to Withdraw Consent: Disabling "Store Progress" immediately stops all future data transmission.

5. SECURITY

We use industry-standard encryption to protect the transmission of your anonymous ID and progress. We do not use trackers, cookies, or analytics SDKs.

6. DATA RETENTION

Cloud-stored progress is deleted automatically after 12 months of inactivity to ensure we do not store "stale" data.

---