Privacy Policy for Chroma Widgets
1. Who we are
Chroma Widgets is published on Google Play by Kaushik Domadiya ("we", "us"). Contact: kaushik.domadiya9@gmail.com.
2. What the app keeps on your phone
| Data | What happens to it |
|---|---|
| Widget designs, notes, countdowns, quotes and settings | Saved in the app's private storage on your phone. Never sent to us. |
| Photos you pick for photo widgets or backgrounds | A resized copy is kept in the app's private storage so the widget can show it. Never uploaded. Excluded from Android cloud backup. |
| Contacts you pick for the favourite-people widget | Only the contacts you choose in the system picker: first name, phone number and contact photo, stored on your phone so tapping a face opens your dialer. The app cannot read your other contacts. |
| Calendar events | Read on your phone to draw the calendar widget (title, time, colour). Never stored by us or sent anywhere. |
| Step count | Read from your phone's step sensor and kept on your phone to draw the steps widget. |
| Approximate location and weather cities | To get a forecast, the coordinates of the place a weather widget shows (your approximate location, or a city you picked), rounded to about 10 metres, are sent over an encrypted connection to the Norwegian Meteorological Institute (MET Norway). MET Norway also sees your IP address and the app name; no name or account is attached. City search runs entirely on your phone using a built-in city list. Your location name is looked up with Android's built-in geocoder. The last location is kept on your phone for widgets and is excluded from cloud backup. It is never sent to the ad, analytics or settings services below. |
None of the content above (your designs, photos, notes, contacts, calendar or steps) is sent to us, to Firebase or to any ad partner.
3. Ads (free version)
The free version shows ads served by Google AdMob. Ads appear inside the app only, never in your home-screen widgets. AdMob may let these partners compete to show an ad: AppLovin, Meta Audience Network, Liftoff (Vungle), InMobi, Pangle, Mintegral, Digital Turbine (DT Exchange), ironSource (Unity) and BidMachine. To show, measure and protect ads from fraud, they may collect:
- your device's advertising ID,
- IP address and approximate location derived from it,
- device and app information (phone model, Android version, language, app version),
- how you interact with ads (views and taps).
In the European Economic Area, the UK and Switzerland the app asks for your consent before personalised ads, using Google's consent message. You can change your choice at any time in Settings → Privacy options. Each partner's own privacy policy explains how it uses this data:
| Partner | Privacy policy |
|---|---|
| Google AdMob | How Google uses data from apps that use its services |
| AppLovin | legal.applovin.com/privacy |
| Meta Audience Network | facebook.com/privacy/policy |
| Liftoff (Vungle) | liftoff.ai/privacy-policy |
| InMobi | advertising.inmobi.com/privacy-policy |
| Pangle | pangleglobal.com/privacy |
| Mintegral | mintegral.com/en/privacy |
| Digital Turbine (DT Exchange) | digitalturbine.com/legal/privacy-policy |
| ironSource (Unity) | unity.com/legal/privacy-policy |
| BidMachine | bidmachine.com/privacy-policy |
Chroma Premium removes ads.
4. Settings and other services
- Our settings service lets us change app settings, such as how often ads appear, without an app update. The app downloads its settings from our server, hosted on Cloudflare, when it starts and when you return to it after an hour or more away. Cloudflare privacy.
- Google Firebase Analytics tells us how the app is used, so we can fix problems and improve it: screens opened, the first-run pages, which kinds and sizes of widget you open, save and add to your home screen (not their content), themes applied, settings you change (such as °C or °F), whether the Premium screen and reward ads were used, notification taps, plus app version, phone model, Android version, language, country and an app-instance ID that Firebase creates. In the EEA, the UK and Switzerland it follows the consent choice you make in the app; until then nothing is stored. Google Analytics keeps event-level data for the retention period we set (2 to 14 months). Firebase privacy.
- Firebase Crashlytics and Performance Monitoring tell us when the app crashes, freezes or runs slowly, so we can fix it: the crash or error details, the steps in the app just before it (screen names and app events, never your content), how long startup and ad loading take, plus app version, phone model, Android version and an install ID that Firebase creates. They are not used for advertising. Crash reports are kept for 90 days. Firebase privacy.
- Firebase Cloud Messaging delivers notifications such as new widgets and themes. It uses a token tied to this app install and the topics the app joins (all users, your country, your language, the app version). The country comes from your SIM card or mobile network, or your phone's region setting; the app does not use your location for this. On Android 13 and later the app asks your permission first; you can turn notifications off any time in your phone's settings for Chroma Widgets.
- Google Play handles app updates and Premium purchases. We receive only whether you own Premium, never your payment details. Google Privacy Policy.
What our settings service logs
We log every settings request so we can see which app versions are in use, find problems with a release, and spot abuse or fraud (for example a flood of requests from one network). For each request we store:
| Data | Where it comes from |
|---|---|
| IP address | Seen by the server, as with any internet request |
| Approximate location: country, region, city, postcode, rough coordinates and timezone | Worked out by Cloudflare from the IP address. The settings request never includes your phone's location or your weather cities |
| Internet provider and network number (for example "Reliance Jio, AS55836") | Worked out by Cloudflare from the IP address |
| App version, phone maker and model, Android version, phone language | Sent by the app |
| An install ID | A random code the app creates the first time it runs. It is not your advertising ID or any other identifier, and it starts over if you clear the app's data or reinstall |
| Which settings version the app had, and whether it asked at start-up or on return | Sent by the app |
| Time of the request and technical connection details (protocol, response time, the Cloudflare data centre used, user agent) | Seen by the server |
We keep these records for 90 days, after which they are deleted automatically. Only our team can see them, by signing in to our private dashboard. We do not sell them, share them with advertisers, or combine them with the ad data in section 3. We process them on the basis of our legitimate interest in running, securing and improving the app.
5. Permissions
| Permission | Why |
|---|---|
| Approximate location | Asked when you choose "current location" for a weather widget, only while the app is open. You can search a city instead. |
| Calendar | Asked when you add a calendar widget, to show your upcoming events. |
| Physical activity | Asked when you add a steps widget, to read the step counter. |
| Alarms & reminders | Lets clocks drawn in custom fonts redraw every minute. Optional; clocks fall back to a system font without it. |
| Notifications (Android 13+) | For news about new widgets and themes (section 4). Asked once, after your first widget is on the home screen, never at launch. Optional. |
| Internet and network state | To fetch weather forecasts, load ads, app settings and updates, and handle Google Play purchases. Settings requests are logged as described in section 4. |
| Advertising ID | Used by the ad services in section 3. |
6. Sharing
We do not sell your personal information. Data leaves your phone only as described above: weather requests to MET Norway, ads through AdMob and its partners, usage statistics, crash reports and notifications through Google Firebase, settings requests to our server on Cloudflare, and purchases through Google Play. Firebase, Cloudflare and Google Play act as our service providers. When you tap Share, the item goes only to the app you choose.
7. Your choices
- Change ad consent in Settings → Privacy options (shown where consent is required).
- Remove ads with Chroma Premium.
- Turn notifications off in your phone's Settings → Apps → Chroma Widgets → Notifications.
- Reset or delete your advertising ID in your phone's settings, usually Settings → Privacy → Ads.
- Delete designs in My Widgets, or everything the app stored by clearing the app's data or uninstalling it. Clearing the app's data also gives it a new install ID.
- Ask us for a copy of, or to delete, the settings-service records about you: email us with the approximate dates you used the app and your IP address if you know it. Records are deleted automatically after 90 days in any case.
8. Children
Chroma Widgets is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will help.
9. Security and retention
Your content stays in the app's private storage, protected by Android's app sandbox, until you delete it. Our settings-service records are kept for 90 days, then deleted automatically; they are stored with Cloudflare and visible only to our team through a password-protected dashboard. Ad and Google services keep their data according to their own policies linked above. All data the app sends over the internet is encrypted in transit (HTTPS). Android cloud backup, if you have it turned on, may keep your saved designs in your own Google account; you control it in Android Settings.
10. Your rights
Depending on where you live (for example under GDPR or CCPA) you may have rights to access, correct, delete or object to the use of your personal data. Write to kaushik.domadiya9@gmail.com and we will respond.
11. Changes
If this policy changes, the new version will be posted on this page with a new effective date.
12. Contact
Kaushik Domadiya
Email: kaushik.domadiya9@gmail.com