Privacy Policy

Summary

Tangledspy Technologies LLP makes the apps and games Nurtura, Aquamark, ClipCove, ShapeDrift, Nouri, Air Traffic Control and MergeUp, and runs the website tangledspy.com. This policy explains what information they collect, why, who receives it and the choices you have.

• What we collect depends on the app. Most of our apps collect device information, usage data and crash reports. ClipCove, our browser and video downloader, keeps your browsing and downloads on your phone, and we receive none of it. Apps with accounts collect your email address. Nurtura and Nouri collect the pregnancy, health or nutrition information you choose to enter. Aquamark processes the files you choose to watermark on your phone; they never leave it.
• Some apps show ads. Ad partners receive your device's advertising ID and similar data. In the EEA, the UK and Switzerland we ask for your consent before showing personalised ads.
• AI features — the Nurtura chat bot and the Nouri meal planner — send what you type to an AI model provider so it can write a reply.
• We do not sell your personal data for money, and we never use health information for advertising.
• You are in control. You can access, correct or delete your data, and delete your account in the app or on our account deletion page.
• Questions? Email contact@tangledspy.com.

This policy works alongside our Terms of Service and Refund Policy. People in the United States should also read our Consumer Health Data Privacy Policy.

Who we are

Tangledspy Technologies LLP is a limited liability partnership registered in West Bengal, India, under LLPIN ADA-1488. We decide how and why the personal data described in this policy is used. That makes us the "controller" under EU and UK law and the "data fiduciary" under Indian law.

• Email: contact@tangledspy.com
• Website: https://tangledspy.com

We have not appointed a data protection officer. People in India can also contact our Grievance Officer — see India.

Products this policy covers

It also covers any other app or game we publish under the developer name Tangledspy Technologies LLP on Google Play, the Apple App Store, Samsung Galaxy Store or Huawei AppGallery that links to this policy. Where one app works differently from the others, this policy says so.

This policy does not cover other companies' websites or services that our apps link to. The app store you download from processes your payment details under its own privacy policy.

Information we collect

What we collect depends on which app you use and which features you turn on. We collect only what each feature needs.

Information you give us

Information collected automatically

Information from other companies

• Sign-in providers. If you sign in with a provider such as Google, it sends us your name, email address and an account ID.
• App stores. When you buy something in an app, the store sends us purchase records: an order ID, the product, the price, the date and your country. We never receive your card details.
• Ad and affiliate partners. They send us reports on ad performance and on commissions earned through affiliate links.

Device permissions

We ask for each permission when a feature first needs it. You can change permissions at any time in your device settings.

How we use information and our legal bases

We use personal data only for the purposes below. The legal basis column applies where the law asks us to name one, such as in the EEA, the UK and Brazil.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object at any time — see Rights and choices. We do not make decisions about you by automated means that have legal or similarly significant effects.

Health and pregnancy information

Nurtura handles pregnancy and health information, and Nouri handles allergies and health goals. The law treats this as sensitive: it is "special category" data under EU and UK law, "sensitive personal data" under India's rules and "consumer health data" under some US state laws. We treat it with extra care.

• Consent first. The app asks for your explicit consent before you enter any health information. You can withdraw consent at any time by deleting the entries or your account. Withdrawing does not affect processing that already happened.
• Stored to sync. It is stored on our servers, hosted by Supabase, so it survives a reinstall and syncs across your devices.
• Used only to run the features you use. We never use it for advertising, never share it with ad networks or affiliate partners, never sell it, and never use it for decisions about employment, insurance or credit.
• Sent to AI only when needed. If you use a chat or planning feature, the context it needs — such as your pregnancy week or your allergies — is sent with your message. See AI features.

AI features

The Nurtura chat bot and the Nouri meal planner are AI features. When you use them, you are talking to an AI system, not a person. The app tells you so.

• What is sent. The message you type, and the context needed to answer it, such as your pregnancy week or your dietary preferences. We do not send your name or email address.
• Who receives it. An AI model provider generates the reply. The app names the provider and asks your permission before any of your personal data is sent to it.
• No training on your data. We use AI providers only under their terms for business customers, under which your data is not used to train their models. A provider may keep data briefly to detect abuse, as its terms allow.
• Your history. If an app keeps your conversation history, it is stored in your account. You can delete conversations in the app, and deleting your account deletes them all.
• Reporting. You can report an offensive or harmful reply from inside the app. We use reports to improve our safeguards.

AI replies can be wrong. They are not medical, health or nutrition advice — see our Terms of Service.

Advertising and analytics

Ads

Some of our apps show ads, served by Google AdMob and by Unity LevelPlay, which can show ads from other ad networks it connects to. These partners receive your advertising ID, IP address, device information and your interactions with ads. They use it to show and measure ads, prevent fraud and — if you allow it — personalise ads. Watching a rewarded ad is always optional.

• In the EEA, the UK and Switzerland, a consent tool certified by Google asks for your choice before personalised ads are shown. You can change your choice at any time in the app's privacy settings.
• Everywhere, you can limit personalised ads in your device settings. On Android, go to Settings → Google → Ads and delete your advertising ID. On iOS, go to Settings → Privacy & Security → Tracking.
• On iOS, we ask for permission before tracking you across other companies' apps and websites.

We never pass pregnancy, health or nutrition information to ad partners. Each ad partner handles the data it controls under its own policy — see how Google uses information from apps that use its services and the Unity privacy policy.

Analytics and crash reports

We use Google Analytics for Firebase to understand how our apps are used, and Firebase Crashlytics to receive crash reports. They receive device information, identifiers, usage data and crash data. We use Firebase Cloud Messaging to deliver push notifications, which needs your device's push notification token. Read Firebase's privacy information. ClipCove uses none of these services.

Affiliate links

Some of our apps and pages link to other companies' products or services. If you buy something through one of these links, we may earn a commission. It costs you nothing extra, and we label these links in the app.

When you tap an affiliate link, you leave our app. The retailer or affiliate network may record that your visit came from us, using cookies or similar technology on its own site. We receive reports showing which links led to purchases and the commission earned. We never receive your payment details, and we never include health information in affiliate links. The retailer's own privacy policy covers what you do on its site.

ClipCove: browsing and downloads

ClipCove is a web browser with a download manager. We don't run servers for ClipCove and it has no accounts. Your browsing, downloads and saved files stay on your phone, or travel directly between your phone and the websites you visit. We never receive them.

Ads and purchases. ClipCove shows ads through Unity LevelPlay — see Ads. You can buy Remove ads through Google Play; Google handles the payment, and we receive only the purchase record. ClipCove Pro, the paid edition, has no ads and no in-app purchases.

Device backups. If Android backup is on for your Google account, Android may back up ClipCove's settings, history, bookmarks and download list to that account, so they return when you reinstall. The vault and its PIN are never included. You can turn off backup in your phone's settings.

Clearing your data. Everything above stays on your phone until you delete it: in ClipCove's Settings, clear your browsing history, cookies and site data, or cache; delete downloads in the library; and delete vault files inside the vault. Uninstalling ClipCove removes its data, except files you saved to your gallery or to a folder you picked. Because ClipCove has no account, there is no account to delete.

Our website

tangledspy.com is a set of static pages. It has no accounts, no contact form, no analytics, no ads and no cookies.

• Server logs. Our hosting provider, Hostinger, records standard request information — IP address, date and time, the page requested and your browser type — for security and to diagnose problems.
• Theme setting. If you switch between light and dark mode, the choice is saved in your own browser's local storage. It never leaves your device.
• Email. If you email us, we receive your email address and what you write, and use them only to reply.

How we share information

We share personal data only as described here.

Service providers may use personal data only to provide their service to us, under contracts that require them to protect it. We may also share personal data:

• when the law requires it, or to respond to a valid request from a court or public authority;
• to protect rights and safety — ours, our users' or the public's — including to prevent fraud;
• in a business transfer, such as a merger or sale of the business, where the new owner must honour this policy;
• with your consent, or when you ask us to.

We do not sell personal data

We do not sell personal data for money. Some US state laws treat letting ad partners collect identifiers for personalised advertising as a "sale" or "sharing" of personal information. You can opt out of that at any time — see Ads and United States.

International transfers

We are based in India, and our service providers process data in other countries, including the United States and countries in the European Union. When we transfer personal data from the EEA, the UK or Switzerland to a country without an adequacy decision, we rely on the Standard Contractual Clauses — or the UK's equivalent — in our providers' data processing terms. You can ask us for details.

How long we keep information

Ad and affiliate partners keep the data they control under their own retention policies.

How we protect information

Data travelling between our apps and our servers is encrypted in transit using HTTPS (TLS). Our database and storage providers encrypt data at rest. Only people who need it to run our products can access production data, and that access is protected by strong authentication. No system can guarantee security, but we work to protect your data. If a breach affects your personal data, we will tell you and the relevant authorities where the law requires.

Your rights and choices

Wherever you live, you can ask us to:

• access the personal data we hold about you and give you a copy;
• correct data that is inaccurate or incomplete;
• delete your data or your account;
• withdraw consent you gave — for example for health information or personalised ads;
• object to processing based on our legitimate interests, or ask us to restrict it;
• move the data you gave us, in a portable, machine-readable format.

How to ask. Email contact@tangledspy.com from the address linked to your account, or use the settings in the app. We may need to confirm your identity first. We reply within 30 days, or sooner where the law requires.

If we say no. We will explain why. You can appeal by replying to our decision, and we will answer your appeal within 45 days. You can also complain to a regulator — see Region-specific information.

We will not discriminate against you, or treat you differently, for using your rights.

Other choices. You can turn off notifications and change permissions in your device settings, and change your ad choices as described in Ads.

Delete your account and data

In the app: open Settings or your Profile and choose Delete account. This deletes your account and the data linked to it.

Without the app: follow the steps on our account deletion page.

What we delete within 30 days: your account details, your pregnancy, health and nutrition information, your chat history, your saved progress and the files linked to your account.

What we keep, and why:

• purchase records, for as long as tax and accounting law requires;
• records we need to prevent fraud, keep our products secure or deal with a legal claim;
• copies in encrypted backups, which are overwritten within 30 days.

You can also delete specific data — such as tracker entries or chat conversations — without deleting your account. Deleting your account does not cancel a subscription bought through an app store; cancel it in the store.

Children

Our apps and website are not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you are under the age at which you can consent to data use where you live — up to 16 in some EEA countries, and 18 in India — please use our apps only with a parent's or guardian's permission.

If we learn that we have collected personal data from a child under 13, or from a child without a consent the law requires, we delete it. Parents and guardians can contact us at contact@tangledspy.com.

Region-specific information

European Economic Area, Switzerland and the United Kingdom

Tangledspy Technologies LLP is the controller of your personal data. Our legal bases are listed in How we use information and our legal bases.

You have the rights of access, rectification, erasure, restriction, data portability and objection, the right to withdraw consent, and the right not to be subject to decisions based solely on automated processing. Use them as described in Rights and choices.

Please contact us first so we can try to help. In the UK, you have the right to complain to us, and we acknowledge complaints within 30 days. You can also complain to a supervisory authority: your local data protection authority in the EEA, the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or the Information Commissioner's Office (ICO) in the UK.

India

We are a data fiduciary under the Digital Personal Data Protection Act, 2023, and a body corporate under the Information Technology Act, 2000 and its Sensitive Personal Data or Information Rules, 2011. Pregnancy and health information is sensitive personal data, and we collect it only with your consent. The personal data we process and our purposes are itemised in Information we collect and How we use information and our legal bases.

You can:

• get a summary of your personal data and how we process it;
• have it corrected, completed, updated or erased;
• withdraw your consent as easily as you gave it;
• have your grievances redressed;
• nominate another person to exercise your rights if you die or become unable to do so.

Grievance Officer. Basab Das, Designated Partner. Email contact@tangledspy.com with the subject line "Grievance", or see our Contact and grievances page. We acknowledge grievances within 48 hours and resolve them within one month. If you are not satisfied with our response, you can complain to the Data Protection Board of India once the relevant provisions of the Act apply.

People in India under 18 should use our apps only with the involvement of a parent or guardian.

United States

Categories of personal information. In the past 12 months we have collected identifiers (such as advertising IDs and IP addresses), commercial information (purchase records), internet or other network activity (app usage and ad interactions), approximate geolocation, and sensitive personal information (account login details, and health information in Nurtura and Nouri). We collect them from you, from your device and from the partners listed in How we share information, for the purposes in How we use information and our legal bases.

Sale and sharing. We do not sell personal information for money. Ad partners collect identifiers, network activity and approximate location for targeted advertising, which some state laws call a "sale" or "sharing". We do not sell or share sensitive personal information, and we use it only to provide the services you request.

Your rights. Depending on your state — including California and the other states with consumer privacy laws — you can ask to know, access, correct or delete your personal information, receive a portable copy, and opt out of targeted advertising, sale, sharing and profiling. To opt out of targeted advertising, use your device's ad settings or the app's privacy settings, or email us. Our website does not track you and sets no cookies. Where the law requires it, we treat a Global Privacy Control signal as a request to opt out. An authorised agent can make a request for you with your written permission. If we refuse your request, you can appeal as described in Rights and choices.

Do Not Track (California disclosure). Our apps and website do not respond to "Do Not Track" browser signals, because there is no common standard for them. Ad and analytics partners may collect information about your activity over time and across different apps and websites when you use our apps.

Consumer health data. Our Consumer Health Data Privacy Policy explains how we handle consumer health data under Washington, Nevada and similar state laws.

Brazil

Under the LGPD, you have the rights to confirm that we process your data, to access, correct, anonymise, block or delete it, to data portability, to information about who we share it with, to information about the consequences of refusing consent, and to withdraw consent. Our legal bases are listed in How we use information and our legal bases. Our contact for data protection matters is contact@tangledspy.com. We give a detailed response within 15 days. You can also complain to the National Data Protection Authority (ANPD).

Canada

You can access and correct your personal information and withdraw consent, subject to legal and contractual limits. The person in charge of protecting personal information at Tangledspy Technologies LLP can be reached at contact@tangledspy.com. You can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

Australia

We handle personal information in line with the Australian Privacy Principles. You can access and correct your personal information by contacting us. If you are not satisfied with how we handle a complaint, you can contact the Office of the Australian Information Commissioner (OAIC).

Changes to this policy

When we change this policy, we update the date at the top. If a change is material — for example, a new purpose or a new kind of recipient — we will tell you in the app or by email before it takes effect, and ask for your consent again where the law requires.

Contact us and complaints

Tangledspy Technologies LLP
West Bengal, India
Email: contact@tangledspy.com

If you have a concern, please contact us first — we will try to resolve it. Our Contact and grievances page explains how complaints are handled. You can also complain to the authority for your region, as listed in Region-specific information.