1. Overview

MandirTimes ("the App") is a family-friendly personal devotion app for Android, suitable for users of all ages. This Privacy Policy explains what data we collect, why we collect it, how it is stored, and your rights as a user.

We are committed to collecting only what is necessary to operate the App and never selling your personal information to third parties.

This policy is also linked within the App in the Settings screen.

2. Data We Collect

2.1 Authentication Data

The App uses Firebase Authentication (Google LLC) to manage user identity.

Mode	Data collected
Anonymous (default)	Firebase-assigned anonymous UID only — no name, email, or device identifier is linked
Google Sign-In (optional)	Google account email address, display name, profile photo URL, and Firebase UID

Google Sign-In is optional. The App functions fully without it. You sign in only if you wish to back up your subscription status or delete your account.

2.2 Subscription Data

If you purchase a Premium subscription via Google Play, we store the following in Firebase Firestore (Google LLC), keyed by your Firebase UID:

• Subscription tier (free / premium / lifetime)
• Subscription expiry date
• Google Play purchase token (for server-side verification)
• Timestamp of last verification

This data is used solely to restore your subscription status if you reinstall the App or switch devices.

2.3 Advertising Data (Free Users Only)

Free-tier users see ads served by Google AdMob (Google LLC). AdMob may collect:

• Advertising ID (Android Advertising ID / GAID)
• IP address
• Device information (model, OS version)
• Ad interaction data (views, clicks)

You can reset or opt out of personalised ads via Android Settings → Google → Ads → Delete advertising ID (Android 12+) or Opt out of Ads Personalisation (older versions).

2.4 In-App Purchase Data

Google Play handles all payment processing. We receive only the purchase token and subscription status from Google — we never see or store your payment card details.

2.5 Notification Data

Prayer reminder notifications are scheduled and delivered entirely on-device using the Android local notifications system. No notification content is sent to or processed by external servers.

3. Data We Do NOT Collect

• Location data
• Camera or microphone access
• Contacts or call logs
• Biometric data
• Browsing history
• Device files or photos
• App Set ID for advertising purposes
• Any personal data from users who have not signed in with Google

4. How We Use Your Data

Data	Purpose
Firebase UID	Identify your session and link subscription records
Google account email	Required by Firebase Authentication when signing in with Google; used only for account identity
Google display name & photo	Displayed in the app interface when signed in
Subscription records (Firestore)	Restore Premium access after reinstall or on a new device
Purchase token	Verify subscription with Google Play
AdMob identifiers	Serve contextual ads to free-tier users

We do not use your data for profiling, marketing, or any purpose beyond operating the App.

5. Data Sharing

We do not sell, trade, or rent your personal information. Data is shared only with the following service providers as necessary to operate the App:

Provider	Purpose	Privacy Policy
Google Firebase (Auth + Firestore)	Authentication and subscription storage	firebase.google.com/support/privacy
Google AdMob	Advertising (free tier only)	policies.google.com/privacy
Google Play Billing	In-app purchase processing	play.google.com/about/play-terms
VitoLoop CDN (cdn.vitoloop.com)	Serving downloadable temple graphics	Operated by us; no user data is transmitted

All data transfers to Google services are encrypted in transit using HTTPS/TLS.

6. Data Retention

Data	Retention
Anonymous Firebase UID	Until the anonymous session is cleared or account is deleted
Google Sign-In account data	Until you delete your account
Subscription records (Firestore)	Until you delete your account

Upon account deletion, all associated data is permanently removed from Firebase Authentication and Firestore within the same session. No data is retained beyond this point except where required by applicable law.

7. Your Rights and Choices

Delete Your Account — In-App

You can permanently delete your account and all associated cloud data from within the App:

1. 1Open the App → tap the ⚙️ Settings icon
2. 2Tap Delete Account (below the Logout button)
3. 3Confirm deletion — all data is removed immediately and cannot be recovered

Full guide: Delete Account

Delete Your Account — Via Web

You can also request account deletion outside the App via:

www.vitoloop.com/mandirtimes/files/delete-account.html

Account deletion requests submitted via this page are processed within 30 days. Associated data (Firebase Authentication record + Firestore subscription document) is permanently deleted.

Cancel Premium Subscription

Cancelling your Google Play subscription stops future billing. Your Firestore subscription record is not deleted automatically — delete your account separately if you wish to remove it.

Full guide: Cancel Subscription

Opt Out of Personalised Ads

Reset or delete your Android Advertising ID via Android Settings → Google → Ads.

8. Children's Privacy

MandirTimes is a family-friendly devotional app suitable for users of all ages, including children.

The only personal data the App may ever collect is a Google account email address, and this occurs only if a user explicitly chooses to sign in with Google. Google Sign-In is an optional feature intended for adults managing a Premium subscription. It is not required for, and not presented as part of, the core app experience.

We do not knowingly collect personal information from children under 13 beyond what Google's own sign-in service provides if a parent or guardian uses that optional feature. We do not use any such data for advertising, profiling, or any purpose other than account authentication.

Ads shown to anonymous users (including children) are non-personalised. The App uses Google AdMob, which is a certified ad SDK approved for child-directed services under applicable laws including COPPA.

If you are a parent or guardian and wish to remove any data associated with a Google Sign-In, use the Delete Account option inside the App (Settings → Delete Account), or submit a request via our website. All records are permanently deleted immediately.

9. Data Security

• All communication with Firebase and Google services uses HTTPS/TLS encryption in transit
• Firestore security rules restrict read/write access to the authenticated user's own UID
• We do not store passwords — authentication is handled entirely by Google
• Anonymous users have no personal identifiers stored on our servers

10. Changes to This Policy

We may update this policy as the App evolves. When we do, we will update the Last updated date at the top of this page. We encourage you to review the policy periodically. Continued use of the App after changes constitutes acceptance.

11. Contact

This policy applies to the MandirTimes Android application published on the Google Play Store by VitoLoop.