Privacy Policy — Randozi

Controller and contact

The controller for processing carried out by the developer is Arkadiusz Rzad, a sole proprietor trading as ARWIVO, Am Weidig 49, 98617 Meiningen, Germany.

Privacy contact: contact@arwivo.com. Developer website: Arwivo.

Information stored locally

Randozi stores wheel names, wheel options, the selected wheel, app settings on the user’s device. This information is used only to provide the app’s features. Randozi does not require an account and does not operate a developer server that receives these entries.

Local information remains until the user edits or deletes it, clears the app’s storage, or uninstalls the app.

Advertising and consent

Randozi uses Google Mobile Ads to display one banner on the main wheel screen. Google’s SDK may automatically collect and share an IP address (which can estimate general location), product interactions, diagnostic information, and device or account identifiers for advertising, analytics and fraud-prevention purposes. Data collected by the Google Mobile Ads SDK is encrypted in transit.

Google’s User Messaging Platform requests and stores advertising privacy choices where required. A privacy choices control is available in the app when Google reports that it is required. Advertising is not requested before the SDK indicates that ads may be requested.

Purposes and legal bases

To the extent that local entries and settings constitute personal data processed by Arwivo, we rely on our legitimate interest in providing the wheel features expressly requested by the user (Article 6(1)(f) GDPR). These data remain on the device and are not used by us for profiling. The same basis applies to the minimal age declaration and protective settings: our interest is to exclude users under 16 and restrict advertising for teenagers. We do not use this declaration to infer interests or market products.

Advertising processing requiring consent, including personalization for adults and consent-dependent storage of or access to device information, relies on consent (Article 6(1)(a) GDPR and applicable device-access rules, in Germany section 25(1) TDDDG). We distinguish necessary app settings from advertising storage. Section 25(2)(2) TDDDG provides an exception for technically strictly necessary functions of an expressly requested service. Funding through advertising does not itself establish that necessity.

Google and other participating partners also determine their own purposes and legal bases, such as security, fraud detection, ad delivery and measurement. Information about purposes, consent and any legitimate interests is provided in the privacy message and each provider's documents. You may object to processing based on legitimate interests; an objection to direct marketing requires no justification. Refusing personalization or a Google account setting does not replace required consent.

We answer general enquiries in our legitimate interest in handling contact requests (Article 6(1)(f)). Contractual or pre-contractual matters are handled under Article 6(1)(b) where applicable. Handling GDPR rights requests is based on Article 6(1)(c) in conjunction with Articles 12–22. We retain general correspondence as needed to handle the matter and normally delete it within 12 months after the matter has been concluded, earlier if no longer needed. Longer retention is limited to the scope and period justified by legal obligations or establishing, exercising or defending legal claims. The Arwivo website privacy policy explains email handling in more detail.

Sharing

Randozi shares the wheel name and result only when the user explicitly chooses Share. Android then lets the user select the receiving app. Randozi does not automatically upload wheel contents or results. Further processing by the selected app is governed by its provider's policies.

Permissions

Randozi uses internet and network-state access for consent and advertising, and vibration access for optional spin feedback. The app does not request Android permissions for contacts, precise location, camera, microphone, or reading photos and shared device files. It does store its own data in private app storage; the absence of a permission prompt does not mean that no data is stored or read. Advertising libraries may use identifiers and device storage as described in the advertising sections and subject to the required privacy choices.

User age

Randozi is intended for adults and teenagers aged 16 and over. The app asks for an age range: under 13, 13–15, 16–17, or 18 and over. Both groups under 16 are blocked from entering the wheel and starting the consent/advertising flow. This includes selections saved in earlier versions, without automatically increasing the age or deleting wheels. Mistaken selections can be corrected. No account, date of birth or identity document is required. This is a user declaration, not independent age verification.

The range and an unfinished privacy-setup flag are stored in private device storage. The selection can be corrected in Settings or using the correction control on the blocked screen. For eligible ages, derived age-protection signals are passed to Google SDKs, not a date of birth or wheel contents. Ages 16–17 receive teen protections and advertising personalization is disabled. Both teenagers aged 16–17 and adults receive the required privacy choices. The G ad-content restriction applies regardless of age. Correcting an age does not undo data previously sent to a provider.

After selecting or correcting the age range, required privacy choices are handled before entering or returning to the wheel. If the connection fails, users can use the wheel offline without ads; unfinished setup is required again on the next launch. Please contact contact@arwivo.com with questions about a minor's privacy.

Security and deletion

Network data handled by Google SDKs is protected in transit according to Google’s SDK disclosures. Device-local Randozi data can be deleted by deleting wheels, clearing app storage, or uninstalling the app. There is no Randozi account to delete.

Service providers and contacting us

Advertising data is received by Google and parties involved in serving ads, according to the ad configuration and privacy choices. Google's privacy policy describes retention, deletion and processing outside the user's country. Clearing Randozi storage does not automatically delete data previously received by Google.

If you contact Arwivo, we receive your email address, message and its metadata. Email is provided by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The proprietor personally handles customer correspondence and all Randozi matters in the business mailbox contact@arwivo.com. We do not send this correspondence, attachments, sender details or metadata to generative AI services, including for summaries, translations or drafting replies. We do not send automated AI-generated replies. This rule is also described in the Arwivo website privacy policy. Using the wheel itself does not send wheel contents to email or AI services.

Recipients, retention and transfers outside the EEA

Hostinger's Data Processing Addendum covers email services and sets out subprocessor arrangements and safeguards for transfers outside the EEA. The safeguards described for Google do not replace Hostinger's terms.

Google does not act solely as our processor: the standard AdMob service falls under terms for independent controllers. For EEA user data, these terms identify Google Ireland Limited as Google's end controller. Scope and exceptions are described in Google's terms and service list.

In AdMob's partner settings, we manually selected Google Advertising Products (GVL ID 755) and disabled automatic inclusion of commonly used partners. Additional ad sources are not automatically added to the partner list. One selected entry does not mean that only one company processes data: other parties may participate in Google's services according to the roles and rules described by Google. Details are available at Google's data use on partner services. Review the purposes, partners and choices presented in the privacy message. The list itself does not identify who actually received data for a particular ad impression.

Google determines retention by data type and purpose. Some data is deleted or anonymized after specified periods; other data may be retained longer for security or legal obligations. Details: Google retention. We do not state one period for all advertising data or claim that uninstalling the app deletes data held by providers.

Google may process data outside the EEA, including in the USA. Google describes reliance on adequacy decisions, the EU–US Data Privacy Framework within its scope, and standard contractual clauses where required. Safeguards and how to obtain a copy of the clauses: Google transfer information. This does not automatically cover all other partners.

Voluntary information and consequences of choices

A name, email address or date of birth is not needed to use the wheel. An age-range declaration is required to complete setup. Wheel entries and contacting us are voluntary; without contact details we may be unable to respond.

Refusing advertising consent does not prevent users who meet the age requirement from using the wheel and does not authorize personalized advertising. Depending on permissible processing, configuration and availability, ads with restricted data processing may appear, or no ad may be shown. No personalization does not automatically mean no processing or no connection to Google. An age declaration does not replace required consent.

You can revisit available advertising choices under Settings → Privacy → Manage privacy choices. This button appears when Google requires these options to be provided. Changing your choices does not automatically erase data already sent to the provider.

Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, and object to processing. Consent may be withdrawn without affecting earlier lawful processing. Contact contact@arwivo.com. You may complain to a supervisory authority, including TLfDI.

Policy changes

This policy will be updated when data practices or service providers change. The current version and update date will be available on the Randozi privacy policy page.

Local recovery copies

The app keeps a recovery copy in private device storage and preserves damaged files when recovering data. Recovery can restore an older state. The recovery copy is refreshed after successful app writes, but may be older if a backup write failed. Previously deleted entries may remain in an older copy or preserved damaged file; clearing app storage or uninstalling removes all these files. There is no developer cloud backup. A failed read does not silently reset the collection.