Privacy Policy

Last updated: October 18, 2026 · Developer: Khanh Vu (KV Apps)

This policy explains how Khanh Vu ("KV Apps", "we", "us") handles information in the apps that link to this policy and on this website. It is shared across our apps. Features, permissions, purchases and advertising differ by app; a description of an optional feature below does not mean that every app includes it.

Read this policy together with the app's privacy notices and App Store privacy information. An app-specific notice provides details for that app and identifies any different practices. We will explain new data uses before enabling features that require them and request permission or consent where required.

1. App content and permissions

Our apps process the information needed for the features you choose, such as a photo you open, a color you sample, or an item you save. Content used by an on-device feature is processed on your device. If a feature sends content to an online service or offers account-based storage or sync, its notice will identify what is sent, why, and the service involved before you use it. This policy does not imply that every app offers a cloud service or an account.

• Camera and photos: where available, these permissions let you capture, choose, edit or save content. Permission to access a photo does not by itself mean that the photo is uploaded to us.
• Files and other device access: access is used for the feature described in the app's permission request. You can review or revoke permissions in your device's Settings; a feature that depends on a permission may then stop working.
• Device authentication: if an app uses Face ID or Touch ID through Apple's authentication services, Apple handles the biometric check; the app receives the authentication result, not your biometric templates. An app-specific PIN or password is a separate feature with its own storage and recovery behavior.

Device storage protections are not the same as app-level file encryption. Encryption, app locks, recovery keys and backup support apply only where the particular app documents them; we do not claim that every KV Apps app is an encrypted vault.

2. Purchases

For purchases made through Apple's In-App Purchase system, Apple handles payment and your payment card details. The app can receive product and transaction information, purchase status and entitlement information to unlock features, check subscription access and restore eligible purchases. We do not receive your full payment card details from Apple.

3. Advertising and technical data

Apps that display advertising may use Google AdMob. In those apps, the Google Mobile Ads SDK can process IP addresses, approximate location derived from IP addresses, device or other identifiers, app and ad interactions, and diagnostic information such as crash and performance data. Google uses this information for ad delivery, measurement, fraud prevention and its other disclosed advertising purposes. Data handling depends on the SDK configuration, region and your choices.

When tracking permission is required, we request it through Apple's App Tracking Transparency prompt. If you deny permission, the Google Mobile Ads SDK does not send the IDFA in its ad requests. Denying tracking does not mean all ad-related data processing stops. Regional advertising consent and privacy controls are separate from the system tracking permission; use the app's privacy options where available and review tracking permissions in iOS Settings.

For Google's practices and controls, see Google's Privacy Policy and Google advertising information. If an app uses additional analytics, advertising or online service providers, its app-specific notice will identify them and explain their data uses. An ad-free purchase removes ads as described in that app; it does not necessarily disable purchase verification or all diagnostics.

4. Support messages and this website

If you email us, we receive your email address and the information or attachments you choose to send. We use them to answer your request, investigate problems and maintain support records. Please do not send passwords, PINs, payment card details or private files that are not needed for your request.

This static website does not contain an analytics or advertising script. It is hosted on GitHub Pages, which logs visitor IP addresses for security purposes and processes technical request information to provide the service. This website is presented in English and does not store a language preference. See the GitHub Privacy Statement. Following an external link takes you to a service with its own privacy practices.

5. Sharing and processing locations

Information is processed by the services involved in the feature you use: Apple for App Store payments, Google for advertising in ad-supported apps, and our email and hosting providers for support and this website. Information you choose to share or export also goes to the destination you select. We may disclose information we hold where necessary to comply with law, address abuse or protect legal rights.

Service providers may process information in countries other than your own, subject to their applicable privacy terms and safeguards. We do not sell content you create in our apps. Ad-related data sharing and any applicable opt-out choices are described in the advertising section and the app's consent notices.

6. Retention, deletion and your choices

• Local app content: keep it for as long as you need it. Use the delete or export controls available in that app. Deleting an app generally removes its local app container; offloading an app is different and can preserve its documents and data.
• Other copies: exported files, photos saved to your library, device backups, synced copies and items stored separately, such as in the system Keychain, may remain after app deletion. Manage those copies through the relevant app, device settings or service. Reinstalling an app is not a guaranteed reset of every setting or a way to recover lost content.
• Support correspondence: we retain it as needed to resolve the request and related follow-up, and for applicable recordkeeping or legal obligations. You can ask us to delete information we hold; we will explain any information we need to retain and why.
• Provider records: Apple, Google and other services involved retain their records under their own policies and applicable requirements. Deleting our app does not cancel a subscription or delete a provider's independent records.

Depending on your location, you may have rights to access, correct, delete or obtain a copy of personal information, restrict or object to processing, or withdraw consent. Contact us to exercise applicable rights or ask how a particular app handles your data. We may need information to verify the request, but will not ask for your app PIN or Apple Account password. Where available, you may also raise a concern with your local data protection authority.

For content held only on your device, we cannot access or delete it remotely. If an app offers an account, use its account-deletion controls and app-specific notice for the corresponding online data.

7. Security and backups

We take reasonable measures appropriate to the information and features involved. No app, device or online service can guarantee absolute security or uninterrupted access. Keep your device secure and use the app's documented export or backup options for content you need to preserve. Do not assume that every app supports cloud sync, encrypted backups or PIN recovery.

8. Children

This shared policy is for our general-audience apps. It is not a notice for a service specifically directed to children. Review each app's age rating and features before use. If you believe a child has provided personal information to us without any consent required by law, contact us so we can investigate and address the request. A child-directed app would require its own appropriate privacy notice and safeguards.

9. App-specific details: Paper Lagoon

Scope: this notice reflects Paper Lagoon 1.0.0 in development, reviewed on October 9, 2026. The paper-boat puzzles can be played offline without a KV Apps account. Advertising and Apple purchases use online services; offline gameplay does not mean those services never process data.

• Local save: progress, the current puzzle and undo history, light-drop balance, tickets and boosters, decorations, attempts and refill times, daily reward dates and streak, story/tutorial progress, purchase entitlements and transaction/reward records, and language, sound and haptic preferences are stored on your device. The device clock and time zone are used for rewards and refill timing. Paper Lagoon has no KV Apps account server or cloud-sync service, and does not upload your complete save or undo history to us.
• Advertising: Paper Lagoon integrates Google AdMob through KVAdsKit and Google's User Messaging Platform (UMP). It supports banners, occasional ads between completed levels and optional rewarded ads. Google may process IP-derived approximate location, device/app identifiers, ad views and interactions, and SDK diagnostic/performance information to deliver and measure ads and prevent fraud. The development configuration uses Google test ads; these can still contact Google. An ad-free entitlement disables the ad placements covered by that purchase.
• Advertising choices: regional consent forms and ad availability depend on Google's consent service and configuration. When required, open Settings → Ad privacy choices to review your choices. Paper Lagoon requests Apple's App Tracking Transparency permission after the opening flow, when the app is active. You can decline and continue playing; the app does not repeatedly ask after you have made a choice. You can review tracking permission in iOS Settings. AdMob can use the advertising identifier when tracking is allowed; other ad-related processing can still occur without it. Advertising choices are separate from usage analytics.
• Usage analytics: Paper Lagoon uses Google Firebase Analytics to send screen and gameplay events, such as level outcomes, hints/undo, daily rewards, dock actions, purchases, ad outcomes and impression-level ad revenue, plus ATT choices and save-failure/recovery events, with game metrics and language, progress-band, notification and economy settings. Firebase can also process an app-instance identifier, device/app information, sessions, approximate geography and StoreKit purchase events. We use these reports to understand usage and improve the game. No KV Apps account identifier, support email, full save, raw purchase receipt or transaction identifier is attached to our custom analytics events. The current development configuration enables usage analytics. Firebase advertising storage, ad-user-data use and ad personalization are disabled in this integration; approving ATT does not enable those Firebase advertising uses. Paper Lagoon currently has no in-app analytics opt-out switch; ad privacy choices and an ad-free purchase do not disable usage analytics.
• Purchases: Apple handles payments through StoreKit. Paper Lagoon receives product, transaction, entitlement and refund/revocation information to grant items, prevent duplicate grants and restore eligible purchases. These records are kept locally; there is no KV Apps purchase-verification server. We do not receive your full payment card details. Consumable balances and ordinary game progress are not a cloud backup or guaranteed cross-device restore.
• Permissions and reminders: optional daily and attempt reminders are scheduled locally after you allow notifications. You can turn reminders off in Paper Lagoon Settings or change notification permission in iOS Settings. Paper Lagoon does not register for server push notifications and does not request camera, photo-library, microphone, contacts or device-location access. It has no Firebase Crashlytics or Remote Config feature; this does not exclude diagnostic data processed by the advertising SDK.
• Retention and deletion: local saves remain until removed. Deleting Paper Lagoon removes its local app container; offloading preserves it. Device-backup copies may remain under Apple's settings. There is no in-game reset/export or KV Apps remote-recovery service. We cannot read, recover or delete your local save remotely. Changes that have not been successfully saved can be lost if the app closes. Deleting the app does not erase Apple's or Google's independent records; use their privacy controls or contact us about information we hold, such as support correspondence.
• Links and support: opening a website uses that site's privacy practices. Emailing support shares your email address and the information or attachments you choose to send; do not include passwords or payment card details. The support, website, retention and rights sections above also apply.

For provider information, see Google's Privacy Policy, Firebase privacy information and Apple's Privacy Policy. We will update this notice and the App Store disclosures when providers or active data practices change, and obtain permission or consent where required. This notice does not claim that a production advertising or analytics configuration has already been enabled.

For gameplay questions, see Paper Lagoon support. See Paper Lagoon game terms for virtual rewards and saved progress.

10. App-specific details: Color Meter

Color Meter uses camera frames or an image you select to sample colors on your device. Saved colors, collections and preferences are stored locally; its color-picking features do not upload your photos or collections to a KV Apps server, and no KV Apps account is required. Sharing or saving an image to your photo library creates a copy at the destination you choose.

Versions of Color Meter configured with Firebase use Google Firebase Analytics to understand feature usage and purchase outcomes, Firebase Crashlytics to diagnose crashes and errors, and Firebase Remote Config to deliver advertising settings. These services can process app-installation identifiers, device and app information, interaction events, and diagnostic data. The app does not send camera frames, selected photos, color values, collection names or purchase receipts in its custom analytics events. Google may also collect information automatically through its SDKs.

In versions that include these controls, open Settings → Privacy & diagnostics to turn off usage analytics or crash reports. These choices apply to future collection by the corresponding service; they do not erase reports already sent. Remote Config remains available to deliver app settings. Advertising privacy options are separate and appear when required by the consent service. See Firebase privacy and security information. Pro removes ads; it does not automatically turn off analytics or diagnostics.

Color Meter includes advertising and optional Pro purchases, so the advertising and purchase sections above apply. Its collections are not a PIN-protected or app-encrypted vault. It does not provide a KV Apps cloud-sync or remote-recovery service for your collections.

11. App-specific details: Veilnest

Veilnest stores imported or captured photos, videos, files and private notes in an encrypted vault on your iPhone. No KV Apps account is required. The app does not provide automatic cloud sync or a developer-operated vault recovery service. Importing creates a copy; originals in Photos or Files remain until you remove them there. Exporting or sharing creates a copy at the destination you choose.

Camera, microphone, photo-library and file access support the capture, import and export features you choose. Optional Face ID or Touch ID is handled by Apple's device authentication services; the vault PIN is separate. We cannot recover local vault content or your PIN through a support email. Loss of the device, app deletion or loss of vault access can make content permanently inaccessible. Keep a separate copy of important content.

Veilnest integrates Google AdMob and its consent service for advertising, Firebase Analytics for screen and feature usage, Firebase Crashlytics for crash diagnostics, and Firebase Remote Config for app and offer settings. These services can process installation or app-instance identifiers, device and app information, interaction events, approximate geography and diagnostic information. Analytics can include purchase and ad outcomes. These online services do not provide a backup of your vault. See Firebase privacy information and the advertising section above for provider details.

Advertising-related consent and Apple's tracking permission affect the relevant data uses; declining tracking does not disable all analytics or diagnostic processing. Use the app's advertising privacy choices where available and review permissions in iOS Settings. Apple handles Pro payments; the purchase, retention and deletion sections above also apply. Exported files and backups remain in the locations you selected until you manage them there. Contact khanhvu.dev@gmail.com for questions about information we hold; do not send private vault files, PINs or recovery secrets.

12. Changes to this policy

We will publish updates on this page with a revised date. For material changes that affect your choices, we will provide an appropriate notice in the affected app and obtain consent where required. An update to this page does not itself grant a new device permission.

13. Contact