Nozu Privacy Policy

1. Who we are and what this policy covers

Nozu the Fruit Fly (in Hebrew, נוזו הזבובון) is a pet game for Android, made for children aged 6 to 12 and their parents and guardians. It is provided by ITSNOBODY.NET, the registered business name of Yakov Ganam, 16 Yitzhak Ben Zvi St., Petah Tikva, Israel ("we" or "us").

This policy explains how information is handled in the Nozu app (net.itsnobody.nozu), on the Nozu pages at itsnobody.net/NOZU, and when you write to us. Google Play and other services you reach from Nozu have their own privacy policies.

For the limited information that reaches us (described in sections 5, 7 and 8), we are the controller responsible for it. Information that stays on your device never reaches us.

2. What Nozu does not do

We built Nozu so that it does not need information about you or your child. Nozu:

• has no account, sign-in or profile, and no chat, social features or sharing with other people;
• shows no advertising and contains no analytics, tracking or crash-reporting tools;
• does not ask for access to your location, contacts, camera, microphone or photos;
• does not request the Android advertising ID permission, so the advertising ID is not available to it;
• never sells personal information or shares it for advertising.

Nozu's own game code contains no networking at all. The only parts of the app that can use the internet are Google's billing components, described in section 6.

3. What Nozu keeps on your device

To keep your pet between sessions, Nozu saves the following in its private storage on the device:

• your pet: the name your child chooses, looks and outfits, room decorations, care levels, favourite foods and similar game state;
• progress: worlds, levels, stars, treasures found, chapters completed, seeds, neuron cards, items, daily discoveries, milestones and diary entries, with the dates they happened;
• practice in the learning worlds: for each number fact and each word, when it was practised, whether the answers were right, how long the answer to a number fact took and when it comes back for review; the levels Nozu has learned and small records such as the longest trail of lights repeated; plus the learning settings chosen in Settings, such as the number the class is learning;
• the state of Nozu's simulated brain activity and a short technical record of his recent reactions, which the Brain Window uses;
• settings: language, sound and music volume, vibration, reduced motion and battery mode;
• whether the full unlock is active, so that the game works offline. The press-and-hold gate in front of Settings stores nothing.

Android keeps each app's private storage separate from other apps. Nozu does not send this information to us, and we cannot see, change or delete it. Nozu also opts out of Android's automatic cloud backup, so this information is not copied into your Google account's device backup. On some devices, Android may still copy it when you move data directly from an old phone to a new one.

The information stays until you delete it. Uninstalling Nozu, or clearing its storage in Android's settings (Settings, Apps, Nozu, Storage, Clear storage), permanently deletes it, and nobody can recover it afterwards.

4. Backup files

In Settings you can export a backup file. Android's file picker opens and you choose where the file is saved, for example on the device, on a memory card or in a storage service such as Google Drive. The file contains the pet, progress, diary and simulated-brain information described in section 3. It contains no payment information.

Backup files are not encrypted, so keep them private, like a family photo album. If you save one to a storage service, that service's terms and privacy policy apply to your copy. Importing a backup reads only the file you pick. We never receive a backup file unless you decide to e-mail one to us, for example to get help with a damaged save.

If Nozu cannot open a saved pet when it starts, it offers to export the original save files in the same way, so that the pet can be recovered later. These files contain the same kind of information and are not encrypted either.

5. Buying the full unlock

Nozu is free to download. The optional full unlock is a one-time purchase that Google Play handles from start to finish. Google processes your payment under the Google Play Terms of Service and the Google Privacy Policy (policies.google.com/privacy). We never receive card or bank details.

When you buy or restore the unlock, Google Play confirms the purchase to the app on your device, with details such as the product, an order number, a purchase token and the time of purchase. Nozu uses these details only to switch the unlock on, and remembers on the device that it is active.

Google also gives us access to order records in the Google Play Console. These can include the order number, date and time, product, price, taxes and currency, the buyer's country, state or region, city and postal code, and the device model. If you contact us about an order, we can also find it using the order number or the e-mail address you give us. We use order records only to keep our accounts, meet tax duties, handle refunds and cancellations, prevent fraud and answer your requests.

Grown-ups can set Google Play to ask for authentication before purchases, and can use Google Play parental controls or Google Family Link to approve a child's purchases (support.google.com/googleplay/answer/1075738). In Nozu, the purchase screen is also behind the press-and-hold gate.

6. Google software inside the app

To sell the unlock, Nozu includes the Google Play Billing Library together with the Google components it depends on: Google Play services and Google's data-transport library. They communicate with the Google Play Store app on your device when Nozu shows the price, starts a purchase or checks whether the unlock was bought.

The billing library also sends technical diagnostic logs about these billing operations directly to Google. Based on our review of the library, the logs can be accompanied by device and app information such as the device model and manufacturer, the Android version and build, language and country settings, the mobile network code, the time-zone offset, the network type and the app's version, and Google receives the device's IP address, as with any internet connection. Google handles this information under its own privacy policy as part of providing Google Play. We do not receive it.

These components are the reason Android and Google Play list the "full network access" and "view network connections" permissions for Nozu. The game itself uses neither: it plays fully offline, and only buying or restoring the unlock needs a connection.

7. When you write to us

Writing to us is voluntary, and you are under no legal obligation to give us information. If you e-mail us, we receive your e-mail address, the name shown on your e-mail account, your message and anything you attach. We use this to answer you, to handle your request (for example a refund, a cancellation, a privacy request or an accessibility report) and to keep a record of it. If you prefer not to give us these details, we will not be able to reply.

Please do not send us personal information about your child. If we find that a child has written to us, we will reply once, where appropriate asking a parent to contact us, and then delete the message.

We keep e-mails for up to 24 months after the conversation ends, unless we need them longer to meet a legal obligation or to establish or defend a legal claim. Our e-mail is hosted by Zoho Mail (Zoho Corporation), an e-mail service provider that processes messages on our behalf.

8. Our website

The Nozu pages on itsnobody.net are simple static pages. They set no cookies and load no analytics, advertising, fonts, scripts or other content from third parties. Our hosting and network provider, Cloudflare, processes technical information such as IP addresses, browser type and request times to deliver the pages and protect the site, and may keep it in short-term security logs. We do not use this information to identify visitors.

9. Children's privacy

Nozu is made for children, so we designed it to work without anyone giving us personal information: there are no accounts, chat, ads, tracking or sharing, and everything stays on the device.

Because Nozu does not collect personal information from children, we do not ask parents for consent to collect it. We do not market to children, and we do not use information about children for advertising or profiling.

Buying, backups and the app settings are behind the Settings gate: a button that must be pressed and held for 3 seconds. Tapping a locked part of the game leads to the same gate, with a neutral note that the part is in the full game; Nozu never asks a child to pay for anything or to ask someone else to buy it. The gate is a simple barrier that keeps young children away from choices meant for adults; it does not check anyone's identity or age.

Parents and guardians can see in the app what Nozu keeps, delete it as described in section 3, and ask us anything at privacy@itsnobody.net.

10. Why we use information

We use the limited information that reaches us only for these purposes:

• Order records: to provide what you bought, to meet accounting and tax obligations, to handle refunds and cancellations and to prevent fraud (legal grounds where the GDPR applies: performance of a contract, legal obligation and legitimate interests).
• E-mails: to answer you, handle your request and keep a record of it (legal grounds: steps you asked us to take, legal obligation and our legitimate interest in supporting Nozu's users).
• Website logs processed by Cloudflare: to deliver and secure the website (legal ground: legitimate interests).

We do not use personal information for advertising, profiling or automated decision-making, and we never sell it.

11. Who receives information

We share personal information only when necessary:

• with service providers that act for us, such as our e-mail provider, Cloudflare and our accountant, who must keep it confidential;
• with Google, for example to process a refund you asked for;
• with authorities or others when the law requires it, or when needed to establish, exercise or defend legal rights;
• with a successor if Nozu is transferred to another business, on condition that it keeps honouring this policy for the information it receives.

12. Transfers abroad

Google, Cloudflare and our e-mail provider may process information outside your country, including in the United States and the European Union. When we transfer personal information from Israel, we do so as permitted by the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001. The European Commission and the United Kingdom recognise Israel as providing an adequate level of data protection, and where the GDPR applies to a transfer we rely on that recognition or on safeguards such as standard contractual clauses.

13. How long information is kept

• Information on your device: until you delete it (section 3).
• Backup files: for as long as you keep them.
• E-mails: up to 24 months after the conversation ends, unless a legal obligation or a legal claim requires longer.
• Order records: as long as tax and accounting law requires, which in Israel is generally seven years, and as long as Google keeps them in the Play Console.
• Website security logs: as Cloudflare keeps them under its own policies.

14. Security

Nozu keeps its data in Android's private app storage and saves carefully, so that a failed save does not destroy the previous one. We have no servers that hold game data and could be breached. We protect access to our e-mail and Google Play Console accounts with appropriate security measures.

No system is perfectly secure. Please keep your device updated and your backup files private.

15. Your rights and choices

Depending on where you live, you may have the right to know whether we hold personal information about you, to see it, to have it corrected or deleted, to object to or restrict some uses, to receive a copy and to complain. Under Israeli law you have the right to review information about you (section 13 of the Privacy Protection Law, 1981) and to ask for it to be corrected or deleted (section 14). Parents and guardians can make requests for their children.

Most of Nozu's information never reaches us, so you can review and delete it yourself on the device. For information we hold, write to privacy@itsnobody.net. We may ask you to confirm the request from the e-mail address, or for the order, that it concerns. We will acknowledge a request or complaint promptly and reply within 30 days, or sooner if the law where you live requires it. Order records that we must keep for tax purposes cannot be deleted before the legal period ends.

You can also complain to a data protection authority: in Israel, the Privacy Protection Authority (www.gov.il/he/departments/the_privacy_protection_authority/govil-landing-page); in the EU or the UK, the authority where you live.

16. Changes to this policy

If Nozu or the law changes, we will update this policy, give it a new version number and effective date, and publish it in the app and at itsnobody.net/NOZU. If a change significantly affects how information is handled, we will point it out in the app before it takes effect. Nozu has no accounts, so we cannot notify you by e-mail. Earlier versions are available on request.

17. Contact

ITSNOBODY.NET, the registered business name of Yakov Ganam, 16 Yitzhak Ben Zvi St., Petah Tikva, Israel.

• Privacy questions and requests: privacy@itsnobody.net
• Everything else: support@itsnobody.net