Privacy Policy

1About Time Counter

Time Counter is a small Android app that shows how long it has been since — or how long there is until — a date that matters to you. You create counters, give them a name, a date, an emoji and a look, and Time Counter does the arithmetic. It can also show your counters in Home Screen widgets.

Time Counter is published under the brand Mochi Shop. Mochi Shop is a brand name only — it is not a company or any other legal entity. The app is published by Filip Urban, a sole proprietorship registered in Poland. In this policy, “we” and “us” mean that business.

Time Counter works on your phone. It has no user accounts, no sign-in, no server of ours that stores your counters, and no cloud sync.

This policy explains two very different kinds of data, and keeps them separate throughout:

• Your Time Counter data — your counters, their photos, and your settings. These are stored on your device and are not sent to us or anyone else.
• Store and purchase data — the small amount of information Google Play and our purchase provider, RevenueCat, handle so that Counter+ (the optional one-time upgrade) can be bought and restored. This does leave your device.

2Who is responsible for your data (controller)

The controller for the processing described in this policy is:

• Filip Urban, a sole proprietorship registered in Poland in the Central Register and Information on Economic Activity (CEIDG)
• NIP (tax identification number): 5833578725
• Privacy contact: mochishop.support@gmail.com
• General support: mochishop.support@gmail.com

Mochi Shop, the name shown in the app and on Google Play, is the brand under which this business publishes Time Counter.

We have not appointed a Data Protection Officer. We are not required to — we do not carry out large-scale monitoring or process special categories of data on a large scale (GDPR Article 37). You can reach us directly at the address above about anything in this policy.

3Your Time Counter data — stored on your device

Everything you create in Time Counter is stored in the app’s own private storage on your phone. We cannot see it, and it is never sent to us.

That includes:

• Counters — the name, the date, the emoji, and when you created or last edited each one.
• Appearance settings — colour family, light/dark tone, photo framing, overlay and blur settings.
• Home Screen widget designs — the style, colour, tone and which details each widget shows.
• Your app appearance preference — whether Time Counter follows your phone’s light/dark setting or is pinned to Light or Dark.
• Widget bookkeeping — a small file linking each widget you have placed to the design it uses, plus a small snapshot file per widget (a copy of that counter’s name, date, emoji and look) so the widget can draw itself without opening the whole app.
• Photos you choose as backgrounds (see section 4).
• A purchase-status cache kept by RevenueCat’s software inside the app — the anonymous ID described in section 6 and the last known Counter+ status, so the app works offline.

Android may also include some of this in your own device backup — see section 11.

4Photos

If you choose a photo as a counter or widget background:

• Time Counter opens Android’s own system photo picker. The app never receives access to your photo library as a whole — only to the single image you pick. Time Counter requests no photo, media or storage permission at all.
• Nothing is saved while you are still deciding. Choosing a photo only shows it to you. It is written into Time Counter’s storage at the moment you save — and only if what you saved actually uses it.
• When it is saved, the picked image is resized and re-saved as a JPEG inside Time Counter’s own private storage. A second, smaller copy is made for Home Screen widgets so they can draw quickly. While this happens, Android may keep short-lived working copies in the app’s private cache.
• Photos stay on this device. They are not uploaded — not to us, not to RevenueCat, not to Google, and not to anyone else. Time Counter contains no code that uploads photos or counter files to a server. The app does communicate with RevenueCat — and, through RevenueCat’s software, with Google Play’s billing service — to load the Counter+ price, verify purchases and check your Counter+ status. Those requests carry the information described in section 6, not your photos or counters.
• Replacing a photo replaces the stored copies. Removing a photo, or deleting the counter, deletes both copies. Time Counter also cleans up any stray photo files it finds when it starts.
• Photo files are excluded from Android’s cloud backup. On Android 12 and newer they may still be carried across by a direct phone-to-phone transfer, which does not go through the cloud (see section 11).

5Counter+ purchases

Counter+ is a single, one-time purchase that unlocks extra appearance options, such as photo backgrounds. It is optional. Time Counter is fully usable without it.

Purchases are handled by Google Play, which takes the payment, and RevenueCat, which records and checks whether you own Counter+.

So that a purchase can be recognised — including after you reinstall — Time Counter checks your Counter+ status with RevenueCat when the app starts and each time you return to it, whether or not you have bought anything. This check, and loading the Counter+ price, are the only network requests Time Counter makes. If your phone is offline, the check simply waits.

We never see your payment details. Time Counter has no access to your card, your bank, or your Google account.

6RevenueCat

We use RevenueCat, Inc. to record and check whether an installation of Time Counter owns Counter+. Without it, a reinstall would leave you unable to get back something you paid for.

RevenueCat receives:

• An anonymous App User ID. Time Counter has no accounts and never identifies you to RevenueCat, so RevenueCat’s software generates a random identifier (it looks like $RCAnonymousID: followed by random characters) and stores it in the app. We never attach your name, email, phone number or any other personal detail to it. We set no customer attributes, enable no advertising or attribution integrations, and do not collect advertising identifiers.
• Purchase information, if you buy or restore Counter+ — which product was bought, when, whether it is still valid, and the Google Play purchase token needed to verify it with Google.
• Technical information that comes with any internet request and that RevenueCat uses to serve it — including your device’s IP address, the device type and operating-system version, the app and RevenueCat software versions, and your country, language and currency so the correct price is shown.

RevenueCat does not receive your counters, dates, emoji, photos, widget designs or any other Time Counter content.

You can see your anonymous ID yourself: it is shown as Support ID on Time Counter’s About screen. It identifies a purchase record, not a Time Counter account — there are no accounts.

RevenueCat acts as our processor under a Data Processing Addendum incorporated into its terms. RevenueCat uses sub-processors (infrastructure and service providers) listed in that Addendum, and transfers outside the EEA are covered by the EU Standard Contractual Clauses. RevenueCat’s own privacy policy is at revenuecat.com/privacy.

7Google Play

Google Play distributes Time Counter and handles the Counter+ payment. For buyers in the European Economic Area and the United Kingdom, Google is the merchant of record for the transaction.

Google processes your purchase as an independent controller under Google’s own privacy policy, not ours: policies.google.com/privacy. Your payment details go to Google, never to us.

What we receive from Google is the order and sales reporting Google Play provides to developers in the Play Console. We never receive your payment details.

Android’s own backup service is also Google’s — see section 11.

8Why we process this data, and our legal basis

Counters, dates, photos and appearance settings do not appear in this table at all — they are not sent to us or to anyone else, so there is nothing for us to have a legal basis for.

9Who else receives your data

• RevenueCat, Inc. — our processor, for the data in section 6.
• Google (Google Ireland Limited / Google Commerce Limited, depending on the service and your location) — as store, payment provider and Android backup provider, acting as its own controller.
• Google — which provides our support inbox (Gmail), for emails you send us.

We do not sell your data. We do not share it with advertisers, data brokers or analytics companies.

10International transfers

RevenueCat is based in the United States. Where data is transferred outside the EEA, RevenueCat’s Data Processing Addendum relies on the EU Standard Contractual Clauses (with the UK International Data Transfer Addendum for UK transfers, and the Swiss variant for Switzerland).

Google’s transfers are covered by Google’s own safeguards, described in its privacy policy.

11Android backup — what leaves your device, and what does not

Android has a backup feature of its own, which you control in your phone’s settings. If you have it switched on, Android copies some app data into your own Google account, encrypted on Android 9 and newer with your device PIN, pattern or password. We have no access to it and cannot read it.

For Time Counter specifically:

• Your counters, appearance settings, widget designs, widget bookkeeping and your Light/Dark preference are included in that backup, so a new phone can restore them.
• Your photos are excluded from the cloud backup on purpose. On Android 12 and newer they can still be carried across by a direct phone-to-phone transfer, which does not involve the cloud. On Android 11 and older they are excluded from both.
• That means: after restoring from a cloud backup, your counters come back but their background photos do not. You can pick them again.

12How we protect data

• Your Time Counter data is kept in the app’s private storage, which Android does not let other apps read.
• Time Counter’s only network traffic — the RevenueCat and Google Play requests — is encrypted in transit (HTTPS).
• We run no server and keep no database of users, so there is no copy of your Time Counter data on our side to lose.

13How long things are kept

• On your device: for as long as you keep the counter. Deleting a counter deletes its data and its photos immediately. Uninstalling Time Counter removes all of it (see section 14).
• Purchase records at RevenueCat and Google: kept for as long as the purchase exists, plus whatever period Google and RevenueCat need for their own accounting, tax and fraud obligations. Counter+ is a lifetime purchase, so this is by design — it is how a restore works years later. RevenueCat may also keep a record for an installation that never bought anything (its anonymous ID and technical information) under its own retention rules.
• Support emails: kept for 12 months after the last message in the conversation, so that we can help if you follow up, and then deleted. We delete them manually; there is no automatic deletion. Emails about a complaint, a refund or another legal matter may be kept longer where that is necessary to meet a legal obligation or to establish, exercise or defend a legal claim, and only for as long as that need lasts.

14What uninstalling Time Counter does — and does not do

Uninstalling Time Counter deletes everything it stored on your device: your counters, dates, emoji, appearance settings, widget designs, widget bookkeeping files, all photo files, and RevenueCat’s on-device purchase-status cache.

Uninstalling does not:

• delete your Counter+ purchase held by Google — it is part of your Google account’s purchase history, and it is what lets you restore Counter+ after reinstalling;
• delete the record held by RevenueCat against your previous anonymous ID;
• remove any Android backup already made (manage that in your phone’s backup settings or your Google account);
• delete any support email you have already sent us.

If you want the RevenueCat record deleted as well, write to us at mochishop.support@gmail.com with your Support ID — but note that deleting it may make it harder to restore Counter+ afterwards, and it cannot delete Google’s own record of the purchase.

15Your rights

Depending on where you live (including under the GDPR), you have the right to: access your data, have it corrected, have it erased, restrict or object to its processing, and receive it in a portable form.

Two practical notes:

• Most of what Time Counter holds is not ours to give you. Your counters and photos are already on your device, under your own control — we have no copy to produce, correct or delete.
• For the purchase data described in sections 6 and 7, write to mochishop.support@gmail.com and include your Support ID from Time Counter’s About screen. Without it we usually cannot tell which anonymous record is yours, because there is deliberately nothing else linking it to you.

We will respond within one month (GDPR Article 12(3)).

16Complaining to a supervisory authority

If you think we have handled your data wrongly, you can complain to a data protection supervisory authority — in Poland, the Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. If you live elsewhere in the EEA, you can complain to your own country’s authority instead.

17Is providing data required?

You do not have to provide anything to use Time Counter. There is no sign-up, no account and no form.

The anonymous status check in section 5 is part of how the app works and runs for everyone. Purchase information only exists if you choose to buy Counter+; if you never buy it, there is no purchase record about you at all.

18Automated decision-making and profiling

There is none. Time Counter makes no automated decisions about you, builds no profile of you, and does no behavioural tracking of any kind.

19Analytics, advertising and tracking

Time Counter contains no analytics SDK, no crash-reporting SDK, no advertising SDK, and no tracking or attribution SDK. It does not use an advertising identifier. It shows no ads. There are no cookies, because there is no web content.

20Children

Time Counter is a general-purpose utility. It is not directed specifically at children, and it is not an adults-only product either — it counts down to birthdays, holidays, trips and anniversaries, and anyone might reasonably use it for that.

Time Counter has no account, profile, message, upload, advertisement or social feature, and your counters and photos stay on your device. The only data that leaves the device is the anonymous purchase-status information described in sections 5–7, which is the same for every user.

On Google Play, Time Counter’s target audience is declared as the age groups 13–15, 16–17 and 18 and over. It is not designed specifically for children under 13.

21Changes to this policy

If we change this policy we will update the effective date at the top and publish the new version at the same URL. If a change is significant we will say so in the app’s release notes. This policy is informational — there is nothing in Time Counter to accept.

22Contact

• Privacy questions, data requests and support: mochishop.support@gmail.com
• Published under the brand Mochi Shop by Filip Urban, NIP 5833578725

23This website (mochishop.pl)

Sections 1–22 are about the Time Counter app. This section is only about the website you are reading. Nothing here changes what the app does.

• No accounts, forms, analytics, advertising or tracking. The website’s own code sets no cookies and stores nothing on your device. It loads no fonts, scripts or images from anyone else. We have not enabled Cloudflare Web Analytics or any other analytics service.
• Hosting. The website is hosted on Cloudflare Pages, a service of Cloudflare, Inc. To deliver pages to you and to protect the site against attacks and abuse, Cloudflare necessarily processes the technical information that comes with every request — including your IP address, the page requested, the date and time, your browser’s user-agent string and the referring page.
• Cloudflare’s role. For the logs and traffic information about this website that Cloudflare makes available to us, Cloudflare acts as our processor under its Data Processing Addendum. For information it processes for its own purposes, such as operating and securing its network, Cloudflare acts as an independent controller under its own privacy policy: cloudflare.com/privacypolicy. We use the traffic information available to us only to keep the website working and secure — not to identify or profile visitors — and we do not keep our own copies of it. Cloudflare keeps the data under its own retention rules.
• Security cookies. We have not enabled Cloudflare features that place cookies for bot management. If Cloudflare’s protection ever asks your browser to complete a security check (for example during an attack on the site), Cloudflare may set a strictly necessary cookie (cf_clearance) that records that the check was passed. It is used only for security.
• International transfers. Cloudflare runs a global network, so this information may be processed outside the EEA. For transfers to the United States, Cloudflare states that it relies on its certification under the EU-U.S. Data Privacy Framework (and its UK and Swiss counterparts), with the EU Standard Contractual Clauses as a fallback.
• Legal basis: Article 6(1)(f) GDPR — our legitimate interest in running a website that works and is protected against attacks.
• Email links on this website only open your own email app. If you write to us, the support-email parts of sections 8, 9 and 13 apply.

Your rights in section 15 and the right to complain in section 16 apply to this data too.