Privacy Policy

Last updated: September 2, 2026

1. Who We Are

This Privacy Policy describes how Naptime Tomato Studio LLC (“we”, “us”, “our”) collects, uses, shares, and protects information when you use the Ling Snake mobile or web application (the “App”).

By using the App, you agree to the practices described in this Policy. If you do not agree, do not use the App.

2. Information We Collect

2.1 Information You Provide Directly

• Profile data: Display name, avatar selection, theme preference, and other optional profile settings you choose.
• Communications: If you contact us for support, we keep a record of that correspondence and any information you choose to include.

2.2 Information Collected Through Third-Party Authentication (OAuth)

When you sign in using a third-party single sign-on (SSO) or OAuth service, such as Google Sign-In or Sign in with Apple, and create a Ling Snake account, we collect the basic profile information that service provides: your email address (which may be an Apple private-relay email address) and a basic account identifier.

We do not collect or store the password for your third-party account. Your use of a third-party login provider is also subject to that provider's privacy policy and terms.

2.3 Information Collected Automatically

• Usage data: Game progress, lesson completion, deck contents, study session metadata, EXP / level progression, daily activity records, and similar in-app activity necessary to provide the core learning experience.
• Device information: Operating system, app version, device language, and crash diagnostics (if any).
• Subscription status: Whether you have an active Pro subscription, the package purchased, renewal dates, and store-issued purchase tokens — collected and validated via RevenueCat (see §3).

2.4 Information We Do Not Collect

For clarity, the App does not collect:

• Your location data;
• Your contacts or address book;
• Your photos, microphone audio, or camera content (the App does not request these permissions);
• Advertising identifiers — the App does not display third-party ads and does not track you across apps or websites;
• Biometric data.

3. Third-Party Services and Sub-Processors

We use the following third-party services to operate the App. Each is bound by data-processing agreements and has its own privacy practices, summarized below.

3.1 RevenueCat (Subscription Management)

We use RevenueCat, Inc. to manage in-app purchases, validate subscription receipts, and resolve entitlement state across your devices. When you make a purchase or interact with subscription features, RevenueCat receives, as a service provider acting on our behalf:

RevenueCat acts as our data processor / service provider under our agreement with them. RevenueCat in turn uses sub-processors including Amazon Web Services (data storage, USA) and Stripe (where credit-card processing applies on web platforms). RevenueCat’s privacy policy is available at revenuecat.com/privacy.

3.2 Other Service Providers

We do not share your personal information with any other third parties except as required by law (see §7).

We do not sell your personal information.

4. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App and its educational content;
• Sync your progress and settings across the devices on your account via our servers;
• Authenticate you and protect your account from unauthorized access;
• Process subscription purchases through Apple, Google, and RevenueCat;
• Respond to your support requests and other communications;
• Send important service updates (terms changes, account-related notices);
• Diagnose and fix bugs;
• Improve the App through aggregated, non-identifying usage patterns.

We do not use your personal information for advertising or for sale to third parties.

4.1 How We Use Your Email Address

We use the email address associated with your account only for legitimate product-related purposes, including:

• Account administration and authentication: Managing your account, verifying your identity, protecting your account, and providing core App functionality;
• Transactional communications: Sending critical service notices, system updates, billing receipts, and security alerts; and
• Product feedback and improvement: Contacting you periodically for feedback, surveys, or insights about your experience so that we can identify bugs, improve the user interface, and develop new features.

We do not sell, rent, or trade your email address to third parties for their marketing or advertising. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. Data Storage and Security

5.1 Where Your Data Lives

• On your device: The App stores game progress, deck data, and settings locally in a SQLite database. This data persists on your device until you uninstall the App or explicitly sign out.
• On our servers: Synced copies of your account data and progress are stored on servers hosted by Google Cloud Platform (Cloud SQL), located in the United States. If you are located in the European Economic Area or the United Kingdom, this international transfer is made under the European Commission’s Standard Contractual Clauses, as incorporated into Google Cloud’s Data Processing Addendum.

5.2 Security Measures

We protect your data using:

• HTTPS / TLS encryption in transit;
• OAuth-based authentication through Apple or Google — we never receive or store your password for either provider;
• Access controls limiting who can access stored data;
• Regular review of dependencies and infrastructure for known vulnerabilities.

No system is perfectly secure. We cannot guarantee absolute security, but we work to follow industry best practices.

5.3 Data Retention

We retain your email address and associated account data only for as long as your account is active. You can request permanent deletion at any time using the “Delete account” option in the App or our dedicated account-deletion page. If you delete your account, we delete or anonymize your data within 30 days, except where retention is required by law (for example, tax records associated with completed subscription purchases) or by Apple / Google’s own data-retention rules for purchase data on their platforms.

When we process your deletion request, we permanently remove your email address from our active databases and any connected email outreach tools. After deletion is complete, you will no longer receive feedback requests or transactional emails from us.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

• Access — request a copy of the data we hold about you;
• Correction — ask us to correct inaccurate or incomplete data;
• Deletion — request that we delete your account and associated data;
• Portability — request a machine-readable export of your data;
• Objection / Restriction — limit how we process your data;
• Withdrawal of consent — where processing is based on consent.

You can delete your account and associated data directly in the App via the “Delete account” option. You may also exercise any of these rights by emailing us at contact@lingsnake.com. We will respond within 30 days (or sooner, where required by law).

6.1 EU / UK Residents (GDPR / UK GDPR)

If you are in the European Economic Area or the United Kingdom, our legal bases for processing your information are:

• Contractual necessity — to provide the App and process subscriptions you purchase;
• Legitimate interests — to maintain and improve the App, prevent fraud, and ensure security;
• Consent — for any optional processing where consent applies;
• Legal obligation — to comply with applicable law.

You have the right to lodge a complaint with your local data protection authority.

6.2 California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, request deletion, opt out of sale (we do not sell personal information), opt out of sharing for cross-context behavioral advertising (we do not share for such purposes), and not be discriminated against for exercising these rights. To exercise these rights, contact us at contact@lingsnake.com.

6.3 Other Jurisdictions

Residents of other jurisdictions (e.g. Brazil under LGPD, Canada under PIPEDA, Australia, etc.) may have similar rights under local law. We will honor valid requests under any applicable privacy regulation.

7. Disclosure of Information

We may disclose your information:

• To service providers — as listed in §3, who process information on our behalf under appropriate confidentiality and data-processing agreements;
• For legal reasons — to comply with a subpoena, court order, or other legal process, or where we have a good-faith belief disclosure is necessary to protect our rights, your safety, or the safety of others;
• In a business transfer — in connection with a merger, acquisition, or asset sale, in which case the acquirer will be bound by this Policy or a successor policy with substantially similar protections;
• With your consent — in any other case where you direct us to share information.

8. Children’s Privacy

Ling Snake is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and you believe we have collected information from a child under 13, please contact us at contact@lingsnake.com and we will delete it promptly.

9. International Data Transfers

If you use the App from outside the United States, your information will be transferred to and processed in that region. By using the App, you consent to this transfer. Where required by law (for example, transfers out of the EEA / UK), we use standard contractual clauses or other lawful mechanisms to protect your data during international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top. Material changes will be notified through the App or via email to the address associated with your account. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

11. Contact

For questions about this Policy or to exercise your rights, contact us at contact@lingsnake.com.