Privacy Policy

Last updated: 6 November 2026

This policy explains what information Driftfin (“the app,” “we”) collects, how it’s used, and your choices. It covers the mobile app published on Google Play by XP Developer as Driftfin: Fish Tank Widget, with package id com.xpdev.driftfin.

1. Summary (plain English)

• Driftfin doesn’t need a user account. Your tanks, your fish’s names and your settings stay on your phone. We have no servers of our own and the app has no analytics or crash reporting of its own. The one exception is the feedback you choose to send (section 2.4) and the app-development request you choose to send (section 2.6).
• The app shows no ads and never requests any.
• A tank you share lives only in the link or QR code you share (section 2.5). Nothing about it is uploaded.
• Driftfin Pro, a one-time purchase, is made through Google Play. Google’s own terms and privacy policy apply to that purchase.
• Settings → “Need your own app?” lets you ask the developer to build an app for you. Only what you type there (your name if you give it, how to reach you, and what you would like built) is sent, and only when you tap Send (section 2.6).

2. Information we collect

Nothing, ourselves, apart from the feedback (section 2.4) and the app-development request (section 2.6) you choose to send. We don’t collect, receive, or store any other information from your use of the app on any server of ours. This section also describes what the app keeps on your device.

2.1 Stored on your device

• Your tanks: each tank’s name and style, its fish with the names you gave them, and its decorations with where you placed them. The widget on your home screen and the screen saver draw from this list.
• Which tank each widget on your home screen shows.
• Your settings: the app language, light or dark theme.
• Whether Driftfin Pro is unlocked.
• A few counters that decide when to ask for a rating: how many times the app was opened and how many successes you have had.

All of the above is stored in the app’s private storage on your device and is not sent to us, except the detail lines you choose to include in a feedback message (section 2.4), which carry the app language and whether Pro is unlocked. Driftfin does not run in the background: your launcher draws the widget, and the app does not ask for your location, camera, contacts, storage or notifications.

If backup is turned on in your Android settings, Android Auto Backup may copy your tank list to your own Google account backup, so your tanks can come back when you reinstall Driftfin or move to a new phone. The settings and widget choices are not part of that backup. The backup is managed by Android and your Google account, and we can’t see it.

2.2 Purchases (Google Play Billing)

If you buy Driftfin Pro, it is processed by Google Play. We receive no payment details. The app only asks Google Play whether your account has bought it, when it starts and when you tap Restore purchase, and keeps a yes/no flag on your device so Pro stays unlocked when you are offline. The purchase screen and the connection to Google Play come from Google’s Play Billing Library, so Google’s own terms and privacy policy apply to that processing: Google Play Terms of Service and Google Privacy Policy.

2.3 Rating prompt

After a few successes the app may ask Google Play to show its rating sheet. Google Play decides whether to show it and handles it; the app learns nothing about your rating. Settings → Rate this app opens the app’s Google Play page.

2.4 Feedback you send (Send feedback)

Settings → Send feedback lets you write to the developer. Nothing is sent until you tap Send. The app never sends feedback in the background, never keeps a message to send later, and does not retry: if sending fails, your text stays on screen.

• What is sent: the message you wrote; an email address, only if you type one into the optional email field; and, only if the “Include app and phone details” switch is on (it is on by default, and the exact lines are shown under the switch), these details: the app version and build, the Android version, the phone maker and model, the app language, and whether Driftfin Pro is unlocked.
• What is never sent: no install id or advertising id, your location, your contacts, your tanks, or anything you did not write or see listed.
• Where it goes: over an encrypted connection to a small relay that the developer runs on Cloudflare Workers, which forwards it to the developer’s Telegram account. Cloudflare and Telegram handle it only to deliver it, under their own terms and privacy policies. The relay does not store or log the text of your message or your email address; it keeps only a count of messages per day and a short-lived rate-limit counter tied to your IP address, to stop abuse.
• How long it is kept: the message stays in the developer’s Telegram chat until it is deleted. It is used to read and answer feedback, to reply to you if you left an email, and to fix problems. It is not used for analytics or profiling, and it is not shared.
• Deleting it: email xpnazar@gmail.com and ask, and the developer will delete your message and any email you gave.

2.5 Sharing a tank (QR code and link)

Share on a tank’s screen turns that tank (its name, style, fish with their names, and decorations) into a link and a QR code. The code is drawn on your phone, and the tank lives only inside the link: nothing is uploaded and no server stores it. You choose where the link goes, through Android’s share sheet or by saving the QR image; whoever you send it to can read the tank in it.

Opening a link on a phone that has Driftfin shows the tank inside the app, and you decide whether to add it. On other devices the link opens a small page on nazar.web.id with a button for Google Play. The tank is in the part of the link after the “#”, which browsers never send to a server, and that page has no analytics.

2.6 App-development requests you send

Settings → “Need your own app?” opens a form for asking the developer to build an app for you. Nothing is sent until you tap Send. The app never sends it in the background and never keeps a request to send later.

• What is sent: your name, only if you type one (it is optional); the contact you type so the developer can reply (an email address, a phone number for WhatsApp, or a Telegram username); the description of the app you would like built; and, so the developer knows where the request came from, the app’s name and version and the language the app is shown in.
• What is never sent: anything else from the app or your phone: not your tanks, no identifier of you or your phone (no install id, no advertising id), and not your location.
• Where it goes: over an encrypted connection to a small relay that the developer runs on Cloudflare Workers, which forwards it to the developer’s Telegram account. Cloudflare and Telegram handle it only to deliver it, under their own terms and privacy policies. The relay does not store or log your request; it keeps only a count of requests per day and a short-lived rate-limit counter tied to your IP address, to stop abuse.
• What it is used for: only to read your request and reply to you through the contact you gave. It is not used for analytics or profiling, it is not added to any mailing list, and it is not shared or sold.
• How long it is kept, and deleting it: the request stays in the developer’s Telegram chat until it is deleted. Ask for its deletion by email to xpnazar@gmail.com, or by replying through the contact you gave, and the developer will delete it within 30 days and confirm.

3. How we use the data

• Draw your tanks in the app, on the widget and in the screen saver.
• Remember your settings and whether Driftfin Pro is unlocked.
• Decide when to ask for a rating.
• Read and answer the feedback you choose to send.
• Read and answer the app-development requests you choose to send.

Nothing is used for analytics or profiling by us.

4. Data we never receive

• Your name, or phone number, unless you type them into the app-development request form (section 2.6).
• Your email address, unless you type one into Send feedback (section 2.4) or the app-development request form (section 2.6). The app never reads it from your phone or your accounts.
• Your contacts or your photos.
• Your location.
• Your tanks, other than inside a link you choose to share (section 2.5).
• Payment card or account details. Google Play handles the payment (section 2.2).

5. Your choices

• Driftfin Pro — a one-time purchase, no subscription. On a new phone, use Settings → Restore purchase. You can also see your purchases in Google Play.
• Feedback — nothing is sent unless you tap Send; the email is optional, and the details switch can be turned off (section 2.4).
• Sharing — a tank leaves your phone only when you share its link or QR code (section 2.5).
• App-development requests — nothing is sent unless you tap Send, and your name is optional (section 2.6).
• Uninstall — removes your data and settings from your phone. If you use Android backup, your Google account may keep a backup copy of your tank list until Android removes it or you delete it in your backup settings.

6. Children

Driftfin is not directed at children under 13; it is made for ages 13 and over. We collect no personal information ourselves, from anyone, apart from what someone chooses to write in a feedback message (section 2.4) or an app-development request (section 2.6), and we don’t knowingly collect any from children under 13. If a child has sent us feedback or a request, email us and we will delete it.

7. Data retention and deletion

This section covers Driftfin: Fish Tank Widget (package com.xpdev.driftfin) by XP Developer on Google Play. The app has no accounts.

To have your data deleted:

1. Email xpnazar@gmail.com with the subject “Delete my Driftfin data”.
2. Say roughly when you sent feedback and, if you gave one, the email address you typed in, so we can find your messages.

What is deleted: every feedback message you sent (section 2.4), the app and phone details sent with it, and any email address you gave. They are deleted from the developer’s Telegram chat within 30 days of your request, and we reply to confirm. We keep none of it, and we hold no other data about you.

An app-development request (section 2.6) is deleted the same way: say roughly when you sent it and the contact you gave. It is deleted from the developer’s Telegram chat within 30 days of your request, and we reply to confirm.

Your tanks and settings stay on your device (and your tank list in your Android backup, if you use it) until you remove them in the app, clear the app’s storage or uninstall Driftfin; uninstalling deletes everything the app holds. A tank you shared lives in the link you sent, which we cannot see or delete. Google Play keeps your purchase record under its own policy.

8. Third parties and international transfers

The app’s own code sends no data to any server of ours, except the feedback (section 2.4) and the app-development request (section 2.6) you choose to send, which go through Cloudflare to Telegram. Google Play handles the purchase and the rating sheet, on Google’s global infrastructure, including servers in the United States, under Google’s own terms and privacy policy.

9. Art and fonts

Some of Driftfin’s fish and decorations come from Fluent Emoji (Microsoft, MIT licence), some are art generated with Google Gemini, and names in the app are set in the Literata font (SIL Open Font License). They are bundled in the app; nothing is loaded from a server. Settings → Art credits lists them.

10. Changes to this policy

We may update this page when we add features or change providers. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be announced in the app’s Play Store release notes.

11. Contact

Questions, requests to delete data, or anything else:
xpnazar@gmail.com