Privacy Policy — Apps with Advertising

1. Who we are

Little Green Studios (“we”, “us”, “our”) develops the apps to which this Privacy Policy applies. We are based in the United Kingdom.

For the purposes of UK GDPR and EU GDPR, Little Green Studios is the data controller for personal data processed in connection with these apps. Our contact details are in Section 18.

2. Scope of this policy

This policy applies only to the following apps:

• Fasting Timer for Android, published on Google Play (package little.green.studios.app.fastingtimer.app).
• Fasting Timer for Garmin, a Connect IQ companion app for Garmin watches, which works together with the Android app.
• Archery Scores for Android, published on Google Play (package little.green.studios.app.archeryscores.app).
• Space Explorer for Android, published on Google Play (package little.green.studios.app.spaceexplorer.app).

These are general-audience apps. Our educational apps for children aged 3–13 are covered by a separate policy, which you can read at littlegreenstudiosapp.co.uk/privacy-policy.html. If an app is not listed above, this policy does not apply to it.

Fasting Timer is a timer. It is not a medical device and does not give dietary or medical advice.

Archery Scores is a scorebook. The handicaps and classifications it works out are its own calculation from the published Archery GB scheme, offered to help you follow your shooting; they are not an official record, and nothing in the app is submitted to Archery GB, to a club, or to any records officer.

3. Information kept on your device

Each app stores on your phone the information it needs to do its job, and this is where almost everything lives.

3.1 Fasting Timer

Fasting Timer stores the following on your phone:

• The fasting plans you use or create, including any names you give them.
• Your current session: which plan is running, which stage you are in, and when it started.
• Your history: each completed stage, when it was planned to start and when it actually started and ended. The app keeps your most recent 2,000 stages.
• Your settings, such as notification style, snooze length and widget appearance.

This information is stored in the app’s private storage on your phone. It is never sent to us, and we have no server that could receive it. The app contains no code of its own that transmits it over the internet. The only exceptions are the Garmin link described in Section 6, which stays between your own devices, and Android’s own backup service, described in Section 13.

Fasting Timer has no accounts. You never give us your name, email address or any other contact details to use it.

3.2 Archery Scores

Archery Scores stores the following on your phone:

• Your rounds: which round you shot, the date, every end and every arrow’s score, and — where you recorded them — each arrow’s position on the face.
• Anything you typed about a round: the venue name in the “where” field, and your own notes. This is free text you write yourself; the app does not read your device’s location, and asks for no location permission.
• Your equipment setups and their sight marks, and any target faces you defined yourself.
• Your archer profile — bow style, gender category and age group — which is what the classification tables are read against. It is a category, not a date of birth.
• Your settings, and, if you entered one, your Anthropic API key. The key is encrypted with a key held in the Android Keystore, which never leaves the device, so even a full copy of the app’s storage yields unusable ciphertext.
• One rectified photograph of the empty target boss per round, if you took one, used to help the on-device reader tell arrows from old holes. It is deleted with the round.
• The photograph each end was scanned from, while Keep target photos is switched on in Settings — it is on to begin with, and switching it off stops any further ones being kept. Each is stored at a reduced size, a few hundred kilobytes rather than the several megabytes the camera produced, and is deleted when you delete the round. An end you tapped in by hand has no photograph.

This all lives in the app’s private storage, and on a phone that is signed out with cloud features switched off it never leaves the device.

Archery Scores works fully without an account, and that is how it starts. If you choose to sign in, sync, back up to your own cloud storage, or use cloud score detection, see Section 7, which is the only part of any of these apps where your own data travels further than your own devices.

3.3 Space Explorer

Space Explorer is a 3D atlas of the universe built from public scientific data. You do not create anything in it, so it stores very little about you. On your phone it keeps:

• Your settings: which layers are shown (orbits, labels, asteroids, galaxies), whether it may download imagery and on which networks, and how much storage downloaded imagery may use.
• A note of the last app version whose “What’s new” message you dismissed, so it is not shown twice.
• A cache of map imagery it has downloaded (described below), so places you have visited load instantly and work offline next time.
• An optional high-resolution imagery pack, which Google Play downloads after installation like any other part of the app.

The app has no account and no sign-in, and nothing you do in it is sent to us. What you search for, tap or fly to stays on your phone.

Imagery downloaded from NASA. When you zoom in close to Earth, the Moon, Mars, Mercury and several other worlds, the app fetches the full-resolution maps directly from NASA’s public map servers: NASA GIBS (gibs.earthdata.nasa.gov) for Earth and NASA Solar System Treks (trek.nasa.gov) for the other bodies. Each request is an ordinary, anonymous web request for one map tile. It carries no identifier, account, advertising ID or information about you; like any web request, it reveals your device’s IP address to NASA and which tile of which world was asked for. Nothing passes through a server of ours. You choose in Settings → High-resolution surfaces whether this happens always, only on Wi-Fi, or never; with “never” the app uses only the imagery built into it.

Downloaded tiles are kept in the app’s own storage on your phone, up to the limit you choose (512 MB to begin with), oldest first out. Settings → Clear downloaded imagery deletes them all.

4. Information collected automatically

All the Android apps include the same two Google Firebase services, which collect limited technical information automatically. Neither receives your fasting plans, sessions or history, your rounds, arrows or notes, or anything you look at in Space Explorer.

Archery Scores also uses two further Firebase services — Authentication and Cloud Firestore — but only if you choose to sign in and switch sync on. Those are not automatic, and they are described in Section 7.2.

4.1 Crash reports (Firebase Crashlytics)

If the app crashes, Crashlytics sends us a report so we can find and fix the fault. A report contains the technical details of the crash, your device model, Android version and app version, and a randomly generated installation identifier. It does not contain your fasting data, your scores, or what you were looking at.

4.2 Usage statistics (Firebase Analytics)

Firebase Analytics records events that the Firebase SDK collects automatically, such as the app being opened and how long sessions last, together with your device model, Android version, app version, approximate country, and an app-instance identifier. We do not add any events of our own, and we do not send any of your fasting activity, any of your scores, or anything you search for or visit in Space Explorer, to Analytics. We look at this information only in aggregate, to understand how many people use the app and on what devices.

Analytics runs from the first time you open the app. It is not tied to the advertising choice described in Section 5.

4.3 Legal basis

We rely on our legitimate interests in keeping the app stable and understanding, in aggregate, how it is used.

5. Advertising

The Android apps are free and are funded by a banner advertisement shown at the bottom of the screen, served by Google AdMob. They all handle advertising the same way, through the same code. In Space Explorer the banner sits below the 3D view, never on top of it. The Garmin watch app shows no advertising and contains no advertising code.

5.1 What the advertising service collects

To show, measure and protect ads against fraud, Google AdMob collects information from your device, such as your IP address, device and app information, and interactions with ads. Where you allow it, this includes your device’s advertising ID, which Google may use to show you ads based on your interests.

5.2 How your age decides the kind of ads you see

The app asks Google Play’s Age Signals service whether your account is a supervised account belonging to a young person. The answer decides how ads are treated:

If the check cannot be completed for any reason, the app always falls back to the most protective setting rather than the least.

5.3 Consent

Where consent is required by law — including in the UK and the European Economic Area — adults are asked through Google’s User Messaging Platform before personalised ads are shown. You can decline, and you will still be able to use every feature of the app. Young people are never shown this choice, because they only ever receive non-personalised ads.

5.4 Legal basis

Personalised advertising relies on your consent. Non-personalised advertising relies on our legitimate interests in funding a free app.

5.5 Controlling ads

• To delete or reset your advertising ID, open your phone’s Settings → Privacy → Ads (the exact wording varies by device).
• To learn more about how Google uses information from apps that use its services, see How Google uses information from sites or apps that use our services.

6. The Garmin watch app (Fasting Timer only)

Fasting Timer for Garmin shows your fasting countdown on a Garmin watch. Your phone stays in charge of your fast; the watch only mirrors it.

6.1 What is stored on the watch

When your phone tells the watch about your fast, the watch keeps exactly this, and nothing else:

This is held in Connect IQ’s private storage for the app. It is overwritten every time your phone sends an update, and it is deleted when you uninstall the watch app. The watch does not store your history or statistics.

6.2 What travels between your phone and your watch

Two kinds of message travel between the two apps, over the Bluetooth connection that Garmin Connect Mobile already maintains between your own devices:

• Phone to watch: the information in the table above. While a fast is running, the phone sends it whenever something changes and about once a minute otherwise, so the watch stays accurate.
• Watch to phone: a request to start the next stage, optionally saying how many minutes ago the change happened, or a request to resend the current information. Each carries a one-time reference number, so that a request repeated after a dropped connection is only acted on once.

Nothing is sent to Little Green Studios, to Garmin’s servers, or to any other third party. The watch app has no network code; it makes no web requests and contacts no server. It requests the Connect IQ Communications permission solely to talk to Fasting Timer on your phone.

The watch app does not request the Sensor, Sensor History, Position or Activity permissions, and cannot read your heart rate, location, activities or health metrics.

6.3 Legal basis

This processing is necessary to provide the feature you have chosen to use by installing both apps and pairing your watch.

7. Archery Scores: camera, accounts and cloud features

Archery Scores is a scorebook that can also read a target face from a photograph. This section covers the parts of it that go beyond storing scores on your phone. Every feature below except the camera is switched off until you switch it on, and the app is fully usable with all of them off — which is how it arrives, and how it stays unless you decide otherwise.

7.1 The camera and target photographs

You can score a round by tapping the face by hand, or by photographing the target and letting the app read it. The camera is therefore optional: the permission is requested at the moment you first use the scan feature, and declining it leaves every other part of the app working.

• A photograph you take while scoring is processed entirely on your phone, by an image-processing library built into the app.
• It is then kept with the end it scored, so you can check a score against the paper afterwards, for as long as the round exists. This is the Keep target photos setting, on to begin with; turn it off and no further photographs are kept. Either way the photograph stays in the app’s private storage on your phone, and is deleted with the round.
• You may choose to take one reference photograph of the empty boss at the start of a round, which helps the reader tell this end’s arrows from old holes and patches. That one image is kept in the app’s private storage and is deleted when you delete the round.
• The app does not ask for access to your photo gallery, your media or your files, and cannot see photographs it did not take itself.
• No photograph leaves your phone unless you use the cloud detection described in Section 7.4, which is off by default and asks you to turn it on explicitly.

7.2 Signing in and syncing your scores (optional, off by default)

If you shoot with more than one device, you can sign in and have your rounds synced so they appear on both. This is the one feature in any of our apps where data you created reaches a server we operate, so it is worth being precise about it.

• Signing in uses your Google account, through Android’s own Credential Manager. We do not see your password. What we receive is a Firebase user record containing an account identifier, the email address of the Google account you chose, and the display name on it if there is one.
• With sync switched on, each round is written as a single document to Google Cloud Firestore, in a Firebase project we control, under a path belonging to your own account identifier. The document contains the whole round: the round type and date, every end and every arrow with its score and recorded position, the venue name you typed, your own notes, and the bow style.
• Photographs are never synced — not the target photographs, not the reference image. Neither are your Anthropic API key or your settings.
• Rounds are reconciled by whichever copy was edited most recently, so the last change you made on any device is the one that survives.
• For this copy we are the data controller, and we can technically read it as the operator of the project. We do not look at individual archers’ scores, and we do not use them for anything other than giving them back to you on your own devices.
• Switching sync off stops anything further being sent, and signing out ends the app’s access to the account. Neither of those erases the copy already stored — to have that deleted, see Section 14.

7.3 Backing up to your own Google Drive or OneDrive (optional, off by default)

Separately from sync, you can take a backup — a single file holding every round, every arrow and any target faces you defined, and no photographs. You can save it wherever your phone’s file picker offers, or hand it to one of two cloud destinations:

• Google Drive, into the app’s own hidden application folder. The app asks for only that one narrow permission: it cannot see, list or read the rest of your Drive, and no other app can read what it writes there.
• Microsoft OneDrive, into this app’s folder, after signing in through Microsoft’s own sign-in library.

In both cases the file goes into your storage account, not ours. We never receive it and hold no copy of it. It is yours to delete from your own Drive or OneDrive whenever you like, and while it sits there it is covered by that provider’s terms and your own account settings.

7.4 Cloud score detection with your own API key (optional, off by default)

When the on-device reader cannot make sense of a photograph, you can ask for a second opinion from Anthropic’s Claude. This requires two deliberate steps from you, and until both are done the app does not offer the option at all:

1. Entering your own Anthropic API key in Settings. There is no key of ours in the app, and no account with us to use it.
2. Switching on “Allow photos to leave the device”.

With both in place, nothing is still sent automatically: it happens only when you tap retry with cloud on a particular photograph. At that point your phone sends, directly to Anthropic’s API over an encrypted connection, that one photograph together with a description of the target face and how many arrows you shot at it. The reply is a set of arrow positions, which the app shows you to confirm or correct before anything is saved.

Two things follow from this that are in your favour, and one that you should know:

• Nothing is routed through any server of ours. We operate no proxy for this, we never see the photograph, and we hold no copy of it.
• Because the request is made with your own API key, your use of that service is a matter between you and Anthropic, governed by the terms and privacy policy of the account the key belongs to — not by this policy. Anthropic’s policy is linked in Section 11.
• A photograph of a target face may incidentally include whatever else was in shot, such as a shooting line, a club hall or a person standing near the boss. Only you decide which photographs to send.

Deleting the key, or switching the toggle off, stops the feature completely and immediately.

7.5 Sharing a scorecard

You can share a round as text, a spreadsheet file or a scorecard image through Android’s standard share sheet. It goes to whichever app you pick — mail, a messaging app, your own files — and we are not involved in, and never see, what you share or who you share it with.

7.6 Legal basis

Reading a target from the camera is necessary to provide the feature you chose to use. Signing in, syncing, cloud backup and cloud detection each rely on your consent, which you give by switching that feature on and can withdraw at any time by switching it off.

8. Device permissions

Each Android app asks only for the permissions it needs, and uses each one only for the purpose shown.

8.1 Shared by all the Android apps

• Internet and network state: used by the advertising and Firebase services in Sections 4 and 5, and — in Archery Scores only, and only once you switch them on — by the sync, backup and cloud detection features in Section 7, and in Space Explorer by the NASA imagery downloads in Section 3.3.
• Advertising ID: see Section 5.

8.2 Fasting Timer

• Notifications: to tell you when a stage is due.
• Alarms and reminders (exact alarms): so a stage alert arrives on time rather than minutes late.
• Run at startup: to re-arm your stage alarm after the phone restarts.
• Vibration: for stage alerts, if you have vibration switched on.
• Nearby devices, and running a foreground service: requested only if you have a Garmin watch paired. While a fast is running, the app keeps an ongoing notification with your countdown so that Android does not put it to sleep, which is what lets a stage change you confirm on your watch reach your phone straight away. The app does not scan for, connect to or read from any Bluetooth device itself; Garmin Connect Mobile manages the connection.

8.3 Archery Scores

• Camera: to photograph the target face so the app can read where your arrows went. Asked for at the moment you first use that feature, and not needed to score by hand — see Section 7.1.

That is the whole list. Archery Scores asks for no notification, alarm, location, microphone, storage or media permission of any kind.

8.4 Space Explorer

Space Explorer asks for nothing beyond the permissions in 8.1. Google Play’s download library, which fetches the optional high-resolution imagery pack, may show a download notification and run in the background while it does so. The app asks for no camera, location, microphone, contacts, storage or media permission of any kind.

9. Information we do not collect

Across all of these apps:

• We do not collect your location. None of the apps requests a location permission or reads your device’s position. Archery Scores lets you type the name of a venue, which is text you write yourself and which you can leave blank.
• We do not collect your telephone number, home address or date of birth. Archery Scores asks for an age group because the classification tables are organised by one; it is a category, never a date of birth.
• We do not access your microphone, your contacts, your photo gallery, your media or your files.
• We do not read health or fitness data from your phone or your watch.
• We do not use any of it for advertising or profiling, and we do not sell personal data. Nothing you record or look at in any of the apps is passed to the advertising services in Section 5.

Two of these used to be absolute and no longer are, so they are spelled out instead:

• Your name and email address: we receive none in Fasting Timer, which has no account. In Archery Scores we receive the email address and display name of the Google account you pick only if you choose to sign in for sync — see Section 7.2.
• Your camera, and the things you record: Fasting Timer uses no camera and we never receive your fasting data. Archery Scores uses the camera to read a target, on your phone, and we never receive those photographs. We receive your rounds only if you switch sync on, and even then never a photograph.

10. How information is shared

We do not share your personal data with anyone other than the service providers listed in Section 11, which process it to provide their services. We may also disclose information if required to do so by law.

Two cases in Archery Scores are worth separating out, because in them data goes somewhere at your own instruction rather than ours: a backup you send to your own Google Drive or OneDrive goes into your storage account, and a photograph you send for cloud detection goes to Anthropic under your own API key. In neither case do we receive, hold or pass on anything — see Sections 7.3 and 7.4.

11. Third-party services

Garmin Connect Mobile is an app you install and manage yourself. The messages it carries for Fasting Timer travel directly between your own phone and watch.

The Firebase Authentication, Firestore, Google Drive, OneDrive and Anthropic rows apply only if you switch on the matching feature in Archery Scores. With all of them off, the app contacts none of those services. Google Drive, OneDrive and Anthropic are reached with your own account or key, so what they do with what you send them is governed by the agreement between you and them.

12. Children and young people

These are general-audience apps and are not directed at children. Because young people may still use them — and archery in particular is a sport many juniors shoot — the apps never show personalised ads to anyone that Google Play identifies as under 18, and treat anyone identified as under 13 as a child under COPPA (see Section 5.2).

Archery Scores records an age group so that it can read the right classification table — the junior tables differ from the senior ones — and nothing else about age. It is stored on the phone, and we receive it only in the sense that a synced round names the bow style and round shot, not the archer’s age.

Google Play only reports an age for supervised accounts, such as those managed through Google Family Link. A young person using an unsupervised account will not be identified, which is one reason we recommend Family Link for children’s devices.

If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Data retention and backups

• On your phone (Fasting Timer): your fasting data stays until you delete it. You can erase your history at any time in Settings → Clear all history, and uninstalling the app deletes everything it stored.
• On your phone (Archery Scores): your rounds, setups and settings stay until you delete them. Deleting a round removes it from the app and deletes every photograph kept with it, both the reference image and each end’s own. Its score rows are then held back, hidden from everywhere in the app, as a record that the deletion happened — which is what lets another device you sync with be told to remove its own copy. They are erased for good once that has been passed on, or, if you never switch sync on, when you uninstall the app. Uninstalling deletes everything the app stored, including your saved API key.
• Synced rounds (Archery Scores): a round you synced stays in Cloud Firestore until it is deleted. Switching sync off stops new copies being sent but does not remove those already there; Section 14 explains how to have them erased.
• Cloud backups (Archery Scores): a backup file stays in your own Google Drive or OneDrive until you delete it. We cannot delete it for you, and taking a new backup replaces the app’s own file rather than accumulating copies.
• Photographs sent for cloud detection (Archery Scores): retained, if at all, by Anthropic under the terms of your own account with them. We never hold one.
• On your phone (Space Explorer): your settings stay until you change them or uninstall the app. Downloaded imagery is kept up to the storage limit you set, removing the oldest first, and is deleted by Settings → Clear downloaded imagery or by uninstalling.
• On your watch: the cached stage information is replaced on every update and deleted when you uninstall the watch app.
• Crash reports: kept by Firebase Crashlytics for 90 days.
• Usage statistics: event-level data is kept by Firebase Analytics for no more than 14 months.
• Advertising data: retained by Google under its own policies.

Android backup

All the Android apps allow Android’s own backup service. If you have backup switched on for your Google account, Android may include an app’s stored data in your device backup — your fasting history, your rounds, arrows and the photographs kept with them, or Space Explorer’s settings — which Google stores in your account and restores when you set up a new phone. This backup belongs to your Google account; we cannot access it. Space Explorer’s downloaded imagery is deliberately left out of backups — it can be downloaded again, and could be gigabytes in size. You can turn it off in your phone’s Settings → Google → Backup.

One detail worth knowing if you use cloud detection in Archery Scores: your Anthropic API key is encrypted with a key that lives in your phone’s hardware-backed keystore and is deliberately not backed up. A restored backup therefore cannot yield a working key — the app will simply ask you for it again.

14. Your rights and choices

Under UK GDPR and EU GDPR you have the right to access, correct or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

For Fasting Timer, for Space Explorer, and for Archery Scores with its cloud features switched off, we hold no account of yours and never receive what you record, so these rights are mostly exercised on the phone itself:

• To see your data: it is what the app shows you. Archery Scores can also export any round, or write a complete backup file you can keep.
• To erase it: clear your history, delete the rounds or clear Space Explorer’s downloaded imagery in the app, or uninstall it. For exactly what deleting a round does and does not remove straight away, see Section 13.
• To change your advertising choice or reset your advertising ID: see Section 5.5.
• To stop data reaching your watch: uninstall the watch app, or turn off Bluetooth.

If you signed in to Archery Scores and synced your scores, we do hold a copy, and the rights above apply to us directly:

• To stop further syncing: switch sync off, or sign out, in the app’s settings.
• To get a copy: the app already holds it; use Settings → Backup → Save to file for a complete machine-readable export of every round and arrow.
• To have the synced copy and your account deleted: email us at the address in Section 18 from the account you signed in with, asking us to delete your Archery Scores data. We will delete your stored rounds and your authentication record, and confirm when it is done, within 30 days.

For anything else, including requests about data held by Firebase, contact us and we will help.

15. International data transfers

Google, which provides the advertising and Firebase services, may process data outside the UK and the European Economic Area, including in the United States. Where it does, those transfers are protected by safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

The same applies to the optional features in Archery Scores: Microsoft, if you back up to OneDrive, and Anthropic, if you send a photograph for cloud detection, may each process that data in the United States. Anthropic is reached with your own API key, so that transfer happens under your own agreement with them rather than ours.

Space Explorer’s imagery requests go to NASA’s servers in the United States, which therefore receive your device’s IP address with each request (Section 3.3). You can stop them with the “never” setting.

16. Security

What you record is kept in the app’s private storage, which other apps cannot read, and everything the apps send over the internet is encrypted in transit.

Because we never collect your fasting data, there is no copy of it on our side to be exposed. The same is true of Archery Scores unless you sign in and switch sync on; if you do, your synced rounds are stored in Google Cloud Firestore, reachable only by your own signed-in account and by us as the operator of the project, and protected by Google’s infrastructure security and by server-side rules that allow a round to be read or written only by the signed-in account it belongs to.

Your Anthropic API key, if you enter one, is encrypted before it is stored, using a key generated inside your phone’s hardware-backed keystore which the app itself cannot extract. It is never synced and never included in a crash report, and an Android backup can only carry away the encrypted form: the key that would unlock it stays in the keystore of the phone that made it, so a restored copy is unreadable and the app asks you for the key again.

17. Changes to this policy

If this policy changes, we will publish the new version at this address and update the date at the top. If a change is significant, we will also mention it in the app’s release notes.

18. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

• Email: privacy@littlegreenstudiosapp.co.uk
• Post: Little Green Studios Ltd, 3rd Floor, 86–90 Paul Street, London, England, EC2A 4NE
• Company number: 999H9SGMC00014  ·  Ref: 001611/369

We aim to respond to all privacy-related enquiries within 5 business days.