Origami Step by Step: Koyash Privacy Policy
Effective date: 19 October 2026
This policy explains what data Origami Step by Step: Koyash ("Koyash", "the app") collects, why, who receives it, and the choices you have. The app is made by LoopLab ("we", "us"). If you have a question or want to make a request, write to [email protected].
Summary
- You don't create an account. We don't ask for your name, email address or phone number.
- Your folding progress and settings stay on your device.
- We use a few service providers for analytics, crash reports, subscriptions and ads. They receive device-level data, described below.
- Ads may be personalized only if you allow it. On iOS you choose through Apple's App Tracking Transparency prompt, and in the EEA, UK and Switzerland through a consent form.
Data stored on your device
The app saves your progress, saved models, onboarding answers (such as your folding level) and settings in local storage on your device. We don't receive this data. It stays until you use Reset app data in Settings or delete the app.
Data we and our providers collect
Usage analytics (PostHog)
We record how the app is used, for example which screens you open, which models you start and finish, and whether you are a subscriber. Each install gets a random identifier. We don't link it to your name or contact details. The data is processed by PostHog on servers in the European Union.
Purpose: understand which parts of the app work and improve it.
Crash and performance reports (Sentry)
When the app crashes or runs slowly, it sends a technical report: device model, operating system version, app version, the error and the steps in the app that led to it. The reports don't include personal data such as IP-based identifiers or your device name.
Purpose: find and fix bugs.
Purchases (RevenueCat, Apple, Google)
Subscriptions are sold and billed by the App Store or Google Play. We never see your payment details. RevenueCat receives a random app user ID and your purchase history (which product you bought, when, and whether it is active) so the app can unlock premium features and restore purchases.
Purpose: provide the subscription you paid for.
Advertising (Google AdMob and Google User Messaging Platform)
Users without a subscription see ads served by Google AdMob. AdMob may collect your device's advertising identifier (IDFA on iOS, Advertising ID on Android), the app-specific vendor identifier, coarse location derived from your IP address, ad interactions, and diagnostic data. Google uses this to serve, measure and, if you allow it, personalize ads.
- On iOS, the advertising identifier is shared only if you tap Allow on the App Tracking Transparency prompt. You can change this inSettings → Privacy & Security → Tracking.
- In the EEA, UK and Switzerland, Google's consent form asks whether ads may be personalized. You can change your choice from the app's settings.
- On Android, you can reset or delete your Advertising ID in your device settings.
How Google uses this data is described at https://policies.google.com/technologies/partner-sites.
Purpose: fund the free version of the app.
Feedback and problem reports
If you send feedback or report a problem, we receive your message together with your RevenueCat app user ID, so we can look up your purchase if the report is about one. The message is stored on a server we operate. Don't include personal details in the message unless you want us to have them.
Purpose: answer you and fix what you report.
What we don't do
- We don't sell your data for money.
- We don't ask for or collect your name, email, contacts, photos, precise location or health data.
- We don't use your data to make decisions that have legal or similarly significant effects on you.
Legal bases (EEA, UK and Switzerland)
| Processing | Legal basis |
|---|---|
| On-device storage, purchases | Performance of our contract with you |
| Crash and performance reports | Legitimate interest in a working app |
| Usage analytics | Legitimate interest in improving the app |
| Personalized ads | Your consent |
| Non-personalized ads | Legitimate interest in funding the free version |
| Feedback and problem reports | Legitimate interest in answering you |
Where we rely on legitimate interest, you can object at any time by writing to us.
How long we keep data
| Data | Retention |
|---|---|
| On-device data | Until you reset the app data or delete the app |
| Crash and performance reports | 90 days |
| Usage analytics | Up to 1 year |
| Feedback and problem reports | Until the matter is resolved, plus 12 months |
| Purchase records | As long as the app stores and tax and accounting laws require |
| Advertising data | Under Google's retention policies |
International transfers
Our providers may process data outside your country, including in the United States. Where data leaves the EEA, UK or Switzerland, the transfer relies on an adequacy decision or the European Commission's Standard Contractual Clauses.
Your rights
Depending on where you live, you may have the right to:
- access the data we hold about you, or get a copy of it
- correct it
- delete it
- restrict or object to its processing
- withdraw consent, without affecting processing that happened before
- complain to your local data protection authority
Because we don't know who you are, include your RevenueCat app user ID or the date and content of a feedback message with your request, so we can find your data. We answer within 30 days.
California residents
Under the CCPA/CPRA, you have the right to know, delete and correct personal information, and to opt out of its "sale" or "sharing". We don't sell personal information for money. Showing personalized ads through AdMob can count as "sharing" for cross-context behavioral advertising. You can opt out by declining the App Tracking Transparency prompt on iOS, or by deleting your Advertising ID on Android. We won't treat you differently for using these rights.
Children
The app is not directed at children under 13, or under 16 in the EEA. We don't knowingly collect personal data from them. If you believe a child has sent us data, write to us and we will delete it.
Security
Data sent by the app travels over encrypted connections (HTTPS). Access to our provider accounts and our feedback server is limited to the people who run the app.
Changes
If we change this policy, we will update the effective date at the top. If the change is significant, we will also tell you in the app.
Contact
LoopLab
[email protected]