daruma - make your wish

Privacy policy

1. Introduction

We are committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information when you use the Daruma - Make your wish mobile application ("the App").

2. Information We Collect

Information you provide directly

  • Email address — collected when you create an account.

  • Password — stored as a one-way encrypted hash (bcrypt). We never store or transmit your password in plain text.

  • Wishes and daruma names — the personal intentions and names you attach to your darumas within the App.

  • Daruma customisations — paint colours, stroke data, and eye states you create.

Information we do not collect

We do not collect:

  • Your real name, phone number, or physical address.

  • Location data.

  • Device identifiers or advertising IDs.

  • Usage analytics or behavioural tracking data.

  • Payment information (the App is currently free).

3. How We Use Your Information

We use the information we collect solely to:

  • Create and maintain your account.

  • Store and synchronise your daruma collection across sessions.

  • Allow you to recover access to your account via password reset (if configured).

We do not use your information for advertising, marketing, or any form of profiling.

4. How We Store Your Information

Your account and daruma data are stored in a secured database. Passwords are hashed using bcrypt (12 rounds) and are never recoverable — not even by us.

We retain your data for as long as your account is active. If you delete your darumas or your account, the associated data is removed from our systems.

5. Sharing Your Information

We do not sell, rent, or share your personal information with third parties, except:

  • Service providers — we may use infrastructure providers (e.g. cloud hosting) to operate the App. These providers process data only on our behalf and under confidentiality obligations.

  • Legal requirements — we may disclose information if required by law or to protect the rights and safety of users.

6. Data Security

We use industry-standard practices to protect your information, including encrypted password hashing and secure HTTPS transport. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you.

  • Correct inaccurate information.

  • Delete your account and associated data.

  • Object to or restrict certain processing.

To exercise any of these rights, contact us at the email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the App after changes constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact:

Email: [support@bearapplimited.com]