Privacy Policy - EFlash Sticker

Last updated: 2026-08-17

Introduction

EFlash Sticker ("EFlash", "we", "our", "us") provides a mobile application for browsing public sticker packs, creating personal sticker packs, acquiring digital EFlash packs, and using supported stickers with compatible third-party apps through the EFlash sticker IME, Android floating sticker window and bubble, and sharing features.

1. Scope

This Privacy Policy explains how we access, collect, use, store, and share data when you use the EFlash Sticker mobile application.

2. Data we may process

Depending on how you use the app, we may process the following categories of data:

- Account and authentication data: email address, app user ID, sign-in provider, and limited authentication metadata when you use supported sign-in methods such as Google sign-in, email/password sign-in, or guest/anonymous access.

- Public catalog and app content data: public pack metadata, preview references, and app configuration needed to display public EFlash content.

- Purchase and entitlement data: EFlash account ID, pack and Google Play product identifiers, purchase intent and transaction status, offer or promotion identifiers, purchase timing, Google Play purchase token and its derived identifier, entitlement state, and cancellation, refund, consumption, or revocation signals needed to validate and restore a purchase.

- Conditional future subscription data: if EFlash offers subscriptions in the future, we may process the subscription product, offer or trial, renewal state, billing period, expiry, suspension, cancellation, and entitlement status returned by Google Play. No EFlash subscription is offered as of this policy's update date.

- Payment data: Google Play processes the payment method, final price, currency, and taxes. EFlash does not receive or store your complete bank card or bank account details.

- Local content and preferences: sticker images, edited assets, pack metadata, favorites, catalog ownership markers, and settings for the sticker IME or Android floating window stored on your device.

- Device, app, and service data: IP address, app instance identifiers, device/app metadata, and service diagnostic signals that our service providers collect automatically to secure, deliver, and maintain the app.

- Advertising data: ad request data, ad interaction data, diagnostics, and advertising identifiers when made available by the device and advertising SDKs.

3. How we use data

We may use data to:

- authenticate users and maintain sessions

- display public packs, previews, and app content

- prepare, validate, deliver, restore, and revoke digital purchase entitlements

- if subscriptions are offered in the future, determine whether the related benefits are active, suspended, cancelled, or expired

- save local packs, favorites, ownership markers, and preferences on your device

- display your local sticker catalog in the IME and Android floating window

- insert or share the sticker you select with a compatible app after your direct action

- operate, secure, and maintain the app and its supporting services

- serve, measure, and troubleshoot advertising

- detect abuse, resolve issues, and improve the service

4. Where data is stored

- Sticker files, personal pack data, favorites, settings, and the authorized EFlash catalog are stored locally in the app's private storage on your device.

- Account, entitlement, purchase-validation, revocation, and operational data may be processed by Google Firebase services used for authentication, Firestore storage, and Cloud Functions.

- Google Play processes purchase and, if offered in the future, subscription transactions and returns the technical status needed to grant or withdraw EFlash access.

- Advertising and related diagnostics may be processed by Google Mobile Ads.

- User-created sticker assets are not uploaded to our backend as a default core behavior of the current app flow.

5. Third-party services and data sharing

We do not sell your personal data.

We may share data only as needed with Google Play and service providers that support authentication, app infrastructure, purchase validation, public content delivery, or advertising. We may also disclose data if required by law, to enforce our terms, or to protect rights, safety, or the security of the service.

The EFlash sticker IME does not read or store what you type, text around the cursor, received messages, passwords, or clipboard content. It displays the local sticker catalog and attempts to insert only the sticker you select. Sensitive fields and incompatible content types are blocked by the app's IME policy.

The Android floating sticker window and bubble display the local catalog and open Android's system sharing flow after you select a sticker. They do not read the conversation, contacts, notifications, clipboard, or identity of the recipient.

For an insertion or share, Android may give the receiving app temporary read access to a local content URI for the selected sticker. Once the content is handed off, the receiving app applies its own terms and privacy practices and may keep a separate copy that EFlash cannot remotely retrieve or delete.

6. Account deletion and your choices

If you use an app account, you can request account deletion from within the app where that option is available.

For privacy or deletion-related requests, you may also contact us at:

contact@eflash.app

Deleting the EFlash account removes the account and EFlash entitlements under our control and ends restoration through that account. It does not delete Google Play's separate purchase history. If EFlash offers subscriptions in the future, account deletion will not cancel one; it must be managed separately in Google Play.

You can also remove locally stored app content by using available in-app deletion controls, uninstalling the app, or clearing the app's local storage on your device. These actions cannot remove copies already handed to another app.

7. Data retention

- Local content stored on your device remains there until you delete it, uninstall the app, or clear app data.

- Account and active entitlement data is kept while needed to provide and restore the service and is removed from our user systems when account deletion is completed, subject to the limited exceptions below.

- Terminal purchase intents, processing locks, and Google Play real-time developer notification events are retained for up to 90 days. A still-pending purchase intent may be retained until it is resolved.

- Purchase receipts, token-derived records, and cancellation or void records may be kept for as long as reasonably necessary to validate delivery, prevent duplicate purchases, complete consumption, apply refunds or revocations, prevent fraud, and meet legal obligations.

- If subscriptions are offered in the future, their status is processed while needed to provide the subscribed benefits and to handle renewal, cancellation, expiry, disputes, and mandatory recordkeeping.

- Google Play, Firebase, and advertising providers retain data under their own policies and legal obligations.

- If we need to retain limited information for security, fraud prevention, or legal compliance after a deletion request, we may do so only to that extent.

8. Security

We use reasonable technical and organizational measures to protect data and rely on secure transmission mechanisms where supported by our service providers. However, no method of transmission or storage is completely secure.

9. Children's privacy

The app is not directed to young children. If you believe that a child has provided personal data inappropriately, contact us so we can review the situation.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be made available at:

https://eflashstickers.web.app/privacy_policy

11. Contact

Publisher: EFLASH SOLUTION

Privacy contact: contact@eflash.app