Privacy notice for BALANCI
Last updated: 16 October 2026 · Revision: BALANCI-PRIVACY-20261016-R3
This privacy notice applies exclusively to BALANCI by KAN KAI WORKS on Android, app ID de.kankaiworks.balanci. The public version is available at https://kankaiworks.de/en/balanci/datenschutz/.
1. Controller and contact
Steffen Übelein Sole trader operating as KAN KAI WORKS Nürnberger Straße 14 96114 Hirschaid, Germany Email for privacy enquiries: support@kankaiworks.de
2. App principles and functions
The game has no proprietary account. Google Play uses the account signed in there for purchases and reviews. The Android game does not send rounds or measurement recordings to KAN KAI WORKS and has no proprietary analytics, advertising-profile or cloud-save platform. It uses Google Play Billing 9.1.0 for a one-time unlock and In-App Review 2.0.2 for optional reviews. OS backup is a separate flow.
3. Local data on your device
Local data include progress, results, language, difficulty and audio preferences, verified receipts and the once-only review-request state. Progress/results/language/audio are in private WebView storage. Difficulty and audio/menu preferences are also in private Android preferences to survive restart; that audio copy does not contain system volume. Signed receipts and review state are also in private Android preferences. The live tower simulation remains in memory. The game code does not upload saves to a proprietary server. Clearing app data or uninstalling removes internal saves/settings; clearing cache alone does not remove all saves. The Android package permits OS backup under default rules and has no custom exclusions. Eligible private files/preferences, including the audio copy, may be backed up/restored depending on Android version, device, account and selected backup service. This is not a BALANCI-operated cloud service. Deleting local app data or uninstalling does not automatically erase backups managed outside the app; manage them separately with the backup provider.
A separate local review-access feature may be available for store review. Its activation state is held in private Android preferences separately from verified purchases. It makes regular content available for review without a purchase and does not alter earned progress or Google Play purchase ownership. Activating it does not trigger a review request. Its local state remains until review access is ended or local app data are deleted; possible OS backups are also subject to the rules described above.
4. Advertising and privacy choices
BALANCI has no ads, advertising SDK, mediation or game advertising-data processing. No proprietary advertising/tracking consent manager is used. Practice and purchased play are ad-free. Purchases/reviews are separate optional actions; purchasing does not stop Google Play processing.
5. Purchases and restoration
A non-consumable one-time Google Play unlock is intended for regular levels; practice is available without purchase. A build without purchase configuration cannot execute purchases. The Play dialog price applies. Google handles payment/account; the app receives purchase state, package/product identifiers, a signed receipt with token, order identifier/time where present, acknowledgement and entitlement data, not card/bank details. The app verifies signature/package/product locally, acknowledges only PURCHASED and caches acknowledged signed receipts in private Android preferences. Restore queries Play; offline only a valid previously acknowledged local receipt is accepted. A successful authoritative ownership query removes entitlement and cached receipt if no valid purchase is confirmed. An offline-unknown revocation becomes known only on a later successful query. No proprietary validation server is used. Billing also handles technical operation/diagnostic information for connection, ownership queries, errors and reliability, potentially without a new purchase. See https://policies.google.com/privacy and the payment dialog.
Google Play billing also processes technical connection, usage and diagnostic information: billing operations and results, errors and timing, app/library versions, session and operation identifiers, and device/system information such as model, manufacturer, Android version, language, country, time zone and network type. The receiving service also technically receives the IP address. This supports transaction handling, troubleshooting, security and reliability. Processing can occur when connecting or checking existing ownership, even without a new purchase. It is separate from gameplay analytics operated by KAN KAI WORKS.
The specific Billing library also places app, library and Android versions, device/hardware and operating-system characteristics, language and country settings, time zone, network type and mobile-network operator code (MCC/MNC), and memory sizes in its operation/diagnostic context. The context also uses an identifier generated randomly for each BillingClient session. The operator code and country setting are not GPS coordinates requested by the game. The app requests no location or advertising-ID access permission for this. These details support the billing-service operations described above; KAN KAI WORKS does not use them for proprietary gameplay analytics. The Google service also processes and retains/deletes data under the Google notices linked below.
6. Voluntary reviews
After the first regular win following verified purchase, the app may attempt a Google Play review once. It persists the occasion/request state before the API call and cannot determine actual dialog display or whether a review was submitted. Google processes optional stars/text with encrypted transmission. Reviews may be public in the store or privately shared with the developer in closed testing; users can delete them through Play/Google Account. After verified purchase, the manual review button opens the Play listing. Reviews are optional, unrewarded and not required for progression or entitlement.
7. Other flows, accounts and external content
There is no proprietary account or cloud save; Google Account/OS backup use their provider settings. The game has no proprietary analytics, crash-reporting or push platform and does not access camera, microphone, contacts or location. The inspected Android package requests no corresponding access permission or advertising-ID permission. This alone does not mean all SDKs process no data. Android assets are bundled; a separate hosted Web build with access logs/browser storage is outside this notice. Voluntary contact supplies the information you send. Deliberately opened websites/store links have their own notices; website processing is separate at https://kankaiworks.de/datenschutz/.
Google Play can add an installation and licence check to an app when distributing it; this is present in the Play version inspected here. It is intended to prevent unauthorised redistribution and can operate offline for a time. After prolonged offline use, a connection to Google Play may be needed again. Google platform processing is separate from local game progress and the full-game purchase entitlement; Google privacy information also applies.
8. Purposes, legal bases and provision
Where personal data are involved and GDPR applies, necessary game and settings data support the service you request (Article 6(1)(b) GDPR). This also covers requested purchase verification and restoration where offered. Contract-related enquiries use the same basis; other enquiries rely on Article 6(1)(f), our legitimate interest in providing a proper response. Statutory retention relies on Article 6(1)(c). Processing necessary for specific legal claims or abuse prevention may rely on Article 6(1)(f), subject to balancing the interests involved. Processing requiring consent relies on Article 6(1)(a); consent may be withdrawn for the future. Independent processing by external providers is additionally governed by their notices. Contact and reviews are optional. The game does not make automated decisions with legal or similarly significant effects.
For children and parents: Your progress and settings are saved on your device. The game has no online account of its own and no public chat. Ask a parent to help if you want to buy something or leave a review through Google Play. Google processes data for those services, and device backups can contain additional copies. You or your parent can write to support@kankaiworks.de about privacy. Parents can configure purchase approval and family controls in Google Play.
Contact and reviews are optional. Practice requires neither a proprietary account nor a purchase. Regular levels require a valid unlock.
Game and settings data arise from your use of the app. Google Play supplies purchase and entitlement information. The technical information described for Google Play and backup services comes from the app, the operating system and the service connection.
9. Recipients, security and transfers
Recipients are KAN KAI WORKS for voluntary support requests, goneo as email provider and Google for the Play services described. An operating-system backup service you choose may receive eligible app data. BALANCI has no proprietary save-game or purchase server.
Local data are held in private Android app or WebView storage. Purchase receipts are checked for signature and package/product binding; this is not proprietary encryption of the receipts. The game does not sell saves or use them for behavioural advertising.
For users in the European Economic Area and Switzerland, Google Ireland Limited is generally responsible for Google services. Payments may additionally involve the Google entities and payment providers identified in the purchase dialog and applicable payment terms. Their account and platform processing is governed by their own privacy notices. Google may also process data outside the EEA. Details of applicable adequacy mechanisms, standard contractual clauses and safeguards are available at https://policies.google.com/privacy/frameworks. Google explains retention and deletion criteria at https://policies.google.com/technologies/retention; account settings and deletion tools are available at https://myaccount.google.com/.
10. Retention and deletion
When you contact us at support@kankaiworks.de, we process your sender address, your message and the information you provide to handle your request. We use goneo Internet GmbH (goneo) as our email service provider. We have adopted a policy to delete ordinary resolved support requests, including their attachments, no later than 6 calendar months after the case has been closed, and earlier if the data is no longer necessary. The case closure must be documented. An active-mail workflow with documented case closure and deadline checks is configured. Historical on-time deletions or unattended server deletion have not been evidenced. The controller has confirmed an effective processor agreement for the goneo account and contracted services; the signed document has not been independently inspected. For the email provider’s backup, retention and restoration information, please refer directly to goneo: https://www.goneo.de/hilfe/vertrag/backup and https://www.goneo.de/datenschutz. A recovery window is not a promise about the maximum residual retention of every backup copy. Provider-specific details are supplied by goneo. Only where specific records are subject to statutory retention requirements or are necessary for the establishment, exercise or defence of specific legal claims do we retain the necessary data for the relevant purpose and period. This exception does not extend the retention of all support requests as a whole.
Email provider address: goneo Internet GmbH, Dresdener Straße 18, 32423 Minden, Germany.
Deletion of ordinary support cases covers the relevant messages, attachments and sent replies, and copies managed by us, including copies in trash and archive folders. Backup copies held by service providers follow their regular backup and overwrite cycles; immediate erasure of every backup copy is not promised.
Local progress/results/language/difficulty/audio/menu preferences and review-request state remain until removal by the intended functions, app-data deletion or uninstallation. A successful authoritative Play query additionally removes a receipt when no valid purchase is confirmed. Simulation state remains in RAM. The audio copy does not include system volume. OS backups and their deletion follow the selected provider and are not automatically removed by local deletion. Specific statutory purchase/accounting records are kept only as required. Google describes user-deleted, time-limited and longer legal/security retention at https://policies.google.com/technologies/retention; account controls are at https://myaccount.google.com/. Reviews can be deleted through Play/Google Account. Retention of Billing diagnostics follows Google’s purposes and deletion criteria; device backups follow the chosen backup provider’s rules. Uninstallation does not automatically erase Google account/purchase/review data. The six-calendar-month policy concerns ordinary publisher support cases, not all Google/backup data.
11. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time for the future, without affecting the lawfulness of earlier processing. Contact support@kankaiworks.de. Mandatory additional rights under the law applicable where you live remain unaffected. We assess requests against the data actually held by us; we have no remote access to game saves held solely on your device.
12. Right to complain
You may complain to a data protection supervisory authority. The Bavarian State Office for Data Protection Supervision (BayLDA) is particularly relevant to a private business at our location: https://www.lda.bayern.de/de/beschwerde.html.
13. Changes and versions
Last updated: 16 October 2026. This notice describes the Android features stated here. A separate web version also requires the website notice. We update this information when actual processing or services change.
The public and in-app versions are compared by revision date and content. The existing BALANCI privacy address is retained.
Google Play: age information and parental approvals
BALANCI uses Play Age Signals 0.0.4 for age-appropriate access and applicable regional requirements. At launch, on a new check or when returning to the app, it first requests the sharing status from Google Play. Depending on the region and Play settings, Google Play may display its own prompt. Only when Play permits sharing does the app request reported age bounds, their source and parental approval status for significant app changes. Raw values are processed solely in memory during response evaluation and then discarded. The app does not read the installation identifier or approval date. It does not write age information to files, saves, preferences or logs, or send it to KAN KAI WORKS, a proprietary server or other apps. It is not used for advertising, marketing, profiling or analytics.
Content remains the same for all intended age groups. Missing age information is not adult or parental approval. An optional refusal to share is respected. If Play reports required verification, or pending or declined approval of significant changes, the app blocks play with a route to Google Play and a new check. An unresolved or unavailable query prevents new purchases; safe free content and previously verified purchase rights remain available unless an explicit restriction is known. A failed refresh does not clear an explicit restriction already known in the same session. These decisions do not delete receipts or saves. Separate reviewer access cannot replace age verification or parental approval and does not establish purchase or rating eligibility.
Google Play handles its own verification, sharing and Family Link processes under Google's notices. The app does not ask for a birth date or identity document. Approval of significant changes is not general purchase consent. Family and purchase controls remain with Google Play; revocation of app approval is enforced by Play or Family Link. BALANCI does not operate an additional server for revocation lists. Only action decisions needed in the current session remain in the app, without age bands or source values. Further information: https://developer.android.com/google/play/age-signals/overview and https://policies.google.com/privacy.