Privacy notice · Burnout Hero

1. Controller and contact

Steffen Übelein Sole trader operating as KAN KAI WORKS Nürnberger Straße 14 96114 Hirschaid, Germany Email for privacy enquiries: support@kankaiworks.de

2. App principles and functions

BURNOUT HERO (Android package: de.kankaiworks.hero) is a game without a proprietary game account, advertising, first-party gameplay analytics or crash-reporting system, or cloud saves. Game code, images, fonts and music are bundled. The first workday is free and can be replayed without limit; further workdays are unlocked through a one-time Google Play purchase.

The app uses Google Play Billing for purchases, purchase-status queries and restoration, with Internet and network access for these functions. Local rendering uses Android System WebView and AndroidX WebKit. A separately provided web version is additionally covered by the website privacy notice.

3. Local data on your device

Best scores and music, sound, vibration and language settings are saved in local WebView storage. The current round is held in memory and is not fully saved for resumption; a new round starts after process termination.

The native purchase adapter also stores the signed original purchase receipt received from Google Play and its signature in app-private storage. This may contain the product identifier, purchase status, order information and purchase token. The receipt is not exposed to game JavaScript, score export or screenshot sharing, and the app does not log it.

Separate review access stores only a local entitlement state. It supports an expressly arranged app review, is not a game account and does not create a purchase. It remains technically separate from the Google Play receipt and can be ended in the app. The app does not transmit this local review entitlement to a proprietary server.

Regular Android cloud backup is disabled for the app. This does not rule out manufacturer-specific direct device transfer on every Android configuration. Check device backup and transfer settings. Clearing app data or uninstalling removes internal storage; exported files and copies outside the app require separate deletion.

4. Advertising and privacy choices

There are no ads, advertising SDKs, advertising profiles or advertising-consent manager. A purchasing decision does not change this.

5. Purchases and restoration

The full game is unlocked through a non-consumable one-time purchase using Google Play Billing. Google Play handles payment. The implemented purchase client does not receive full credit card, bank or other payment instrument details.

The app processes product, purchase-status and receipt information supplied by Google Play, including the purchase token, to verify and acknowledge the purchase and provide or restore the unlock. On establishing the Play connection, it queries product information and existing purchases. The signed receipt is verified locally and cached for use without a connection. There is no proprietary purchase-verification server.

Cancelled or pending purchases do not unlock the full game. A confirmed purchase can be restored using the same entitled Google Play account. A successful current Play query showing no entitlement removes the local purchase cache. Later refunds or revocations cannot be detected offline until a new successful connection to Play.

Google's purchase services and included transport components may process technical operation and diagnostic information such as app/library version, device and connection details, operations, errors and timing for purchase processing, reliability and abuse prevention. This is separate from the game's own saved data. Google's processing is additionally covered at https://policies.google.com/privacy and under “Recipients, security and international transfers” below.

6. Voluntary reviews

The app does not use an embedded Google In-App Review SDK or trigger an automatic review request. After a verified purchase, a deliberately selected button can open the official Google Play Store listing in an external application. Separate review access does not enable this purchase-dependent feature.

Leaving a review is optional. The app receives neither the stars nor the review text or confirmation that a review was submitted. Google processes your input under its store rules; public reviews may be visible in the store, while closed-test feedback may be shared privately with the developer. You can manage or delete this information through Google Play or your Google Account.

The app does not store a state for an automatic review request.

7. Other data flows, accounts and external content

You may import/export a best-score JSON document and save/share PNG images of the game’s own window. Android opens a document picker or share sheet. You choose the file, location and receiving app; a cloud document provider or receiving app can transmit and retain the chosen file under its own terms. This is not an automatic save upload to KAN KAI WORKS. No general storage permission is requested for it. The game does not read camera, microphone, contacts, location or health data. Pulse, blood pressure and ECG are fictional calculated values of the game character, not measurements of the person playing. VIBRATE and MODIFY_AUDIO_SETTINGS provide optional haptics and system media volume control. Deliberately chosen support/website links open an external application. Website access is separately covered at https://kankaiworks.de/datenschutz/ .

The app does not send push notifications.

No proprietary game account is created, so the app has no proprietary game-account deletion function. A Google Play account is managed under Google's rules.

8. Purposes, legal bases and provision of data

Where the GDPR applies, processing necessary to provide requested game functions and to perform, verify and restore a purchase you initiate is based on Article 6(1)(b). Contract-related support uses the same basis. Other enquiries are handled under Article 6(1)(f), in our legitimate interest in responding appropriately to your request.

Necessary security, abuse-prevention and specific legal-claim measures may rely on Article 6(1)(f), where the legal conditions and balancing of interests permit it. Statutory retention relies on Article 6(1)(c). Where processing requires your consent, Article 6(1)(a) applies and consent may be withdrawn for the future. Independent processing by external providers is additionally governed by their notices.

Purchase data are needed to provide the purchased full game; without a purchase, the free first workday remains playable. Contact, reviews, export and sharing are optional. The game does not make automated decisions with legal or similarly significant effects.

Best scores arise from your use of the app or a best-score import you choose. Settings result from your interactions with the app. Google Play provides purchase and receipt data. Support information comes from your voluntary contact.

9. Recipients, security and international transfers

Scores, settings and local entitlement verification remain in app-private storage. The WebView loads bundled game content using a local asset address and blocks other WebView resources; this restriction does not prevent the separately intended native Google Play connections.

Google receives data for the purchase and store functions described. For users in the European Economic Area and Switzerland, Google Ireland Limited is generally responsible for Google services. Payments may additionally involve the Google entities and payment providers identified in the purchase dialog and applicable payment terms. Google explains its processing of account, purchase, device and connection data at https://policies.google.com/privacy .

Processing outside the European Economic Area is possible. Google describes applicable adequacy mechanisms, standard contractual clauses and how to obtain information about safeguards at https://policies.google.com/privacy/frameworks . Account settings and deletion tools are available at https://myaccount.google.com/ .

KAN KAI WORKS receives information you voluntarily provide to support. On deliberately chosen export or sharing, your selected document provider or recipient processes the file; its own notices also govern international processing. The app flows described do not include a sale of player data. Absolute security is not guaranteed.

10. Retention and deletion

When you contact us at support@kankaiworks.de, we process your sender address, your message and the information you provide to handle your request. We use goneo Internet GmbH (goneo) as our email service provider. We have adopted a policy to delete ordinary resolved support requests, including their attachments, no later than 6 calendar months after the case has been closed, and earlier if the data is no longer necessary. The case closure must be documented. An active-mail workflow with documented case closure and deadline checks is configured. Historical on-time deletions or unattended server deletion have not been evidenced. The controller has confirmed an effective processor agreement for the goneo account and contracted services; the signed document has not been independently inspected. The maximum residual retention in provider backups after mailbox deletion has not been confirmed; recovery windows do not establish that maximum. Only where specific records are subject to statutory retention requirements or are necessary for the establishment, exercise or defence of specific legal claims do we retain the necessary data for the relevant purpose and period. This exception does not extend the retention of all support requests as a whole.

Email provider address: goneo Internet GmbH, Dresdener Straße 18, 32423 Minden, Germany.

Internal scores and preferences remain until app data are cleared or the app is uninstalled. Imported copies become part of the local scores; exported JSON/PNG files and copies in other apps require separate deletion there. PNG files prepared for sharing are kept in private app cache: on a subsequent share, the app selects its own files older than 24 hours for deletion. This is not guaranteed deletion exactly after 24 hours. Clearing app data/uninstallation removes internal cache. The document/share service you select sets its own retention. Contact support@kankaiworks.de about erasure of support data.

The local purchase receipt remains until app data are cleared, the app is uninstalled, or a successful current Play query finds no entitlement. Local review access can be removed using “End review access”. Google retains purchase and billing data under its own rules; retention and deletion information is available at https://policies.google.com/technologies/retention . If we receive individual purchase records subject to statutory retention, only those records are kept to the required extent and for the required period.

11. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may withdraw consent at any time for the future, without affecting the lawfulness of earlier processing. Contact support@kankaiworks.de. Mandatory additional rights under the law applicable where you live remain unaffected. We assess requests against the data actually held by us; we have no remote access to game saves held solely on your device.

12. Right to complain

You may complain to a data protection supervisory authority. The Bavarian State Office for Data Protection Supervision (BayLDA) is particularly relevant to a private business at our location: https://www.lda.bayern.de/de/beschwerde.html .

13. Changes and versions

Last updated: 15 October 2026. This notice describes the Android features stated here. A separate web version also requires the website notice. We update this information when actual processing or services change.

The public and in-app versions are compared by revision date and content.