Last updated: 12 August 2026
This Privacy Policy explains what LeadBox collects when you use the apps LeadBox publishes on Google Play, and what happens with it. Games we publish are covered by a separate policy.
1. The short version
- There are no accounts. We do not know your name, email, or phone number.
- We do not collect your files, file names, or the list of apps you installed yourself.
- Usage analytics are off until you switch them on.
- Purchases go through Google Play; your card details never reach us.
- Ads come from third-party networks that have their own privacy policies (section 6).
2. How a device is identified
Because there are no accounts, a device is identified by the App Set ID issued by Google Play services — an identifier shared by every app published under the same developer account. That sharing is what lets a purchase made in one of our apps unlock features in another.
The App Set ID resets when you factory-reset the device, uninstall the last of our apps, or leave them unused for 13 months. We treat it as temporary and keep nothing that would outlive such a reset.
3. What we collect
| Data | Why | Optional |
|---|---|---|
| App Set ID | Tying purchases and unlocked features to your device | No — purchases cannot be restored without it |
| Country, derived from the IP address of the request | Ad configuration, aggregate statistics | No |
| App version, Android version | Compatibility and the minimum-supported-version check | No |
| Usage events — a screen opened, an action completed | Seeing which features are actually used | Yes — off by default |
| Purchase token, order ID, product ID, purchase state | Verifying the purchase with Google Play, restoring it after a reinstall | Only if you buy something |
| Play Integrity verdict | Rejecting forged purchases and tampered builds | No |
The IP address is used to derive a two-letter country code and is not stored next to your data.
4. What we deliberately do not collect
- File names, file paths, or the contents of your storage.
- The list of apps you installed yourself. Where our app acts on pre-installed system packages, only packages listed in our own published catalogue are reported back.
- Contacts, calendar, SMS, call log, microphone, camera, or precise location.
- Anything that identifies you as a person — no name, email, phone number, or advertising profile is stored on our servers.
5. Analytics
Analytics are opt-in. Nothing is sent until you enable them in the app's settings, and switching them back off stops collection immediately. An event carries a name from a fixed list, a small set of parameters, your country, the app version, and a timestamp. Raw events are kept for 90 days; after that only daily aggregates remain, and those cannot be traced back to a device.
6. Ads
Free versions show ads. We decide which ad networks are tried and in what order; the ads themselves are delivered by third-party SDKs built into the app — Google AdMob, Yandex Ads, Unity Ads and others, depending on the build. Those networks may use your device's advertising ID and their own identifiers to select and measure ads, under their own policies:
You can limit this in Settings → Google → Ads on your device: delete or reset the advertising ID and turn on the opt-out of ads personalisation. Buying the ad-free version removes those SDKs from the picture entirely.
From the networks we receive only aggregate reports — how many impressions were shown and what they earned.
7. Purchases
Purchases and subscriptions are processed by Google Play Billing. Payment details are handled by Google and never reach us. We store the purchase token, order ID, product ID, and current state so we can verify the purchase with Google, restore it after a reinstall, and honour the refunds and cancellations Google reports to us.
8. Who else sees the data
Our servers and the providers that run them (hosting inside the European Union). We do not sell data and do not share it for anyone else's advertising or profiling. We disclose data where the law requires it.
9. Deleting your data
You can have everything tied to your device deleted:
- in the app — Settings → Privacy → Delete my data;
- or by writing to privacy@lead-box.dev, quoting the App Set ID shown on the app's privacy screen.
We process the request within 30 days. It removes the install record, its usage events, and its entitlement links. Purchase records we are required to keep for tax purposes are retained with no device identifier attached.
10. Children
Our apps are not directed at children under 13, are not part of Google Play's Designed for Families programme, and we do not knowingly collect data from children. If you believe a child has sent us data, write to privacy@lead-box.dev.
11. Security
Traffic between the app and our servers is encrypted with TLS, requests are checked with Play Integrity, and database access is limited to the people who operate the service.
12. Changes
We update this policy whenever the data we collect changes, and always publish the current version at https://lead-box.dev/en/legal/privacy-apps. The date at the top is the date of the last change.
13. Contact
LeadBox — privacy@lead-box.dev