CodeNap Privacy Policy
In short
- Your progress stays on your device. There are no accounts or logins.
- Telemetry is optional and starts turned off.
- On Android, the extra hint may show a Google AdMob ad, always non-personalized.
- We don't sell your data or build advertising profiles.
1. Who we are
CodeNap is a programming game published by Lucas Rivaldo, under the BraInstall brand, in Brazil. He is the controller of the data the app processes. Privacy contact: contato@codenap.app.
2. What stays on your device
Your progress, settings and answers stay on your device: in the Android app, or in your browser's storage in the web version. We don't receive this data.
On Android, Google's automatic backup may keep a copy of your progress (only the progress file) in your Google account and move it to a new device. You control this in Android's settings. If you use "Export progress" in Settings, the file goes wherever you choose.
3. Reminder
The reminder is a local notification created on your device. The notification permission is only requested when you turn the reminder on, and nothing is sent to us.
4. Telemetry (optional)
Telemetry starts turned off, and the app asks before turning it on. If you agree, the app sends usage events with a random identifier created at installation, which doesn't reveal who you are. The events are: opening the app, starting or solving a level, using a hint, solving or sharing the daily puzzle, ritual, placement, review, reported puzzle, ad shown, reward received and support purchase (product name only). We never send your name, email or the code you build.
- Purpose: to understand where puzzles get too hard and improve the game.
- Legal basis: your consent (LGPD, art. 7, I). You can withdraw it in Settings at any time. When you turn it off, events not yet sent are deleted from the device.
- Retention: we keep events for up to 12 months and then delete them.
- Provider: telemetry isn't active yet, and for now no event leaves the device. Before turning it on, we will name the provider and the country where the data is stored here, and update the date of this policy.
5. Ads (Android only)
When you ask for an extra hint, the app may show a Google AdMob ad in exchange. There are never ads in the ritual or in Night Mode, and you don't need to watch ads to play.
Ads are always non-personalized and suitable for all ages. The app doesn't access the device's advertising ID, and Google's SDK only starts when you request the first ad.
To show the ad, measure it and prevent fraud, Google's SDK receives your IP address (which indicates your approximate region), device and app information, ad interactions and diagnostic data. Google handles this data under its own privacy policy: see how Google uses information from sites or apps that use its services.
In the European Economic Area, the United Kingdom and Switzerland, the app asks for your consent first, through Google's consent tool, and you can review it in Settings under "Ad privacy".
Legal basis: legitimate interest in providing the extra hint you asked for, always in the best interest of children and teenagers, and consent where the law requires it.
6. Support CodeNap
Supports are optional fixed-price tips. They give no in-game advantage and are processed by Google Play, under Google's privacy policy. We don't receive your payment details: the app only receives confirmation of which support was bought, to show the Supporter badge. If telemetry is on, the purchase event carries only the product name.
7. Website and remote configuration
The app downloads a small configuration file from codenap.app, which carries no data about you. The website, this policy and that file are served by Cloudflare, which, as with any internet access, receives your IP address and technical connection data to deliver the content and protect the site (Cloudflare's privacy policy). The website uses no cookies or analytics tools.
8. Sharing the daily puzzle
When you share your daily puzzle result, the app opens the system share menu with a text of the result. You choose the app and the recipient, and we receive nothing.
9. Contact by email
If you write to contato@codenap.app, the message passes through Cloudflare and arrives in a Gmail (Google) inbox. We use your email address and message only to reply, and keep them only as long as needed for that and to meet legal obligations.
10. Who we share data with
Only the providers above: Google (ads, Google Play, Android backup and email), Cloudflare (website, remote configuration and email forwarding) and, once it is turned on, the telemetry provider. We may also have to hand data to authorities when the law requires it. We don't sell data.
11. International transfers
Google, Cloudflare and the future telemetry provider may process data outside Brazil, including in the United States, with the safeguards set out in art. 33 of the LGPD.
12. Security
Data sent by the app travels over an encrypted connection (HTTPS/TLS). Since there are no accounts and no server holding your progress, it is protected by your own device's security. Access to telemetry data and emails is restricted to the controller. If a relevant security incident happens, we will notify Brazil's data protection authority (ANPD) and the people affected, as the law requires.
13. Children and teenagers
CodeNap follows Brazil's Digital Statute of Children and Adolescents (ECA Digital, Law 15.211/2025):
- it ships with the most protective settings by default: telemetry off and non-personalized ads;
- it doesn't build profiles to target advertising;
- it has no loot boxes, that is, paid surprise items;
- it has no chat or public profiles.
Parents and guardians can require approval for purchases in Google Play's family controls.
14. Your rights
Under the LGPD (art. 18), you can ask us to confirm whether we process your data, and for access, correction, anonymization, blocking or deletion, portability and information about who we share it with, and you can withdraw consent. Write to contato@codenap.app; we reply within 15 days. Since telemetry events carry no name or email, we may need some information to find your device's data. You can also complain to Brazil's National Data Protection Authority (ANPD).
In the European Economic Area, the United Kingdom and Switzerland, you also have the rights given by local law, including the right to complain to your country's data protection authority.
To delete what stays on your device, uninstall the app or clear the site's data in your browser. The Android backup can be deleted in your Google account.
15. Changes
We will let you know in the app when this policy changes in a relevant way. The date at the top always shows the version in force.