The Deciding Oracle
Privacy Policy
This policy explains how The Deciding Oracle handles data on Android and iOS, including versions distributed through Google Play and the App Store. Features may vary by platform and version; the information below applies when you use the corresponding feature. The app works without an account or internet connection. Signing in (with Google, or with Apple on iOS) and data sync are optional.
Data stored on your device
While signed out, typed questions, draw history, answer and topic IDs, time, time zone, usage counters, language, selected topic, and the seals you have earned (seal IDs and when you earned them) stay on your device. The developer does not receive this data through the sync feature while you are signed out.
When you choose to share, the app creates an image containing the question and answer in temporary storage and sends it to the app you select. After 24 hours, The Deciding Oracle's temporary images become eligible for best-effort cleanup on the next launch or share; the operating system may also clear its cache.
Account and data sync
If you choose to sign in with Google or Apple, we use Google's authentication and cloud storage services to process account information, including your user ID, the sign-in provider's identifier, email address, display name, and basic profile information. Settings, counters, sync information, history, typed questions, and the seals you have earned (seal IDs, when you earned them, and when you asked your first question) are stored on our servers to sync across signed-in devices.
With Sign in with Apple, Apple may share your real email address or an anonymous relay address of your choice, and your name only on the first sign-in; the app saves that name as your account display name. When you delete an account that uses Sign in with Apple, the app asks you to reauthenticate with Apple and sends a one-time authorization code to our service to revoke the app's access to your Apple account.
The app uses Google's app attestation service (Apple App Attest or DeviceCheck on iOS; Google Play attestation on Android) to confirm that requests to our servers come from the genuine app, such as purchase verification or Apple sign-in revocation. This service may process app/device attestation information, IP addresses, and request information to prevent abuse.
Topic purchases and gift codes
When you buy or restore topics through Google Play or the App Store, the app sends product identifiers and transaction evidence to our verification service, which checks them with Google Play or Apple (App Store Server API) to grant or restore ownership, even without an app account. Payments are handled by Google or Apple; we do not receive payment-card details. Verified evidence and ownership are protected on your device; the server stores only a hashed evidence identifier, product, status, and check time. When Apple reports that an App Store transaction was refunded, revoked, or had a refund reversed, the server stores the hashed original transaction ID with a refund/revocation flag and an update time. Purchase ownership belongs to the store account (Apple ID or Google Play account) that made the purchase and is not tied to your app sign-in account. App attestation and cloud infrastructure may process app/device information, IP addresses, and request information to prevent abuse.
Gift codes are issued and redeemed through the store. Restoration requires the same store account used to purchase or redeem and an internet connection. Deleting your app account does not refund or delete store transactions or remove cached purchase ownership. Server purchase-check records become eligible for automatic deletion 90 days after the last check; deletion may be delayed. Refund/revocation flags are kept so that refunded purchases are not unlocked again; they are not linked to an app account. This retention period does not expire a one-time purchase.
Advertising
The app uses Google Mobile Ads. The ads SDK may process IP address/approximate location, device or advertising identifiers, app interactions, and diagnostics for advertising, measurement, and fraud prevention. On Android, you can manage or delete your advertising ID in your device settings. On iOS, the app does not request tracking permission through App Tracking Transparency, so the advertising identifier (IDFA) is not available to the app or the ads SDK, and the app requests only non-personalized ads; we do not use data to track you across other companies' apps or websites. In regions where the law requires consent (such as the European Economic Area and the UK), the app shows Google's consent form before loading ads; you can review your choice under Settings → Ad privacy choices when that option appears. Permissions and choices may vary by operating system and app version.
Crash diagnostics
The app uses Firebase Crashlytics to receive crash reports and improve stability. When a failure occurs, the service may process stack traces, crash time and app state, app version, operating-system and device information, Crashlytics Installation UUID, Firebase Installation ID, and session ID. We do not intentionally attach your email address, account ID, or typed questions to reports. Firebase begins removing crash stack traces and associated identifiers from live and backup systems after 90 days.
App usage analytics
The app uses Google Analytics to measure screen views and interactions such as drawing an answer, selecting a topic, or requesting to share. Events sent by the app do not contain typed questions, answer content or IDs, page numbers, email addresses, or account IDs. Google may process device or app-instance identifiers, IP address/approximate location, device information, app interactions, and diagnostics to provide analytics. Measurement may occur while you are signed out; the app does not set an Analytics user ID or custom user properties.
Remote configuration, ratings and feedback
The app uses Firebase Remote Config to receive a few general settings (such as the support email address and how often to ask for a rating); when settings are fetched, Firebase may process the Firebase Installation ID and basic app and device information. The app occasionally requests the built-in App Store or Google Play rating dialog; any rating or review you submit is handled by Apple or Google, and the app cannot tell whether you rated it. If you send feedback by email, we receive your email address, what you write and the prefilled details (app version, operating system, language) — you can delete these before sending — and use them only to reply and improve the app.
Fonts and this website
The app uses Google Fonts and may download Be Vietnam Pro from Google's servers when it is not cached. This policy website is hosted on Vercel and does not install its own analytics, advertising cookies, or tracking scripts. Vercel may process IP addresses and request metadata for security and operations.
Retention, security, and deletion
Data on your device remains until you delete it in the app, clear the app's data, or uninstall it. Synced history remains until you clear history or delete your account; other synced data, including seals, remains until you delete your account. Device- or app-instance-level analytics data is subject to Google's retention and deletion controls; deleting a sync account does not automatically delete analytics data that is not linked to that account. We use secure connections and access controls to protect data. Google, AdMob, Firebase, Apple, and Vercel apply their own retention policies. These providers may process data on servers outside your country, under the safeguards they publish.
In the app, open Settings → Account and sync → Delete account. After you reauthenticate, your account and data will be deleted from our servers. Related data on the current device will also be deleted. For Apple accounts, the app's access to your Apple account is also revoked. See the account-deletion instructions.
Your rights
We process account and sync data to provide the features you request; analytics, diagnostics, and abuse-prevention data based on our legitimate interest in operating and improving the app; and personalized advertising only with your consent where the law requires it. Depending on where you live, you may have the right to access, correct, export, or delete your data, to object to or restrict processing, to withdraw consent, and to complain to a data protection authority. You can view your history and delete data in the app; for other requests, including data export, email us at the address below. We do not sell your personal data for money; data processed by advertising partners is described in the Advertising section.
Children, changes, and contact
The app is a general-audience entertainment utility and is not designed specifically for children. If this policy changes, the effective date on this page will be updated.
For privacy questions or assistance, email thedecidingoracle.support@muka-studio.com or use the support details on the app's App Store or Google Play listing. Do not share questions, email addresses, or account data publicly.