Privacy Policy
Lucky Echo Labs, Inc.
Effective Date: 6 August 2026
Last updated: 7 August 2026
Apps covered by this policy
- Go Steps Daily
- Dot Connect
- Arrow Rush
- Bible Trivia Journey
- Candydoku
- TriviaPeak
- Flashback Trivia
- Impossible Museum
- Samurai Timber Co.
This policy applies to all mobile applications published by Lucky Echo Labs.
This Privacy Policy describes how Lucky Echo Labs, Inc. ("Lucky Echo Labs," "we," "us," or "our") processes, uses, and shares the personal information we collect from or about you when you download, access, play or otherwise use all mobile applications published by Lucky Echo Labs that link to this Privacy Policy (each an "App," collectively the "Apps"), or otherwise interact with us online at almondparty.com (i.e., via customer support, your online player profile, other social media, or community or other channels we may operate from time to time which link to this policy) or offline.
We encourage you to read this Privacy Policy carefully and review it regularly for any updates to better understand how we handle your personal information.
What Personal Information We Collect and How We Collect It
When you download, register an account, access, play or otherwise use our Apps, we or third parties working on our behalf may collect personal information about you and your interactions with our Apps, including personal information we collect:
Directly from You
When you register your account we will collect certain information directly from you, including:
- Identifiers: such as your name, alias or online identifier (e.g., username), email address, password, or phone number and any other information you choose to provide us.
- Payment or Financial Information: such as payment information to facilitate in-App purchases. In-App purchases and subscriptions are processed through the Apple App Store or Google Play Store, and subscription management is handled by our service provider RevenueCat. If you make such purchases, we receive personal information about your device, account, and payments, receipt of which will depend on your privacy settings with those third-party marketplaces.
- Commercial Information: such as in-App products or subscriptions purchased or obtained.
Automatically
We may automatically collect certain information about how you interact with our Apps, including:
Device Information
Such as the type of device(s) you are using to access our Apps, IP address, unique device identifiers, advertising identifiers (such as Apple's Identifier for Advertising (IDFA) and Identifier for Vendors (IDFV), or Google's Advertising ID), ad identifiers, other unique identifiers created by us which are associated with your account, and general location data (i.e., the country or region that you are accessing our Apps from, based on identifiers such as IP address).
Usage Information
Such as your progress through the App(s), milestones, rewards, and other similar achievements; your participation in races and live events; gameplay events and interactions; session time, duration, number of days played (i.e., your streak calendar); session frequency; and other analytics and diagnostic data. We use Amplitude to collect and analyze gameplay events.
In-App Purchases and Subscriptions
We use RevenueCat to manage in-app purchases and subscriptions. RevenueCat processes transaction data, purchase history, and receipt information on our behalf. Please refer to RevenueCat's Privacy Policy for more information.
From Third Parties
We may collect certain personal information about you from third parties including from:
Third-Party Login Providers
We may allow you to register or log in using Apple Sign In, Google Sign In, or Facebook. We also plan to offer registration via email address and phone number. If you decide to register through or otherwise grant us access to a third-party social media service, we may collect personal information associated with your third-party account, such as name and email address. The data we receive is dependent on that third party's policies and your privacy settings on that third-party site.
Apple HealthKit and Google Health Connect — Go Steps Daily Only
In order to use Go Steps Daily, you must connect the App to either Apple HealthKit or Google Health Connect, and permit it to access or read your pedometry information (i.e., your "steps"), as well as other information such as the distance you have walked, the flights you have climbed, and the active and basal energy you have burned. Based on your permission, this process will run in the background when the app is not open to refresh and keep your progress up to date. The information you provide to Apple HealthKit or Google Health Connect is governed by their respective terms of service and privacy policies. We store your daily step counts and related activity data on our secure servers solely to provide you with statistics and historical progress within Go Steps Daily. We will only share this information with service providers as necessary to operate the app.
A Note Regarding Sensitive Personal Information
Certain of our Apps may allow you to provide information from which sensitive categories of personal information may be inferred. We use such information solely to provide the features you request, and you may modify or remove it at any time. We do not use sensitive personal information for profiling, nor do we sell or share it for cross-context behavioral advertising purposes.
Go Steps Daily: We collect and store health and activity data (step counts and related pedometry data) from Apple HealthKit or Google Health Connect solely to operate Go Steps Daily. This data is not used for advertising or shared with advertising partners.
AI Image Generation and Facial Data
Lucky Echo Labs does not collect, store, or process facial data from users. Any Lucky Echo Labs App's AI image generation feature uses publicly available celebrity photographs from Wikipedia as reference material. No user photographs or biometric data are used.
BabySleuth — AI-Generated Imagery; Face Data. BabySleuth does not collect, access, or process facial data from users. The app does not use the device camera, TrueDepth sensor, Face ID, or ARKit. The app's "Make a Baby" feature generates synthetic AI baby images using publicly available celebrity photographs sourced from Wikipedia. These images are processed by Google Gemini, a third-party AI service, solely to produce fictional imagery. No user photographs or biometric data are used at any point. Generated images are returned to the user's device and are not retained on our servers.
How We Use Your Information
We and third parties working on our behalf may use the information we collect about you for various purposes, including:
- To provide, maintain, improve, and enhance the functionality of our Apps, including to develop new features, products or Apps, and otherwise to fulfill the purpose(s) for which your personal information was collected.
- To analyze your use of and interaction with our Apps in order to improve the same, personalize your experience, provide recommendations, and otherwise to better understand your needs.
- To provide you with the information or services you request.
- To contact you, respond to your requests, and otherwise to communicate with you, including via push notifications (sent using OneSignal and Firebase Cloud Messaging).
- To market and advertise to you, including sending promotional communications via email, push notification, or other means, to show you in-App advertisements, social media, and on other platforms or websites for products and/or services tailored to your interests.
- To measure and attribute app installs, opens, in-app events, and marketing campaign performance, using attribution and user-acquisition partners such as Adjust, AppLovin, Meta, TikTok, Apple Search Ads, Google Ads, Unity Ads, Mintegral, and other campaign partners.
- To manage in-app purchases and subscriptions through RevenueCat.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, as necessary or appropriate to protect the rights, property or safety of us or others, and to respond to law enforcement requests or as otherwise required by applicable law, court order, or government regulation.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
- As otherwise described to you when collecting your personal information, for any other purpose for which you provide consent, or as otherwise required or permitted by law.
Why and To Whom We May Disclose Your Information
Service Providers and Vendors that assist in operating our business, developing our Apps, or fulfilling the purposes described in this Privacy Policy. We have entered into data processing agreements with our service providers as required by applicable law, including GDPR Article 28. These include:
| Provider | Purpose |
|---|---|
| Amplitude | Gameplay analytics and product analytics |
| Adjust | App install attribution, event attribution, campaign measurement, fraud prevention, and marketing performance reporting |
| RevenueCat | Subscription and in-app purchase management |
| OneSignal | Push notification delivery |
| Firebase Cloud Messaging / Apple APNs | Push notification infrastructure |
| Firebase Analytics (Google) | In-app analytics and user engagement measurement; data processed by Google per Google's Privacy Policy |
| Firebase Crashlytics (Google) | Crash reporting and app stability monitoring; collects device state, stack traces, and identifiers at time of crash |
| AppSignal | Application monitoring and error tracking |
| Amazon Web Services (S3, CloudFront, SES) | Data storage, content delivery, transactional email |
| Cloudflare | Network security, performance, and traffic routing; processes request metadata including IP addresses |
| Supabase / Render | Backend infrastructure and database services |
| Resend | Transactional email delivery |
| Google reCAPTCHA | Bot and fraud prevention; collects behavioral and device data (e.g., mouse movements, browser fingerprints) sent to Google per Google's Privacy Policy |
Our website uses Google reCAPTCHA to assess whether interactions are human. reCAPTCHA collects behavioral signals and device characteristics and transmits them to Google. This processing is governed by Google's Privacy Policy.
User Acquisition and Campaign Measurement Partners: We may disclose device identifiers, advertising identifiers, IP address, general location, app and device information, click and impression data, install/open data, in-app event data, postback data, and campaign performance data to user-acquisition and campaign measurement partners to advertise our Apps on third-party apps, websites, and platforms; measure installs, opens, and other campaign events; optimize campaign performance; prevent fraud; reconcile billing; and generate aggregated campaign reporting. These partners may include:
| Partner | Purpose |
|---|---|
| AppLovin | User acquisition, campaign optimization, and app-install advertising |
| Meta | User acquisition, campaign optimization, and app-install advertising |
| TikTok | User acquisition, campaign optimization, and app-install advertising |
| Apple Search Ads | App Store search advertising and campaign measurement |
| Google Ads | User acquisition, campaign optimization, and app-install advertising |
| Unity Ads | User acquisition, campaign optimization, and app-install advertising |
| Mintegral | User acquisition, campaign optimization, attribution support, fraud prevention, and campaign measurement |
| Adjust | Attribution, campaign measurement, postbacks, fraud prevention, and performance reporting |
Ad Monetization Partners: We disclose device identifiers, advertising identifiers, and usage data to ad monetization partners to serve interest-based advertisements in our Apps and to measure advertising performance. Our current ad monetization partners include:
| Network | Purpose |
|---|---|
| AppLovin MAX | Ad mediation platform and ad monetization |
| Google AdMob / Google Ads | Display, interstitial, rewarded, banner ads, ad mediation, and ad monetization |
| Unity Ads / ironSource | Rewarded video, interstitial ads, ad mediation, and ad monetization |
| Moloco | Programmatic advertising and ad monetization |
| Liftoff Monetize | Rewarded video, interstitial, banner ads, and ad monetization |
| Digital Turbine | App install advertising, ad monetization, and programmatic advertising |
| InMobi | Programmatic advertising and ad monetization |
| Pangle | Programmatic advertising and ad monetization |
| Yandex | Programmatic advertising and ad monetization |
| BidMachine | Programmatic bidding and ad monetization |
| Mintegral | Rewarded video, interstitial ads, and ad monetization |
Each advertising partner has its own privacy policy governing the use of information collected through their technologies. We encourage you to review their policies.
- Successors: Successor(s) of our business, relating to all or part of the business, to evaluate a proposed transaction or sale, reorganization, merger, acquisition, or other change of control.
- Law Enforcement: Law enforcement or other third parties to comply with the law or in response to a subpoena, court order, government request, or other legal process.
- With Your Consent: Any other sharing or disclosure with your consent.
Data Retention
We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected. Our general retention schedules are:
| Data Type | Retention Period |
|---|---|
| Account and profile data | Duration of active account plus 3 years after last activity or account deletion |
| Gameplay and analytics data | 3 years |
| Health and activity data (Go Steps Daily) | Retained for the duration of your account. Deleted upon your request per our deletion procedures. We do not warrant deletion on any other schedule. |
| Advertising identifiers and session logs | 13 months |
| Purchase and transaction records | 7 years (accounting and tax obligations) |
| Customer support communications | 3 years |
| Push notification tokens | Until opt-out, uninstall, or account deletion |
We may retain certain data longer if required by applicable law or for legitimate business purposes such as fraud prevention or legal proceedings. When personal information is no longer needed, we delete or anonymize it.
Notice to Residents of California
This section is provided pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and implementing regulations (collectively, "CCPA"), and applies to California residents.
In the preceding 12 months, we have collected, used, and disclosed the categories of personal information described in "What Personal Information We Collect" above. We have disclosed such information to the categories of third parties identified in "Why and To Whom We May Disclose" above.
Sale and Sharing for Cross-Context Behavioral Advertising. We do not sell personal information for money. However, our disclosure of device identifiers, advertising IDs, and usage data to advertising partners for interest-based advertising may constitute "sharing" under the CCPA. You have the right to opt out of this sharing at any time. To opt out, use the "Do Not Sell or Share My Personal Information" toggle in each App's settings. This toggle operates independently of Apple's App Tracking Transparency (ATT) prompt — even if you previously allowed ATT tracking, you may still exercise your CCPA opt-out separately, and vice versa. We also honor Global Privacy Control (GPC) opt-out signals received on our website at almondparty.com. Note that GPC is a web browser signal and does not apply within mobile Apps; the in-App equivalent is the "Do Not Sell or Share" toggle described above.
We do not knowingly sell or share the personal information of individuals under 16 years of age.
We do not use or disclose sensitive personal information for purposes other than those permitted under the CCPA.
Notice to Residents of the European Economic Area, United Kingdom, and Switzerland
This section applies if you are located in the European Economic Area ("EEA"), the United Kingdom ("UK"), or Switzerland, and is provided in accordance with applicable data protection law, including the General Data Protection Regulation ("GDPR").
Data Controller. Lucky Echo Labs, Inc. is the data controller for personal information collected through our Apps. Contact: privacy@almondparty.com.
Lawful Bases for Processing.
| Processing Activity | Lawful Basis |
|---|---|
| Providing and operating the Apps | Performance of a contract (Art. 6(1)(b)) |
| Account registration and management | Performance of a contract (Art. 6(1)(b)) |
| Gameplay analytics and product improvement | Legitimate interests (Art. 6(1)(f)) |
| Interest-based / behavioral advertising | Consent (Art. 6(1)(a)) |
| Marketing communications (email/push) | Consent (Art. 6(1)(a)) |
| Attribution and campaign measurement | Legitimate interests (Art. 6(1)(f)) |
| Fraud prevention and security | Legitimate interests (Art. 6(1)(f)) |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Your Additional Rights (EEA/UK/Switzerland). In addition to the rights described below, you may: object to or restrict processing where we rely on legitimate interests; withdraw consent at any time without affecting the lawfulness of prior processing; and lodge a complaint with your local supervisory authority (e.g., your national Data Protection Authority).
Withdrawing Consent. Where we rely on consent as a lawful basis, you may withdraw it at any time. To withdraw consent for behavioral advertising, use the "Do Not Sell or Share My Personal Information" toggle in each App's settings, which will disable personalized advertising. To withdraw consent for marketing communications, use the unsubscribe link in any email or adjust notification settings in your device or within the App. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.
International Data Transfers. Your personal data may be transferred to and processed in the United States and other countries. Where required by law, we rely on appropriate safeguards for such transfers, including the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum (UK Addendum) for transfers from the UK, and equivalent mechanisms as required under the Swiss Federal Act on Data Protection (nFADP) for transfers from Switzerland.
Children (EEA/UK). Our Apps are not directed to individuals under 16. We do not knowingly collect personal data from such individuals without verifiable parental or guardian consent.
Advertising
Our Apps include advertising for third party products and services. We collect and use information about you to improve advertising, targeting, and advertising-related services, such as reporting, attribution, analytics, and market research, so that we can show you relevant third-party ads in our Apps. In addition, where permitted by applicable laws, we may disclose information collected about you to advertising partners to assist them in showing you information we believe will interest you. We also rely on these advertising partners to assist in our marketing operations and serve targeted online ads to users of other companies' services that we or our partners believe would be interested in our Apps. To enable these targeted ads, we may disclose personal data collected about you.
You may limit interest-based advertising by adjusting your device settings: on iOS, go to Settings > Privacy & Security > Tracking; on Android, go to Settings > Google > Ads. Note that limiting ad tracking does not remove ads from our Apps; it limits the use of your data for personalization.
We use Adjust to measure the performance of our advertising campaigns. Adjust collects device and attribution data in accordance with its privacy policy.
We may also work with user-acquisition partners, including AppLovin, Meta, TikTok, Apple Search Ads, Google Ads, Unity Ads, Mintegral, and similar partners, to advertise our Apps on third-party services and measure the performance of those campaigns. These partners may process device identifiers, advertising identifiers, IP address, general location, app and device information, click/impression data, install/open data, in-app event data, and postback data for attribution, optimization, fraud prevention, billing reconciliation, and reporting.
Information obtained from Apple HealthKit or Google Health Connect will not be used by us for marketing or advertising purposes, or transferred by us to third parties for marketing or advertising purposes.
Profiling
We do not engage in "profiling" in furtherance of decisions that produce legal or similarly significant effects, nor do we use any sensitive personal information to "profile" you. Our advertising partners may engage in limited profiling for ad personalization purposes; see their respective privacy policies. We do not use sensitive personal information for profiling.
Security
We maintain commercially reasonable security measures to prevent unauthorized access, use, or disclosure of your personal information. However, no method of transmission over the Internet and no means of electronic or physical storage is absolutely secure. Accordingly, we cannot guarantee the absolute security of your personal information.
Links to Other Websites or Services
Our Apps may contain links to third-party websites or services not operated by us. We do not control third-party websites or services and are not responsible for any information you may provide while on such websites or services. We encourage you to read the privacy policies on those websites or services before providing your information on such websites or services.
Children's Privacy
Our Apps are not intended for, and we do not knowingly collect personal information from, children under 13 (or, for residents of the EEA or UK, under 16).
If you are under 13 (or under 16 if you are in the EEA or UK), do not use or provide any personal information through our Apps. If we learn we have collected or received personal information from a child under 13 (or under 16 in the EEA/UK), we will promptly take steps to remove that information. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us at privacy@almondparty.com.
Your Rights and Choices
You have the right at any time to opt out of the receipt of commercial email communications. You may do so by following the unsubscribe instructions in each email, or by contacting us at privacy@almondparty.com.
You may manage push notification preferences through your device settings or within each App.
Depending on applicable laws or the jurisdiction you reside in, you have certain rights regarding your personal information. These may include the rights to:
- Access, know about, or confirm processing of your personal information, including the categories of personal information we collect about you, the categories of sources from which the personal information is collected, the business or commercial purpose(s) for collecting, selling, or sharing personal information, the categories of third parties to which your personal information is disclosed, and the specific pieces of personal information we have collected about you.
- Correct inaccurate personal information held by us.
- Subject to certain limitations, request that we delete your personal information.
- Receive a copy of your personal information in a portable format, where technically feasible.
- Opt-out of the "sale," "sharing," or "targeted advertising" of your personal information (as these terms are defined under privacy laws applicable to you).
- Limit the use and disclosure of sensitive personal information.
- Object to or restrict our processing of your personal information (EEA/UK residents).
- Lodge a complaint with your local data protection supervisory authority (EEA/UK residents).
Some of these rights may be limited when certain exceptions are provided under applicable laws, including to complete a transaction or to comply with a legal obligation. You will not be discriminated against for exercising any of these rights.
To exercise your choices and rights, you may submit a request through the in-App settings (where available) or please contact us at privacy@almondparty.com. We may request or require additional information to verify your identity in order to fulfill your request.
Additionally, you may designate an authorized agent to make a request on your behalf. Authorized agents will be required to provide proof of their authority to act on your behalf by providing relevant documentation. Authorized agents will be required to submit either (a) a power of attorney, or (b) a signed written authorization from you accompanied by verification of your identity. We may contact you to confirm an authorized agent's representation and to verify your identity.
Transfer of Personal Information
Lucky Echo Labs is based in the United States. Our Apps are available to users worldwide. If you are located outside the United States, you acknowledge that your personal information may be transferred to and maintained on servers located in the United States for the purposes set forth in this Privacy Policy, and that U.S. data protection laws may differ from those in your jurisdiction. Where required by applicable law (including the GDPR), we rely on appropriate transfer mechanisms, such as Standard Contractual Clauses, for cross-border transfers of personal data.
Modifications to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time by posting the revised version on our website at almondparty.com and within our Apps and indicating or updating the last modified date. For material changes, we will provide additional notice as appropriate (e.g., through an in-App notification or email to registered users).
Contact Us
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us by:
Email: privacy@almondparty.com
Lucky Echo Labs, Inc.
4701 Sangamore Road, Suite N100
Bethesda, MD 20816