1Who we are
Pipkettle is an Android app by Zydeno for tabletop sessions and everyday choices: rolling dice, flipping a coin, spinning a decision wheel, forming teams, keeping initiative order and drawing from a deck. Contact [email protected] about this policy or your privacy. This policy covers the Android app only. It does not cover Google Play, your browser, your e-mail app, a document or cloud provider you choose in the Android file picker, or any app you share a result with; each of them has its own policy.
Developer identity. Zydeno is the developer name under which Pipkettle is published on Google Play, as shown on the app’s store listing. For the purposes of data-protection law, the developer is responsible (the “controller”) for the limited personal data described in this policy that actually reaches us, such as e-mails you send us. Data that stays on your device is under your control.
2Scope and current version
This policy describes Pipkettle version 1.0 for Android as reviewed on 22 October 2026. The current version works fully offline. It has no user accounts, no ads, no in-app purchases, no analytics, no advertising identifiers and no third-party crash-reporting or tracking SDKs. The app does not connect to a Zydeno server or to any other server.
3What we do not collect
We, the developer, do not receive anything you enter or produce in the app. Through the app we do not collect, store on a server, sell or share your rolls, results, saved sets, participant names, images, usage events, device identifiers, advertising ID, contacts, precise or approximate location, photos, microphone audio, motion-sensor readings or device diagnostics. Nothing is used for advertising or profiling.
Some of what you type into the app, such as the names of people at your table, can be personal data. It stays on your device under your control, as described below; we simply never receive it.
4What stays on your device
Pipkettle keeps the following in the app’s private storage on your phone, which other apps cannot read:
- Your table: saved dice sets and macros, custom dice and coin faces, wheels and their options and weights, decks, the list of participants (names you enter, stable internal IDs, who is absent), teams, initiative order and the current round, the order of the remaining deck, discards and hands, held dice and hidden results that you have not yet revealed.
- Your history: a journal of results, including original values, rerolls, kept and dropped dice, and the receipts shown on the table, together with recovery copies that let the app undo a change or finish an interrupted save.
- Images you add: pictures you choose for custom faces are re-encoded into a small PNG copy inside the app. Re-encoding drops the original file’s metadata, such as camera details or location tags.
- Settings: language, theme, number and time formats, motion, haptics, sound, keep-screen-on, spoken results and shake-to-act.
To choose sensible regional defaults, such as 12- or 24-hour time, the app may read the country code of your SIM card or mobile network, falling back to the device region. This needs no permission; it does not read your phone number, precise position or cell identifiers, and the country code is used only on the device.
These records remain until you change or delete them, clear the app’s storage or uninstall the app. They are not transmitted to us.
5Offline operation and external links
The app does not request Android’s INTERNET or network-state permission and contains no network code. Random results are generated on the device by Android’s cryptographic random-number generator; probability previews, fairness checks and the dice animation are all computed locally. Nothing is fetched from or reported to a server.
The Privacy Policy and Terms of Use links in the app open these pages in your browser only when you tap them; the browser then contacts zydeno.com under its own settings, and the website host may log technical data such as your IP address as any website does. The support link opens your e-mail app with our address filled in; nothing is sent unless you send the e-mail yourself, and no data from the app is attached. Android and Google Play may, as part of the operating system, update the app or system components such as fonts under Google’s own terms; that is not done by Pipkettle.
6Exports, imports and sharing
Pipkettle has no storage permission. All file access goes through Android’s system file picker (the Storage Access Framework), which gives the app access only to the single file you pick, at the moment you pick it:
- Complete backup (Settings → Your data → Export): a ZIP archive with your table, history, settings, images and checksums, saved where you choose. It is the way to move your data to another phone or keep a copy.
- Import: the app checks the archive you pick and shows a preview (counts of saved rolls, people, wheels, decks and receipts, and possible conflicts) before anything changes. You choose “Add to current data” or “Replace all data”. After a replacement, the previous data is kept privately for a short Undo window and then removed.
- Preset files and result CSV: individual sets or a table of results, saved where you choose. Fields that could be read as spreadsheet formulas are written as plain text.
- Share receipt text: a plain-text summary passed to the Android share sheet. By default it identifies participants by number; names are included only if you switch on “Include participant names” and review the preview.
Exports are not encrypted. If you choose a cloud-backed location in the picker (for example a cloud drive) or share with another app, that provider or app receives the file or text under its own terms. That is a transfer you start and control, not a transfer to Zydeno. Protect the place where you store backups, and only share names of other people when they are happy for you to do so.
7Permissions, sensors and backup
Pipkettle requests no runtime permissions: no location, camera, microphone, contacts, photos, notifications, phone or storage permission. The only permission in the app’s manifest is an app-internal signature permission that Android libraries use to protect the app’s own components; it gives access to nothing about you. The advertising-ID permission is removed from the app.
- Shake to act (off by default): while it is on and a table tool is visible, the app reads the phone’s accelerometer to notice a deliberate shake. Readings are compared on the fly and are never stored or sent; the sensor is released when you leave the table or switch the option off.
- Speak result (off by default): the app passes the result text to the text-to-speech engine already installed on your phone, and only if that engine reports a voice that works without a network connection. If no such voice is available, the feature switches itself off; the app never downloads a voice. The speech engine is a separate component of your phone (for example Google’s speech services) and works under its provider’s terms.
- Haptics and sound: vibrations use Android’s standard haptic feedback, which needs no permission. Table sounds are on by default, can be turned off in Settings, and play only sound files packaged with the app. Nothing is recorded.
- Clipboard: the app does not monitor your clipboard. It places text there only when you tap a copy action, and reads it only when you paste into a field yourself.
- Keep screen on: while a table is open in the foreground, the app can keep the screen awake, with an idle time-out. It does not run in the background.
Android automatic backup is turned off, and both cloud backup and device-to-device transfer are excluded for all app data. To move your data, export a backup yourself and import it on the other device.
8Bundled software
The app is built with AndroidX and Jetpack Compose libraries and with Kotlin, kotlinx.coroutines and kotlinx.serialization, all under the Apache License 2.0, and uses the Sofia Sans typeface under the SIL Open Font License 1.1. These components run inside the app and send nothing anywhere. The app contains no advertising, analytics, social-media, payment, account or crash-reporting SDK. Licence texts are available offline in the app under Settings → About → Open-source licenses.
9Your choices and deletion
You can view and change everything you have entered directly in the app, switch optional features on or off in Settings, export a complete copy at any time and remove everything with Settings → Your data → Delete all data. Before deleting, the app lists what will be removed and offers to export a backup first; you then confirm twice. Deletion removes saved rolls, people, rounds, cards, receipts, settings, images and recovery copies from the app, and it starts again with default settings. Clearing the app’s storage in Android Settings or uninstalling the app also removes its private data.
Deleting data in Pipkettle does not delete backups or CSV files you saved elsewhere, text you already shared, or copies held by a cloud provider or another app. Remove those yourself. Because we never receive your data, we cannot recover it for you or delete it remotely, and there is no account to close.
10Security and limitations
Android’s app sandbox keeps the app’s private storage separate from other apps. Pipkettle writes its files atomically, verifies archives with checksums and rejects malformed or oversized archives before importing them. These checks protect against damaged files; they are not encryption and do not prove that a file came from someone you trust, so import only files you trust. Hidden results are masked on the table and in receipts until you reveal them, but anyone who can unlock your phone can open the app. Loss, theft or failure of your device, or malware on it, can expose or destroy local records. No security measure is perfect; keep a backup when your data matters to you.
11Legal bases for processing
Where the EU or UK GDPR, or a similar law such as the Swiss FADP or Brazil’s LGPD, applies, these are the legal bases for the limited processing described in this policy:
| Processing | Where it happens | Legal basis |
|---|---|---|
| Storing your entries and settings in the app’s private storage | Your device only; we never receive it | Necessary to provide the app you choose to use (Art. 6(1)(b) GDPR). Storage on your device is strictly necessary for that service, so no separate consent is needed under the ePrivacy rules. |
| E-mails you send to [email protected] | The developer and its e-mail provider | Our legitimate interest in answering you and improving the app (Art. 6(1)(f) GDPR) or steps you ask us to take (Art. 6(1)(b)); keeping records where the law requires it (Art. 6(1)(c)). |
The app makes no automated decisions that have legal or similarly significant effects on you, does not build a profile of you and does not process special categories of personal data.
12Retention and support
Data in the app stays until you change or delete it, clear the app’s storage or uninstall the app; exported copies stay wherever you put them. Temporary import and undo copies are removed after the operation finishes or when you delete all data. If you choose to e-mail support, we receive your e-mail address, your message and anything you decide to attach. Please do not send backups or other people’s names unless they are needed to help you.
Support e-mails. We keep e-mails you send us, and our replies, only as long as needed to handle your request and any follow-up, normally no longer than 24 months after the last message, unless the law requires us to keep them longer or we need them to establish, exercise or defend legal claims. You can ask us to delete them earlier.
13Ads, purchases and future versions
Today. The current version of Pipkettle is free of charge, shows no ads, has no in-app purchases or subscriptions, and contains no advertising, analytics or payment SDKs. This describes the app as it is now, not a promise about future versions. Future versions may introduce advertising, paid features, in-app purchases or subscriptions, or other optional services.
If ads are introduced. Ads would be supplied by a third-party ad network, for example Google AdMob. Ad networks typically process your device’s advertising ID, IP address, approximate location derived from the IP address, device and app information and your interactions with ads, in order to show ads, limit repetition, measure performance and prevent fraud, and, only where you allow it, to personalise ads. Ads would also require the app to connect to the internet, which the current version cannot do.
If purchases or subscriptions are introduced. They would be processed by Google Play’s billing system. Google handles your payment details under the Google Privacy Policy. We would receive only what is needed to deliver and verify a purchase, such as a purchase token, the product, its status, the country and the currency, never your full card or bank details.
Before any such change we will update this policy with a new effective date and version, describing what data is processed, by whom, why and how you can control it; update the Google Play Data safety section; mention the change in the release notes; ask for your consent where the law requires it (for example for personalised ads and non-essential access to your device in the EEA, the UK and Switzerland, through a consent tool that meets Google’s requirements); and offer the opt-outs the law requires (for example under US state privacy laws). The change applies only from the app version that introduces it. Data already stored in the app will not be used for advertising without telling you first and, where required, getting your consent. We will not knowingly show personalised ads to children (§14).
14Age and intended audience
Pipkettle is intended for teenagers and adults aged 13 and above and is not directed to children under 13. Dice and cards are used by people of all ages, but that does not make the app designed for children. The content rating shown on Google Play and the intended audience are separate things. The app has no chat, no public profiles and no way to contact other users.
Age limits. In the EEA and the UK we also treat as a child anyone under the age at which a child may consent to online services in their country (between 13 and 16). If you are a parent or guardian and believe that your child has sent us personal data, for example by e-mail, write to [email protected] and we will delete it. If a future version includes advertising, it will be set up in line with applicable children’s privacy rules, such as COPPA in the United States, and Google Play’s policies.
15Your privacy rights
Privacy laws in many countries give you rights over your personal data. Because Pipkettle keeps your data on your phone and the developer does not receive it, most of these rights are in your own hands: you can view, correct, export and delete everything in the app (§9) and withdraw permissions in Android Settings. For data you have sent us, such as e-mails, write to [email protected].
EU and UK representative. The individual developer does not process personal data of people in the EU/EEA or the UK except occasional e-mails you choose to send to support. This occasional processing does not involve large-scale processing of special-category or criminal-offence data and is unlikely to result in a risk to your rights and freedoms. Under Article 27(2)(a) GDPR and Article 27(2)(a) UK GDPR, it does not require an EU or UK representative, so none is appointed. Contact us directly at [email protected]; you can also complain to your local supervisory authority.
Rights by region. A summary; the law where you live decides the details.
- European Union, EEA, United Kingdom and Switzerland (GDPR, UK GDPR, Swiss FADP): access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, withdrawal of consent at any time, and complaint to a supervisory authority, for example in the country where you live or work (in the UK, the Information Commissioner’s Office).
- United States (California CCPA as amended by the CPRA, and the comprehensive privacy laws of other states such as Virginia, Colorado, Connecticut, Texas and Oregon): to know and access, delete, correct and port personal information; to opt out of its sale or sharing, of targeted advertising and of profiling; to limit the use of sensitive personal information; to appeal a refusal; to use an authorised agent; and not to be discriminated against for using these rights. Notice for California residents: in the last 12 months the developer has not collected personal information through the app, other than e-mails you chose to send us. We have not sold or shared personal information, and we do not use sensitive personal information. Global Privacy Control signals are honoured where the law requires; today there is nothing to opt out of.
- Canada (PIPEDA and provincial laws, including Québec’s Law 25): access, correction and withdrawal of consent; complaints to the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d’accès à l’information.
- Brazil (LGPD): confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing and revocation of consent; complaints to the ANPD.
- Japan (APPI): disclosure, correction, suspension of use or deletion; complaints to the Personal Information Protection Commission.
- South Korea (PIPA): access, correction, deletion, suspension of processing and withdrawal of consent; complaints to the Personal Information Protection Commission or the KISA privacy centre. The person responsible for personal information is the developer, reachable at [email protected].
- Australia and New Zealand (Privacy Act 1988, Privacy Act 2020): access and correction; complaints to the OAIC or the New Zealand Privacy Commissioner.
- Other countries (for example India’s DPDP Act, Singapore’s PDPA, South Africa’s POPIA or Türkiye’s KVKK): the rights your local law gives you. Write to us and we will respond in line with it.
How we respond. We answer within one month, or sooner or later where your local law sets another period (for example 45 days under the CCPA), and we may extend it where the law allows. We may ask for information to confirm that a request comes from you. Requests are free unless they are manifestly unfounded or excessive. If we cannot do what you ask, we explain why and how you can appeal or complain.
16International users
Pipkettle is available in many countries. The developer does not receive the data you keep in the app, so we do not transfer it anywhere.
If you e-mail us, your message is processed by our e-mail provider and may be stored on servers outside your country. Where the GDPR or UK GDPR applies to such a transfer, it relies on an adequacy decision, on standard contractual clauses offered by the provider, or on the transfer being necessary to answer your request.
This policy is written in English. If a translation is offered, the English version prevails unless your local law requires otherwise.
17Changes to this policy
We may update this policy when we change the app (including any change described in §13), when the services the app uses change, or when the law changes. The effective date and version at the top of this page show which version applies, and the version history (§18) summarises every change.
For a material change, for example new data leaving your device, ads or purchases, we update this page and the Google Play Data safety section before the app version with that change is published, describe it in the release notes, and ask for your consent in the app where the law requires it. Changes do not apply retroactively to data processed before them. Earlier versions are available on request from [email protected].
18Version history
| Version | Effective | Changes |
|---|---|---|
| 1.0 | 2026-10-22 | First published: offline tabletop tool, local storage, user-initiated exports, imports and text sharing, optional on-device shake and speech, no accounts, ads or analytics. Includes support e-mail, regional rights and the Article 27 exemption. |
19Contact
- Developer (controller): Zydeno, the developer of Pipkettle on Google Play
- E-mail for privacy questions and requests: [email protected]
- Website: zydeno.com
We aim to answer within 30 days. If you are not satisfied with our answer, you can contact your local data-protection authority.
See also the Terms of Use.