YOUR PRIVACY

CandyDoku Privacy Policy

Last updated: 15 October 2026

This policy explains information handling for CandyDoku (games.projectx.candydoku), published as Project X AI and operated by Kunal Katiyar, India. For privacy requests, contact KunalKatiyar50@gmail.com.

Local play and saves

Your puzzle state, progress, candy cards, assistance inventory, streaks, reward receipts and game settings are stored in the app's private storage on your device. The app also stores a selected age range; it does not ask for your date of birth. We do not provide a CandyDoku account, developer cloud save, chat or social profile, and the app does not upload these local gameplay records to a developer server.

Local records remain until you clear the app's storage or uninstall it. CandyDoku disables Android app backup and excludes its app data from cloud backup and device transfer. Do not rely on a device change, reinstall or system backup to preserve progress or used purchases. Device manufacturers and platform services may have their own behaviour.

Age and optional services

CandyDoku is intended for players aged 13 and older. Gameplay is unavailable without an eligible age selection. For the 13–17 selection, the app does not request ads, start its checkout flow or start its adult advertising-consent flow. Those services are offered through the eligible adult route. This describes the app's own requests; Android, Google Play, SDK startup components and previously initialized services may still process technical information.

If you are under 13, please do not use the game or send personal information. If you believe a child has sent information to our support mailbox, contact us so we can review and address it.

Advertising and privacy choices

When advertising is enabled for eligible adult players, CandyDoku uses Google Mobile Ads and Google's User Messaging Platform. The app requests current consent information and shows a consent form where required. It requests ads only after a successful current update permits requests. You can reopen available choices through the game's advertising privacy control. Availability depends on your region and Google's current requirements; a choice about personalized advertising does not necessarily stop all advertising or technical processing.

The advertising and consent services may process IP-derived approximate location, device or other identifiers, app/ad interactions, network and device details, and diagnostic or performance information. These are used to deliver and measure advertising, operate consent services and protect against fraud and abuse. Google and configured advertising partners handle this information under their policies. The app does not request GPS access or permission to access your contacts, camera or microphone. Removal of the Android Advertising ID permission does not remove all identifier processing; Android AdServices permissions and SDK startup components are present.

Ads may include banners, ads between eligible game entries and voluntary rewarded videos. An active VIP plan removes automatic banner and entry ads; optional rewarded help remains available subject to eligibility. A reward is granted after the ad service confirms completion. Availability is not guaranteed. See Google's Privacy Policy, Google's advertising information and Google Mobile Ads data disclosure.

Google Play purchases

Where configured and available to eligible adults, Google Play handles purchases of VIP subscriptions, fixed assistance packs and a permanent cosmetic. Google processes payment information. CandyDoku does not receive your full payment-card or bank details. The app receives product details and prices, owned-purchase information, purchase state, transaction tokens and signatures to check purchases and deliver or restore benefits.

The app queries Play ownership, checks purchase signatures and package/state, and acknowledges or consumes fulfilled purchases through Play. It keeps local entitlement IDs and a token-derived fulfillment receipt to prevent duplicate delivery. Raw purchase tokens, purchase JSON and signatures are not intentionally stored in our gameplay database or developer logs. There is no developer purchase-verification server. Google retains transaction records under its own policies. Buying is optional, while ownership reconciliation can run when the configured adult Play service connects.

Consumed assistance packs and local progress cannot be restored from Play after local data is lost. Active subscriptions and the permanent cosmetic can be checked again through Play using the purchasing Google account, subject to availability and purchase status. See our Terms for benefits, renewal, cancellation and restore limits.

Support and this website

If you choose to email support, we receive the address, message and attachments you send through your mail service. CandyDoku opens an external mail app and does not read your mailbox or automatically attach game records. Send only information needed to resolve the issue; do not send passwords, payment-card details or verification codes.

We use support correspondence to answer requests, investigate problems and maintain necessary business records. We keep it for as long as needed for those purposes and any applicable legal obligations, then delete it when no longer needed. No fixed deletion deadline is promised. Email providers may retain copies under their own policies. You can request access, correction or deletion by email; we may need proportionate verification and may retain information required for legal obligations or disputes.

This static website is delivered by Cloudflare. We add no analytics, advertising, forms, authored JavaScript or cookies to these pages. Cloudflare processes connection and security information to deliver and protect the site. Hosting-provider processing is separate from app advertising. See Website privacy and Cloudflare's Privacy Policy.

Sharing, storage and your controls

We do not sell your local gameplay records. Information handled by Google, advertising partners, our mail provider or Cloudflare may be processed outside your country. Their safeguards and retention depend on the service and applicable law; this policy does not promise that deleting local app data deletes provider records.

You can change game settings and age selection, use available advertising privacy controls, clear local app data through Android settings, manage or cancel subscriptions in Google Play, and contact support about information you sent us. Clearing data is irreversible and does not cancel a subscription. There is no CandyDoku account to delete. Google privacy and transaction controls are provided by Google.

We use the app platform's private storage and HTTPS service/website routes. No system offers absolute security. If information handling changes, we will update this page and its date and provide additional notice where required.