Privacy Policy

This Privacy Policy ("Privacy Policy") is a legal agreement between you ("you," "your," or "User") and Celebrate Everything, LLC ("we," "us," or "our"). We operate the MahjCheck™ mobile application, the MahjCheck™ website located at celebrate-everything/mahjcheck and/or any and all related services, features, content or functionality thereto (collectively, "MahjCheck™" or "the app"). This Privacy Policy explains what information MahjCheck™ handles, how it's used, and your choices.

This Privacy Policy applies to all information collected through the app, regardless of the device or method used to access the app. This Privacy Policy does not apply to information collected by third parties, including but not limited to information collected by third parties through any application or content that may link to or be accessible from the app.

By downloading, installing, accessing or using MahjCheck™, you acknowledge that you have read, understood and agree to be bound by this Privacy Policy, our Terms of Service (the "Terms"), and any additional terms, policies and/or guidelines referenced herein, all of which are incorporated by reference into this Privacy Policy. By using the app, you represent and warrant that you meet the foregoing eligibility requirements and you have the legal capacity to agree to this Privacy Policy, our Terms, and any additional terms, policies and/or guidelines referenced herein. If you do not meet these requirements, you must not use the app and you must immediately cease all use of the app. If you don't agree to this Privacy Policy, you must not use the app and you must immediately cease all use of the app.

___________________________________________________________________________________

1. Information MahjCheck™ handles

1.1 Photos. When you use MahjCheck™ to scan a photo, the app captures the photo using your device's camera and sends it to Anthropic's Claude API, which identifies the American mahjong tiles in the photo. Once the identification is complete, the photo is not retained by us. Anthropic's handling of data sent to its API is governed by Anthropic's own privacy and data usage policies, which is available at anthropic.com. We encourage you to review Anthropic's privacy policy.

The app only uses your camera when you choose to scan a photo. We do not store your photos on our servers. Photos remain on your device only to the extent your device's operating system temporarily caches them.

1.2 Device and app information. MahjCheck™ may collect the following personal information about you or your device:

· Commercial information: Subscription purchase records (via Apple, with limited information forwarded to us through RevenueCat)

MahjCheck™ does not collect the following:

Direct identifiers (name, email, account info) UNLESS the User contacts us directly)

Biometric information

Sensitive personal information

Inferences for profiling

RevenueCat, Apple and/or Google may collect limited diagnostic and usage information, and we may use TestFlight to help us identify crashes and stability issues. This information is provided to us in aggregated, anonymized form and is governed by RevenueCat’s privacy policy (located at https://www.revenuecat.com/privacy), RevenueCat DPA (located at https://revenuecat.com/dpa), Apple's privacy policy (located at https://apple.com/legal/privacy), Google’s privacy policy (located at https://policies.google.com/privacy) and TestFlight’s privacy policy (located at https://www.apple.com/legal/privacy/data/en/test-flight/) and we encourage you to review these privacy policies and RevenueCat’s DPA. You can opt out of sharing this information in your device's Settings under Privacy & Security > Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

We do not control and we are not responsible for any third-party services and third-party service providers’ privacy practices. Information you provide to third parties is not covered by this Privacy Policy. The third-party service providers have their own terms, policies, privacy policies and practices about data, which may include (but is not necessarily limited to) what information they share with us, your rights and choices on their third-party services and devices, and where they store information. We encourage you to familiarize yourself with all third-party service providers’ terms, policies, privacy policies, practices about data and all applicable contractual terms.

1.3 Information you send us. MahjCheck™ does not require an account, login or any personal information to use. If you contact us directly (for example, by emailing our support address), we'll receive whatever information you choose to share — typically your email address and the contents of your message. We use this information only to respond to you and we do not add you to any mailing list unless you ask us to join one.

___________________________________________________________________________________

2. How your information is used and shared

2.1 How we use your information. We may use your information to: (i) provide, maintain and improve the app; (ii) power the AI tools used in the app; (iii) provide customer support and respond to your inquiries; (iv) protect against fraud and unauthorized use; (v) detect and prevent security incidents; (vi) enforce our Terms, Privacy Policy and/or Contracts; (vii) comply with legal obligations and industry regulations; (viii) improve the app; and (ix) monitor app performance and reliability.

2.2 How we share your information. We may share your information with: (i) with third-party service providers who assist us in operating the app (including, but not limited to subscription services); (ii) with your consent; and (iii) if required to do so by law or in response to valid legal processes, such as subpoenas, court orders, or government investigations.

In addition, we may engage the following third-party service providers to perform functions on our behalf, subject to contractual obligations which include, but may not be limited to confidentiality and data protection:

Claude AI API: The photos you submit through MahjCheck™ are used to identify your American mahjong tiles by having the photo shared and processed through Anthropic's Claude AI API which identifies the American mahjong tiles in the photo and return relevant information back to you within the app. We do not use your photos or any other information to build profiles, train models, or for marketing. Anthropic's handling of data sent to its API is governed by Anthropic's own privacy and data usage policies, which is available at anthropic.com/legal/privacy. We encourage you to review Anthropic's privacy policy.

Apple App Store: In-app purchase processing and subscription management for iOS devices (Apple's processing of payment data is governed by Apple's Privacy Policy at https://www.apple.com/legal/privacy/). We encourage you to review Apple’s privacy policy.

◦ Service Category: Payment Processing

◦ Purpose of Processing: In-app subscription purchase processing and receipt validation

◦ Data Actively Sent by App: Apple ID (anonymized), transaction ID, subscription status

◦ Data Auto-Collected by Vendor: Purchase history, device identifiers

◦ Categories of Data Subjects: iOS subscribers

◦ Data Storage Location: US / Global (Apple infrastructure)

◦ Retention Period: Per Apple retention policies

◦ DPA Status: Independent controller

◦ Sub-Processors: Apple ecosystem

◦ Notes: Apple acts as merchant of record. We have no direct access to payment instruments.

Google Play: In-app purchase processing and subscription management for Android devices (Google's processing of payment data is governed by Google's Privacy Policy at https://policies.google.com/privacy). We encourage you to review Google’s privacy policy.

◦ Service Category: Payment Processing

◦ Purpose of Processing: In-app subscription purchase processing and receipt validation

◦ Data Actively Sent by App: Google account ID (anonymized), transaction ID, subscription status

◦ Data Auto-Collected by Vendor: Purchase history, device identifiers

◦ Categories of Data Subjects: Android subscribers

◦ Data Storage Location: US / Global (Google infrastructure)

◦ Retention Period: Per Google retention policies

◦ DPA Status: Independent controller

◦ Sub-Processors: Google ecosystem

◦ Notes: Google acts as merchant of record. We have no direct access to payment instruments.

◦ Data Auto-Collected by Vendor: Advertising identifier (IDFA on iOS) only if User grants App Tracking Transparency permission, approximate location derived from IP address, device information (model, operating system version, language time zone, app version), Ad interaction data (impressions, clicks, view duration, completion status), General device usage, Data sufficient to deliver and measure ads

◦ Categories of Data Subjects: All subscribers (iOS & Android)

◦ Data Storage Location: US / Global (Google infrastructure)

◦ Retention Period: Per Google retention policies

◦ Sub-Processors: Google ecosystem

◦ Notes:

RevenueCat: Serves as the subscription management third-party provider. (Governed by RevenueCat’s Privacy Policy at https://www.revenuecat.com/privacy and RevenueCat DPA at revenuecat.com/dpa). We encourage you to review RevenueCat’s privacy policy and DPA.

◦ Service Category: Subscription Management

◦ Purpose of Processing: Cross-platform subscription management, entitlement management and tracking, receipt validation, server-to-server notification handling

◦ Data Actively Sent by App: App user ID (passed via Purchases.logIn(userId))

◦ Data Auto-Collected by Vendor: Anonymous ID (if no user ID), device model, OS, app version, platform information, ATT consent status (iOS), product IDs, transaction IDs, transaction information, (subscription product purchased, purchase dates, expiry dates, renewal status), prices, currencies, country code (derived from IP, then IP discarded)

◦ Categories of Data Subjects: All subscribers (iOS & Android)

◦ Data Storage Location: AWS US

◦ Retention Period: Duration of account + per RevenueCat policy

◦ Sub-Processors: AWS, Apple, Google

◦ Notes: Name, email, payment details, and Apple ID and/or Google ID are NOT shared with RevenueCat. The Payment Processor handles payment processing; RevenueCat receives only subscription state and metadata.

We do not control and we are not responsible for any third-party services and third-party service providers’ privacy practices. Information you provide to third parties is not covered by this Privacy Policy. The third-party service providers have their own terms, policies, privacy policies and practices about data, which may include (but is not necessarily limited to) what information they share with us, your rights and choices on their third-party services and devices, and where they store information. We encourage you to familiarize yourself with all third-party service providers’ terms, policies, privacy policies, practices about data and all applicable contractual terms.

3. Legal bases for procressing information

We process your information on the following legal bases:

Contractual Necessity: Processing necessary for the performance of our contract with you, including but not limited to account creation, service delivery, user interactions, and subscription management.

Consent: Where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time by sending us an email at support@celebrate-everything.com.

Legitimate Interests: Processing necessary for our legitimate business interests, provided such interests are not overridden by your fundamental rights and freedoms. Our legitimate interests include but are not limited to fraud prevention, app improvement, analytics, security, and enforcement of our terms.

Legal Obligation: Processing necessary for compliance with applicable legal requirements, including but not limited to tax obligations, regulatory mandates, law enforcement requests, and litigation preservation duties.

___________________________________________________________________________________

4. Third-party services

MahjCheck™ uses Anthropic's Claude API to identify American mahjong tiles in the photos you capture and submit through the app. By using the scan feature of the app, you understand that the photos are transmitted to Anthropic for processing. Anthropic's privacy practices are described at anthropic.com/legal/privacy and we encourage you to review Anthropic’s privacy practices.

When you purchase the app through the Apple Store or Google Play, then RevenueCat and Apple and/or Google, respectively, will collect and retain your personal data associated with your purchase and download of the app. This personal data and the retention thereof by Apple which is governed by Apple's privacy policy (located at https://apple.com/legal/privacy), by Google which is governed by Google’s privacy policy (located at https://policies.google.com/privacy) and by RevenueCat which is governed by RevenueCat’s privacy policy (located at https://www.revenuecat.com/privacy). We encourage you to review the privacy policies of Apple, Google and RevenueCat.

We do not control and we are not responsible for any third-party services and third-party service providers’ privacy practices. Information you provide to third parties is not covered by this Privacy Policy. The third-party service providers have their own terms, policies, privacy policies and practices about data, which may include (but is not necessarily limited to) what information they share with us, your rights and choices on their third-party services and devices, and where they store information. We encourage you to familiarize yourself with all third-party service providers’ terms, policies, privacy policies, practices about data and all applicable contractual terms.

We do not use any other third-party services that receive your personal information.

___________________________________________________________________________________

5. Children's privacy

MahjCheck™ is a general-audience app and is not directed at children under the age of 13. We do not knowingly collect personal information from children under the age of 13. If you are under the age of 13, you may not use the app or provide any personal information to us. If you are a parent or a legal guardian and you believe that your child under the age of 13 has provided us with personal information through MahjCheck™, please contact us immediately. Upon verification, we will take prompt steps to delete that personal information from our systems. If we become aware that we have collected personal information from a child under the age of 13, we will take commercially reasonable steps to delete that personal information.

___________________________________________________________________________________

6. Your choices and rights

Because MahjCheck™ doesn't store personal information about you, there is typically no personal data for us to access, correct, or delete on request. If you have questions about information you've sent us directly (for example, through support emails), you can contact us at support@celebrate-everything.com to request access or deletion.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the General Data Protection Regulation (GDPR). Please see Section 14 of this Privacy Policy for more details concerning additional rights you may have depending on where you live.

___________________________________________________________________________________

7. Data security

We take reasonable steps to protect the limited information MahjCheck™ handles, including using encrypted connections (HTTPS) when transmitting data to Anthropic's Claude AI API. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your information, transmission of information to and from the app is solely at your own risk. You should only access the app within a secure environment.

___________________________________________________________________________________

8. Data retention

We do not retain any photo that you scan using the app. Anthropic's handling of data sent to its Claude AI API is governed by Anthropic's own privacy and data usage policies, which is available at anthropic.com/legal/privacy. We encourage you to review Anthropic's privacy policy.

When you purchase the app through the Apple Store or Google Play, then RevenueCat and Apple and/or Google, respectively, will collect and retain your personal data associated with your purchase and download of the app. This personal data and the retention thereof by Apple which is governed by Apple's privacy policy (located at https://apple.com/legal/privacy), by Google which is governed by Google’s privacy policy (located at https://policies.google.com/privacy) and by RevenueCat which is governed by RevenueCat’s privacy policy (located at https://www.revenuecat.com/privacy). We encourage you to review the privacy policies of Apple, Google and RevenueCat.

We do not control and we are not responsible for any third-party services and third-party service providers’ privacy practices. Information you provide to third parties is not covered by this Privacy Policy. The third-party service providers have their own terms, policies, privacy policies and practices about data, which may include (but is not necessarily limited to) what information they share with us, your rights and choices on their third-party services and devices, and where they store information. We encourage you to familiarize yourself with all third-party service providers’ terms, policies, privacy policies, practices about data and all applicable contractual terms.

___________________________________________________________________________________

9. Cookies

This Section (the "Cookies Policy") explains the different types of cookies and similar technologies that may be applied on the browsers and devices of consumers who visit and/or use the app. The Cookies Policy does not apply to the privacy practices of third-party websites and/or apps. If you have questions or concerns about the Cookies Policy, please contact us at support@celebrate-everything.com.

9.1 Consent. By continuing to use the app, you are agreeing to the use of cookies and other similar technologies for the purposes we describe in this Cookies Policy.

9.2 What are Cookies? Cookies are small text files which are downloaded to your browser or device when you visit a website or an app. Most web pages and apps contain elements from multiple sources (including but not limited to web domains) so when you use the app, your browser or device may receive cookies from several sources which includes, but is not limited to, third parties that provide services on our behalf, such as website and/or app analytics or ad targeting. In relation to the use of cookies by third parties, we do not have access or control over these cookies. We may also use local shared objects in the app to store your user preferences and settings. You can manage local shared objects by following the instructions located at https://allaboutcookies.org/how-to-clear-flash-cookies. Our emails and/or messages may contain a "web beacon pixel" to tell us whether our emails and/or messages are opened and verify any clicks through to links within the email and/or message. We may use this information for purposes including but not limited to determining which of our emails and/or messages are more interesting to you and to query whether users who do not open our emails and/or messages wish to continue receiving them.

9.3 Types of Cookies We May Use, We may use cookies and similar tracking technologies to enhance your experience on the app:

Essential Cookies: Required for functionality, authentication, and security of the app.

Analytics Cookies: Help us understand how users interact with the app.

Preference Cookies: Remember your settings and preferences.

Session Cookies: To send photos to AI for identification and processing. For ads only in the app’s Free Account.

You can control cookie settings through your browser preferences. However, disabling certain cookies may limit and/or prevent your ability to use some features of the app.

9.4 Cookie Preferences And Disabling Cookies. You may be able to set your cookie preferences using the device you have to access the app. In addition, if you are not happy with the cookies preferences, you may: (1) delete your cookies (see below for information on deleting cookies); and then (2) refresh the web page and/or app. If you do not agree to the use of cookies, please disable or delete them by following the instructions for your browser(s) set out at http://www.allaboutcookies.org/manage-cookies/index.html. Please note that the app may not function well if cookies are disabled. It may also stop you from saving customized settings. If you delete your cookies, you may need to opt out again from targeted advertising. You may download a browser extension that will help preserve the opt-out preferences you set by visiting www.aboutads.info/PMC. You can also opt out in your device's Settings under Privacy & Security → Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

___________________________________________________________________________________

10. International data transfers

Your information may be transferred to and processed in the United States of America and other countries where our third-party service providers operate. These countries may have different data protection laws than your country of residence.

When we transfer data internationally, we implement appropriate safeguards (when applicable) including but not limited to:

Standard Contractual Clauses approved by the applicable law

Data Processing Agreements with all third-party service providers

Encryption and security measures during transfer

___________________________________________________________________________________

11. Do not track

Currently, various browsers offer a "do not track" or "DNT" option that relies on technology known as a DNT header which sends a signal to the websites or apps visited by the user about the user’s browsers DNT preference setting. We do not currently commit to responding to browser’s DNT preference across the app because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators, including no consistent standard of interpreting user intent. We take privacy and choices regarding privacy seriously and will make efforts to continue to monitor the development around DNT browser technology and the implementation of a standard for DNT. Please note that third-parties may not respond to a browser’s DNT preference as well. Please contact each individual third-party for more information on how they handle DNT.

___________________________________________________________________________________

12. Changes to this Privacy Policy

We reserve the right, at our sole discretion, to update or change this Privacy Policy, or any part of it, at any time without notice. When we do, we'll update the "Last updated" date at the top of this Privacy Policy. Significant changes will be communicated within the app or on our website. You must periodically review the app for the latest information about our Privacy Policy. Unless otherwise indicated, any new material added to the app will also be subject to this Privacy Policy.

Your continued use of MahjCheck™ after changes to this Privacy Policy means you accept and agree to the updated Privacy Policy.

___________________________________________________________________________________

13. Terms of service; other contracts

Our Terms applies to your access and/or use of the app and its terms are made a part of and incorporated into this Privacy Policy by this reference. The Terms may be changed from time to time, at our sole discretion, and such changes are effective immediately upon their posting. By accessing and/or using the app, you acknowledge that you have read and agree to our Terms.

If this Privacy Policy and/or our Terms conflict with any language in any other contract we enter into with you (the "Contracts"), then the language contained in those Contracts shall govern. Additional terms and conditions may apply to specific portions or features of the app. You acknowledge and agree to abide by all such other terms and conditions. If there is a conflict between this Privacy Policy and/or our Terms and the terms posted for or applicable to any service offered on or through the app, the latter terms shall control with respect to your use of that portion of that specific service. Our obligations, if any, with regard to app are governed solely by the Contracts pursuant to which they are provided, and nothing in the app should be construed to alter such Contracts.

We do not control and we are not responsible for any third-party services and third-party service providers’ privacy practices. Information you provide to third parties is not covered by this Privacy Policy. The third-party service providers have their own terms, policies, privacy policies and practices about data, which may include (but is not necessarily limited to) what information they share with us, your rights and choices on their third-party services and devices, and where they store information. We encourage you to familiarize yourself with all third-party service providers’ terms, policies, privacy policies, practices about data and all applicable contractual terms.

___________________________________________________________________________________

14. Your rights and choices; Data protection rights

Depending on your location and applicable laws, you may have the following rights:

14.1 California Privacy Rights. If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA"). This information supplements our Privacy Policy for California residents only. The following rights do not apply to individuals who reside outside of California.

14.1.1 Right to Know. You have the right to request that we disclose the categories and specific pieces of Personal Information as defined by the CCPA we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.

14.1.2 Right to Delete. You have the right to request deletion of your Personal Information as defined by the CCPA, subject to certain exceptions provided by law. For example, we are not required to delete Personal Information as defined by the CCPA if it is necessary for us to complete your transaction. We are also not required to delete your Personal Information as defined by the CCPA if it is for an ongoing business relationship. Upon receipt and verification of a consumer request to delete Personal Information as defined by the CCPA, we will delete (and direct third-party service providers to delete) your Personal Information as defined by the CCPA from our records, unless an exclusion applies.

14.1.3 Right to Correct. You have the right to request correction of inaccurate Personal Information as defined by the CCPA that we maintain about you.

14.1.4 Right to Opt-Out of Sale or Sharing. We do not sell your Personal Information as defined by the CCPA. We may share your Personal Information as defined by the CCPA for cross-context behavioral advertising purposes. In this regard, we may use third-party analytics, tracking SDKs, or advertising identifiers through AdMob, IDFA usage, ATT and personalized ads (only in the Free Account) as stated in this Privacy Policy. You can opt out of sharing this information in your device's Settings under Privacy & Security → Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

14.1.5 Right to Limit Use of Sensitive Personal Information. To the extent we process sensitive Personal Information as defined by the CCPA, we do so only for purposes authorized under the CCPA, including providing the services you request.

14.1.6 Right to Non-Discrimination. We shall not discriminate against you for exercising any of your CCPA rights, including by denying goods or services, charging different prices, providing a different level or quality of goods or services, or suggesting that you will receive a different price or rate.

14.1.7 Categories of Information Collected. In the preceding twelve (12) months, we have not collected any information concerning the following categories of Personal Information as defined by the CCPA: Identifiers (name, email, IP address, Device Identifiers); Personal information categories listed in Cal. Civ. Code 1798.80(e) (name); Commercial information (subscription records, purchasing history); Internet or electronic network activity (browsing history, interaction with the app); Geolocation data (precise and approximate location); and Inferences drawn from the above to create a profile. However; in the preceding twelve (12) months, we may use third-party analytics, tracking SDKs, or advertising identifiers through AdMob, IDFA usage, ATT and personalized ads (only in the Free Account) as stated in this Privacy Policy. You can opt out of sharing this information in your device's Settings under Privacy & Security → Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

14.1.8 Exercising Your Rights. To exercise your CCPA rights, please contact us at support@celebrate-everything.com with the subject line "California Privacy Rights." You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

In addition, you may report a complaint to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by telephone at (800) 952-5210 or by mail at California Department of Consumer Affairs, 400 R Street, Sacramento, CA 95814.

14.2 Privacy Rights for Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas or Utah.

If you are a resident of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas or Utah, then you have the following rights under the following applicable state law:

· Colorado Privacy Act ("CPA")

· Connecticut Data Privacy Act ("CTDPA")

· Delaware Personal Data Privacy Act ("DPDPA")

· Florida Digital Bill of Rights ("FDBR")

· Indiana Consumer Data Protection Act ("INCDPA")

· Iowa Consumer Data Protection Act ("ICDPA")

· Kentucky Consumer Data Protection Act ("KCDPA")

· Maryland Online Data Privacy Act ("MODPA")

· Minnesota Consumer Data Privacy Act ("MCDPA")

· Montana Consumer Data Privacy Act ("MTCDPA")

· Nebraska Data Privacy Act ("NDPA")

· New Hampshire Privacy Act ("NHPA")

· New Jersey Data Privacy Act ("NJDPA")

· Oregon Consumer Privacy Act ("OCPA")

· Rhode Island Data Transparency and Privacy Protection Act ("RIDTPPA")

· Tennessee Information Protection Act ("TIPA")

· Texas Data Privacy and Security Act ("TDPSA")

· Utah Consumer Privacy Act ("UCPA")

(collectively, the "Applicable State Laws").

This information supplements our Privacy Policy for Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas or Utah residents only. The following rights do not apply to individuals who reside outside of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas or Utah.

Under the Applicable State Laws, you have the rights listed below which are not absolute, and in certain cases, we may decline your request as permitted by law:

Right to be informed whether or not we are processing your personal data.

Right to access your personal data.

Right to correct inaccuracies in your personal data.

Right to request deletion of your personal data.

Right to obtain a copy of the personal data you previously shared with us.

Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling").

We do not sell or share your Personal Information, as it is defined under the Applicable State Laws. However, we may share your Personal Information as it is defined by the Applicable State Laws for cross-context behavioral advertising purposes. In this regard, we may use third-party analytics, tracking SDKs, or advertising identifiers through AdMob, IDFA usage, ATT and personalized ads (only in the Free Account) as stated in this Privacy Policy. You can opt out of sharing this information in your device's Settings under Privacy & Security → Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

To exercise your rights under the Applicable State Laws, please contact us at support@celebrate-everything.com with the subject line "Applicable State Laws Privacy Rights" and please make sure you indicate the state in which you reside in the message you send to us. You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request.

14.3 Nevada Privacy Rights. If you reside in the State of Nevada, you have the right to request that we do not sell your personal information. Please contact us at support@celebrate-everything.com with the subject line "Nevada Privacy Rights." You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded.

Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request. This information supplements our Privacy Policy for Nevada residents only. The above rights do not apply to individuals who reside outside of Nevada.

14.4 Virginia Privacy Rights. If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act ("VCDPA"). This information supplements our Privacy Policy for Virginia residents only. The following rights do not apply to individuals who reside outside of Virginia.

Under the VCDPA:

"Consumer" means a natural person who is a resident of the Commonwealth acting only in an individual or household context. It does not include a natural person acting in a commercial or employment context.

"Personal data" means any information that is linked or reasonably linkable to an identified or identifiable natural person. “Personal data” does not include de-identified data or publicly available information.

"Sale of personal data" means the exchange of personal data for monetary consideration. If this definition of "consumer" applies to you, we must adhere to certain rights and obligations regarding your personal data. Your rights with respect to your personal data are the:

◦ Right to be informed whether or not we are processing your personal data.

◦ Right to access your personal data.

◦ Right to correct inaccuracies in your personal data.

◦ Right to request deletion of your personal data.

◦ Right to obtain a copy of the personal data you previously shared with us.

◦ Right to opt out of the processing of your personal data if it is used for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling").

We do not sell or share your personal information, as those terms are defined under the VCDPA. We may share your Personal Information for cross-context behavioral advertising purposes. In this regard, we may use third-party analytics, tracking SDKs, or advertising identifiers through AdMob, IDFA usage, ATT and personalized ads (only in the Free Account) as stated in this Privacy Policy. You can opt out of sharing this information in your device's Settings under Privacy & Security → Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

To exercise your VCDPA rights, please contact us at support@celebrate-everything.com with the subject line "Virginia Privacy Rights." You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. We will respond to verifiable requests within forty-five (45) calendar days. In the event that we need additional time to respond, we will notify you in writing of the reason why additional time is necessary and the extension period for response which shall comply with current law. In order to be able to provide such writing, we will need your email address or U.S. mailing address. The response to a verifiable consumer request will cover the twelve (12) month period preceding our receipt of the request or the amount required by law, whichever is greater. If for any reason we cannot comply with all or part of your request, we will explain the reasons why. For data portability requests, we will select a format to provide your personal information that is readily usable and should allow you to transmit information easily from one entity to another entity. We will not charge you a fee to process or respond to your verifiable consumer request unless your request is excessive, repetitive or manifestly unfounded. Should we determine that your request warrants that we charge a fee, we will communicate why it made that decision along with the estimated costs associated with your request prior to completing your request. If your appeal is denied, you may contact the Attorney General to submit a complaint.

14.5 Canada Privacy Rights. If you are a resident of Canada, we may process your information if you have given us specific permission or express consent to use your personal information for a specific purpose, or in situations where your permission can be inferred. You can withdraw your consent at any time by contacting us at support@celebrate-everything.com.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent including, but not limited to:

If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way.

For investigations and fraud detection and prevention.

For business transactions provided certain conditions are met.

If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim.

For identifying injured, ill, or deceased persons and communicating with next of kin.

If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse.

If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province.

If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records.

If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced.

If the collection is solely for journalistic, artistic, or literary purposes.

If the information is publicly available and is specified by the regulations.

14.6 UK or EU Privacy Rights. If you are a UK or EU resident, you have the following rights under the General Data Protection Regulation ("GDPR") and United Kingdom General Data Protection Regulation ("UK GDPR") require us to explain the valid legal bases we rely on in order to process your personal information. We may rely on the following legal bases to process your personal information:

Consent: We may process your information if you have given us permission or consent to use your personal information for a specific purpose. You can withdraw your consent at any time. Please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Performance Of A Contract: We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you including, but not limited to providing the app or at your request prior to entering into a contract with you.

Legitimate Interests: We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. We may process your personal information for including, but not limited to the following purposes in order to:

◦ Send users information about special offers and discounts on our products and services.

◦ Analyze how the app is used so we can improve them to engage and retain users.

◦ Diagnose problems and/or prevent fraudulent activities.

◦ Understand how our users use our products and services so we can improve user experience

Legal Obligations: We may process your information where we believe it is necessary for compliance with our legal obligations including, but not limited to cooperating with a law enforcement body or regulatory agency, exercising or defending our legal rights, or disclosing your information as evidence in litigation in which we are involved.

Vital Interests: We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party including, but not limited to situations involving potential threats to the safety of any person.

Opting Out Of Marketing And Promotional Communications: You can unsubscribe from our marketing and promotional communications at any time by contacting us at support@celebrate-everything.com. You will then be removed from the marketing lists. However, we may still communicate with you including, but not limited to sending you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

We do not control and we are not responsible for any video or advertisement you see on a Free Account. Google AdMob is strictly responsible for any video or advertisement you see on a Free Account and all questions, comments and complaints should be directed solely to Google AdMob.

We may use third-party analytics, tracking SDKs, or advertising identifiers through AdMob, IDFA usage, ATT and personalized ads (only in the Free Account) as stated in this Privacy Policy. You can opt out of sharing this information in your device's Settings under Privacy & Security → Analytics & Improvements or through system-wide settings OR by contacting us via email at support@celebrate-everything.com.

If you are located in the EU or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority on this site: https://ec.europa.eu/newsroom/article29/items/612080 or UK data protection authority on this site: https://ico.org.uk/make-a-complaint/data-protection-complaints/data-protection-complaints/.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner on this site: https://www.edoeb.admin.ch/edoeb/en/home.html.

14.7 Australia or New Zealand Privacy Rights. If you are a resident of Australia or New Zealand, you have the following rights under the Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 ("Privacy Act"). This Privacy Policy satisfies the notice requirements defined in both Privacy Acts, in particular what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

offer you the products or services that you want.

respond to or help with your requests.

manage your account with us.

confirm your identity and protect your account.

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us at support@celebrate-everything.com.

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner on this site: https://www.oaic.gov.au/privacy/privacy-complaints/lodge-a-privacy-complaint-with-us and a breach of New Zealand's Privacy Principles to the Office of New Zealand Privacy Commissioner on this site: https://www.privacy.org.nz/your-rights/making-a-complaint-to-the-privacy-commissioner/.

14.8 South Africa Privacy Rights. If you are a resident of South Africa, you have the right to request access to or correction of your personal information at any time. You can make such a request by contacting us at support@celebrate-everything.com.

If you are unsatisfied with the manner in which we address any complaint with regard to our processing of personal information, you can contact the office of the regulator, the details of which are:

The Information Regulator (South Africa)

General enquiries: enquiries@inforegulator.org.za

Complaints (complete POPIA/PAIA form 5): PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za

14.9 Privacy Rights For Other Jurisdictions. If you are located in another jurisdiction that is not specifically discussed in this Privacy Policy, you may have rights, under applicable data privacy laws, to request information about or access to your personal information that we maintain, to require that inaccurate information be corrected or, in some circumstances, to object to our processing of your personal information. To exercise any rights you may have in another jurisdiction, please contact us at support@celebrate-everything.com with the subject line "Other Jurisdiction Privacy Rights" and please make sure you indicate the jurisdiction in which you reside in the message you send to us. You may also designate an authorized agent to submit a request on your behalf by providing written authorization. We will verify your identity before fulfilling any request. We may follow up with you to verify your identity before processing your authorized agent’s request. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.

___________________________________________________________________________________

15. Miscellaneous

15.1 Entire Agreement. This Privacy Policy, together with the Terms, the Contracts and any other agreements, policies, or guidelines expressly incorporated by reference, constitutes the sole and entire agreement between you and us with respect to the subject matter hereof and supersede all prior and contemporaneous communications, understandings, agreements, representations, and/or warranties, whether written and oral, with respect to such subject matter.

15.2 Severability. If any provision of this Privacy Policy is held by a court or arbitrator of competent jurisdiction to be invalid, illegal, or unenforceable, such provision shall be modified and interpreted to accomplish the objectives of such provision to the greatest extent possible under applicable law, and the remaining provisions shall continue in full force and effect.

15.3 Waiver. No failure or delay by us in exercising any right, remedy, power, or privilege under this Privacy Policy shall operate as a waiver thereof. No single or partial exercise of any right or remedy shall preclude any other or further exercise thereof or the exercise of any other right or remedy. Any waiver must be in writing and signed by us to be effective.

15.4 Assignment. You may not assign, transfer, or delegate this Privacy Policy or any of your rights or obligations hereunder without our prior written consent. Any purported assignment in violation of this Section is void. We may freely assign, transfer, or delegate these Terms and its rights and obligations hereunder without restriction. These Terms shall be binding upon and inure to the benefit of the parties and their permitted successors and assigns.

15.5 Headings. The section headings in this Privacy Policy are for convenience only and shall not affect the interpretation of this Privacy Policy. You agree that this Privacy Policy shall be construed as if drafted jointly by the parties hereto and in the event an ambiguity or question of intent or interpretation arises, no presumption or burden of proof shall arise favoring or disfavoring any party by virtue of the authorship of any provisions of this Privacy Policy.

___________________________________________________________________________________

16. Contact us

If you have questions or concerns about this Privacy Policy or how MahjCheck™ handles your information, please reach out:

Lori Lowell - CEO

Celebrate Everything, LLC

Email: support@celebrate-everything.com