Legal
Privacy policy for Girandi
This policy covers the Android app Girandi (package com.farusone.girandi). The website farusone.com has its own privacy policy.
Version: 1.1, effective 23 October 2026
Who is responsible
The controller under the General Data Protection Regulation (GDPR) is:
Philipp Reimann
In der Stöck 22
71566 Althütte
Germany
Email: info@farusone.com
FARUSONE is the brand name under which the operator publishes apps and games.
In short
- The app works without an account.
- Content you create stays on your device.
- The app shows ads (see "Ads").
- The app uses no analytics service.
- The app sends no crash reports.
- You can buy items or features in the app through Google Play. There is no subscription.
- Nothing you create is shown to other users.
- The app has no private messages between users.
- The app has no dating features.
- The app is not directed at children.
What data the app processes
| Data | Purpose | Legal basis | Where | Kept for |
|---|---|---|---|---|
| Your wheels: name, entries (text, emoji and, with Pro, weights and own colours), theme, favourite, which entries are out for now (no repeat) and when the wheel was created and last used | Spinning, editing and keeping your wheels and the ready-made wheels you use | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | Until you delete it in the app, clear the app storage or uninstall the app. A copy can also be in your own Android backup (see "Export and backups"). |
| Names you type or paste for "Pick a name" and "Teams" (they can be names of other people, see "Names of other people"), the order in which they were drawn and the number of teams (optional) | Drawing names fairly without repeats and making balanced random teams | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | Until you delete it in the app, clear the app storage or uninstall the app. A copy can also be in your own Android backup (see "Export and backups"). |
| Party mode: the players you enter, your own challenges and the challenges already used in the current round (optional) | Drawing a player and a challenge without repeats | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | Until you delete it in the app, clear the app storage or uninstall the app. A copy can also be in your own Android backup (see "Export and backups"). |
| History: your results with date and time (wheel, name draw, teams, party, coin, dice, number), with the name of the wheel or tool (optional) | Showing your last results (the free version shows the last 30, Pro all and lets you share them as text) | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | The last 1,000 results, until you clear the history (History > "Clear history"), clear the app storage or uninstall the app. A copy can also be in your own Android backup. |
| Settings and app state: app design, spin speed, sound, vibration (the app's own switch, permission VIBRATE), whether you have seen the short tour and made your first wheel (optional) | Remembering your choices | Art. 6 (1) (f) GDPR (our interest: you do not have to set everything again each time); storing it on your phone is necessary for the function you asked for (§ 25 (2) No. 2 TDDDG); we receive nothing | On your device | Until you delete it in the app, clear the app storage or uninstall the app. A copy can also be in your own Android backup (see "Export and backups"). |
| Rewards from ad videos: the number of extra wheel places and of special share cards you earned. A theme or ready-made wheel unlocked for a session is kept only in memory until you close the app (optional) | Giving you the reward you asked for | Art. 6 (1) (b) GDPR: the reward you asked for; stored only on your phone, we receive nothing | On your device | Until you delete it in the app, clear the app storage or uninstall the app. A copy can also be in your own Android backup (see "Export and backups"). |
| Pictures you share: a result card or a wheel card, made on your phone (optional) | Handing the picture to the Android share menu when you tap Share; the app you pick receives it | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | In the app cache until your next shared picture replaces it, or until you clear the app storage |
| Shared wheel links and QR codes: the wheel's name and entries (text, emoji, weights), the no-repeat setting and the theme, packed into the link after "#" (optional) | Sharing a wheel when you choose to (see "Sharing and opening wheels"). The link and the QR code are made on your phone | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | We store nothing. The link exists wherever you send or copy it |
| A wheel link or text you open or paste to add a shared wheel (optional) | Reading the wheel from it, showing it to you and adding it only after you confirm. The app reads the clipboard only when you tap "Paste" | Art. 6 (1) (b) GDPR: the function you use in the app. This happens only on your phone, started by you; we receive nothing | On your device | Only the wheel you add is kept (see "Your wheels") |
| Purchase check: a checksum (SHA-256) of the purchase token and the time of the last confirmation by Google Play (optional) | Pro also works offline | Art. 6 (1) (b) GDPR (your Pro purchase); stored only on your phone, we receive nothing | On your device | Until you clear the app storage or uninstall the app. Not part of the Android backup; on a new phone Google Play is asked again |
| Ads in the free version: Advertising ID, app set ID and other device identifiers, IP address (from which an approximate location can be derived), mobile network code, technical data about the device, the app and the network (model, system version, memory, user agent, connection type), interactions with the ads (impressions, clicks) and how the ads perform, technical and diagnostic data | Showing ads through Appodeal and its partners, measuring them and preventing fraud; personalised ads only with your consent where the law requires it. Not before your first spin and never with Pro. | Personalised ads in the EU/EEA, UK and Switzerland: your consent, Art. 6 (1) (a) GDPR and, for access to your device, § 25 (1) TDDDG. Non-personalised ads there after you refused: Art. 6 (1) (f) GDPR (our interest: financing the free version with ads and preventing ad fraud; your interests are protected by non-personalised ads only, no ads before your first spin, banners only in two lists, full-screen ads only at natural pauses after every second action, at least 60 seconds apart, reward videos only when you ask for one, and Pro without ads); for the technically necessary access to your device § 25 (2) No. 2 TDDDG. Outside these countries the app asks no consent: delivering, measuring and personalising ads and preventing fraud are based on Art. 6 (1) (f) GDPR with the same safeguards; you can object at any time (Art. 21 GDPR) by deleting the advertising ID in the Android settings, or with Pro. | At an external service: Appodeal | We store none of this data ourselves. Each ad service keeps it under its own privacy policy and decides how long (links under "External services"). On your phone the services keep technical caches until you clear the app storage or uninstall the app. You can reset or delete the advertising ID in the Android settings. |
| Consent question for ads: app, app version, SDK version, the choices stored so far, IP address and technical data about the device; Appodeal also reads the advertising ID | Finding out whether consent is needed where you are and showing the consent form. Never before you have used the app once (see "Ads"), never with Pro. | Art. 6 (1) (c) GDPR with Art. 7 (1) GDPR and Art. 6 (1) (f) GDPR (asking for consent where the law requires it) | At an external service: Appodeal | Appodeal decides under its privacy policy how long it keeps the request data; your choice itself stays on your phone (see "Your ad choices") |
| Your ad choices (consent status, stored in the IAB TCF format where consent is required) (optional) | Remembering your choice and passing it to the ad service with every ad request | Art. 6 (1) (c) GDPR with Art. 7 (1) GDPR (proof of consent) | On your device | Until you change your choice, clear the app storage or uninstall the app |
| Ad counters on your phone: whether this is your first session (stops at "not the first"), whether you have reached the first pause after your first spin, the number of finished actions in total and since the last full-screen ad (both stop at 2), the time of the last full-screen ad or reward video, and the day and number of these ads that day. No list of what you did | Starting ads only after your first spin and keeping their pace: full-screen ads at most after every second finished action, at least 60 seconds apart; a reward video counts like a full-screen ad. This applies also to non-personalised ads after a refusal | Art. 6 (1) (f) GDPR (our interest: ads that pay for the free version; your interest: no ads before your first spin and not after every action); in our assessment, storing the first-session flag and the note that you have reached the first pause after your first spin is necessary so that no ad starts before (§ 25 (2) No. 2 TDDDG); apart from that, the counters are only written while ads are active, that is after your choice where consent is required | On your device | Until you clear the app storage or uninstall the app; each counter only keeps its last value. Not part of the Android backup |
| Data for Pro offers on your phone: number of sessions (stops at 6), time of the last Pro offer, number of offers in the last 7 days, for each place in the app where an offer can appear the time it was last shown, how often it was shown, when you last closed it with "Not now" and how often, the IDs of the last 4 announced discount campaigns, when Pro was last active, and a random number from 0 to 999 that sets your test group. Never sent and not part of the Android backup | Keeping Pro offers rare and fair (a break after "Not now", at most one discount at a time) and forming test groups (A/B tests: which version of an offer you see and, where a test runs, which purchase option you buy through). This has nothing to do with your ad choices and applies also without ads | Art. 6 (1) (f) GDPR (our interest: offering Pro without pestering you and finding out which offer works; your interest: few offers and a break when you said "Not now"); in our assessment, storing it on your phone is necessary for this (§ 25 (2) No. 2 TDDDG); we receive nothing | On your device | Until you clear the app storage or uninstall the app; each value only keeps its last state |
| Order details of a purchase: order number, product, price, country or region, time. No payment details. (optional) | Handling the purchase; we see these details in the Google Play Console for bookkeeping and for questions about your purchase | Art. 6 (1) (b) and (c) GDPR | At an external service: Google Play Billing Library | In the Google Play Console as long as Google keeps them there. We keep only our own tax records, counted from the end of the calendar year: accounting vouchers such as Google's payout reports and invoices 8 years, books and annual accounts 10 years, business letters 6 years (§ 147 AO, § 257 HGB). Other technical purchase data is not kept for this. |
| Technical diagnostic data of the Google Play Billing Library (calls of the purchase interface, connection problems) | Keeping purchases working; according to Google also improving the library | Art. 6 (1) (f) GDPR (our interest: purchases that work); the improvement by Google is Google's own purpose | At an external service: Google Play Billing Library | Google decides how long it keeps this data under its privacy policy |
| Payment details (optional) | Paying through Google Play | Art. 6 (1) (b) GDPR | At an external service: Google Play Billing Library | Kept by Google under its own responsibility |
| E-mails you send us (the contact button opens your own mail app): your address and your message (optional) | Answering you | Art. 6 (1) (b) and (f) GDPR | At an external service: ALL-INKL.COM | Until your request is settled, unless the law requires us to keep it longer |
Data on your device
Data marked "On your device" stays on your phone. We cannot see it and do not receive it.
Names of other people
Names you enter for a draw, for teams or for the party mode can be names of other people, for example pupils, friends or family. They stay in Girandi on your phone and in your own Android backup, and they appear in the history when they are drawn. We receive none of them. They leave your phone only when you share a wheel, a list, teams or a result.
You decide which names you enter. For a group, for example in class, first names or nicknames are often enough. When a teacher uses Girandi in class, the teacher is the user of the app: pupils need neither the app nor an account. Remove names you no longer need under "Edit names" or "Edit players" and clear the history.
Permissions
| Permission | What for |
|---|---|
| com.android.vending.BILLING | Buying Pro through Google Play. Added by the Google Play Billing Library. |
| android.permission.INTERNET | Internet connection for the ads in the free version and the consent question (Appodeal and its partners) and for the Google Play Billing Library (purchases, technical diagnostic data). Girandi needs no internet connection to spin, draw or share: a shared wheel travels inside the link. |
| android.permission.VIBRATE | Vibration for the pointer ticks while the wheel turns and a short double pulse at the result, only while "Vibration" is switched on in the app settings. Normal permission, no question. |
| android.permission.ACCESS_NETWORK_STATE | Checks whether a network connection exists. Added by the ad SDKs (Appodeal and its partners) and the Google Play Billing Library. |
| android.permission.ACCESS_WIFI_STATE | Checks whether the phone uses Wi-Fi. Added by Appodeal's consent module; the app does not read Wi-Fi networks or their names for itself. |
| com.google.android.gms.permission.AD_ID | Lets the ad SDKs (Appodeal, Meta Audience Network, BidMachine) read the advertising ID. They use it for personalised ads only with your consent (in Europe) and otherwise for counting and fraud prevention; after a refusal in Europe the app requests non-personalised ads only. If you delete the advertising ID in the Android settings, the SDKs only get zeros. |
| com.farusone.girandi.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Internal protection held only by the app itself, so that other apps cannot send messages to its internal parts. You never see it. |
Export and backups
Girandi has no export to a file. When you choose, you can share a wheel as a link, as a QR code or as a picture, a result as a picture, and the list of drawn names, the teams or (with Pro) your history as text. This goes through the Android share menu, or you copy the link yourself; the app or person you pick receives the content (see "Sharing and opening wheels").
Android backup is switched on for your wheels, names, party players and challenges, history, rewards and settings (the app files datastore/spinly.json and datastore/spinly.preferences_pb). They are copied into your own backup in your Google account and move with a transfer to a new phone. The purchase check, the ad counters, your ad choices and the data for Pro offers are not part of it. We have no access to your backup. You can switch it off in the Android settings.
External services
Appodeal (Appodeal, Inc. and BidMachine, Inc. (USA)): Mediation of the ads in the free version: Appodeal asks its own campaigns and the ad partners (Meta Audience Network, BidMachine and DT Exchange) for an ad, picks the best offer and shows it. Appodeal also shows the consent form where the law requires it (Appodeal's own form, IAB TCF 2.2, CMP ID 432) and passes your choice on. To do this it sends a request to Appodeal before you choose (app, app version, SDK version, the choices stored so far). Appodeal uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.
- Data: Advertising ID, app set ID and other device identifiers, IP address (from which an approximate location can be derived), mobile network code, technical data about the device, the app and the network (model, system version, memory, user agent, connection type), interactions with the ads (impressions, clicks) and how the ads perform, technical and diagnostic data
- Processed in: USA and other countries
- Transfer outside the EU based on: EU standard contractual clauses (Art. 46 (2) (c) GDPR) as agreed in the Appodeal and BidMachine terms
- Privacy policy of the provider: https://appodeal.com/privacy-policy
Meta Audience Network (Meta Platforms Ireland Limited): Ad partner in the Appodeal auction (bidding). Receives the ad request and, if it wins, delivers the ad. Meta uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.
- Data: Device identifiers, device attributes (model, screen size, operating system, SDK versions), ad performance (impressions, clicks, placement, visibility), IP address
- Processed in: Ireland; Meta may also process data in the USA and other countries
- Transfer outside the EU based on: To Meta Platforms, Inc. (USA): EU-US Data Privacy Framework (Art. 45 GDPR); to other countries: EU standard contractual clauses (Art. 46 GDPR)
- Privacy policy of the provider: https://www.facebook.com/privacy/policy
BidMachine (BidMachine, Inc. (USA)): Ad exchange of the Appodeal group and partner in the Appodeal auction (bidding). Uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.
- Data: Advertising ID and advertising data, technical device data, network data, IP address
- Processed in: USA and other countries
- Transfer outside the EU based on: EU standard contractual clauses, module 1 (Art. 46 (2) (c) GDPR), in BidMachine's data protection addendum
- Privacy policy of the provider: https://bidmachine.io/privacy-policy
DT Exchange (Digital Turbine) (Digital Turbine (IL) Ltd. and affiliated companies of Digital Turbine, Inc.): Ad partner in the Appodeal auction (bidding). Uses the data to deliver and measure ads and to prevent fraud, and with your consent to personalise ads.
- Data: Device identifiers, approximate location derived from the IP address, technical device and app data, interactions with the ads
- Processed in: Israel, USA and other countries
- Transfer outside the EU based on: Israel: adequacy decision of the EU Commission (Art. 45 GDPR); USA and other countries: EU standard contractual clauses (Art. 46 GDPR)
- Privacy policy of the provider: https://www.digitalturbine.com/privacy-policy
Google Play Billing Library (Google Ireland Limited): Handles the one-time purchase "Pro" through Google Play (no subscription). Google processes your payment details under its own privacy policy. The library can also send technical diagnostic data about purchases to Google. Depending on your test group, Pro can be sold through one of two purchase options of the same price in Google Play (for example "lifetime" or "lifetime-b"). Google Play sees which option you bought; we see it only in Google's sales reports, without your name or account. Discounts come as price offers from Google Play; the app shows the price from Google Play.
- Data: Purchase details, payment details (entered at Google), technical diagnostic data
- Processed in: Ireland; Google may also process data in the USA
- Transfer outside the EU based on: Google Ireland Limited handles Google Play in the EU; transfers to Google LLC (USA) are covered by the EU-US Data Privacy Framework (Art. 45 GDPR), transfers to other countries by EU standard contractual clauses (Art. 46 GDPR), as described in Google's privacy policy
- Privacy policy of the provider: https://policies.google.com/privacy
ALL-INKL.COM (Neue Medien Münnich): Receives and stores e-mails you send to info@farusone.com. The app itself sends no e-mail; your mail app does.
- Data: E-mail address, content of the e-mail
- Processed in: Germany
- Privacy policy of the provider: https://all-inkl.com/datenschutzinformationen
Ads
The ads are delivered by the ad services listed under "External services".
Ads appear only in the free version and never before your first spin. Banners labelled "Ad" appear only at the end of the lists under "Templates" and "My wheels" and at the end of the "History" list, never on the wheel, on a result or on the tab bar. A full-screen ad (image or video) can only come at a natural pause after every second finished action (a spin result, a name drawn, teams made, a coin flip, a dice roll or a random number), for example when you tap "Done" on a result, leave a finished draw or finished teams, or switch to another tool. Two full-screen ads are at least 60 seconds apart. There is never one between a spin and its result, on "Spin again" or "Remove & spin", right after sharing or right after "Not now" in the Pro window.
Reward videos play only when you ask for one: an offer names the reward first (a premium wheel theme or a premium ready-made wheel for this session, one more saved wheel for good, or one special share card), and the video starts only when you tap "Watch a short video". You get the reward only when the video has played to the end; tapping the ad earns nothing. A reward video counts like a full-screen ad, so no full-screen ad follows right after it.
The ads are delivered through Appodeal. For each ad, Appodeal asks its own campaigns and its partners Meta Audience Network, BidMachine and DT Exchange and shows the best offer. Until you have finished your first spin and reached the next natural pause after it (for example "Done" on the result; never during the short tour), Girandi loads no ad SDK, asks no consent question and sends nothing for ads. After that, ads can start in the same session, also in your first one, and at every later start they start right when the app starts.
In the EU/EEA, the UK and Switzerland the app asks for your consent right at that moment (at later starts right when the app starts, as long as no choice is stored), before the first ad loads, with Appodeal's consent form (IAB TCF 2.2). In the form you can consent, refuse or choose single purposes and partners. Already to show the form, the app sends a request to Appodeal (see "External services"). As long as no choice is stored, Girandi shows no ads there.
If you refuse, Girandi shows only non-personalised ads, in the same places and as often: they are chosen by the app and the context, not by a profile about you. Even these ads need technical data (IP address, device type, system and app version), and the ad services may read the advertising ID and keep small technical caches on your phone, for example to limit how often an ad appears and to detect fraud. They may not use this data for personalised ads.
Outside these countries the app asks no consent and the ads can be personalised. You can stop this at any time by deleting the advertising ID in the Android settings, or with Pro.
You can change or withdraw your choice at any time in the app under Settings > "Privacy choices for ads". After a withdrawal the app stops all ads at once and drops ads that were already loaded; the new choice applies from then on. Withdrawing does not affect processing that happened before.
Pro removes all ads. After the purchase the app no longer starts the ad SDK, so no more data is sent for ads.
Girandi is made for people aged 16 and over. It is not meant for children.
Purchases
Purchases are processed by Google Play. We do not receive your payment details.
Google Play tells the app what you bought (for example an order number and the item), so the app can unlock it.
How long we keep data and how to delete it
How long each kind of data is kept is listed in the table above.
How to remove the data from your device: Delete data in Girandi.
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to receive it in a portable format (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21).
Where processing is based on your consent, you can withdraw it at any time with effect for the future. To use your rights, email info@farusone.com.
You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority where you live.
Changes
We update this policy when the app or the way it processes data changes. The version and date at the top show the current version.