WaveFlow – Offline Music

"We may use Google Analytics, Firebase, Admob, Facebook SDK to collect information about use of the Services. These Third-party services collecting may concern about advertisement, application data and statistical data."

The app embeds multiple third-party SDKs including advertising (AdMob) and social media (Facebook SDK) that collect data directly from users' devices, going beyond basic analytics into ad-related data collection.

"We may use Google Analytics, Firebase, Admob, Facebook SDK to collect information about use of the Services. These Third-party services collecting may concern about advertisement, application data and statistical data."

Facebook SDK and AdMob are well-known cross-tracking tools that link user activity across apps and services via advertising IDs and device fingerprinting to build unified ad profiles.

"We regularly review this Privacy Policy and update it if it is necessary to make sure that we process your information in ways that comply with it as well as applicable laws. We will not reduce your rights under this Privacy Policy without your explicit consent. If changes are significant, we'll provide a more prominent notice, including, for certain services, email notification of Privacy Policy changes."

While they claim not to reduce rights without consent, they reserve the right to regularly update the policy with no requirement for affirmative user consent for non-rights-reducing changes, and notification is only promised for 'certain services.'

"We try to ensure that our services protect information from accidental or malicious deletion. Because of this, there may be delays between when you delete something and when copies are deleted from our active and backup systems."

The policy acknowledges indefinite delays between a deletion request and actual removal from active and backup systems, with no specified timeline for when data is fully purged.

"You can choose to delete your personal information by emailing us unless the use and/or disclosure of the information is for purposes of a) compliance with a legal or regulatory obligation by the controller; b) transfer to third parties; or c) exclusive use of the controller, with access by third parties being prohibited, and provided the data has been anonymized."

There is no self-service deletion option—users must email to request deletion. Additionally, broad exceptions (including prior third-party transfers and controller's exclusive use) allow the company to retain data even after a deletion request.