PRIVACY POLICY — BLACKOUT KIT Last updated: October 31, 2026 This privacy policy applies to the mobile app "Blackout Kit" (package name com.appkickstarter.blackoutkit), called "the App" below. The App is developed and published by Louis Duboscq, an independent developer (developer name on Google Play: "Louis Duboscq"; website: appkickstarter.com). Louis Duboscq is the data controller for the data described in this policy. Contact: hey@appkickstarter.com 1. SUMMARY - Your household, your emergency kit and your progress stay on your phone. They are never sent to us or to anyone else. - There is no account, no advertising in the App, no advertising ID and no sale of data. Anonymous usage statistics are on by default and you can turn them off at any time (section 3). - The App sends data only for purchases (to know whether you have Premium), to know which Apple Ads ad brought your install, when you post or vote on the Ideas board, and anonymous usage statistics unless you turn them off (section 3). 2. DATA STORED ONLY ON YOUR DEVICE The following data is stored in the App's local storage on your phone. It never leaves your device, we cannot access it, and it is not backed up to our servers: - Your household: number of adults, children, babies and pets, type of home and floor, heating, and whether someone depends on an electric medical device (used only to size your kit on your phone). - Your kit: the items you tick, with the date you ticked them. - Your levels, trophies, the days you opened the App on special dates, and your settings. Deleting the App deletes all of this data. 3. DATA THAT LEAVES YOUR DEVICE a) Purchases — Premium Subscriptions and purchases are processed by Google Play or the App Store; we never see your payment details. To check your Premium status, the App uses RevenueCat (RevenueCat, Inc.), which receives an anonymous app user ID and your purchase history (product, dates, renewal status). Purpose: unlocking Premium and restoring purchases. b) Apple Ads attribution (iPhone only) If you installed the App from an Apple Ads ad, RevenueCat receives from Apple which campaign it was, to measure our ads. No advertising identifier is used and you are not tracked across apps or websites. c) Ideas board — only what you post If you post or vote on the Ideas board, the App sends the text you write, your votes, an anonymous random device identifier, the App version, your platform and language, and your email address only if you choose to enter it (it is never shown publicly and only used to reply to you). Requests can be shown to other users of the App. They are stored with Supabase (Supabase, Inc.), and their text may be translated into other languages by an AI service (OpenAI) so other users can read them: a server function of ours, hosted with Supabase, sends only the text of the request to the AI service, has it translated and keeps the translation on the board. The AI service receives nothing else from you. Do not include personal or health information in your posts. d) Usage statistics — anonymous, on by default, you can turn them off On the first launch, after you describe your household, a short screen tells you about usage statistics and lets you turn them off ("Turn off"); you can also turn them off at any time in the App's settings. If you said no in an earlier version of the App, that choice is kept. Unless you turn them off, the App sends to PostHog (PostHog Inc., posthog.com, servers in the European Union) a few steps of the App, for example that a section of your kit is now complete (which section and which level), or that the household was saved or skipped — never your household, the items you tick or their quantities — together with a random identifier created for this install (replaced after 13 months at most), the App version, your phone model, operating system, language and time zone, the type of network (Wi-Fi or mobile, and the carrier name), and when the App is opened or sent to the background. PostHog also works out your country from your internet address when the statistics arrive; only the country is kept, not the address, region or city. We do not link it to your name or email, we do not build a profile of you, and there is no screen recording. You can turn this off at any time in Settings > Privacy > "What is sent". Purpose: understanding which features help, to improve the App. Retention: up to 1 year. Nothing else is sent: we do not use any crash reporting or advertising SDK, we do not track you across apps or websites, and we do not sell or share personal data with data brokers or advertisers. 4. DEVICE PERMISSIONS - Internet: only for purchases, Apple Ads attribution, the Ideas board and usage statistics unless you turn them off (section 3). Your kit works fully offline. 5. LEGAL BASES (GDPR) - Data stored on your device: not processed by us. - Purchases: performance of the contract (giving you Premium). - Apple Ads attribution: our legitimate interest in measuring our advertising, without any advertising identifier. - Ideas board: your consent when you choose to post or vote, and our legitimate interest in improving the App. - Usage statistics: anonymous measurement of how the App is used, limited to what is needed to improve it, which the French data protection authority allows without prior consent (CNIL guidelines on audience measurement: anonymous statistics for this App only, no profile, identifier replaced after 13 months at most, kept up to 1 year); legal basis: our legitimate interest in improving the App (Article 6(1)(f) GDPR). You can object at any time by turning them off in the App. Data sent to our providers may be processed outside the European Union (in particular in the United States), under the safeguards those providers offer (such as Standard Contractual Clauses). 6. RETENTION AND YOUR RIGHTS Data on your device stays there until you delete it or the App. Purchase records are kept by RevenueCat as long as needed to restore your purchases and for accounting obligations. Usage statistics are kept up to 1 year. Board posts are kept as long as the board or the App exists, unless you ask us to delete them. You can ask to access, correct or delete the data described in section 3 (for example your board posts or the email you gave), or object to its processing, by writing to hey@appkickstarter.com. As we have no account and only anonymous identifiers, tell us the text of your post or the email you used so we can find it. You can also complain to your data protection authority (in France: the CNIL). 7. CHILDREN The App is not directed to children under 13 (or under 16 where local law requires) and we do not knowingly collect data from children. 8. NOT AN OFFICIAL SERVICE The App is an independent preparedness tool based on public guidance (in France, the "Tous responsables" guide, SGDSN, 2025). It is not affiliated with any government and does not replace the instructions of the authorities. In an emergency, follow official instructions and call the emergency services. 9. CHANGES TO THIS POLICY We may update this policy, for example when the App starts sending something new (such as crash reports). The date at the top shows the latest version, and important changes are announced in the App. 10. CONTACT Louis Duboscq — Blackout Kit Email: hey@appkickstarter.com