Privacy Policy

Privacy Policy of Lit App

This Application collects some Personal Data from its Users.

This document contains a section dedicated to Users in the United States and their privacy rights.

This document can be printed for reference by using the print command in the settings of any browser.

Owner and Data Controller

Monkey Run FZ-LLC

Owner contact email: admin@monkeyrun.fun

Types of Data collected

Among the types of Personal Data that this Application collects, by itself or through third parties, there are: Trackers; Usage Data; unique device identifiers for advertising, such as Google Advertiser ID or IDFA; Universally unique identifier (UUID); crash data; device information; and first name.

Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Application. Unless specified otherwise, all Data requested by this Application is mandatory and failure to provide this Data may make it impossible for this Application to provide its services.

Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner. Users are responsible for any third-party Personal Data obtained, published or shared through this Application.

Mode and place of processing the Data

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of the Data. Data processing is carried out using computers and IT enabled tools, following organizational procedures strictly related to the purposes indicated in this policy.

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located. Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own.

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose it has been collected for and may be retained for longer due to applicable legal obligation or based on the Users' consent.

The Data concerning the User is collected to allow the Owner to provide its Service, comply with legal obligations, respond to enforcement requests, protect rights and interests, detect malicious or fraudulent activity, and support advertising, infrastructure monitoring, registration and authentication, analytics, hosting and backend infrastructure.

Detailed information on the processing of Personal Data

Advertising

This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Application, possibly based on User interests.

Services of this kind usually offer the possibility to opt out of tracking. Users may also learn more in the section "Information on opting out of interest-based advertising" in this document.

AdMob (Google LLC)

AdMob is an advertising service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages the Data processing. Personal Data processed: Trackers; unique device identifiers for advertising; Usage Data.

Category of Personal Information collected according to the CCPA: identifiers; internet or other electronic network activity information.

This processing constitutes:

• a Sale in California
• a Sharing in California

Meta Audience Network (Meta Platforms, Inc.)

Meta Audience Network is an advertising service provided by Meta Platforms, Inc. or Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing.

This Application may use identifiers for mobile devices and technologies similar to cookies to run the Meta Audience Network service. Users may opt out of certain Audience Network targeting through applicable device settings.

Personal Data processed: Trackers; unique device identifiers for advertising; Usage Data.

This processing constitutes:

• a Sale in California
• a Sharing in California

Analytics

Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages the Data processing. Google utilizes the Data collected to track and examine the use of this Application, prepare reports on its activities, and share them with other Google services.

Personal Data processed: Trackers; Usage Data.

Category of Personal Information collected according to the CCPA: internet or other electronic network activity information.

This processing constitutes:

• a Sale in the United States

Hosting and backend infrastructure

Amazon Web Services (AWS) is a hosting and backend service provided by Amazon Web Services, Inc. Personal Data processed: various types of Data as specified in the privacy policy of the service.

Infrastructure monitoring

Crashlytics is a monitoring service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages the Data processing. Personal Data processed: crash data; device information; Universally unique identifier (UUID).

Registration and authentication

Sign in with Apple is a registration and authentication service provided by Apple Inc. Where Users are required to provide their email address, Sign in with Apple may generate a private relay address on behalf of Users that forwards messages to their verified personal email account. Personal Data processed: first name.

This processing constitutes:

• a Sale in California

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may follow the instructions provided by YourOnlineChoices, the Network Advertising Initiative, the Digital Advertising Alliance, DAAC, DDAI or other similar initiatives.

The Digital Advertising Alliance offers an application called AppChoices that helps Users control interest-based advertising on mobile apps. Users may also opt out of certain advertising features through applicable device settings, such as mobile device advertising settings or ads settings in general.

Further information for Users

Legal basis of processing

The Owner may process Personal Data relating to Users if one of the following applies:

• Users have given their consent for one or more specific purposes;
• provision of Data is necessary for the performance of an agreement with the User;
• processing is necessary for compliance with a legal obligation to which the Owner is subject;
• processing is related to a task carried out in the public interest or in the exercise of official authority vested in the Owner;
• processing is necessary for the legitimate interests pursued by the Owner or by a third party.

Further information about retention time

Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until such contract has been fully performed. Personal Data collected for the purposes of the Owner's legitimate interests shall be retained as long as needed to fulfill such purposes.

The Owner may retain Personal Data for a longer period whenever the User has given consent, as long as such consent is not withdrawn, or whenever required to fulfil a legal obligation or upon order of an authority. Once the retention period expires, Personal Data shall be deleted.

The rights of Users based on the GDPR

Users may exercise certain rights regarding their Data processed by the Owner. In particular, Users have the right to do the following, to the extent permitted by law:

• Withdraw their consent at any time.
• Object to processing of their Data.
• Access their Data and obtain a copy of the Data undergoing processing.
• Verify the accuracy of their Data and ask for it to be updated or corrected.
• Restrict the processing of their Data.
• Have their Personal Data deleted or otherwise removed.
• Receive their Data in a structured, commonly used and machine readable format and, if technically feasible, have it transmitted to another controller.
• Lodge a complaint before their competent data protection authority.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of official authority vested in the Owner, or for legitimate interests pursued by the Owner, Users may object by providing a ground related to their particular situation.

Where Personal Data is processed for direct marketing purposes, Users can object to that processing at any time, free of charge and without providing any justification.

How to exercise these rights

Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. Such requests are free of charge and will be answered as early as possible and always within one month, providing Users with the information required by law.

Further information for Users in the United States

This part of the document integrates with and supplements the information contained in the rest of the privacy policy. It applies to Users who are residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and Montana.

For such Users, this information supersedes any other possibly divergent or conflicting provisions contained in the privacy policy. This part of the document uses the term Personal Information.

Notice at collection

Your privacy rights under US state laws

To the extent permitted by applicable law, Users may have:

• the right to access Personal Information and know whether we are processing it;
• the right to correct inaccurate Personal Information;
• the right to request deletion of Personal Information;
• the right to obtain a portable and usable copy of Personal Information;
• the right to opt out from the Sale of Personal Information;
• the right to non-discrimination.

Additional rights for Users residing in California

• The right to opt out of the Sharing of Personal Information for cross-context behavioral advertising.
• The right to request to limit the use or disclosure of Sensitive Personal Information to what is necessary to perform the services or provide the goods reasonably expected by an average consumer.

Additional rights for Users in other listed US states

• The right to opt out of processing personal information for Targeted Advertising or profiling in furtherance of decisions that produce legal or similarly significant effects.
• The right to freely give, deny or withdraw consent for processing Sensitive Personal Information, subject to applicable legal exceptions.
• In Minnesota and Maryland, the right to obtain a list of specific third parties to which the controller has disclosed the consumer's personal data.

Specific rights connected to profiling in some states

• The right to question the results of profiling.
• The right to be informed of the reason that profiling resulted in the decision, if feasible.
• The right to be informed of actions the consumer might have taken or may take to secure a different decision.
• The right to review personal data used in the profiling.
• If inaccurate, the right to have the data corrected and the profiling decision reevaluated based on the corrected data.

Additional rights for Users residing in Utah and Iowa

• The right to opt out of processing Personal Information for Targeted Advertising.
• The right to opt out of processing Sensitive Personal Information, subject to applicable legal exceptions.

How to exercise your privacy rights under US state laws

To exercise the rights described above, submit your request by contacting us via the contact details provided in this document. For us to respond, we must know who you are. We will not respond to a request if we are unable to verify your identity and confirm that the Personal Information in our possession relates to you.

In addition to what is stated above, to exercise your right to opt out of Sale or Sharing and Targeted Advertising you can also use the privacy choices link provided on this Application. You may also submit opt-out requests through a user-enabled global privacy control, such as the Global Privacy Control (GPC).

We will respond without undue delay and within the timeframe required by applicable law. We do not charge a fee to process or respond to requests unless such request is manifestly unfounded or excessive, or in other cases where permitted by applicable law.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Application or the related Services. The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, this Application and any third-party services may collect files that record interaction with this Application or use other Personal Data, such as the IP Address, for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time using the contact information at the beginning of this document.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within this Application and/or, as far as technically and legally feasible, by sending a notice to Users via any contact information available to the Owner.

It is strongly recommended to check this page often, referring to the date of the last modification listed at the top. Should the changes affect processing activities performed on the basis of the User's consent, the Owner shall collect new consent from the User, where required.

Definitions and legal references

This policy has been prepared based on provisions of multiple legislations and relates solely to this Application, if not stated otherwise within this document.