TheZun Studio
  • Products
  • What we care about
  • How we build
  • Reviews
  • Get in touch
Legal

Privacy Policy

Last updated: October 21, 2026

Contents

  • 1. Apps covered
  • 2. Who we are
  • 3. Information we collect
  • 4. How we use information
  • 5. Third parties & sharing
  • 6. Advertising & your choices
  • 7. In-app purchases
  • 8. Accounts & account deletion
  • 9. Our website
  • 10. Retention & deletion
  • 11. International transfers
  • 12. Security
  • 13. Your rights
  • 14. Children's privacy
  • 15. Changes to this policy
  • 16. Contact us

This Privacy Policy applies to the mobile apps published by TheZun Studio on Google Play and the Apple App Store, including Colouring Games: Paint Number, Seek Town: Hidden Objects and PDF Reader: Scan Document, and to the website thezun.net (together, the "Services").

1. Apps covered by this policy

Each app below is covered by this policy. Details that differ between apps (such as the third-party services it uses) are listed here and referred to throughout the policy.

Colouring Games: Paint Number

  • Store: Google Play
  • Package name: com.thezun.colorbynumber
  • Developer name on Google Play: Stword
  • Intended audience: users aged 13 and over
  • Account required: No
  • Advertising: Yes, served by Google AdMob
  • In-app purchases: Yes, processed by Google Play
  • Third-party services: Google AdMob, Firebase Analytics, Firebase Crashlytics
  • Device permissions: Camera and photos (optional, only when you choose to turn your own photo into a colouring page)

Seek Town: Hidden Objects

  • Store: Google Play
  • Package name: com.thezun.seektown
  • Developer name on Google Play: Stword
  • Intended audience: users aged 13 and over
  • Account required: No
  • Advertising: Yes, served by Google AdMob
  • In-app purchases: Yes, processed by Google Play
  • Third-party services: Google AdMob, Firebase Analytics, Firebase Crashlytics
  • Device permissions: None beyond internet access

PDF Reader: Scan Document

  • Store: Google Play
  • Package name: com.thezun.pdf.reader.scan.document
  • Developer name on Google Play: Stword
  • Intended audience: users aged 13 and over
  • Account required: No
  • Advertising: Yes, served by Google AdMob
  • In-app purchases: Yes, processed by Google Play
  • Third-party services: Google AdMob, Firebase Analytics, Firebase Crashlytics
  • Device permissions: Camera (to scan documents) and access to files and photos you choose to open, import or save
  • Your documents: scanning, text recognition, viewing and editing happen entirely on your device. Your documents and scans are never uploaded to our servers or shared with third parties.

2. Who we are

TheZun Studio ("we", "us", "our") is an independent mobile app developer based in Ho Chi Minh City, Vietnam. We publish apps on Google Play under the developer name Stword. We are responsible for (the "controller" of) the personal data processed through the Services as described in this policy.

If you have questions about this policy or your data, contact us at privacy@thezun.net.

3. Information we collect

3.1 Information you give us

  • Support messages: if you email us, we receive your email address, name (if you include it) and the content of your message.
  • Photos you choose to import: in apps that offer a photo feature (such as Colouring Games: Paint Number), if you use it, the image you pick or take is processed on your device to create a colouring page. We do not upload your photos to our servers, and we do not access any photos you do not select.
  • Documents and scans: in apps that read or scan documents (such as PDF Reader: Scan Document), the files you open and the pages you scan are processed and stored only on your device. We cannot see them, and they are not sent to us or to our advertising and analytics providers.
  • Your game progress: artwork, levels, rewards and other progress are stored locally on your device.

3.2 Information collected automatically

Our apps use third-party software development kits (SDKs) that collect some information automatically:

  • Device identifiers: the Android Advertising ID, or on iOS the Identifier for Advertisers (IDFA) only if you allow tracking, and app-instance identifiers generated by Firebase.
  • Device and app information: device model, operating system and version, language, app version, and screen size.
  • Approximate location: country or city-level location derived from your IP address. We do not collect precise (GPS) location.
  • App usage: screens viewed, features used, levels completed, session length, and in-app purchase events.
  • Ad interactions: ads shown, clicked or watched.
  • Diagnostics: crash logs, stack traces and device state at the time of a crash.

3.3 Device permissions

We only ask for a permission when you use the feature that needs it. Camera access is used only to take a picture or scan a document when you ask the app to. File and photo access is used only to open, import or save the files you choose. You can deny or revoke any permission at any time in your device settings; the rest of the app will keep working.

3.4 What we do not collect

We do not collect your name, phone number, contacts, precise location, or payment card details through our apps, and we do not require you to create an account.

4. How we use information

  • To provide the app and its features, including the photo import feature (legal basis: performance of our contract with you).
  • To show ads that keep the app free, and to measure and limit ad frequency and prevent ad fraud (legal basis: your consent where required by law, otherwise our legitimate interests).
  • To understand usage and improve the app through aggregated analytics (legal basis: legitimate interests, or consent where required).
  • To detect and fix crashes and bugs (legal basis: legitimate interests in providing a stable app).
  • To process and restore purchases (legal basis: performance of contract).
  • To reply to support requests (legal basis: legitimate interests / performance of contract).
  • To comply with the law and protect our rights (legal basis: legal obligation / legitimate interests).

We do not use your data to make automated decisions that have legal or similarly significant effects on you.

5. Third parties & sharing

We do not sell your personal data for money. We share data only with the service providers below, which process it to provide their services to us and are required to protect it at a level at least equivalent to this policy:

  • Google AdMob (advertising) — device identifiers, IP address, device information and ad interactions. Privacy policy · How Google uses data from partner apps
  • Firebase Analytics (Google) — app-instance ID, usage events, device information, approximate location. Privacy and security in Firebase
  • Firebase Crashlytics (Google) — crash logs, device state, Crashlytics installation ID. Privacy and security in Firebase
  • Google Play / Apple App Store (payments and app distribution) — purchase and subscription transactions. We never receive your payment card details. Google · Apple

We may also disclose information when required by law or a competent authority, to protect the rights and safety of our users or others, or in connection with a merger, acquisition or sale of assets (in which case we will notify you beforehand).

California residents: allowing AdMob to show personalized ads may count as "sharing" personal information for cross-context behavioral advertising under the California Consumer Privacy Act (CCPA/CPRA). You can opt out as described in section 6 or by emailing us.

6. Advertising & your choices

Our free apps show ads served by Google AdMob. Depending on your region and choices, ads may be personalized (based on your interests) or non-personalized (based only on context such as the app and your general location).

  • EEA, UK and Switzerland: when you first open the app we show a consent message (Google User Messaging Platform). You can accept or reject personalized ads and change your choice later from the app's settings.
  • Android: you can delete or reset your Advertising ID, or opt out of personalized ads, in Settings → Google → Ads (or Settings → Security & privacy → Ads).
  • iOS: our apps only access the IDFA if you allow it in the App Tracking Transparency prompt. You can change this at any time in Settings → Privacy & Security → Tracking.
  • Remove ads: where offered, you can remove ads with an in-app purchase.

7. In-app purchases

Purchases are processed entirely by Google Play or the Apple App Store under their own terms and privacy policies. We receive only the information needed to confirm and restore your purchase (such as a transaction ID, product purchased, and date). We never receive or store your payment details.

8. Accounts & account deletion

None of our current apps require or offer user accounts. If any of our apps offers account creation, that app will let you delete your account and its associated data from within the app, and you can also request deletion by emailing privacy@thezun.net. The app's entry in section 1 will say whether it offers accounts.

9. Our website

The website thezun.net does not use cookies, analytics or advertising trackers. Fonts are loaded from Google Fonts, which receives your IP address and browser information when you visit (see the Google Privacy Policy). Our hosting provider may keep standard server logs (IP address, browser type, pages requested, timestamps) for security purposes.

10. Data retention & deletion

  • On your device: documents, scans, artwork, progress and imported photos stay on your device until you delete them or uninstall the app.
  • Analytics data: kept by Firebase Analytics for up to 14 months, then deleted automatically.
  • Crash reports: kept by Firebase Crashlytics for up to 90 days.
  • Advertising data: retained by Google according to Google's retention policy.
  • Support emails: kept for up to 24 months after our last contact with you.
  • Purchase records: kept as long as required by tax and accounting law.

How to delete your data: uninstalling the app removes all data stored on your device. To ask us to delete data held by us or our providers (for example analytics data linked to your app instance), email privacy@thezun.net with the app name. We will complete your request within 30 days. You can also reset your advertising ID at any time as described in section 6.

11. International transfers

We are based in Vietnam, and our service providers (such as Google) may process data in the United States and other countries. Where data is transferred from the EEA, UK or Switzerland, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses used by our providers.

12. Security

Data sent from our apps to our service providers is encrypted in transit using TLS. We limit access to the data we hold to what is needed to run the Services and rely on providers with strong security practices. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a data breach where required by law.

13. Your rights

Depending on where you live (including under Vietnam's Decree 13/2023/ND-CP, the EU/UK GDPR, and the CCPA/CPRA and other US state laws), you may have the right to:

  • know what personal data we hold about you and get a copy of it;
  • correct inaccurate data;
  • have your data deleted;
  • restrict or object to processing, including for personalized advertising;
  • opt out of the "sale" or "sharing" of personal information;
  • withdraw consent at any time, without affecting processing that took place before;
  • receive your data in a portable format;
  • lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@thezun.net. We may need to verify your request, and we will respond within 30 days. We will not treat you differently for exercising your rights.

14. Children's privacy

Our apps are intended for users aged 13 and over and are not directed to children under 13 (or the higher minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at privacy@thezun.net and we will delete it promptly.

15. Changes to this policy

We may update this policy, for example when we release a new app or add a new third-party service. The updated version will be posted on this page with a new "Last updated" date. For material changes we will also notify you in the app.

16. Contact us

  • TheZun Studio (Google Play developer name: Stword)
  • Email: privacy@thezun.net
  • Website: thezun.net
  • Address: Ho Chi Minh City, Vietnam
© 2026 TheZun Studio. All rights reserved. Home Privacy Terms