Last updated: 4 October 2026
This policy describes how Random Mini Apps (“we”, “us”) handles information across our apps and the website at randomminiapps.github.io. It is the shared policy for apps that link to this page. The information used depends on the app, its version, the features you choose and the permissions you grant.
Our portfolio currently includes MsgSecret, Lighting Check, Car HUD Display, Natural Text, HotspotCheck, ScamLens, Dyslexia Reading Lens, ClinSpeak OET, MedViva Coach, NMC OSCE AI Coach, UCAT Sprint Coach, Daily Bias, BoomColor and Keepie Yuppie, together with the Cardiac Aftercare and FractureFlow AI research prototypes. This policy also covers our website and the shared practices of other Random Mini Apps apps that use this policy.
A section about a feature applies when the app actually provides that feature. It does not mean every app uses advertising, accesses your location, processes speech or collects the same information. An app-specific notice provides the more precise description for that app and takes precedence where it differs from this shared policy.
Also check the Privacy or About section inside the app. Invite-only research projects have additional participant, access and data-governance arrangements, as explained below.
Apps process the content needed for the feature you use. Examples include text entered for encoding or reading; documents selected for reading assistance; drawings and game progress; practice answers, recordings, transcripts and study progress; or measurements, notes and reports created in a utility app.
Apps that save this information locally use device storage to let you resume work, view history, personalise settings or export your results. Settings can include tutorial completion, preferences, credit balances, daily allowances, purchase access and the timing of optional App Store review requests.
For example, MsgSecret transforms message text on your device and keeps its credit, allowance and app preferences locally. Lighting Check stores saved audits, notes, photos and settings locally. The dedicated notices describe document handling in Dyslexia Reading Lens and local study progress in UCAT Sprint Coach.
Device backups, iCloud or other system-managed storage can retain copies depending on the app and your device settings. Local storage does not by itself guarantee that information is excluded from backups. Keep sensitive material out of features that are not designed to protect it; MsgSecret’s classic ciphers are for puzzles and learning, not secure protection of confidential information.
Permissions are specific to the feature you use. The device’s permission prompt explains the requested access, and you can manage access in Settings.
Declining or revoking a permission can make the dependent feature unavailable. Other features remain subject to their own requirements and settings.
Processing arrangements depend on the feature. Dyslexia Reading Lens’s dedicated notice describes on-device document and AI processing. The current educational voice apps use device or Apple speech capabilities rather than a single shared Random Mini Apps AI account service.
In ClinSpeak OET, speech recognition can use Apple processing depending on device support, language and settings. Audio or speech content needed for recognition can therefore be handled by Apple’s speech service. Other voice apps can require on-device recognition instead. Check the notice and permission explanation for the particular app before using speech with sensitive content.
Car HUD Display includes network-dependent weather information. Games such as Keepie Yuppie can offer optional Apple Game Center features, which handle your Game Center profile and game activity under Apple’s settings and privacy policy. These connected features are specific to the app you use.
Connected features can also download content without uploading your work. For example, ScamLens downloads updated scam-pattern and reporting information; its dedicated notice explains the limited connection and local checks.
This shared policy does not make a portfolio-wide promise about accounts or cloud storage. Existing app-specific notices explain where no account is required. If a feature introduces an account, cloud synchronisation or an external AI service, its notice must identify the information sent, purpose, provider and available controls before that feature is used. Invite-only research access is governed separately.
When you choose Share, Export, AirDrop, Mail, Messages or another destination, the content you select leaves the app through that destination. The receiving service or person controls its subsequent handling under their own practices. Check an export before sending it, especially if it includes personal information, recordings or photos.
If you contact us by email, we receive the address you use, your message and any attachments you send. We use that correspondence to answer your request and provide support. Please send only what is needed and avoid including patient records, passwords or other unnecessary sensitive information.
Some apps, including MsgSecret and Lighting Check, offer optional rewarded advertising through Google Mobile Ads. A completed ad can grant in-app credits. Available paid upgrades can remove rewarded-ad requirements; the relevant app explains its offer. Apps whose dedicated notices exclude advertising do not inherit advertising merely because this shared policy describes it.
When ads are requested or displayed, Google and the selected advertising partners can process information such as IP-derived approximate location, device and technical information, identifiers available under your permissions and settings, ad interactions, and crash or performance information. Uses include ad delivery, measurement and fraud prevention. Even non-personalised ads can involve this processing.
Advertising configuration and personalisation differ by app, region and consent state. We do not claim that all our apps use the same ad settings or that an advertising provider collects no information.
Apps using Google’s User Messaging Platform (UMP) present applicable advertising privacy choices and offer a Privacy Choices control when required. The consent flow identifies applicable providers and purposes. You can revisit available choices, decline optional consent or avoid requesting a rewarded ad. Availability of ads can be limited by those choices. Any Apple App Tracking Transparency permission is separate and controlled through iOS Settings.
Apps can offer a one-time purchase or a subscription through Apple’s App Store and StoreKit. Apple processes payment and purchase information under its own privacy policy. We do not receive your payment card details from these App Store transactions.
The app uses purchase and entitlement information to verify access, restore purchases and apply the benefits you bought. Pricing, renewal terms and cancellation options are shown in the purchase flow. Manage subscriptions through your Apple Account; deleting an app does not cancel a subscription.
Study statistics, game progress or review-request timing can be stored locally to provide feedback and manage the app experience. This does not necessarily mean those events are sent to an analytics service.
App-specific notices identify analytics or diagnostic services where used. Several dedicated notices explicitly exclude off-device analytics. Advertising SDKs and platform services can still process their own technical diagnostics. Apple can provide app diagnostics or usage reports under your platform settings. Do not assume one app’s analytics policy applies to all our apps.
Cardiac Aftercare and FractureFlow AI are invite-only clinician research prototypes. Their public portfolio pages describe research work; they are not public patient services or permission to use the prototypes for live patient care.
Testing access, permitted datasets, participant information and any handling of clinical or research records are subject to the project’s separate notices and approved arrangements. This shared website policy does not authorise submitting identifiable patient information or bypass those controls.
The X-ray review tool has a specific data-flow notice: it serves password-encrypted public-source research images, keeps annotations in the browser and uses user-initiated feedback exports. That deployment must not be reused for private clinical/PACS images. Its convenience encryption is not a clinical confidentiality control.
This website is hosted through GitHub Pages. Hosting and network providers can process ordinary technical information, including IP addresses, request times and browser details, to deliver and protect the site.
Pages on this site use fonts served from this same host (Outfit and JetBrains Mono, under the SIL Open Font License). A page load does not contact a separate font service. External links open services with their own privacy practices.
The site’s language selector stores your language preference in browser local storage and loads the selected language files. Some research tools also store their work in the browser as described in their notices. These are separate from cookies. The current shared static pages do not set developer-controlled cookies; third-party services have their own storage practices. Clearing browser site data removes locally stored preferences and can remove locally stored research annotations.
Locally saved content is retained for the app feature until you remove it using available controls or remove the app’s storage. Device backups, exported copies, system-managed secure storage and restored purchase records can remain separately. Deleting an app does not necessarily remove these copies or information already shared with another service.
Support correspondence is kept while needed to respond to and follow up your request and to meet applicable obligations. Research information follows the project’s specific retention arrangements. Information held by Apple, Google, GitHub or other identified providers follows the relevant service’s policies and controls. There is no single retention period for all apps or data types.
Depending on your location and the processing involved, you can have rights to access, correct, delete, restrict or object to processing of personal information, request portability, or withdraw consent. Contact us with the app name and the request. Where information is held by a platform or service provider, its privacy controls can be relevant too. Research participants should also use the project’s designated contact and notice.
Our portfolio includes games, reading tools, student practice apps, utilities and professional research prototypes with different intended audiences. Check each app’s age rating, intended audience and specific privacy notice. This shared policy does not assign every app an adult-only audience or make a blanket claim about children’s information.
Parents and guardians can manage device permissions, purchases and suitable content through platform controls. If you are concerned about a child’s information being provided through one of our apps or support channels, contact us with the app name so we can investigate and identify the relevant controls.
The services relevant to an app depend on its features. The following providers are described above; dedicated notices and advertising consent flows identify additional applicable services and partners.
Linking to a provider’s policy helps explain its practices and does not remove our responsibility for the information handling in our apps.
We update this policy when relevant practices change and revise the date above. App-specific notices can change separately. Review the notice for your app, particularly when using a new connected feature or permission.
For privacy questions about any Random Mini Apps app, our website or the appropriate research contact, email:
Please include the app name and version where possible, and only the information needed to explain your request.
Our apps are provided “as is” and “as available.” We do not guarantee that they will work without errors, meet your requirements, or be uninterrupted or secure. We give no warranty of any kind (express or implied) regarding the apps or their functionality.
We are not liable for any direct, indirect, incidental, or consequential damage arising from your use of our apps or this website. This includes, but is not limited to, loss of data, loss of profits, or any other loss or damage. You use our apps at your own risk.