
● Legitimate Interest (Art. 6(1)(f) GDPR): We process minimal technical metadata (such
as device type and basic system logs) based on our legitimate business interests to:
● Ensure the security, stability, and integrity of the mobile application.
● Detect, prevent, and mitigate fraud, spam, or malicious software activities.
● Debug errors and maintain standard network infrastructure to keep the app
running smoothly.
4. Third-Party Data Processors and Sharing
We do not sell your personal data. We share necessary data points only with the data
processors required to operate the app:
● RevenueCat, Inc.: Used to manage in-app subscriptions, verify purchase receipts, and
unlock your premium app features.
● Google LLC (Google Pay & Google Ads): Used to handle checkout securely via
Google Pay and to serve tracked, personalized advertisements within the mobile app.
5. International Data Transfers
When data is processed by processors headquartered outside the European Economic Area
(EEA), such as RevenueCat, Inc. or Google LLC in the United States, we ensure standard
safeguards are met. Transfers are protected via the EU-U.S. Data Privacy Framework or
standard contract clauses approved by the European Commission, ensuring your data receives
equivalent GDPR protection.
6. Data Retention
● Account & Asset Data: Your email and asset logs are retained as long as your account
remains active. If you choose to delete your account, this data will be immediately
removed from our active databases.
● Advertising Data: Tracking data used by Google Ads is managed according to Google’s
standard data retention cycles for advertising IDs.
7. Your GDPR Rights
As a resident of the European Union, you hold the following rights:
● Right to Access: Request a copy of the data we hold about you (your email and logs).
● Right to Rectification: Request corrections to inaccurate information.
● Right to Deletion ("Right to be Forgotten"): Request total erasure of your account.