رازداری کی پالیسی

1. Data We Handle

We do not require an account to use the app. For core editing features, selected images are processed locally instead of being uploaded to our own servers.

• Photos you choose with Photo Picker or document selection are used to load, edit, export, save, or share results on the device.
• Firebase Analytics and Firebase Crashlytics may collect app activity, crash logs, diagnostics, and device or app identifiers needed for analytics and stability monitoring.
• Google AdMob may collect and process advertising identifiers, device information, and interaction data to serve ads. Personalized ads depend on your consent choice managed through the Google User Messaging Platform (UMP).
• If you subscribe to Pro, Google Play Billing processes the transaction. We receive entitlement status (active or expired) but do not access your payment method details.
• The app also stores user-created assets, settings, and Pro entitlement status locally so they can be restored later.

2. Data Stored Locally On Your Device

To support reusable editing assets and history, the app keeps some information in internal app storage, Room, and DataStore.

• Custom gradient presets and lightweight preferences are stored in DataStore.
• Imported custom font files are copied into app-private storage and indexed locally.
• Imported signature source images and generated transparent signature templates are stored in app-private storage.
• History records may include saved file URI, display name, export format, save location, width, height, hidden-watermark flag, and creation time.
• Pro subscription entitlement status is cached locally to enable offline feature access.

3. Advertising

The free version of the app displays ads provided by Google AdMob. Pro subscribers do not see ads.

• On first launch or when required, the app presents a consent dialog (powered by Google UMP) where you can choose whether to allow personalized advertising.
• If you consent, ads may be personalized based on your interests and activity. If you decline, you will still see ads, but they will not be personalized.
• Rewarded ads allow you to unlock certain Pro features temporarily by watching a video ad. Watching is always optional.
• Ad-related data collected by Google may include advertising ID, device type, OS version, app interaction events, and approximate location. This data is governed by Google's privacy policy.
• You can reset your advertising ID or opt out of ad personalization in your device's Settings > Google > Ads.

4. Pro Subscription

The app offers an optional Pro subscription that unlocks additional features and removes ads.

• Purchases are processed entirely by Google Play. We do not collect or store credit card numbers, billing addresses, or other payment details.
• We receive and store your subscription status (active, expired, or cancelled) to determine which features to unlock.
• You can restore purchases on any device signed into the same Google account via the Restore Purchases option.

5. Photos, Files, and Permissions

The app follows Android privacy-first access patterns and avoids broad media access for normal flows whenever possible.

• Image selection primarily uses the Android system Photo Picker, so you choose specific images instead of granting full library access.
• If you capture a signature photo, the image is written to app-controlled storage and used to build an offline signature template.
• When you save to Gallery, export to Downloads, or share a result, Android system components handle the destination you choose.

6. Sharing and Third Parties

We do not sell your personal data. Core editing images are not sent to our own backend. Some technical and advertising data may be sent to Google services included in the app.

• Analytics and crash diagnostics may be transmitted to Google Firebase over encrypted connections for product analytics and app stability.
• Google AdMob may transmit ad interaction and device data to Google's ad network for ad serving and measurement.
• User photos, custom fonts, and signature templates are not sold or shared for advertising by the app itself.

7. Retention

Local content remains on your device until you delete it, clear app data, or uninstall the app.

• Fonts, signature templates, gradient presets, and history records remain available until removed by you.
• Firebase and AdMob may retain analytics, crash, or ad data according to their respective retention policies.

8. Your Controls

You can control most data directly inside Android or inside the app.

• Clear app data or uninstall the app to remove app-private local data.
• Delete imported fonts, signature templates, gradient presets, or history entries from the Settings and History screens.
• Stop granting access to new photos by not selecting items through Photo Picker or document selection.
• Change your ad consent choice at any time from Settings > Privacy Choices inside the app.
• Reset or disable your advertising ID from your device Settings > Google > Ads.

9. Security

We use Android app sandboxing, app-private storage, and standard platform sharing mechanisms to reduce unnecessary data exposure. Data sent to Firebase and ad services is transmitted over encrypted network connections.

10. Children

The app is not directed to children under the minimum age required by applicable law without parental or guardian involvement. We do not knowingly collect personal information from children.

11. Policy Updates

We may update this privacy policy when app features, third-party services, or compliance requirements change. Material updates should be reflected in the in-app policy page and the public policy URL at https://www.aidaodi.xyz/privacy/watermark-tool/.

12. Contact

For privacy-related questions, contact mopengaidaodi@gmail.com or visit https://www.aidaodi.xyz/privacy/watermark-tool/.