Privacy Policy

This Privacy Policy explains what data the app ("App") collects when you use it, why we collect it, who we share it with, and the rights you have over it. The App is published by MobileCraft ("MobileCraft", "we", "us") and is distributed through the Apple App Store and Google Play.

Summary

• There are no user accounts. We never ask for your name, email address, or phone number.
• We collect pseudonymous usage and diagnostic data through PostHog, purely to understand how the App is used and to fix problems. We do not attempt to identify you from it.
• We use RevenueCat to manage subscriptions. Payment itself is handled by Apple or Google, and we never see your card details.
• We do not show ads, we do not sell your data, and we do not use it for advertising.
• The files you open or create in the App are processed on your device and are not uploaded to us.

Your content stays on your device

Any media or documents you select, edit, or export in the App are processed locally on your device. We do not upload, store, or have access to that content, and it is never sent to our analytics or subscription providers.

Product analytics (PostHog)

We use PostHog to measure how the App is used so we can improve it. PostHog acts as a data processor on our behalf and processes the data on infrastructure located in the United States. The data is pseudonymous: it is tied to a randomly generated identifier for your installation of the App, not to your name, email address, or any account. We do not link it to your identity and we do not use it to build advertising profiles.

The following data is collected:

• A pseudonymous device identifier and session identifier. A random ID is generated on first launch and stored on your device so we can tell repeat sessions apart from new ones. Under privacy laws such as the GDPR this counts as personal data even though it does not name you.
• Device and app information: operating system name and version, device type, screen dimensions, app version, build number, and app bundle identifier.
• Approximate location and IP address. Your IP address is transmitted with each request and is used by PostHog to derive an approximate location (typically country or region level). We do not collect GPS or precise location data.
• App lifecycle events: when the App is installed, updated, opened, brought to the foreground, or sent to the background. If the App was opened from a link, the link address is recorded.
• Screen views and feature usage: which screens you visit and which features you use, along with related non-identifying properties, for example how far you progressed through onboarding, which type of source you picked, how long an operation took, how much of a daily usage allowance has been used, how old a project is, and where a paywall was opened from and what the outcome was.
• Diagnostics: crashes, uncaught errors, and unhandled promise rejections, including the error message and stack trace. Stack traces can occasionally include fragments of file names or file paths from the device. We do not seek this data out, we do not use it for any purpose other than fixing the fault, and we do not attempt to reconstruct your file library from it.
• Configuration requests: on launch the App requests its remote configuration and feature flags, which involves sending the pseudonymous identifier and the device properties listed above.

Subscriptions and purchases (RevenueCat)

We use RevenueCat to manage in-app subscriptions, validate receipts, and restore purchases across your devices. RevenueCat acts as a data processor on our behalf and processes data in the United States. For this purpose it receives an anonymous app user identifier, your purchase and subscription history, store receipts and transaction identifiers, the product you purchased, the subscription period type, whether the subscription is set to renew, which store the purchase came from, whether the purchase was made in a test environment, and basic device, platform, and locale information.

Payment is processed entirely by Apple or Google under their own privacy policies. We never receive or store your card number, billing address, or any other payment credentials. Refunds and cancellations are handled by the store you purchased through.

App updates and distribution

The App checks for over-the-air updates on launch. That request necessarily reveals your IP address, platform, and app runtime version to our update provider. Apple and Google also collect their own data when you download or update the App, or when you interact with the store listing, under their respective privacy policies.

Why we process this data

If you are in the European Economic Area or the United Kingdom, our legal bases under the GDPR are:

• Contract for subscription and purchase data. We cannot give you access to paid features or restore your purchases without it.
• Legitimate interests for analytics and diagnostics, specifically our interest in understanding which features are used, finding and fixing defects, and improving the App. We limit this to pseudonymous data and do not use it to target you or to make decisions about you individually.
• Legal obligation where we are required to retain records, for example for tax purposes.

Who we share data with

We share data only with the service providers needed to run the App: PostHog for analytics and diagnostics, RevenueCat for subscription management, our over-the-air update provider, and Apple and Google as the app stores and payment processors. Each is bound to process the data on our instructions and for no other purpose. We do not sell your personal data, we do not share it for cross-context behavioural advertising, and we do not disclose it to data brokers or advertising networks. We may disclose data if legally required to do so, or to protect our rights or the safety of others.

Retention

Analytics and diagnostic data is retained for as long as it remains useful for product decisions and then deleted or aggregated. Subscription records are retained for as long as you hold a subscription and afterwards for as long as needed to handle support, refunds, accounting, and legal obligations.

Your rights

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to its processing, receive a copy in a portable format, and, in the EEA and UK, withdraw consent or lodge a complaint with your local data protection authority. If you are a California resident, you have the rights to know, delete, correct, and opt out of sale or sharing; we do not sell or share personal data, and we will not discriminate against you for exercising any right.

To exercise any of these rights, email [email protected]. Because we do not hold accounts, we may need you to send us the pseudonymous identifier shown in the App's settings screen, or your store receipt, so we can locate the right records. We respond within 30 days. Deleting the App stops any further analytics collection from your device.

International transfers

Our providers process data in the United States. Where data is transferred out of the EEA or the UK, the transfer is covered by the European Commission's Standard Contractual Clauses together with the UK Addendum, as set out in our agreements with those providers.

Children's privacy

The App is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has used the App and that we hold data about them, contact us at [email protected] and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always posted on this page with its effective date, and material changes take effect when posted. Please review it periodically.

Contact

Questions about this policy or about your data: [email protected], or visit https://mobilecraft.io. MobileCraft is the data controller for the processing described above.

© 2026 mobilecraft.io