Privacy Policy for the FotoSafe app and website

1. Summary

• no FotoSafe account, advertising or tracking in the app,
• no upload of your photos or videos to the app provider,
• no deletion of originals,
• no website analytics without explicit statistics consent and no analytics cookies.

2. Controller

3. Local app processing

After Android permission, FotoSafe reads photos, videos and associated file information to copy them to the storage location you select. Media copies, logs and index information are stored at that destination. Destination, last-backup and trial/Pro status are stored locally.

The app does not use general all-files access. Partial media access on Android 14+ may include selected files only.

4. Google Play

Installation, the one-time Pro purchase and restoration are handled by Google Play under Google's privacy terms. FotoSafe receives product, price and purchase-status information, not card details.

5. Website hosting

This static website is delivered through Cloudflare Pages. Cloudflare may process technically necessary connection and security data such as IP addresses. The optional Umami statistics script loads only after explicit consent. Without consent, after rejection or withdrawal, with DNT/GPC, on previews or on wrong hosts, there is no Umami request. The persistent “Privacy settings” control allows a later change or withdrawal; the page reloads after withdrawal. Only a reduced page view and Play Store, support and help/FAQ events with stable IDs are recorded. Search text, email addresses, full destination URLs, query parameters, fragments, user IDs and advertising IDs are not recorded. Umami receives data through https://gateway.umami.is; its script is loaded from https://cloud.umami.is. The public website ID is not an access credential. See the Cloudflare Privacy Policy.

6. Legal bases, recipients and transfers

• Local app processing: media and app settings generally remain on your device or selected destination and are not transmitted to the app provider.
• Google Play: purchase processing and restoration are necessary to perform the contract (Art. 6(1)(b) GDPR); legally required retention is based on Art. 6(1)(c) GDPR. Google is a recipient under its own privacy terms.
• Cloudflare Pages: secure and reliable website delivery is based on our legitimate interest (Art. 6(1)(f) GDPR). Cloudflare, Inc. acts as processor. Its global infrastructure can involve transfers outside the EEA; safeguards are set out in the Cloudflare DPA, including EU Standard Contractual Clauses.
• Umami Cloud: statistics load only with consent under Art. 6(1)(a) GDPR and section 165(3) TKG 2021. Umami Software, Inc., San Francisco, USA, acts as processor. The request necessarily exposes connection data such as the IP address, browser/device characteristics, language and referrer; FotoSafe actively stores only reduced page identifiers and the events described above. Umami operates servers in the EU and US. Third-country transfers are covered by the Umami DPA and EU Standard Contractual Clauses; see also the Umami Privacy Policy.

7. Retention and consent

Local app data and backup copies remain until you delete them in Android or at the selected destination. The statistics choice is stored without a cookie in local browser storage for no more than 180 days. Umami states 6 months of analytics retention for the currently used Hobby tier. Cloudflare retains technical security and connection data under the periods in its contract and privacy policy; FotoSafe keeps no separate web-server log. Google determines retention of purchase and account data under its policies and legal duties.

You may withdraw statistics consent at any time through “Privacy settings” with effect for the future. Rejection does not affect use of the app or website.

8. Deletion and rights

You remove backup copies at the selected destination. Local app data can be removed through Android settings or uninstallation; a Google Play purchase remains restorable through the Google account.

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with effect for the future. To exercise your rights, email privacy@weidisoft.net. You may also complain to the Austrian Data Protection Authority. There is no automated decision-making, including profiling. Providing data for optional statistics is neither a statutory nor contractual requirement.