Privacy Policy

The data controller is FrimeApp, an independent Android application developer, reachable at alfresco.bisha@gmail.com.

FrimeApp publishes its applications on Google Play. This policy covers all of them unless a single app publishes a specific notice.

Data you provide: content you enter in the app (notes, settings, preferences) and the content of the messages you send us by email.

Device and technical data: device model, operating system version, language, country, app version, crash reports and diagnostic logs.

Identifiers: Android Advertising ID (only in apps that display advertising), app instance identifiers generated by analytics SDKs.

Usage data: screens opened, features used, session duration, aggregated and used to improve the app.

Most FrimeApp apps do not require an account. Where an account exists, we collect the email address used to register.

Permissions are requested at runtime and only when a feature actually needs them. You can revoke them at any time in Android Settings > Apps > Permissions.

Internet and network state: required to load content, ads and remote configuration.

Storage / media: only in apps that let you import or export files, and limited to the files you select.

Notifications: only to send you alerts related to features you activated.

Camera, microphone and location: requested only by apps whose core feature needs them, never in the background unless clearly stated in the app.

Providing the app and its features: performance of the contract between you and FrimeApp (Art. 6(1)(b) GDPR).

Stability, crash diagnostics and security: legitimate interest in offering a working and safe product (Art. 6(1)(f) GDPR).

Analytics and personalised advertising: your consent, collected inside the app where required (Art. 6(1)(a) GDPR).

Legal obligations, including tax obligations related to in-app purchases (Art. 6(1)(c) GDPR).

Google Play Services and Google Play Billing (Google Ireland Ltd) for app distribution, licence checks and in-app purchases.

Firebase Analytics and Firebase Crashlytics (Google) for usage statistics and crash reports.

Google AdMob (Google) for advertising in apps that are financed by ads.

These providers act as independent controllers or processors according to their own policies, available at policies.google.com/privacy.

We never sell your personal data.

Some providers process data outside the European Economic Area, mainly in the United States.

Such transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision, as declared by the providers themselves.

Data stored only on your device is kept until you delete the app or clear its data.

Crash reports and diagnostics are retained for up to 90 days.

Aggregated analytics data is retained for up to 14 months.

Emails you send us are kept for as long as needed to handle your request and to comply with legal obligations.

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You may withdraw consent at any time.

Under the CCPA/CPRA, California residents may request to know, delete and correct their personal information and opt out of the sale or sharing of it. FrimeApp does not sell personal information.

To exercise any right, write to alfresco.bisha@gmail.com. We answer within 30 days.

You also have the right to lodge a complaint with your local supervisory authority.

You can delete all locally stored data by uninstalling the app or by clearing its storage in Android Settings.

For apps with an account, send a deletion request to alfresco.bisha@gmail.com specifying the app name and the email used. The account and associated data are deleted within 30 days.

You can reset your advertising identifier in Android Settings > Google > Ads.

Our apps are not directed at children under 13 (or the minimum age required by local law) unless the Google Play listing explicitly states participation in the Families programme.

We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

Network communication uses HTTPS/TLS. Access to developer consoles is protected by strong authentication and two-factor verification.

No system is completely secure, but we work to protect data against unauthorised access, loss or alteration.

We may update this policy to reflect new features or legal requirements. The date at the top of the page always indicates the latest version.

Significant changes are announced inside the affected apps or in the Google Play listing.