Privacy Policy

The data controller is FrimeApp, an independent Android application developer, reachable at alfresco.bisha@gmail.com.

FrimeApp publishes its applications on Google Play. This policy covers all of them unless a single app publishes a specific notice.

Data you provide: content you enter in the app (notes, settings, preferences) and the content of the messages you send us by email.

Device and technical data: device model, operating system version, language, country, app version, crash reports, diagnostic logs and app performance data (startup time, network response times).

Identifiers: Android Advertising ID (only in apps that display advertising); Firebase installation identifier and app instance identifier, generated by the analytics and diagnostics SDKs; Firebase Cloud Messaging token, used to deliver push notifications.

Usage data: screens opened, features used, session duration, aggregated and used to improve the app. Usage events do not contain the content you enter (texts, notes, documents, images), only actions, counts and settings.

Most FrimeApp apps do not require an account. Where an account exists, we collect the email address used to register.

Permissions are requested at runtime and only when a feature actually needs them. You can revoke them at any time in Android Settings > Apps > Permissions.

Internet and network state: required to load content, ads and remote configuration, and for usage statistics, diagnostics and push notifications.

Storage / media: only in apps that let you import or export files, and limited to the files you select.

Notifications: used both for alerts related to features you activated and for app news and communications sent through Firebase Cloud Messaging. The permission is requested from Android 13 onwards and can be revoked in the system settings.

Camera, microphone and location: requested only by apps whose core feature needs them, never in the background unless clearly stated in the app.

Providing the app and its features: performance of the contract between you and FrimeApp (Art. 6(1)(b) GDPR).

Stability, crash diagnostics and security: legitimate interest in offering a working and safe product (Art. 6(1)(f) GDPR).

Usage statistics and performance measurement: enabled by default; you can turn them off at any time with the "Statistics and diagnostics" switch in the app settings (legitimate interest in improving the product, Art. 6(1)(f) GDPR, with the right to object exercisable through the switch).

Personalised advertising and use of the advertising ID: only with your consent, collected in the app through Google UMP where required (Art. 6(1)(a) GDPR). Until you make a choice, advertising signals remain denied.

Push notifications: consent given through the Android system permission.

Legal obligations, including tax obligations related to in-app purchases (Art. 6(1)(c) GDPR).

Each app integrates only the services it actually needs. Unless stated otherwise, the services below are used only in the apps that use them; the app-specific notices in section 13 list what each app uses.

Google Play Services (Google Ireland Ltd): app distribution and licence checks. Privacy policy: https://policies.google.com/privacy

Google Play Billing: only in apps that offer in-app purchases or subscriptions. Payments are processed by Google; FrimeApp never receives card details. https://policies.google.com/privacy

Google Sign-In (Google Identity Services): used only by some apps, optionally, to authenticate with Google Drive. Data processed: name, email address and Google profile picture. No FrimeApp account is created. https://policies.google.com/privacy

Google Drive API, "drive.appdata" scope: backups are saved in a hidden app folder in the user's own Google Drive. FrimeApp has no access to these files and does not copy them to its servers. You can delete them from Google Drive settings ("Manage apps") or by revoking access from your Google account (https://myaccount.google.com/permissions). https://policies.google.com/privacy

Google ML Kit (Barcode Scanning): barcode analysis, from the camera or from an image chosen by the user, happens entirely on the device. Images and codes are not sent to FrimeApp. https://developers.google.com/ml-kit/terms

Google User Messaging Platform (UMP): collects and stores on the device the GDPR/TCF consent for personalised ads in the EEA, the UK and Switzerland. You can change your consent at any time from "Privacy options" in the app settings. https://policies.google.com/privacy

Google Analytics for Firebase (Google): usage statistics (screens opened, features used, app version, country, language). It is enabled by default and can be turned off with the "Statistics and diagnostics" switch in the app settings. It uses Consent Mode v2: advertising signals (ad_storage, ad_user_data, ad_personalization) are denied by default and granted only after consent collected with UMP. https://firebase.google.com/support/privacy

Firebase Crashlytics (Google): crash reports. It can be turned off with the same switch. https://firebase.google.com/support/privacy

Firebase Performance Monitoring (Google): app startup times and network performance. It can be turned off with the same switch. https://firebase.google.com/support/privacy

Firebase Remote Config (Google): downloads app configuration parameters (for example ad frequency or feature activation); it uses the Firebase installation identifier. https://firebase.google.com/support/privacy

Firebase Cloud Messaging (Google): delivery of push notifications; it uses a token associated with the installation. Notifications can be turned off in Android settings. https://firebase.google.com/support/privacy

Google AdMob (Google): advertising, only in apps financed by ads, using the advertising ID and UMP consent. https://policies.google.com/technologies/ads

We never sell your personal data.

Some providers process data outside the European Economic Area, mainly in the United States.

Such transfers rely on the European Commission's Standard Contractual Clauses or on an adequacy decision, as declared by the providers themselves.

Data stored only on your device is kept until you delete the app or clear its data.

Crash reports and diagnostics are retained for up to 90 days.

Aggregated analytics data is retained for up to 14 months.

Emails you send us are kept for as long as needed to handle your request and to comply with legal obligations.

The notification token is invalidated when the app is uninstalled.

Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest. You may withdraw consent at any time.

Under the CCPA/CPRA, California residents may request to know, delete and correct their personal information and opt out of the sale or sharing of it. FrimeApp does not sell personal information.

To exercise any right, write to alfresco.bisha@gmail.com. We answer within 30 days.

You also have the right to lodge a complaint with your local supervisory authority.

FrimeApp apps do not create FrimeApp accounts. Locally stored data can be deleted inside the app, by clearing its storage in Android Settings, or by uninstalling the app.

Backups saved to Google Drive can be deleted from Google Drive > Settings > Manage apps, or by revoking the app's access from your Google account.

You can also request deletion by email at alfresco.bisha@gmail.com, indicating the app name. We reply within 30 days. Full instructions per app are on the Data Deletion page (/data-deletion).

Turning off the "Statistics and diagnostics" switch stops the collection of statistics, diagnostics and performance data.

You can request deletion of analytics data already collected by writing to alfresco.bisha@gmail.com.

You can reset your advertising identifier in Android Settings > Google > Ads.

Our apps are not directed at children under 13 (or the minimum age required by local law) unless the Google Play listing explicitly states participation in the Families programme.

We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

Network communication uses HTTPS/TLS. Access to developer consoles is protected by strong authentication and two-factor verification.

No system is completely secure, but we work to protect data against unauthorised access, loss or alteration.

We may update this policy to reflect new features or legal requirements. The date at the top of the page always indicates the latest version.

Significant changes are announced inside the affected apps or in the Google Play listing.