Privacy Policy

As of November 2026. Applies to the Mindful Camera app and the website tk-apps.eu/mindfulcamera.

1. Controller

2. Data on your device

The app stores its data only locally on your device:

• Your photos and videos. Until they are developed they stay in the app's storage, afterwards in your device's gallery.
• Your rolls and shots: name, number and time of shots, cooldown and development type.
• Your settings and the figures in the Review section.
• The status of in-app purchases, if you make any. The status at Google Play or the Apple App Store is what counts.

This data is not transferred to us. The only exception is the purchase data described in 6.2. No account is required.

3. Permissions

The app only asks for permissions it needs for the function in question. You can withdraw them at any time in your device settings.

• Camera: to take photos and videos.
• Microphone: for sound in videos. Can be switched off in the app.
• Photos and videos (gallery): to save, show and delete your shots.
• Location (optional): only if you switch on “Save location”, which is off by default. The place of the shot is then stored in the image file and stays in it if you pass the photo on.
• Display over other apps (optional, Android): only for the “On top of the system camera” feature. It lets the app show its shutter and roll bar on top of your device's camera.
• All files access (optional, Android): only for the same feature. In that case the shots belong to the system camera. This access lets the app move them to the roll's folder without asking, or hold them back in the app's storage until they are developed. It only uses this for shots taken while the overlay is running and does not transfer any files to us or to third parties.
• Notifications (Android): while the overlay is running, your device shows a notification. Tapping it ends the overlay.

4. Sharing shots

Shots or a contact sheet are only passed on if you do so yourself through your device's share dialog. The app or recipient you choose is then responsible for any further processing.

5. Legal bases

• Art. 6(1)(b) GDPR (contract): providing the app and its functions, handling in-app purchases.
• Art. 6(1)(a) GDPR (consent), for advertising in conjunction with § 165(3) of the Austrian TKG 2021: personalised advertising and storing or reading information on your device for advertising, location data in photos.
• Art. 6(1)(f) GDPR (legitimate interest): app updates, secure operation of the website and limited ads without consent to finance the app.

6. Disclosure to third parties

6.1 Advertising (Google AdMob)

The app may be financed by banner ads. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the resulting data as an independent controller. As long as the app shows no ads, the advertising service is not started and this processing does not take place.

Data sent to Google: IP address (from which an approximate location can be derived), technical details about device and app, interactions with the app and ads, performance and diagnostic data, device identifiers (Android: advertising ID and app set ID; iOS: app or vendor identifiers, the advertising ID only with your permission) and your choice in the consent dialog. Your photos and videos are not part of this. Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework. Details: Google's privacy policy and how Google uses data from apps.

Consent (EEA, United Kingdom, Switzerland): Before the first ad we ask for your consent through the Google User Messaging Platform; the dialog lists Google and the other advertising partners. With consent, information may be stored on and read from your device and ads may be personalised. Without consent, limited ads may appear: not personalised and without identifiers for personalisation or measurement; the IP address is used for delivery, local storage possibly for fraud detection. You can change your choice at any time in the app under Settings → Ad privacy and withdraw consent with effect for the future.

USA: In US states with their own privacy laws you can object to the sale and sharing of your data under the same menu item. It only appears in regions for which Google provides such a form.

iPhone and iPad: The app also asks through Apple's system dialog whether it may track your activity across other companies' apps and websites. Google receives the advertising ID (IDFA) only with your permission. You can change this under Settings → Privacy & Security → Tracking.

Android: You can reset your advertising ID in the Android settings and delete it from Android 12 (usually under Privacy → Ads).

6.2 In-app purchases

Payment is handled exclusively by Google Play or the Apple App Store. These providers process your payment details themselves, we do not receive them. The app only learns which purchase is valid and remembers this locally. Google's privacy policy or Apple's privacy policy applies.

RevenueCat: Once the app offers purchases, we manage and verify them with the service of RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, USA. RevenueCat acts as our data processor and has no access to your payment details, photos or videos.

• Data sent to RevenueCat: device type and operating system, the time you last used the app, the store's purchase receipt (Apple receipt or Google purchase token), and from it the products bought and when, a user ID from the app and, for technical reasons, your IP address when connecting. We do not send your name or email address.
• Purpose and legal basis: verifying, unlocking and restoring your purchases (Art. 6(1)(b) GDPR).
• Transfer to the USA: The data is stored in the USA. The safeguard is the European Commission's Standard Contractual Clauses in RevenueCat's data processing agreement.

More in RevenueCat's privacy policy.

6.3 App updates (Expo)

When it starts, the app checks through the Expo service (Expo, Inc., USA) whether an update is available. Technical data such as IP address, app version and platform, along with a random identifier for this app installation, are sent to Expo's servers, including in the USA. Expo's privacy policy applies.

6.4 App stores

When you download the app from Google Play or the Apple App Store, these providers process data under their own responsibility. We receive aggregated statistics and possibly crash reports from them, but nothing that would let us identify you personally.

7. This website

The website is hosted on GitHub Pages, a service of GitHub Inc., 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA. When the site is accessed, GitHub automatically records server log data such as IP address, date and time, browser and operating system and the previously visited page. We have no access to this data. The legal basis is our legitimate interest in stable operation (Art. 6(1)(f) GDPR). More in GitHub's privacy statement.

The website sets no cookies and uses no analytics or advertising services. Fonts and videos are loaded from this website itself. The browser only remembers for the current session whether you closed the note about the other language version. The test roll on the page runs entirely in your browser.

If you write to us by email, we use your details only to answer your enquiry.

8. Storage period

Local data stays stored until you delete it or uninstall the app. Uninstalling removes the app's data, including photos that have not been developed yet. Shots already saved to the gallery stay there. Your choice in the consent dialog stays stored until you change it or uninstall the app. How long Google stores advertising data is set out in Google's privacy policy. We keep purchase data at RevenueCat for as long as it is needed for your purchases or statutory retention duties apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), to object to processing based on legitimate interests (Art. 21) and to withdraw consent (Art. 7(3)). Since we store no data about you apart from the purchase data at RevenueCat, you can exercise most rights directly in the app and on your device. For purchase data, please contact us by email. For data that Google, Apple or Expo process as independent controllers, please also contact these providers directly.

10. Right to lodge a complaint

You can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

11. Children

The app is not directed at children under 14.

12. Changes

We update this policy when the app or the law changes. The current version is always on this page.