Privacy Policy

1. Who we are

JAPROX LTD (“JAPROX”, “we”, “us”, “our”) is a developer and publisher of mobile applications and web applications. For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and, where applicable, the EU General Data Protection Regulation (“EU GDPR”), JAPROX LTD is the data controller of the personal data described in this policy, except where we act as a processor on behalf of a client (see section 2).

You can contact us about privacy matters at app@japrox.store.

2. Scope

This policy applies to:

• our website and any pages that link to this policy (the “Website”);
• mobile applications we publish on the Apple App Store, Google Play and other stores (the “Apps”);
• web applications and online services we operate (the “Web Apps”); and
• communications with us, including email and support enquiries.

Together these are the “Services”. Some Apps may have an app-specific privacy notice that supplements this policy; where it does, the app-specific notice takes priority for that App.

When we build or operate software for a client, the client is usually the controller of their users' data and we act as a processor under a written agreement. In that case, the client's privacy policy applies and you should contact the client about your data.

3. Data we collect

3.1 Data you give us

• Contact and enquiry data – your name, email address, company name and the content of messages you send us.
• Account data – where an App offers accounts: email address, display name, password (stored in hashed form by our authentication provider), profile picture and preferences.
• User content – text, images, files or other content you create, upload or store using the Services.
• Feedback and support data – bug reports, survey responses, reviews and correspondence.
• Client project data – business contact details and project information shared with us as a client or prospective client.

3.2 Data collected automatically

• Device and technical data – device model, operating system and version, app version, language, time zone, IP address, browser type and screen size.
• Identifiers – app instance IDs, installation IDs, push notification tokens and, only where you have given permission, advertising identifiers (IDFA on iOS, Advertising ID on Android).
• Usage data – screens viewed, features used, session length, in-app events and the date and time of use.
• Diagnostics – crash logs, error reports and performance data.
• Approximate location – country or region inferred from your IP address. We only collect precise location if an App needs it for a feature and you grant permission.

3.3 Data from third parties

• Sign-in providers – if you sign in with Apple, Google or another provider, we receive the information you authorise them to share, such as your name and email address. Sign in with Apple may provide a private relay email address.
• App stores – Apple and Google tell us about purchases and subscriptions (such as product, transaction ID and status). We never receive your full payment card details.
• Advertising and analytics partners – aggregated or pseudonymous information about ad performance and app installs.

4. How we use data

• To provide, operate and maintain the Services, including creating and managing accounts.
• To process purchases and subscriptions and verify entitlements.
• To respond to enquiries, provide support and communicate with you about the Services.
• To send push notifications or emails you have opted in to (you can opt out at any time).
• To understand how the Services are used and to improve features, performance and stability.
• To show advertising in free Apps, and to measure its effectiveness (see section 8).
• To detect, prevent and investigate fraud, abuse, security incidents and violations of our terms.
• To deliver client projects and manage our business relationships.
• To comply with legal obligations and enforce our rights.

We do not sell your personal data for money, and we do not use your data to make decisions that produce legal or similarly significant effects based solely on automated processing.

5. Legal bases for processing (UK/EU users)

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

6. How we share data

We share personal data only as follows:

• Service providers who process data on our behalf under contract, such as hosting, cloud infrastructure, authentication, analytics, crash reporting, email delivery and customer support tools.
• App platforms – Apple and Google, to distribute Apps and process purchases.
• Advertising partners in free Apps, subject to your consent and device settings.
• Professional advisers such as accountants, auditors and lawyers.
• Authorities where required by law, court order or to protect the rights, property or safety of JAPROX, our users or others.
• Business transfers – in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

7. Third-party services we may use

Depending on the App, we may use some of the following providers. Each has its own privacy policy.

8. Advertising and tracking

Some free Apps display advertising. Ad partners may collect device identifiers, IP address and usage data to serve and measure ads.

• iOS: we only access your advertising identifier (IDFA) if you allow it through Apple's App Tracking Transparency prompt. You can change this in Settings → Privacy & Security → Tracking.
• Android: you can reset or delete your Advertising ID in Settings → Privacy → Ads.
• UK/EEA/Switzerland: we request your consent through a certified consent management platform before showing personalised ads. If you decline, you may still see non-personalised ads.

See our Cookie Policy for information on cookies and similar technologies on the Website and Web Apps.

9. Device permissions

Apps may ask for permission to access features such as the camera, photo library, microphone, location, contacts or notifications. We request permissions only when needed for a feature you use and explain why. You can change permissions at any time in your device settings; some features may not work without them.

10. International transfers

Our service providers may process data outside the UK and European Economic Area, including in the United States. Where this happens we rely on adequacy regulations, the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses, the UK–US Data Bridge / EU–US Data Privacy Framework, or other lawful safeguards.

11. How long we keep data

• Account data and user content – for as long as your account is active. When you delete your account, we delete or anonymise it within 30 days, except where we must keep it longer by law.
• Support correspondence – up to 24 months after the enquiry is closed.
• Analytics data – up to 14 months, then aggregated or deleted.
• Crash reports – up to 90 days.
• Transaction and accounting records – up to 6 years, as required by UK tax law.
• Backups – deleted data may remain in encrypted backups for up to 35 days before being overwritten.

12. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), encryption at rest provided by our cloud providers, access controls, least-privilege permissions and regular security updates. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal data breach that is likely to result in a risk to you, we will notify you and the relevant authorities as required by law.

13. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (see Delete account & data);
• Restrict or object to processing, including processing for direct marketing;
• Data portability – receive your data in a structured, machine-readable format;
• Withdraw consent at any time where processing is based on consent.

To exercise these rights, email app@japrox.store with the subject “Privacy request”. We may need to verify your identity. We will respond within one month, which may be extended by up to two further months for complex requests. There is normally no charge.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the data protection authority in your country of residence.

14. Additional information for US residents

If you live in California or another US state with a comprehensive privacy law, you may have the right to know what personal information we collect, use and disclose; to request deletion and correction; to opt out of the “sale” or “sharing” of personal information for cross-context behavioural advertising and of targeted advertising; and not to be discriminated against for exercising these rights.

We do not sell personal information for money. Use of advertising identifiers by ad partners in free Apps may be considered “sharing” or “targeted advertising” under some state laws; you can opt out using your device's tracking/ad settings described in section 8 or by emailing us. We honour Global Privacy Control signals on the Website where technically feasible. You may use an authorised agent to submit a request on your behalf.

15. Children's privacy

Our Services are not directed to children under 13 (or under 16 in the EEA, or the applicable age of digital consent in your country), and we do not knowingly collect personal data from them. If an App is designed for a younger audience, it will follow the relevant rules (including COPPA, the UK Age Appropriate Design Code and the app store family policies) and will have its own notice. If you believe a child has provided us with personal data, contact us and we will delete it.

16. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the “Last updated” date. If changes are significant, we will give you notice through the Services or by email before they take effect.

17. Contact us

JAPROX LTD
Email: app@japrox.store
Website: Contact page