Privacy Policy

ShrinkNote Privacy Policy Last updated: January 2025 1. Privacy by Design ShrinkNote is built to minimize data collection. Presentation files stay on your device and are not uploaded, sold, or used for advertising or model training. 2. Data Controller For GDPR purposes, ShrinkNote is the data controller for personal data processed through the app. Contact: privacy@shrinknote.com 3. Categories of Personal Data Collected - Data you provide: support conversations you initiate, optional feedback submissions. - Automatically collected: app version, OS version, device model, crash logs, diagnostic information, and anonymous or pseudonymous usage metrics. We do not collect: presentation contents, contacts, photos, location data, or advertising identifiers. 4. File Processing and Content Data Files are processed locally on your device. No presentation content is transmitted to ShrinkNote servers by default. If a feature requires remote processing, it will be optional and clearly disclosed. 5. Purpose Limitation (GDPR Art. 5) Personal data is processed only to provide and maintain the app, validate subscriptions and entitlements, improve security and stability, and deliver customer support. Data is not used for advertising, behavioral profiling, or cross-app tracking. 6. Legal Basis (GDPR Art. 6) - Contract performance (Art. 6(1)(b)): to provide app functionality and subscriptions. - Legitimate interests (Art. 6(1)(f)): security, diagnostics, and reliability improvements, balanced against users’ rights due to minimal and pseudonymous data. - Consent (Art. 6(1)(a)): where required (for example, optional analytics). Consent can be withdrawn at any time. 7. Third-Party Processors Limited processors include Apple App Store / StoreKit (purchases and subscriptions), Apple Crash Reporting (diagnostics), and infrastructure providers for entitlement validation if used. All processors are contractually restricted and GDPR-compliant. 8. International Transfers If data is processed outside the EU, appropriate safeguards (such as Standard Contractual Clauses) are applied. 9. Data Retention Diagnostic and analytics data are retained only as long as necessary. Support communications are retained for operational purposes and deleted on request where legally permitted. 10. Your Rights (GDPR Arts. 12–23) You may request access, correction, deletion, restriction, or objection to processing; request data portability where applicable; and lodge a complaint with a supervisory authority (for example, CNIL in France or the relevant Landesdatenschutzbehörde in Germany). Requests: privacy@shrinknote.com 11. Children’s Privacy ShrinkNote is not intended for children under 13. No knowing collection of children’s personal data occurs. 12. Security Measures include least-privilege access, encrypted transport where applicable, local-first processing, and no persistent storage of customer presentation content on ShrinkNote servers. 13. Changes Material changes will be communicated in the app or on the website before they take effect. 14. Contact Privacy inquiries: privacy@shrinknote.com