Privacy policy
Applies to Filigree for iPhone and iPad. In short: your drawings never leave your device unless you share them.
Last updated ·
- 01
Who is responsible
This policy covers Filigree for iPhone and iPad and explains what data it handles, why, and what happens to it. MARETHIC is the name under which Marek Roslik, a sole trader (jednoosobowa działalność gospodarcza) based in Poland, publishes apps; it is not a company. He is the controller of the data described here, and in this policy “MARETHIC” means him. Contact: [email protected]. The MARETHIC website and other MARETHIC apps have their own privacy policies.
- 02
Your drawings
Filigree keeps your drawings, layers and settings on your device. The app has no account and no cloud storage of its own, and MARETHIC never receives your drawings. A drawing leaves the app only when you export or share it yourself, and from then on it is handled by the app or service you send it to. If iCloud Backup is on for your device, your drawings may be part of that backup, which Apple handles under its own privacy policy.
- 03
Photos
When you insert a photo, you pick it in the system photo picker, and Filigree receives only the picture you chose, which stays on your device; the app never sees the rest of your library. When you export a drawing to Photos, the app asks for permission to add images only, and cannot read your library with it.
- 04
Analytics
Filigree uses Google Firebase Analytics to understand how the app is used and how well the subscription screen works. It collects usage data — such as app opens and sessions, which features are used, which feature opened the subscription screen, and whether a purchase or restore succeeded, with the plan and its price — together with the identifiers and device information described in section 06.
- 05
Crash and freeze reports
Filigree uses Google Firebase Crashlytics to find and fix crashes and moments when the app freezes. A report contains diagnostic data about the problem — such as the code involved, the device’s performance and the state of the app at that moment, for example the open screen or the selected tool — together with the identifiers and device information described in section 06.
- 06
Identifiers and device information
With the data in sections 04, 05 and 07 the app sends a device identifier — Apple’s identifier for vendors, kept in your device’s Keychain so that it stays the same after you reinstall the app — and identifiers that these services create for the installation, along with the device model, the iOS and app versions and the language. Like any online service, they also receive your IP address, from which Google derives an approximate location (country or region). The identifiers do not contain your name, email or Apple Account, but they let these services recognize the same device over time, so the data is pseudonymous rather than anonymous. The app also uses Firebase Remote Config to receive settings without an update.
- 07
Purchases
Filigree uses RevenueCat to check which subscription is active and to restore purchases. RevenueCat receives your purchase history and the identifiers described in section 06, and may share changes to your subscription, such as a renewal or a cancellation, with Firebase Analytics so they are counted with the rest. Subscriptions are sold and paid for through the App Store; MARETHIC never sees your payment details.
- 08
What the app does not collect
None of the data above includes your drawings or anything you draw. Filigree does not ask for your name, email address or Apple Account, uses no advertising identifier, does not track you across other companies’ apps or websites, and shows no ads.
- 09
Why the data is processed
Remote Config and checking and restoring your subscription with RevenueCat are needed to provide the app and the subscription you bought (Article 6(1)(b) GDPR). Crash and freeze reports rely on MARETHIC’s legitimate interest in keeping the app stable (Article 6(1)(f)). Usage analytics relies on MARETHIC’s legitimate interest in understanding which features and plans work, kept to the minimum described above (Article 6(1)(f)); you can object to it at any time (section 18). Replying to your emails relies on the legitimate interest in answering you, records required by tax and accounting law on that legal obligation (Article 6(1)(c)), and the uses in section 15 on the legal obligation or legitimate interest they serve. Providing this data is not a legal or contractual requirement, but the app sends it automatically while it runs. Filigree makes no automated decisions about you, including profiling.
- 10
How long it is kept
Under Google’s retention terms and the settings chosen for Filigree, crash and freeze reports are deleted after 90 days, and analytics data is kept for 14 months from your last use of the app. RevenueCat keeps purchase records while a purchase can still be restored and for as long as tax and accounting law requires; you can ask for them to be deleted sooner. Data may be kept longer only where the law requires it or to establish, exercise or defend legal claims.
- 11
Email
If you write to MARETHIC — from the app’s Contact Us or directly — your message and email address are used only to reply and to fix what you reported. A message from the app includes the app version, the iOS version, the device model, the language and the device identifier described in section 06, so the problem can be reproduced and your subscription found; you can see and edit it before sending. If no mail app is available, the same text is copied for you to paste. Emails are kept for 12 months after the conversation ends, then deleted, unless they are needed longer for a legal claim. Nothing is added to a mailing list or shared with third parties.
- 12
Who receives the data
MARETHIC does not sell or rent personal data and does not share it for advertising. It is shared only with the services needed to run and distribute Filigree: Apple — App Store distribution and payments (apple.com/legal/privacy); Google — Firebase Analytics, Crashlytics, Remote Config and Installations (firebase.google.com/support/privacy); and RevenueCat — purchase management (revenuecat.com/privacy). Google and RevenueCat process data on MARETHIC’s behalf as processors, under their data processing terms; Apple distributes the app and processes payments as an independent controller under its own privacy policy.
- 13
Their own policies
Apple handles your App Store account, payments, refunds, iCloud Backup and system features under its own privacy policy, as do the apps and services you export or share drawings to, and MARETHIC is not responsible for their practices. Where Google or RevenueCat use data for their own purposes rather than on MARETHIC’s behalf, their own privacy policies apply. Retention and other practices of these services that MARETHIC does not control are set by their terms and settings, which may change.
- 14
Transfers outside the EEA
Google and RevenueCat may process data in the United States; such transfers rely on the safeguards EU law requires, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. You can ask for a copy of these safeguards at [email protected].
- 15
Legal requests and transfers
MARETHIC may disclose personal data where the law requires it, for example to a court or public authority, or where it is necessary to establish, exercise or defend legal claims or to protect the security of the app and its users. If Filigree is transferred to another publisher, the data described here may pass to the new publisher, who must keep using it as this policy describes; you will be told in advance.
- 16
Security
MARETHIC uses reasonable technical and organizational measures to protect the data it handles, and relies on services that encrypt data in transit. No method of transmission or storage is completely secure, so absolute security cannot be guaranteed. Your drawings are protected by your device’s own security, such as its passcode and encryption, which is up to you to keep on.
- 17
Children
Filigree is not directed at children under 13, or under 16 in the EEA where local law sets a higher age, and does not knowingly collect their personal data. If you believe a child has sent us data, write to [email protected] and it will be deleted.
- 18
Your rights
Under EU data protection law you have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interest, including analytics. Write to [email protected] — you will get an answer within one month, which the law allows to be extended by two further months for complex or numerous requests, and you will be told if it is. The app has no account, so the easiest way is to write from Contact Us, which adds the device identifier that your data is stored under; if MARETHIC cannot identify you, it will tell you (Article 11 GDPR). Deleting the app removes your drawings from the device. You can also complain to your national data protection authority; in Poland that is the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
- 19
United States
If you live in California or another US state with a privacy law that applies to you, you may have the right to know, delete and correct your personal information, and you will not be treated differently for using these rights. MARETHIC does not sell your personal information or share it for cross-context behavioral advertising. Make requests the same way, at [email protected].
- 20
Changes
MARETHIC may update this policy when the app, the services it relies on or the law change. When it does, the date at the top is updated. Material changes will also be noted in the release notes of the app before they apply, and where the law requires your consent to a change, it will be asked for.
- 21
Contact
Questions about this policy and requests about your data go to [email protected] or through the Contact page.