Privacy – ShrinkIt

2. The Key Points in Brief

ShrinkIt compresses photos, videos and audio files entirely on your device. Your images, videos and audio files are not transferred to any server – neither to us nor to third parties. We do not operate our own server, user accounts or database for ShrinkIt. We therefore have no technical access to your media files.

Personal data is nevertheless processed in three areas, which this policy explains:

1. advertising in the free version (only with your consent),
2. purchase processing for the one-time purchase of the Pro version,
3. technical connections of the app (font download, crash reports via Google Play).

3. Processing on Your Device (No Transfer)

3.1 Photos, Videos, Audio Files and Their Metadata

When you select files for compression, the app reads:

• the selected image, video and audio files,
• their file size, pixel dimensions or duration, bit rate, sample rate and modification date,
• the device-internal media identifier (asset ID), so that a file can be deleted from the gallery at your request.

Compression takes place exclusively locally using the image, video and audio codecs of your operating system or the MP3 encoder (LAME) supplied with the app. There is no upload, no cloud processing and no analysis by us or third parties. In particular, we do not analyse image content or sound recordings.

The resulting files are stored in the app's own storage area on your device, which is not accessible to other apps, and listed in the app under “Chronology”. At your request, the app saves a copy to your gallery.

Legal basis: Art. 6(1)(b) GDPR (performance of the usage agreement). No data is transferred to us; to that extent, there is no processing by us.

Note on the “Replace All” function: This function saves the compressed files to your gallery and then deletes the originals. This process cannot be undone and must be expressly confirmed before it is carried out. Please make backup copies beforehand.

3.2 App Settings

We store the following locally on the device (in Android's app settings, “SharedPreferences”):

• selected language and colour scheme (light/dark),
• whether the onboarding has already been shown,
• the cached Pro status,
• a counter of successful compressions and a flag indicating whether the rating request has already appeared.

This information does not leave your device and is removed when the app is uninstalled.

Legal basis: Art. 6(1)(b) GDPR.

4. Advertising (Free Version Only)

4.1 Google AdMob

In the free version, ShrinkIt occasionally shows full-screen ads via Google AdMob.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for processing in the USA: Google LLC.

The following data may be processed:

• your device's advertising ID (Advertising ID, AAID),
• IP address and the approximate location derived from it (country/region),
• device and software characteristics (model, operating system version, language setting, app version),
• interactions with ads (impressions, clicks, dismissals).

Google also processes this data for its own purposes and is independently responsible for doing so. Further information: policies.google.com/technologies/partner-sites and the list of advertising partners at support.google.com/admob/answer/9012903.

4.2 Consent and Withdrawal

Before ads are shown for the first time, a consent dialog appears via Google's User Messaging Platform (UMP).

• Without your consent, no personalised ads are shown, and no ads are loaded as long as consent has not been given or has been refused; in the latter case, only non-personalised ads may appear.
• You can change your decision at any time: Settings → Legal → Ad settings.

Legal basis: Art. 6(1)(a) GDPR (consent) and § 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) for access to information on your device. Consent can be withdrawn at any time with effect for the future (Art. 7(3) GDPR).

Transfer to third countries: Google LLC also processes data in the USA. Google is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023); EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) apply in addition. Access by US authorities cannot be completely ruled out despite these measures.

4.3 Ad-Free Use

The one-time purchase of the Pro version permanently disables advertising. For Pro users, the advertising SDK is not initialised and no consent dialog appears.

5. Purchase of the Pro Version

5.1 Google Play Billing

Payment is processed entirely via Google Play. At no time do we collect, store or see payment details (credit card, bank or PayPal details). Google is independently responsible for payment processing; Google's privacy policy applies (policies.google.com/privacy).

Legal basis: Art. 6(1)(b) GDPR.

5.2 RevenueCat (Management of Purchase Status)

We use RevenueCat to check whether the Pro version has been unlocked.

Provider: RevenueCat, Inc., 748 Market St, San Francisco, CA 94102, USA.

Data processed:

• an anonymous app user ID generated by RevenueCat (no name, no e-mail address),
• purchase token and purchase status from Google Play,
• store country, device model, operating system version, app version.

RevenueCat processes this data as a processor on our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place. Privacy policy: www.revenuecat.com/privacy.

Transfer to third countries: USA, safeguarded by EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Legal basis: Art. 6(1)(b) GDPR (performance of the purchase agreement and provision of the purchased features).

5.3 Restoring Purchases

The “Restore Purchases” function queries your purchase status again from Google Play and RevenueCat. No additional categories of data are processed in the process.

6. Further Processing

6.1 Rating Request via Google Play

After several successful compressions, Google Play's built-in rating dialog may appear once. It is provided entirely by Google; we do not learn whether or how you rate the app. Whether you leave a rating is entirely up to you.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in feedback on the app).

6.2 Sharing Files

When you share a compressed file, ShrinkIt passes it to the app you select (e.g. messenger, e-mail). From that point on, the privacy policy of the respective provider applies. We have no influence on this transfer.

Legal basis: Art. 6(1)(a) GDPR (your active choice of destination).

6.3 Font Download (Google Fonts)

The app uses the “Inter” font. It is loaded from Google's servers (fonts.gstatic.com) on first launch and then cached locally. In the process, your IP address is transmitted to Google.

Provider: Google Ireland Limited / Google LLC, USA. Privacy policy: policies.google.com/privacy.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent, accessible presentation of the app).

6.4 Crash and Performance Reports via Google Play

If the app crashes or stops responding, your Android device may send a technical report to Google Play (including device model, operating system version, crash history/stack trace). From this, we only receive aggregated evaluations in the Google Play Console that cannot be attributed to you (“Android vitals”).

You control whether such reports are sent in the Android settings under “Google → Usage & diagnostics”.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stability and troubleshooting).

6.5 Opening External Pages

The “Privacy policy” and “Legal notice” links in the settings open your browser. When the page is accessed, the website operator (hosting provider) processes the usual connection data. The privacy policy of the website accessed applies.

6.6 What We Do Not Do

• No analytics or tracking tools (no Firebase Analytics, no Crashlytics, no Sentry, no Facebook SDK).
• No user account, no registration, no sign-in.
• No own servers and no own database for ShrinkIt.
• No analysis, disclosure or storage of your photos, videos and audio files by us.
• No sale of data to third parties.
• No access to location, contacts, SMS, call log or other apps.

7. App Permissions

The respective media permission is only requested when you tap “Select image”, “Select video” or “Select audio” – not when the app starts. Anyone who only compresses images will never be asked for access to audio files. From Android 14, you can also grant access to individual photos and videos only; the app then works exclusively with the files you have released.

You can revoke all permissions at any time in the Android system settings. Without media access, compression cannot be used; the app points this out and offers a shortcut to the settings.

8. Storage Period

9. Your Rights

You have the right at any time to:

• access to the personal data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)
• withdraw consent given, with effect for the future (Art. 7(3) GDPR)
• lodge a complaint with a supervisory authority (Art. 77 GDPR)

Supervisory authority responsible for us: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de

10. Data Security

• Your media files do not leave the device; the level of security results from the protection of your device (screen lock, encryption, current system updates).
• Result files are stored in the app's private storage area, which other apps cannot access under the Android permission model.
• All network connections (advertising, purchase verification, font) are exclusively encrypted via TLS/HTTPS.
• The app contains no credentials for third-party systems other than the public SDK keys provided for this purpose by the respective provider.
• For release, the program code is obfuscated and stripped of unused components (R8).

11. Children and Adolescents

ShrinkIt is not aimed at children. The app is not part of the Google Play “Designed for Families” programme. Users under 16 should only use the app with the consent of their parents or guardians; in this case, consent to advertising processing (section 4) must be given by the parents or guardians (Art. 8 GDPR).

12. No Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, that produces legal effects concerning you takes place.

13. Changes to This Privacy Policy

We adapt this policy when the legal situation, the app or the services used change. The version available at the time of your use applies. In the event of significant changes – in particular new data recipients – we will inform you separately in the app and obtain any necessary consent again.

The German version of this policy is authoritative.

14. Contact

• SimplyNext
• Nuri Toker
• Mechenseerstr. 12
• 88316 Isny im Allgäu
• Germany
• E-Mail: info@simplynext.de
• Phone: +49 1743389049