Privacy policy

Owner and Data Controller

EarthSpell

Owner contact email: info@earthspell.app

Types of Data collected

The app collects exactly two types of Data, both anonymous:

• Crash Data. If the app crashes or hits an internal error, a technical report is sent to Sentry: the error and its stack trace, the device model, the operating system version and the app version. It contains no name, no email and no identifier that could tie it to you.
• Feedback. If you tap Send on the "Suggest a feature" form, the app sends the text you wrote (up to 1000 characters) together with the app language (for example it-IT), the app version and the platform (Android or iOS). Nothing else: no device id, no account, no hidden metadata.

Just as important is what is not collected:

• The names and words you type. They stay on your phone, are never attached to crash reports and never touch a server.
• Photos. The app can only add its own exported images to your gallery. It cannot read, list or upload anything from your library.
• Location. The coordinates shown in the app belong to the letter-shaped places in the bundled dataset. Your device location is never read.
• Identifiers, contacts, usage statistics or analytics events of any kind.

There is no sign-up, so the app never knows your name, your email or anything else about you.

Mode and place of processing the Data

All processing is automated and travels over encrypted connections (HTTPS). Only the developer has access to the collected Data, and no third party receives it beyond the two processors listed further down.

Both processors keep the Data in the European Union: crash reports on Sentry's EU infrastructure in Germany, feedback on Amazon Web Services in Frankfurt (eu-central-1).

Retention periods are short. Crash reports are deleted automatically by Sentry after its standard 90 day window. Feature suggestions are kept for as long as they are useful as product input, and you can ask for one to be deleted at any time.

Everything else, your export history, your preferences and the thumbnails, lives only on your device. You can delete history entries inside the app, and uninstalling removes all of it. Cloud backup of app data is disabled on Android, so this data does not follow you to a new phone.

The purposes of processing

Crash Data is processed for one purpose: finding and fixing bugs so the app keeps working. Feedback is processed for one purpose: reading your suggestion and improving the app.

Nothing is used for advertising, profiling or tracking. Nothing is sold. Nothing is shared with anyone beyond the two processors below.

Detailed information on the processing of Personal Data

Crash reporting (Sentry)

Crash reports are handled by Sentry, a service of Functional Software, Inc., configured with EU data residency, so reports are stored in Germany. The SDK runs with the "send default PII" option disabled and with performance tracing off: it sends crashes and errors, nothing more. The words you type, your history and your files are never attached to a report.

Feature suggestions

When you send a suggestion, the app makes a single request to the developer's backend on Amazon Web Services (Frankfurt, eu-central-1). The request carries no device id and no identifier, and server logs never contain the message text. The form is free text: do not include personal details unless you want to, for example an email address if you would like a reply.

Saving images to your photo library

Exported images are saved with add-only access. On iOS, the system asks for add-only permission the first time you export. On Android 13 and newer, no permission is needed at all. On older Android versions, a write-only storage permission is requested. In every case the app cannot see, read or upload the photos in your library: the permission only lets it add its own images.

Data stored on your device

The app keeps a local history of your exports (the word, the date, the chosen places and a small thumbnail), your preferences (language, theme, export format) and whether you have finished the onboarding. All of it stays in the app's private storage on your phone. You can delete history entries inside the app, and uninstalling removes everything. The images you exported to your gallery are your files and are never touched.

Further information for Users in the European Union

Crash reports are processed on the basis of the developer's legitimate interest in keeping the app working (Article 6(1)(f) GDPR). Feedback is processed on the basis of your consent, which you give by tapping Send and can withdraw at any time (Article 6(1)(a) GDPR).

Under the GDPR you have the right to access your Data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and lodge a complaint with your supervisory authority.

Note that because both types of Data are anonymous, the developer usually has no way to tell which crash report or which suggestion came from you. Where identification is impossible, some of these rights may not apply (Article 11 GDPR). To exercise any of these rights, write to info@earthspell.app.

Additional information about Data collection and processing

Legal action. The Data may be used for the establishment, exercise or defence of legal claims.

System logs. Like almost every internet service, the infrastructure providers (Amazon Web Services, Sentry) may keep short-lived technical logs, which can include IP addresses, for security and operations. The developer's own application logs contain no personal data.

Cookies. The app uses no cookies and no tracking technology. This website sets no cookies and runs no analytics either: the only thing it stores is your language choice, kept in your browser's local storage and never sent anywhere.

Children. EarthSpell is not directed at children under 13 and knowingly collects no Data from them.

Changes to this policy. This policy may change if the app changes. The current version always lives at this address, with its date at the top.

Definitions and legal references

• Personal Data: any information that identifies or can identify a natural person.
• Usage Data: information collected automatically through the Application or its infrastructure, such as IP addresses or crash traces.
• User: the person using the Application, who coincides with the Data Subject.
• Data Controller: the person who decides why and how Data is processed. Here, the EarthSpell developer.
• Data Processor: the party that processes Data on behalf of the controller. Here, Sentry and Amazon Web Services.
• Application: the EarthSpell mobile app for Android and iOS, and this website.

This policy is drafted with reference to Regulation (EU) 2016/679 (GDPR) and applies solely to EarthSpell.