Privacy policy

1. Data we collect

• Account data: email, name (if you provided one), a password hash (we never store the password itself). With Google Sign-In — your email, name and the technical Google account identifier.
• Photos and videos you chose and uploaded to an order, your markers and comments on them, and the finished results.
• Order history: number, selected services, price in credits, statuses and dates.
• Purchases: credit packs and subscriptions are paid through Google Play Billing. Google gives us the purchase ID, product, amount, currency and status. We never receive or store card details — Google processes them.
• Credit balance and transactions, promo codes used.
• Technical data: the Firebase Cloud Messaging push token, app language, platform, sign-in sessions (date, device/browser type), IP address in server logs.
• Crash reports (Firebase Crashlytics): device model, Android and app version, a technical description of the error. Your name and email are not added to them.

The app does not access your gallery or camera beyond your own choice: only the files you pick for an order reach the server. There are no advertising trackers and we do not sell data.

2. Why

• to create and run your account and sign-in;
• to fulfil orders: pass your files to a designer, return the result, notify you about status changes;
• to credit purchased packs and subscriptions, verify purchases with Google Play, handle refunds;
• to protect the service from abuse (sign-in rate limits, security logs) and fix crashes;
• to answer your support requests.

Legal bases: performance of a contract (providing the service), legitimate interest (security, stability), legal obligations (payment records).

3. Where data is stored

The database and order files are stored on our server in a Hetzner Online GmbH data centre in Germany (European Union). Connections from the app and the site are encrypted (HTTPS). Links to order files are signed and expire.

4. Who we share it with

• The service's designers — only the files, markers and comments of a specific order, to fulfil it.
• Google: Firebase Cloud Messaging (notifications), Firebase Crashlytics (crash reports), Google Sign-In, Google Play Billing (payments).
• Hetzner Online GmbH — server hosting (processes data only as an infrastructure provider).
• Public authorities — only where the law requires it.

We do not sell personal data or share it with advertisers.

5. How long we keep it

• Original photos and videos — deleted once you accept the result, and no later than 30 days after the order is finished.
• Finished result — 3 days after delivery, then it is deleted automatically. Save it to your device.
• Account data — while the account exists. After deletion — see section 7.
• Payment and credit records — as long as accounting and tax law requires, in anonymised form.
• Server logs — for a limited time, overwritten automatically. Database backups are kept for a limited time and removed together with old backups.

6. Your rights

You can request a copy of your data, correct it, restrict or object to processing, or delete your account. Email support@goretouch.app from your account's email address — we reply within 30 days. You may also complain to the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, to your national data protection authority.

7. Account deletion

You can delete your account in the app: Profile → "Delete account". This deletes your email, name, sign-in, push tokens, sessions, notifications, comments and all order photos and videos. Order and payment records remain in anonymised form (no longer linked to you). Details are on the "Delete account" page.

8. Children

The service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

9. Changes

We will announce significant changes in the app or on this page. The date of the current version is shown at the top.