Politika ta' Privatezza

Last updated: 16 September 2026 · Lymark app, version 1.4.0

This policy describes how Lymark (com.lycosteam.lymark) and this site handle personal data. It is written for the data-protection and consumer regimes of the rule-of-law jurisdictions where the service is offered — including Brazil’s LGPD, the GDPR (EEA), UK GDPR, US state laws (including California’s CCPA/CPRA), PIPEDA (Canada), the Privacy Acts (Australia and New Zealand), APPI (Japan), PDPA (Singapore), POPIA (South Africa), Mexico’s LFPDPPP, Argentina’s Ley 25.326 and equivalent Latin-American laws, plus Brazil’s consumer code and EU/UK consumer rules. Where the mandatory law of your country of residence grants stronger rights, that law prevails. This text does not claim to exhaust every national code, nor worldwide compliance.

01F'frażi waħda

Lymark does not transmit your photos or your raw location. Images, visible addresses, history and preferences stay on your device. An account is required to use the app and the subscription: the server keeps your e-mail, account id, plan, export count and, when you request a seal, the file hash — a fingerprint, not the photo.

Besides the account, what leaves the device is: (a) coordinates, via the operating system, to become an address (item 05); (b) the file hash, to issue the seal and, when available, a third-party timestamp (item 18); (c) payment data, handled by the billing processor (item 18). None of these flows send the image.

02Min japplika din il-politika

It applies to anyone who uses the app or this site, in jurisdictions where Lymark is lawful. Brazil: LGPD and ANPD. EEA and United Kingdom: GDPR and UK GDPR. California and other US states with a consumer privacy law: the equivalent rights in item 19. In other countries with a data-protection statute, we honour equivalent rights (access, correction, deletion, objection, portability) through the same channel: contato@lymark.app. We may refuse or limit the service where offering it would be unlawful or subject to sanctions.

03Min hu l-kontrollur

Il-kontrollur tad-data personali kontrollur, fit-terminoloġija tal-LGPD huwa 29.015.357 AMAD ALI HAMMOUD , irreġistrat taħt CNPJ 29.015.357/0001-25 , bl-indirizz Avenida Ana Costa, 433, Gonzaga, Santos - SP .

Il-persuna responsabbli mill-ipproċessar tad-data personali, għall-finijiet tal-Artikolu 41 tal-LGPD , hija Amad Ali Hammoud , li tista' tiġi kkontattata fuq contato@lymark.app . Minħabba l-volum u n-natura tal-ipproċessar li ma jinvolvix data sensittiva fuq skala jew monitoraġġ sistematiku m' hemm l-ebda obbligu li jinħatar Offiċjal għall-Protezzjoni tad-Dataskont l-Artikolu 37 tal-GDPR .

04Liema informazzjoni t- app timmaniġġja

There are two places. On the device (below, through “Preferences”): none of that uploads. On the server (account, payment, seal hash, technical access data): only what items 18 and 14 describe.

Ritratti

L-immaġni li tagħżel mill-gallerja jew tikkopri bil-kamera, u l-fajl esportat bl-ilma.

Il-post

Il-latitudni u l-longitudni approssimattivi, miksuba darba għal kull cattura, għall-għan uniku li timla l-qasam tal-indirizz. Il-koordinati ma jiġbrux: it-test tal-indirizz li jirriżulta biss huwa miżmum, flimkien mal-istampa.

Id-data, l-ħin u l-ġurnata tal-ġimgħa

Aqra mill-għajra tal-apparat fil-mument tal-qabda, u editabbli minnek.

Kodu tal-istampa

Sewwenza ta' 14-il karattru hexadeċimali mġarrab b'mod każwali. Dan ma jġibx minn identifikatur ta' apparat jew minn wieħed tiegħek, u ma jippermetti l-ebda traċċar bejn l-applikazzjonijiet.

Storja

Rekord tal-aħħar 200 esportazzjoni, li fih il-passaġġ tal-fajl fuq il-mezz u d-dejta stampata fuq l-immaġni.

Preferenzi

Il-kamps viżibbli, il-pożizzjoni, id-daqs u l-għażliet oħra ta' watermark.

Account

E-mail, account identifier, plan (free or Pro) and export count, at the authentication processor.

Payment

The billing processor handles card data. Lymark does not store the card number; it keeps only subscription state (how long Pro lasts) and billing identifiers needed to cancel or invoice.

Seal hash

A fingerprint of the exported file, sent to issue the seal and, if available, a timestamp. The photo itself never uploads. The hash cannot rebuild the image.

Technical access data

IP address, date, time and requested resource, in hosting and API logs, for as long as service security requires — including fraud prevention.

The app does not collect on-device, for the developer: identity documents, advertising identifiers, contacts, calendar, browsing history, usage metrics, crash reports. There is no analytics, advertising, attribution or tracking SDK. E-mail exists because there is an account; it is not read from the address book and not used for ads.

05L-unika informazzjoni li telaq mill-apparat

Meta tagħti l-permess tal-lokalizzazzjoni, l-app titlob lis-sistema operattiva biex tikkonverti l-koordinati GPS f'indirizz postali.Googlefuq apparat Android u Applufuq apparat iOS.

Dan il-komunikazzjoni ġejja mis-sistema operattiva, u mhux minn Lymark. L-app ma tirċievi l-ebda kopja tagħha, ma tirmedjaha u m'għandhiex aċċess għal xejn barra l-indirizz mibgħut.

L- ebda ritratt ma jħallih mill- apparat permezz ta ' xi azzjoni tal- app.Jekk tuża l-buttuna Ssegwi, l-immaġni tiġi trażmessa mill-app tad-destinazzjoni li tagħżel fis-siġra tas-sistema ta 'ssegwiru messenger, email, ħażna fl-isbaħ taħt il-politika ta' privacy ta' dik l-app.

06Permessi mitluba, u għaliex

Kamera

To take the photo or record the video that will receive the watermark. Requested when you capture.

Ritratti u media

Biex tagħżel immaġni eżistenti u tikteb il-fajl esportat fil-gallerja. L-aċċess huwa ristrett għal ritratti, u l-permess biex tikteb jintuża biss biex tikteb l-app ma tarfx jew taqra l-gallerja tiegħek.

Il-post waqt l-użu

Biex timtela l-kamp ta' indirizz. Mitluba fil-pront, biss waqt li l-app tkun qed tintuża, u qatt fil-fond.

Microphone

Only when recording video with sound. Not used for still photos or in the background.

L-permessi kollha huma fakultattivi u jistgħu jiġu revokati fi kwalunkwe ħin fis-settings tad-disposizzjoni. Jekk ma tkunx tista' tikseb l-lokalizzazzjoni, l-app tibqa' funzjonali bis-sħiħ: l-indirizz huwa mbagħad imdaħħal minnek. Jekk ma tkunx tista' tikseb l-aċċess għall-galerija, ma tistax tispeċifika l-informazzjoni awtomatikament, u l-istampa xorta tista' tiġi kondiviża.

07Bażijiet u skopijiet legali

Il-ipproċessar tal-post isir fuq il-bażi ta' l-informazzjoni tiegħek il-kunsens L-Artikolu 7, I tal-LGPD u l-Artikolu 6(1) ) tal-GDPR espressi meta tagħti l-permess tas-sistema, u jistgħu jiġu revokati fi kwalunkwe ħin, mingħajr preġudizzju għall-legalità tal-ipproċessar li sar qabel ir-revoka.

Il-ipproċessar tad-data li tibqa' jsir għall-l-prestazzjoni tal-karatteristika li talbet L-Artikolu 7, V tal-LGPD u l-Artikolu 6(1)(b) tal-GDPR peress li mingħajr dan ma jkun hemm l-ebda marka ta' ilma għall-app li tipproduċi.

Il-ipproċessar tad-dejta tal-kont ikun ibbażat fuq l-eżekuzzjoni ta' kuntratt (art. 7, V, LGPD; art. 6(1) 1) b)). Il-ipproċessar ibbażat fuq interess leġittimu (art. 7, IX, LGPD; art. 6(1) 1) f)) jeżisti biss għal sigurtà u prevenzjoni tal-frodi pereżempju, ir-reġistrazzjoni tal-indirizz IP tat-talbiet lis-server. M'hemm l-ebda proċessar għal reklamar, profiljar, analiżi tal-imġiba jew għal xi skop sekondarju, u l-ebda proċessar ta' kategoriji speċjali ta' data jew data sensittiva mill-iżviluppatur.

08Trasferiment internazzjonali

Account and payment data are handled by processors in the United States (authentication and billing), and hosting may process access logs outside Brazil. The seal hash, when a timestamp is requested, may go to an independent timestamp authority. These transfers rest on standard contractual clauses and LGPD art. 33 and GDPR arts. 44–49, or an equivalent under your law. Geocoding in item 05 follows the OS providers’ own transfer tools.

This site is hosted by Vercel Inc., under items 14 and 18.

09Is-sħubija ma' partijiet terzi

The developer does not sell, rent or hand personal data to advertising or data brokerage. Contracted processors are listed in item 18. If you sign in with Google or Apple, those providers handle the login under their own policies; the developer receives the e-mail and identifier needed for the account. Photos and raw location pass through no processor, because they never leave the device.

10Il-ħażna, il-ħażna u s-sigurtà

Id-dejta tinsab fl-ispazju privat tal-app, protetta mill-iżolament tas-sistema operattiva bejn l-applikazzjonijiet u mill-iskrin tal-apparat.diżabbilanti, sabiex l-istorja u l-preferenzi ma jintbagħtux lill-kont Google tal-utent.

L-istorja awtomatikament tirċievi l-eqdem meta tgħaddi żewġ mitt oġġett, tneħħi wkoll il-fajls korrispondenti. Jekk tinstalla l-app tneħħi dak kollu li jkun maħżun.

L-informazzjoni tal-kont E-mail, l-identifikatur, il-pjan u l-għadd huma miżmuma mill-proċessur tal-awtentikazzjoni, skont il-miżuri ta' sigurtà tiegħu. Il-photos, l-indirizzi u l-post ma jeżistux f'ebda repożitorju ċentrali, u għalhekk ma jistgħux jinfirex mill-infrastruttura tal-iżviluppatur. Jekk inċident ta' sigurtà jaffettwa d-data tal-kont, l-iżviluppatur għandu jinnotifika lill-awtorità u s-suġġett tad-data skont l-Artikolu 48 LGPD u l-Artikolu 33 GDPR.

11Meta tistarraf nies oħra

Meta tistampaw nies li jistgħu jiġu identifikati matul l-attività professjonali tiegħek, intiIl-proċessur ma jieħux sehem f'dan il-proċess u ma jkollu l-ebda aċċess għall-immaġini.

12Id-drittijiet tiegħek

L-Artikolu 18 tal-LGPD u l-Artikoli 15 sa 22 tal-GDPR jiggarantixxulek id-drittijiet ta' konferma u aċċess, korrezzjoni, tħassar, anonimizzazzjoni, blokkar, portabilità, restrizzjoni tal-ipproċessar, oġġezzjoni, revoka tal-kunsens u informazzjoni dwar il-kondiviżjoni.

L-istampi, l-indirizzi, l-istorja u l-preferenzi jirresjedu biss fuq it-tagħmir tiegħek, u dawk id-drittijiet huma eżerċitati direttament fl-app: tara u tħassar l-entrati fit-tab tal-Gallerja, tikkorrixxi kwalunkwe qasam qabel l-esportazzjoni, tirrevoka l-permess tal-lokalità fis-settings tas-sistema, u tħassar kollox billi tneħħi l-app l-iżviluppatur ma jistax jaċċessa, jesporta jew iħassar dak id-dejta għalik, għax ma jżommxha. Fir-rigward tad-data tal-kont email, pjan u kont tista' taraha fuq il-paġna tal-kont u titlob il-korrezzjoni, esportazzjoni jew tħassar f'email tal-kuntatt ta' din il-Politika ; it-tħassir tal-kont iħassar dik id-dejta fil-proċessur tal-awtentikazzjoni.

Requests: contato@lymark.app. You may complain to your country’s authority — in Brazil, the ANPD; in the EEA, your Member State’s supervisory authority; in the UK, the ICO; in California, the CPPA; elsewhere, the equivalent body. Item 19 lists the rights we honour outside the LGPD/GDPR pair.

13Deċiżjonijiet awtomatizzati

Ma hemm l-ebda deċiżjoni awtomatizzata, profilaġġ jew pproċessar li jipproduċi effetti legali dwarek, skont l-Artikolu 20 tal-LGPD u l-Artikolu 22 tal-GDPR.

14Dwar dan is-sit

Dan is-sit m'għandux analitika, ma juri l-ebda reklam u ma jdaħħal l-ebda buttuni tan-netwerks soċjali.cookies strettament meħtieġagħall- sessjoni tal-kont tiegħek, impostata mill-proċessur ta' awtentikazzjoni (punt 09) meta tidħol; l-ebda cookies ta' traċċar jew reklamar. Il-fonti huma sservi mid-dominju stess tas-sit. L-uniku talbiet li l-browser tiegħek jagħmel lil partijiet terzi huma dawk tal-iskrinjiet tal-awtentikazzjoni u tal-kont, indirizzati lill-proċessur ta' awtentikazzjoni u, jekk tagħżel, lill-fornitur ta' awtentikazzjoni (Google jew Apple).

Is-sit web huwa ospitat minn Vercel Inc. , li bħala proċessur jirreġistra d-dejta teknika ta' aċċess Indirizz IP, data, ħin u r-riżorsi mitluba sakemm ikun meħtieġ għas-sigurtà u l-operat tal-hosting. Il-bażi legali hija l-interess leġittimu li jinżamm is-sigurtà tas-servizz, l-Artikolu 7, IX tal-LGPD u l-Artikolu 6(1)(f) tal-GDPR.

15Bidliet għal din il-politika

Il-bidliet se jiġu ppubblikati fuq din il-paġna, b'data aġġornata ġdida.

16It-tfal u l- adolexxenti

Lymark huwa għodda ta' ħidma, maħsuba għal persuni ta' 18-il sena jew aktar.

17Il-liġi applikabbli

Brazilian law governs this policy, without prejudice to the GDPR, UK GDPR, CCPA/CPRA and any mandatory data-protection or consumer law of the data subject’s country of residence. Forum: the data subject’s domicile when consumer law so requires; otherwise Santos, Brazil.

18Processors

Who handles data on the controller’s instructions only:

Clerk, Inc.

Account authentication (e-mail, identifier, plan and quota metadata). United States.

Stripe

Pro subscription billing. Lymark never receives the card number. United States, and, where applicable, a Stripe entity in the billing country.

RevenueCat, Inc.

Acts as intermediary for the Pro subscription made through the Android app: it receives from Google Play the purchase data, your Lymark account identifier and technical data from the device needed for the purchase (OS and app version), and notifies Lymark when the subscription starts, renews, is cancelled or refunded. The charge itself is made by Google Play, under its own terms. It does not receive photos, videos or location. United States.

Vercel Inc.

Hosting of the site and APIs; technical access logs (item 14).

Timestamp authority

When the seal asks for a third-party time, only the file hash is sent, not the photo. The current provider is a public RFC 3161 service; it may be replaced by a contracted authority, including ICP-Brasil, without changing this purpose.

Google and Apple appear as sign-in providers (if you choose them) and as geocoders (via the OS, item 05), under their policies — not as our processors for the photo.

19Rights outside Brazil and the EEA

On request at contato@lymark.app we honour access, correction, deletion, portability, restriction and objection, to the extent the data exist on the server (account, plan, count, hash, technical logs). What lives only on the device, you delete in the app or by uninstalling.

California and US states with a consumer privacy law: we do not sell personal information and we do not “share” it for cross-context advertising (there are no ads). You may ask to know, delete, and opt out of sale/sharing — we already do not sell. We do not use data for automated decisions with legal effect (item 13).

Canada (PIPEDA), Australia and New Zealand (Privacy Act), Japan (APPI), Singapore (PDPA), South Africa (POPIA), India (DPDP), Switzerland (nFADP), Mexico, Argentina, Colombia, Chile and other countries with an equivalent statute: the same channel and the same practical rights, limited to what the server actually keeps.

20Scope and limits of this policy

Lymark is offered where that is lawful. We do not operate to evade sanctions, nor in jurisdictions where offering the service would be unlawful. This document is not legal advice and does not claim that every article of every national code has been reproduced. If your mandatory law is more protective, it prevails; write to contato@lymark.app.

Ara wkoll il-Termini ta' Użu.