Sera ya faragha

Last updated: 16 September 2026 · Lymark app, version 1.4.0

This policy describes how Lymark (com.lycosteam.lymark) and this site handle personal data. It is written for the data-protection and consumer regimes of the rule-of-law jurisdictions where the service is offered — including Brazil’s LGPD, the GDPR (EEA), UK GDPR, US state laws (including California’s CCPA/CPRA), PIPEDA (Canada), the Privacy Acts (Australia and New Zealand), APPI (Japan), PDPA (Singapore), POPIA (South Africa), Mexico’s LFPDPPP, Argentina’s Ley 25.326 and equivalent Latin-American laws, plus Brazil’s consumer code and EU/UK consumer rules. Where the mandatory law of your country of residence grants stronger rights, that law prevails. This text does not claim to exhaust every national code, nor worldwide compliance.

01Katika sentensi moja

Lymark does not transmit your photos or your raw location. Images, visible addresses, history and preferences stay on your device. An account is required to use the app and the subscription: the server keeps your e-mail, account id, plan, export count and, when you request a seal, the file hash — a fingerprint, not the photo.

Besides the account, what leaves the device is: (a) coordinates, via the operating system, to become an address (item 05); (b) the file hash, to issue the seal and, when available, a third-party timestamp (item 18); (c) payment data, handled by the billing processor (item 18). None of these flows send the image.

02Ni nani ambao sera hii inatumika

It applies to anyone who uses the app or this site, in jurisdictions where Lymark is lawful. Brazil: LGPD and ANPD. EEA and United Kingdom: GDPR and UK GDPR. California and other US states with a consumer privacy law: the equivalent rights in item 19. In other countries with a data-protection statute, we honour equivalent rights (access, correction, deletion, objection, portability) through the same channel: contato@lymark.app. We may refuse or limit the service where offering it would be unlawful or subject to sanctions.

03Nani controller ni

Mdhibiti wa data ya kibinafsi controllador, katika utaratibu wa LGPD ni 29.015.357 AMAD ALI HAMMOUD, iliyosajiliwa chini ya CNPJ 29.015.357/0001-25, na anwani katika Avenida Ana Costa, 433, Gonzaga, Santos - SP.

Mtu anayesimamia usindikaji wa data binafsi, kwa madhumuni ya kifungu cha 41 cha LGPD, ni Amad Ali Hammoud, ambaye anaweza kuwasiliana na contato@lymark.app. Kwa kuzingatia kiasi na asili ya usindikaji ambayo haina kuhusisha data nyeti kwa kiwango wala ufuatiliaji wa kimfumo hakuna wajibu wa kuamua Afisa wa Ulinzi wa Takwimuchini ya kifungu cha 37 cha GDPR.

04Ni habari gani inayoshughulikiwa na programu

There are two places. On the device (below, through “Preferences”): none of that uploads. On the server (account, payment, seal hash, technical access data): only what items 18 and 14 describe.

Picha

Picha ya kuchagua kutoka gallery au kukamata na kamera, na faili nje na watermark. picha inaweza kuwa na wa tatu data binafsi angalia kifungu 11.

Mahali

Latitude na longitude ya karibu, kupatikana mara moja kwa kila picha, kwa madhumuni ya pekee ya kujaza uwanja wa anwani.

Tarehe, saa na siku ya wiki

Soma kutoka saa kifaa wakati wa kukamata, na editable na wewe.

Nambari ya picha

Mfuatano wa herufi kumi na nne za hexadecimal zilizochorwa kwa nasibu. Hazitokani na kitambulisho cha kifaa wala kutoka kwa yako, na haziwezesha kufuatilia kati ya programu.

Historia

Rekodi ya mauzo ya mwisho mia mbili, ambayo ina njia faili kwenye kifaa na data stempu juu ya picha.

Mapendeleo

Maeneo inayoonekana, nafasi, ukubwa na chaguzi nyingine watermark.

Account

E-mail, account identifier, plan (free or Pro) and export count, at the authentication processor.

Payment

The billing processor handles card data. Lymark does not store the card number; it keeps only subscription state (how long Pro lasts) and billing identifiers needed to cancel or invoice.

Seal hash

A fingerprint of the exported file, sent to issue the seal and, if available, a timestamp. The photo itself never uploads. The hash cannot rebuild the image.

Technical access data

IP address, date, time and requested resource, in hosting and API logs, for as long as service security requires — including fraud prevention.

The app does not collect on-device, for the developer: identity documents, advertising identifiers, contacts, calendar, browsing history, usage metrics, crash reports. There is no analytics, advertising, attribution or tracking SDK. E-mail exists because there is an account; it is not read from the address book and not used for ads.

05Habari pekee ambayo huondoka kifaa

Wakati kutoa idhini ya eneo, programu inaomba mfumo wa uendeshaji kugeuza wima GPS katika anwani ya posta. tafsiri geocoding kinyume hufanywa na mfumo wa uendeshaji yenyewe, ambayo kwa kusudi hilo hutumia wima kwa huduma yake ramani: Googlekwenye vifaa vya Android na Applekwenye vifaa vya iOS.

Mawasiliano hayo yanatoka kwenye mfumo wa uendeshaji, na si kutoka Lymark. programu haipati nakala yake, haipati utaratibu wake na haina ufikiaji wa kitu chochote zaidi ya anwani iliyorejeshwa. Usindikaji unaofanywa na watoa huduma hao unatawaliwa na sera zao za faragha.

Hakuna picha kuondoka kifaa kupitia hatua yoyote ya programu.Kama unatumia kifungo cha Shiriki, picha ni kuhamishwa na programu ya marudio wewe kuchagua katika mfumo kushiriki karatasi ya ujumbe, barua pepe, uhifadhi wa wingu chini ya sera ya faragha ya programu hiyo.

06Marufuku ya kuagiza viwanja vya ndege

Kamera

To take the photo or record the video that will receive the watermark. Requested when you capture.

Picha na vyombo vya habari

Kuchagua picha iliyopo na kuandika faili nje ya kumbukumbu kwenye maktaba. Ufikiaji ni mdogo kwa picha, na ruhusa ya kuandika hutumiwa tu kwa kuandika programu wala kuvinjari wala kusoma maktaba yako.

Mahali wakati wa matumizi

Kujaza uwanja wa anwani. Imeombwa katika eneo la mbele, tu wakati programu ni kutumika, na kamwe katika background.

Microphone

Only when recording video with sound. Not used for still photos or in the background.

ruhusa zote ni ya hiari na inaweza kuruhusiwa wakati wowote katika mipangilio ya kifaa. Kukataa eneo huweka programu kazi kikamilifu: anwani hiyo huandikwa na wewe. Kukataa ufikiaji wa gallery huzuia tu uhifadhi wa moja kwa moja, na picha bado inaweza kushirikiwa.

07Misingi na madhumuni ya kisheria

Usindikaji wa eneo hufanyika kwa msingi wa yako idhini Kifungu cha 7, I ya LGPD na kifungu cha 6(1) (a) cha GDPR iliyoonyeshwa wakati unapotoa ruhusa ya mfumo, na inaweza kuondolewa wakati wowote, bila kujali uhalali wa usindikaji uliofanywa kabla ya kuondolewa.

Usindikaji wa data zilizobaki hufanyika kwa ajili ya utendaji wa kipengele ulichoomba Kifungu cha 7, V ya LGPD na kifungu cha 6(1)(b) ya GDPR kwa kuwa bila hiyo hakuna watermark kwa ajili ya programu ya kuzalisha.

Usindikaji wa data akaunti hutegemea utekelezaji wa mkataba (LGPD kifungu 7, V; GDPR kifungu 6(1)(b)). Usindikaji kulingana na maslahi halali (LGPD kifungu 7, IX; GDPR kifungu 6(1)(f)) ni tu kwa ajili ya usalama na kuzuia udanganyifu kwa mfano, kumbukumbu ya anwani ya IP ya maombi kwa server. Hakuna usindikaji kwa ajili ya matangazo, profile, uchambuzi wa tabia au madhumuni yoyote ya pili, na hakuna usindikaji wa aina maalum ya data au data nyeti na developer.

08Uhamisho wa kimataifa

Account and payment data are handled by processors in the United States (authentication and billing), and hosting may process access logs outside Brazil. The seal hash, when a timestamp is requested, may go to an independent timestamp authority. These transfers rest on standard contractual clauses and LGPD art. 33 and GDPR arts. 44–49, or an equivalent under your law. Geocoding in item 05 follows the OS providers’ own transfer tools.

This site is hosted by Vercel Inc., under items 14 and 18.

09Kushirikiana na watu wa tatu

The developer does not sell, rent or hand personal data to advertising or data brokerage. Contracted processors are listed in item 18. If you sign in with Google or Apple, those providers handle the login under their own policies; the developer receives the e-mail and identifier needed for the account. Photos and raw location pass through no processor, because they never leave the device.

10Hifadhi, uhifadhi na usalama

Data iko katika eneo binafsi la programu, kulindwa na mfumo wa uendeshaji kutengwa kati ya programu na kifaa screen lock.wenye ulemavu, ili historia na mapendekezo hayapelekwe kwenye akaunti ya Google ya mtumiaji.

Hifadhi ni kikamilifu kudhibitiwa na wewe: rekodi kukaa mpaka wao ni kufutwa katika programu yenyewe, na historia moja kwa moja discards wale wazee mara moja kupita vitu mia mbili, kuondoa faili zinazohusiana pia. Uninstalling programu kufuta kila kitu ni kuhifadhiwa. Picha tayari kuhifadhiwa katika kifaa gallery ni mali ya kumbukumbu na kukaa huko ni juu yako kuondoa yao kama unataka.

Hakuna mfumo ni kamili. data ya akaunti barua pepe, kitambulisho, mpango na hesabu huhifadhiwa na processor ya uthibitishaji, chini ya hatua zake za usalama. Picha, anwani na eneo hazipo katika kumbukumbu kuu, na kwa hivyo haziwezi kuvuja kutoka kwa miundombinu ya developer. Ikiwa tukio la usalama linaathiri data ya akaunti, developer itaarifu mamlaka na maswala ya data chini ya ZZLIT0ฮart. 48 na ZZLIT1Hart. 33. Hatari husika kwa picha zako inabaki kuwa na ufikiaji wa mwili kwa kifaa kilichofunguliwa.

11Unapopiga picha za watu wengine

Unapopiga picha watu wanaoweza kutambuliwa katika shughuli zako za kitaaluma,wewekuwa mlinzi wa data hiyo kuhusiana na data masuala iliyoonyeshwa, na ni juu yako kutoa msingi wa kisheria, habari na majibu ya haki zao.

12Haki zako

Kifungu cha 18 cha LGPD na makala 15 hadi 22 ya GDPR zinakupa haki ya uthibitisho na ufikiaji, marekebisho, kufuta, kutangaza jina, kuzuia, kubeba, upungufu wa usindikaji, upinzani, kuondoa idhini na habari kuhusu ushiriki.

Picha, anwani, historia na upendeleo huishi tu kwenye kifaa chako, na haki hizo zinatumiwa moja kwa moja kwenye programu: kuona na kufuta kuingia kwenye kichupo cha Galeria, kurekebisha uwanja wowote kabla ya kuuza nje, kufuta ruhusa ya eneo katika mipangilio ya mfumo, na kufuta kila kitu kwa kuondoa programu msanidi programu hawezi kufikia, kuuza nje au kufuta data hizo kwa sababu haizuihifadhi.ฮistori ya akaunti barua pepe, mpango na hesabu unaweza kuiona kwenye ukurasa wa akaunti na kuomba kurekebisha, kuuza nje au kufuta kwenye barua pepe ya mawasiliano ya Sera hii; kufuta akaunti hufuta data hiyo kwenye processor ya uthibitisho.

Requests: contato@lymark.app. You may complain to your country’s authority — in Brazil, the ANPD; in the EEA, your Member State’s supervisory authority; in the UK, the ICO; in California, the CPPA; elsewhere, the equivalent body. Item 19 lists the rights we honour outside the LGPD/GDPR pair.

13Maamuzi ya automatiska

Hakuna uamuzi wa automatiska, kuunda wasifu au usindikaji ambao hutoa athari za kisheria juu yako, kulingana na kifungu cha 20 cha LGPD na kifungu cha 22 cha GDPR.

14Kuhusu tovuti hii

Tovuti hii haina analytics, haina matangazo na haina embedded social network buttons.cookies muhimu sanakwa kikao chako cha akaunti, iliyowekwa na processor ya uthibitishaji (pointi ya 09) wakati wa kuingia; hakuna kuki za kufuatilia au matangazo. Fonts hutumika kutoka kwa kikoa cha tovuti. Maombi tu browser yako hufanya kwa watu wa tatu ni wale wa kuingia na akaunti skrini, zinazotumwa kwa processor ya uthibitishaji na, kama wewe kuchagua, kwa mtoaji wa kuingia (Google au Apple).

Tovuti hiyo imewekwa na Vercel Inc., ambayo kama processor huweka kumbukumbu data ya ufikiaji wa kiufundi anwani ya IP, tarehe, saa na rasilimali iliyoombwa kwa muda mrefu kama ni muhimu kwa usalama na utendaji wa mwenyeji. Msingi wa kisheria ni maslahi halali katika kudumisha usalama wa huduma, kifungu cha 7, IX ya LGPD na kifungu cha 6(1)(f) ya GDPR.

15Mabadiliko katika sera hii

Mabadiliko yatachapishwa kwenye ukurasa huu, na tarehe mpya ya sasisho. Mabadiliko ambayo hubadilisha kwa kiasi kikubwa usindikaji wa data pia yatatangazwa ndani ya programu kabla ya kuanza kutumika.

16Watoto na matineja

Lymark ni zana ya kazi, iliyoundwa kwa watu wenye umri wa miaka 18 au zaidi. Haikusudiwa kwa watoto au vijana, na haikusanya data kwa makusudi juu ya hadhira hiyo.

17Sheria inayotumika

Brazilian law governs this policy, without prejudice to the GDPR, UK GDPR, CCPA/CPRA and any mandatory data-protection or consumer law of the data subject’s country of residence. Forum: the data subject’s domicile when consumer law so requires; otherwise Santos, Brazil.

18Processors

Who handles data on the controller’s instructions only:

Clerk, Inc.

Account authentication (e-mail, identifier, plan and quota metadata). United States.

Stripe

Pro subscription billing. Lymark never receives the card number. United States, and, where applicable, a Stripe entity in the billing country.

RevenueCat, Inc.

Acts as intermediary for the Pro subscription made through the Android app: it receives from Google Play the purchase data, your Lymark account identifier and technical data from the device needed for the purchase (OS and app version), and notifies Lymark when the subscription starts, renews, is cancelled or refunded. The charge itself is made by Google Play, under its own terms. It does not receive photos, videos or location. United States.

Vercel Inc.

Hosting of the site and APIs; technical access logs (item 14).

Timestamp authority

When the seal asks for a third-party time, only the file hash is sent, not the photo. The current provider is a public RFC 3161 service; it may be replaced by a contracted authority, including ICP-Brasil, without changing this purpose.

Google and Apple appear as sign-in providers (if you choose them) and as geocoders (via the OS, item 05), under their policies — not as our processors for the photo.

19Rights outside Brazil and the EEA

On request at contato@lymark.app we honour access, correction, deletion, portability, restriction and objection, to the extent the data exist on the server (account, plan, count, hash, technical logs). What lives only on the device, you delete in the app or by uninstalling.

California and US states with a consumer privacy law: we do not sell personal information and we do not “share” it for cross-context advertising (there are no ads). You may ask to know, delete, and opt out of sale/sharing — we already do not sell. We do not use data for automated decisions with legal effect (item 13).

Canada (PIPEDA), Australia and New Zealand (Privacy Act), Japan (APPI), Singapore (PDPA), South Africa (POPIA), India (DPDP), Switzerland (nFADP), Mexico, Argentina, Colombia, Chile and other countries with an equivalent statute: the same channel and the same practical rights, limited to what the server actually keeps.

20Scope and limits of this policy

Lymark is offered where that is lawful. We do not operate to evade sanctions, nor in jurisdictions where offering the service would be unlawful. This document is not legal advice and does not claim that every article of every national code has been reproduced. If your mandatory law is more protective, it prevails; write to contato@lymark.app.

Ona pia Masharti ya Matumizi.