Maxfiylik siyosati

Last updated: 16 September 2026 · Lymark app, version 1.4.0

This policy describes how Lymark (com.lycosteam.lymark) and this site handle personal data. It is written for the data-protection and consumer regimes of the rule-of-law jurisdictions where the service is offered — including Brazil’s LGPD, the GDPR (EEA), UK GDPR, US state laws (including California’s CCPA/CPRA), PIPEDA (Canada), the Privacy Acts (Australia and New Zealand), APPI (Japan), PDPA (Singapore), POPIA (South Africa), Mexico’s LFPDPPP, Argentina’s Ley 25.326 and equivalent Latin-American laws, plus Brazil’s consumer code and EU/UK consumer rules. Where the mandatory law of your country of residence grants stronger rights, that law prevails. This text does not claim to exhaust every national code, nor worldwide compliance.

01Bir gap bilan

Lymark does not transmit your photos or your raw location. Images, visible addresses, history and preferences stay on your device. An account is required to use the app and the subscription: the server keeps your e-mail, account id, plan, export count and, when you request a seal, the file hash — a fingerprint, not the photo.

Besides the account, what leaves the device is: (a) coordinates, via the operating system, to become an address (item 05); (b) the file hash, to issue the seal and, when available, a third-party timestamp (item 18); (c) payment data, handled by the billing processor (item 18). None of these flows send the image.

02Ushbu siyosat kimlarga amal qiladi

It applies to anyone who uses the app or this site, in jurisdictions where Lymark is lawful. Brazil: LGPD and ANPD. EEA and United Kingdom: GDPR and UK GDPR. California and other US states with a consumer privacy law: the equivalent rights in item 19. In other countries with a data-protection statute, we honour equivalent rights (access, correction, deletion, objection, portability) through the same channel: contato@lymark.app. We may refuse or limit the service where offering it would be unlawful or subject to sanctions.

03Boshqaruvchining kimligi

The controller of the personal data — controlador, in the terminology of the LGPD — is 29.015.357 AMAD ALI HAMMOUD, registered under CNPJ 29.015.357/0001-25, with an address at Avenida Ana Costa, 433, Gonzaga, Santos - SP.

Shaxsiy ma'lumotlarni qayta ishlash uchun mas'ul shaxs 2ning 41-moddasi uchun 1 hisoblanadi, u bilan 2da bog'lanish mumkin.contato@lymark.app. Ishlab chiqarish hajmi va xususiyatiga koʻra bu oʻta hissiy maʼlumotlarni oʻz ichiga olmaydi va tizimli nazoratni ham oʻz ichiga olmaydi Ma'lumotlarni himoya qilish bo'yicha xodim3ning 37-moddasi asosida.

04Ilova qanday ma'lumotlarni boshqaradi

There are two places. On the device (below, through “Preferences”): none of that uploads. On the server (account, payment, seal hash, technical access data): only what items 18 and 14 describe.

Rasmlar

Galereyadan tanlagan rasm yoki kamera bilan olingan rasm va suv belgisi bilan eksport qilingan fayl. Fotodramada uchinchi shaxslar shaxsiy ma'lumotlar 11 -bandni ko'rib chiqing.

Joylash joyi

Manzil maydoni to'ldirish uchun bir marta olingan taxminan uzunlik va uzunlik. Ko'paymalar yozilmaydi: fotosurat bilan birga faqat manzil matni saqlanadi.

Sana, vaqt va hafta kuni

Qopish paytida qurilma soatidan o'qib, siz tahrirlashingiz mumkin.

Rasm kodlari

Bu 14 hexadecimal belgilarning tartibini tartibsiz ravishda chizadi. Bu ne qurilma identifikatoridan, na sizning qurilmangizdan kelib chiqadi va dasturlar bo'ylab izlanish olib borishni imkon bermaydi.

Tarix

So'nggi 200 ta eksportning qaydnomasi, uskunadagi fayl yo'li va rasmga muhrlangan ma'lumotlar.

Preferentsiyalar

Ko'rinadigan maydonlar, joy, o'lcham va boshqa suv belgilari variantlari.

Account

E-mail, account identifier, plan (free or Pro) and export count, at the authentication processor.

Payment

The billing processor handles card data. Lymark does not store the card number; it keeps only subscription state (how long Pro lasts) and billing identifiers needed to cancel or invoice.

Seal hash

A fingerprint of the exported file, sent to issue the seal and, if available, a timestamp. The photo itself never uploads. The hash cannot rebuild the image.

Technical access data

IP address, date, time and requested resource, in hosting and API logs, for as long as service security requires — including fraud prevention.

The app does not collect on-device, for the developer: identity documents, advertising identifiers, contacts, calendar, browsing history, usage metrics, crash reports. There is no analytics, advertising, attribution or tracking SDK. E-mail exists because there is an account; it is not read from the address book and not used for ads.

05Qurilma tashqaridan chiqadigan yagona ma'lumot

Manzilga ruxsat berishdan so'ng, dastur operatsion tizimdan GPS koordinatlarini pochta manziliga aylantirishni so'raydi. Bu tarjima terma geokodifikatsiya operatsion tizimning o'zi amalga oshiradi, bu maqsad uchun koordinatlar xarita xizmatiga yuboradi: GoogleAndroid qurilmalarida va OlmaiOS qurilmalarida.

Ushbu xabar Lymarkdan emas, operatsion tizimdan keladi. Ilova uning nusxasini olmaydi, प्रकारga o'tmaydi va qaytarib berilgan manzildan tashqari hech qanday narsaga kirmaydi. Ushbu provayderlar tomonidan amalga oshiriladigan qayta ishlash ularning shaxsiy maxfiylik siyosati bilan tartibga solinadi.

Ilova har qanday harakat orqali qurilmani hech qanday fotosurat tark etmaydi.Agar siz "Share" tugmasini ishlatsangiz, rasm ushbu dasturning maxfiylik siyosati ostida tizimning "share" sahifasida tanlagan maqsadli dastur tomonidan uzatiladi.

06Ruxsatnomalar talab qilinadi va nima uchun

Kamera

To take the photo or record the video that will receive the watermark. Requested when you capture.

Fotosuratlar va ommaviy axborot vositalari

Mavjud rasmni tanlash va eksport qilingan faylni galereyaga yozish uchun. Fotalarga kirish cheklangan va yozish ruxsatnomasi faqat yozish uchun ishlatiladi dastur sizning galereyangizni ko'rmaydi yoki o'qib bo'lmaydi.

Foydalanishda joylashishi

Manzil maydoni to'ldirish uchun. Iltimos dasturiy ta'minot ishlatilayotganida, faqat dasturiy ta'minot ishlatilayotganida, va hech qachon orqaga.

Microphone

Only when recording video with sound. Not used for still photos or in the background.

Barcha ruxsatnomalar o'z ixtiyori bilan beriladi va qurilma sozlamalarida istalgan vaqtda bekor qilinadi. Manzilni rad etish dasturni to'liq ishlashi uchun ishlaydi: manzilni siz bosasiz. Galeriyaga kirishdan bosh tortish faqat avtomatik saqlashni to'sadi va fotosurat hali ham baham ko'rish mumkin.

07Huquqiy asoslar va maqsadlar

Joylash joyini qayta ishlash sizning rozilik 0ning 7-moddasi I va 1 ning 61) a) moddasi, siz tizimga ruxsat berganingizda ko'rsatilgan va bekor qilinadigan har qanday vaqtda, bekor qilinishdan oldin amalga oshirilgan qayta ishlashning qonuniyligiga daxl qilmasdan.

Qolgan ma'lumotlarni qayta ishlash talab qilgan xususiyatning bajarilishi 0ning 7-moddasi V va 1 ning 6 (1) (b) moddasi, chunki usiz dastur ishlab chiqarishi uchun suv belgisi yo'q.

Hisobot ma'lumotlarini qayta ishlash shartnoma bajarilishiga asoslanadi (0 7 -modda, V; 1 6 -modda) (b). Qonuniy manfaatga asoslangan qayta ishlash (0 7 -modda, IX -modda; 1 6 -modda) faqat xavfsizlik va firibgarlik oldini olish uchun mavjud Misol uchun, serverga so'rovlarning IP manzili qayd etiladi. Reklama, profillashtirish, xulq-atvor tahlillari yoki boshqa ikkinchi darajali maqsadlar uchun qayta ishlash mavjud emas, shuningdek, ishlab chiquvchi tomonidan ma'lumotlar yoki o'ta muhim ma'lumotlar maxsus toifalarini qayta ishlash mavjud emas.

08Xalqaro oʻtkazish

Account and payment data are handled by processors in the United States (authentication and billing), and hosting may process access logs outside Brazil. The seal hash, when a timestamp is requested, may go to an independent timestamp authority. These transfers rest on standard contractual clauses and LGPD art. 33 and GDPR arts. 44–49, or an equivalent under your law. Geocoding in item 05 follows the OS providers’ own transfer tools.

This site is hosted by Vercel Inc., under items 14 and 18.

09Uchinchi shaxslar bilan o'zaro aloqasi

The developer does not sell, rent or hand personal data to advertising or data brokerage. Contracted processors are listed in item 18. If you sign in with Google or Apple, those providers handle the login under their own policies; the developer receives the e-mail and identifier needed for the account. Photos and raw location pass through no processor, because they never leave the device.

10saqlash, saqlash va xavfsizlik

Ma'lumotlar dasturning shaxsiy sohasi bo'lib, operatsion tizimning dasturlar o'rtasidagi izolyatsiyasi va qurilma ekranini qulflash orqali himoyalangan. Android versiyasida tizimning avtomatik nusxasinogironlar, shunda foydalanuvchining Google hisob raqamiga tarix va tanlovi yuborilmaydi.

Xatira qilish siz tomonidan to'liq nazorat qilinadi: yozuvlar dasturning o'zida o'chguncha saqlanib qoladi va tarix ikki yuz element o'tganida eng qadimgilarini avtomatik ravishda tashlaydi, tegishli fayllarni ham olib tashlaydi. Ilovani o'chirib tashlash uning saqlashini o'chiradi. Qurilma galereyasida saqlangan fotosuratlar galereyaga tegishli va u erda qolish xohlasangiz ularni olib tashlash sizning zimmangizga kiradi.

Hech qanday tizim xato qilmaydigan. Hisobot ma'lumotlari elektron pochta, identifikator, reja va hisob uning xavfsizlik choralari bo'yicha autentifikatsiya protsessor tomonidan saqlanadi. Fotosuratlar, manzillar va joylashishi hech qanday markaziy omborda mavjud emas va shuning uchun ishlab chiquvchi infratuzilmasidan chiqishi mumkin emas. Agar xavfsizlik hodisasi hisob ma'lumotlariga ta'sir qilsa, ishlab chiquvchi ushbu ma'lumotlarni rasmiy va ma'lumot subyektlariga 0 moddalari 48 va 1 moddalari asosida xabar qiladi. 33.

11Boshqa odamlarni suratga olish

Kasbiy faoliyatingiz davomida aniq odamlar fotosuratini ko'rsangiz, sizko'rsatilgan ma'lumotlarga nisbatan ushbu ma'lumotlarning muharriri bo'lish, va siz ularning huquqiy asosini, ma'lumotlarni va huquqlariga javob berishdan iborat.

12Sizning huquqlaringiz

0ning 18-moddasi va 1ning 15-moddalaridan 22-moddasiga qadar sizga tasdiqlash va kirish, tuzatish, o'chirish, anonimlashtirish, blokirovka qilish, o'tkazilishi, qayta ishlashni cheklash, e'tiroz, rozilikni bekor qilish va almashish haqida ma'lumot olish huquqlarini kafolatlaydi.

Fotosuratlar, manzillar, tarix va preferentsiyalar faqat qurilmangizda mavjud va ushbu huquqlar to'g'ridan-to'g'ri dasturda amalga oshiriladi: Galeriya tabidagi yozuvlarni ko'rish va o'chirish, eksport qilishdan oldin har qanday maydonni tuzatish, tizim sozlamalarida joylashishga ruxsatni bekor qilish va dasturni o'chirib tashlash orqali hamma narsani o'chirish ishlab chiquvchi ushbu ma'lumotlarga kirish, eksport yoki o'chirish mumkin emas, chunki u siz uchun mavjud emas. Hisobot ma'lumotlari elektron pochta, reja va hisob Siz uni hisob sahifasida ko'rishingiz va bu siyosatning kontakt elektron pochta xabaridan tuzatish, eksport yoki o'chirishni so'rashingiz mumkin; hisobni o'chirish ushbu ma'lumotlarni autentifikatsiya protsessorida o'chirishadi.

Requests: contato@lymark.app. You may complain to your country’s authority — in Brazil, the ANPD; in the EEA, your Member State’s supervisory authority; in the UK, the ICO; in California, the CPPA; elsewhere, the equivalent body. Item 19 lists the rights we honour outside the LGPD/GDPR pair.

13Avtomatik qarorlar

0 ning 20-moddasi va 1 ning 22-moddasi bo'yicha siz haqingizda huquqiy ta'sir ko'rsatadigan avtomatlashtirilgan qarorlar, profillar tuzish yoki qayta ishlash yo'q.

14Ushbu veb-sayt haqida

Ushbu saytda hech qanday tahlillar mavjud emas, reklama ko'rsatilmaydi va ijtimoiy tarmoqlar tugmalari joylashtirilmaydi.qat'iy zarur cookie-fayllarhisobingiz seansida autentifikatsiya protsessorining (09-band) o'rnatishi; siz kirish paytida kuzatuv yoki reklama kukilari yo'q. Shriftlar saytning o'z domenidan xizmat ko'rsatilgan. brauzeringiz uchinchi shaxslarga faqatgina kirish va hisob ekranlari orqali murojaat qiladi, bu autentifikatsiya protsessorining () va, agar siz uni tanlasangiz, kirish provayderining (Google yoki Apple) manzillariga yuboriladi.

Sayt Vercel Inc., u, protsessor sifatida, texnik kirish ma'lumotlarini IP-manzil, sana, vaqt va talab qilingan resursni xosting xavfsizligi va ishlashi uchun zarur bo'lgan muddat davomida qayd etadi. Huquqiy asos - xizmat xavfsizligini saqlashning qonuniy manfaatidir, 1ning 7-moddasi IX va 2ning 6(1)(f)

15Ushbu siyosatga o'zgartirishlar

O'zgarishlar ushbu sahifada yangi yangilanish sanasi bilan e'lon qilinadi. Ma'lumotlarni qayta ishlashni sezilarli darajada o'zgartiradigan o'zgarishlar ular kuchga kirishdan oldin ilova ichida ham xabar qilinadi.

16Bolalar va o'smirlar

Lymark 18 yoshdan katta bo'lgan odamlar uchun mo'ljallangan ish vositasi bo'lib, u bolalar yoki o'smirlarga qaratilgan emas va bu auditoriya haqida ma'lumotlarni qasddan to'plamaydi.

17Amaldagi qonun

Brazilian law governs this policy, without prejudice to the GDPR, UK GDPR, CCPA/CPRA and any mandatory data-protection or consumer law of the data subject’s country of residence. Forum: the data subject’s domicile when consumer law so requires; otherwise Santos, Brazil.

18Processors

Who handles data on the controller’s instructions only:

Clerk, Inc.

Account authentication (e-mail, identifier, plan and quota metadata). United States.

Stripe

Pro subscription billing. Lymark never receives the card number. United States, and, where applicable, a Stripe entity in the billing country.

RevenueCat, Inc.

Acts as intermediary for the Pro subscription made through the Android app: it receives from Google Play the purchase data, your Lymark account identifier and technical data from the device needed for the purchase (OS and app version), and notifies Lymark when the subscription starts, renews, is cancelled or refunded. The charge itself is made by Google Play, under its own terms. It does not receive photos, videos or location. United States.

Vercel Inc.

Hosting of the site and APIs; technical access logs (item 14).

Timestamp authority

When the seal asks for a third-party time, only the file hash is sent, not the photo. The current provider is a public RFC 3161 service; it may be replaced by a contracted authority, including ICP-Brasil, without changing this purpose.

Google and Apple appear as sign-in providers (if you choose them) and as geocoders (via the OS, item 05), under their policies — not as our processors for the photo.

19Rights outside Brazil and the EEA

On request at contato@lymark.app we honour access, correction, deletion, portability, restriction and objection, to the extent the data exist on the server (account, plan, count, hash, technical logs). What lives only on the device, you delete in the app or by uninstalling.

California and US states with a consumer privacy law: we do not sell personal information and we do not “share” it for cross-context advertising (there are no ads). You may ask to know, delete, and opt out of sale/sharing — we already do not sell. We do not use data for automated decisions with legal effect (item 13).

Canada (PIPEDA), Australia and New Zealand (Privacy Act), Japan (APPI), Singapore (PDPA), South Africa (POPIA), India (DPDP), Switzerland (nFADP), Mexico, Argentina, Colombia, Chile and other countries with an equivalent statute: the same channel and the same practical rights, limited to what the server actually keeps.

20Scope and limits of this policy

Lymark is offered where that is lawful. We do not operate to evade sanctions, nor in jurisdictions where offering the service would be unlawful. This document is not legal advice and does not claim that every article of every national code has been reproduced. If your mandatory law is more protective, it prevails; write to contato@lymark.app.

Shuningdek , Foydalanish shartlari.