PRIVACY POLICY FOR MOBILE APPLICATION

Privacy Policy for the "Pecka Foto" Mobile Application

This document describes how the Pecka Foto mobile application (hereinafter the "Application") handles your data and how your privacy is protected. The operator of the Application is Miroslav Tolar, with registered office at: EU/CZ - Dobrovského 354/24b, Olomouc, 77900, Company ID (IČO): 08111405, Data box: myt4cc6, Contact email: info@peckafoto.cz (hereinafter the "Operator").

The Application is available for the Android and iOS operating systems (including iPad) and is intended for use with a Pecka Foto photo printer rented from the Operator. The Application requires no registration and no user account.

1. Capturing and Processing Photographs

The Application is used for capturing and printing photographs. Protecting your privacy is our priority, which is why we handle photographs as follows:

• Saving to Device (Local Storage): Captured photographs are saved to your mobile device's memory only if you explicitly enable (turn on) this function in the Application settings. Otherwise, photographs are stored only temporarily in the Application's internal (sandboxed) cache, inaccessible to other applications or the user, exclusively for the purpose of immediate printing. They are automatically and permanently deleted immediately after printing or canceling the print, and at the latest upon the next launch of the Application.
• Secure Deletion: If saving photographs is enabled, you can safely and permanently delete all captured and saved photographs at any time directly in the Application interface by pressing the designated button.
• No Photo Transmission: The Application never sends any captured photographs, their previews, or image metadata to the servers of the Operator or any third parties. Photographs travel only from your device to the rented printer.

2. Operational and Technical Data (Printing Metrics)

For the purpose of proper fulfillment of the rental agreement (monitoring device functionality, billing for provided services, and handling complaints) and for the purpose of printer maintenance and diagnostics, the Application automatically records and sends to the Operator's server a record of four event types: photo captured, successful print, print error, and printer pairing. The following data is sent with each such event:

• Technical application identifier (UUID) – randomly generated on first launch and stored only on your device; it is not derived from any hardware or advertising identifier (the Application does not process IMEI, MAC address, or advertising ID) and it ceases to exist when the Application is uninstalled
• A random event number and its exact timestamp
• Identification name (SSID) of the connected Pecka Foto printer (the Application does not send the names of your private or home Wi-Fi networks or any other private data)
• Event type (photo captured / successful print / print error / pairing status) and, in the event of a failure, a technical error code
• The version and build designation of the Application
• The name and version of the operating system and the general type of mobile device, i.e. manufacturer and model designation (e.g. "Apple – iPhone 12 mini"). The Application never sends the name you have given your device yourself.

Relationship to Your Privacy: This data does not contain any of your photographs or their previews, IP addresses, location, name, email, or phone number. However, the Operator is able to assign the number of captured and printed photographs to your specific rental order based on the date, time, and identification name of the rented printer.

Legal Basis and Retention Period: The legal basis for this processing is the performance of a rental agreement (Art. 6(1)(b) of the GDPR) for the purpose of correctly reporting the number of printed photographs and the Operator's legitimate interest in protecting its property and legal claims (Art. 6(1)(f) of the GDPR). These operational statistics are kept for a period of 2 years from the end of the lease in case of resolving complaints or contractual disputes. If the device is not connected to the internet, events are temporarily stored on the device and sent later; unsent records older than 30 days are automatically removed from the device. Since this data is necessary to verify contract performance, its measurement cannot be turned off in the Application.

3. Application Permissions

For proper functionality, the Application requires access to certain features of your device. The scope and names of individual permissions may differ between Android and iOS:

• Camera: To capture images intended for printing and to scan the QR code used to pair the Application with the rented printer.
• Local Network and Wi-Fi: To find the rented printer on the local network, transmit data for printing, and send the operational data described in Article 2. On iOS, a separate system prompt for "Local Network" is shown for this purpose.
• Photos and Storage: For optional saving of captured photographs to the device gallery (this function is turned off by default) and for selecting your own background image or logo. The Application does not browse or read any other content of your gallery – it works exclusively with the file you select yourself in the system image picker.
• Location Services: The operating system (both Android and iOS) may require permission for location access to correctly find and connect to the printer's Wi-Fi network. However, the Application does not record, store, or send your location data anywhere.
• Biometric Authentication (Face ID, Touch ID, fingerprint, or device passcode): Used solely to optionally lock the Application settings so that guests cannot change them during an event. Authentication is performed by your device's operating system; the Application does not obtain, store, or transmit any biometric data – it only receives the information whether authentication was successful.

4. Tracking, Advertising, and Third-Party Services

The Application contains no advertising and no third-party analytics, marketing, or advertising tools. It does not track you across other companies' apps and websites – on iOS it uses neither the App Tracking Transparency (ATT) framework nor the IDFA advertising identifier; on Android it does not work with the advertising ID. The operational data described in Article 2 is sent exclusively to the Operator's server and is not passed on to any other recipients, nor used for profiling or automated decision-making.

5. Application Distribution and Store Diagnostics

The Application is distributed through the Apple App Store and Google Play. When the Application is downloaded, installed, and updated, Apple and Google process data as independent controllers under their own privacy policies; the Operator has no access to that data beyond aggregated and anonymized download and usage statistics.

The Application itself contains no crash reporting tool. However, if you have enabled sharing of diagnostic data with developers on your device (e.g. "Share Analytics with App Developers" at Apple or the equivalent setting at Google), the Operator may receive anonymized records of Application crashes and technical errors from the respective store. This sharing can be turned off at any time directly in your device settings.

6. Your Rights, Children, and Contact

In relation to the operational data under Article 2, you may exercise your rights under the GDPR, in particular the right of access, rectification, erasure, restriction of processing, objection, and data portability. Simply send your request to info@peckafoto.cz. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.cz).

The Application is not intended for children under 15 years of age, and the Operator does not knowingly process their personal data.

Details about the processing of personal data in connection with printer rentals can be found in the Privacy Policy document available on the Operator's website.