Privacy policy

This policy explains what the 3D Product Rotator app (“the app”) does with your information. It is written to meet Canada’s PIPEDA and Québec’s Law 25. The app is operated by Plumbmonkey Media (“Plumbmonkey”, “we”), based in Calgary, Alberta, Canada.

The short version

• Your photos and 3D models never leave your phone. The app makes the spin on your device. We have no servers that receive your pictures.
• Analytics are optional and off by default. They only start if you switch them on, and you can switch them off at any time.
• We don’t ask for your name, email, contacts, location or advertising ID.
• You can erase everything the app stores in Settings → Delete all my data.

Privacy Officer

Gregg Henwood, owner of Plumbmonkey Media, is our designated Privacy Officer (the person responsible for protecting personal information). Contact: plumbmonkey@gmail.com.

What stays on your device

• The photos you take or choose, and the 3D models you open.
• The finished spins, videos and GIFs the app creates, which are kept in the app’s private storage.
• The cut-out masks created when you use “Smart cut-out”. These are computed on your device by Google’s ML Kit; your pictures are not sent to Google for this.
• A small record of your privacy choices (which options you allowed, the policy version, and when you decided). We keep it so we can show that consent was given.

A file leaves your device only when you share or save it, for example by sending a video to another app.

What we collect, and why

1. Subscription and purchase information (needed to provide the app)

The app is unlocked by a subscription. Payment is handled by Google Play; we never see your card details. We use RevenueCat to confirm whether your subscription is active. RevenueCat receives a random app user ID and your purchase receipt from Google. It does not receive your name or email from us.

2. Usage analytics (only if you say yes)

If you turn on “Product analytics”, the app sends anonymous events to PostHog (hosted in the European Union) so we can see what works and fix what doesn’t. The events are:

• app opened, installed, updated or sent to the background (standard app events);
• paywall viewed, trial started, purchase completed or restored;
• render started, completed (with how long it took and the number of frames) or failed;
• a video or GIF exported (and in which format);
• the “commission a custom 3D model” link tapped.

Each event is linked to a random ID created on your phone, not to you. Like most apps, PostHog also receives basic technical details with each event, such as app version, operating system version and device type. We do not use session recording, we do not track what is on your screen, and we do not send your photos, models, file names or any text you type. Every internet request carries an IP address, so PostHog may use it momentarily to work out a general region (such as your country or city) and then discards it: we have configured PostHog not to store IP addresses.

3. Crash reports and product updates

The privacy screen lists “Crash diagnostics” and “Product updates”. Neither is in use yet: no crash reports are sent and no news or offers are delivered. If that changes we will update this policy and ask for your consent again before using them.

4. Camera

If you use “Guided capture”, the app asks for camera permission. Pictures taken are saved in the app’s private storage on your device only.

Who else handles data, and where

• Google Play (billing and app delivery). Governed by Google’s own privacy policy.
• RevenueCat (subscription status), United States.
• PostHog (analytics, only with your consent), European Union.
• Google ML Kit: on first use of Smart cut-out, Google Play services may download the cut-out model to your phone. This is a download to you; your photos are not uploaded.

Because some of these providers are outside Québec and outside Canada, information may be stored or processed there. Before relying on a provider outside Québec we assess the privacy risks and put contractual protections in place. We do not sell your information, and we do not use it for advertising.

Your choices and rights

• Withdraw consent any time in Settings → Privacy choices. Analytics stop immediately and the app discards its analytics ID.
• Delete your data in Settings → Delete all my data. This removes your spins, temporary files, privacy record and analytics ID from your device.
• Ask us for access to, correction of, or deletion of any personal information we hold about you, or for a copy of it in a common format, by emailing plumbmonkey@gmail.com. We reply within 30 days. Because analytics are anonymous, we may need your app’s random ID (shown on request) to find your data.
• Manage or cancel your subscription in Google Play (Play Store → profile → Payments & subscriptions). Uninstalling the app does not cancel it.

If you are not satisfied with our answer you can complain to the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

How long we keep information

Files in the app stay on your phone until you delete them. Analytics events are kept only as long as needed to understand and improve the app. Purchase records are kept as long as the subscription relationship and tax and accounting rules require. When information is no longer needed we delete or anonymise it.

Security

Data sent to PostHog and RevenueCat travels over encrypted connections. The app disables Android’s automatic cloud backup so your spins are not copied to other places without you knowing. We keep a register of any confidentiality incident and will notify you and the regulator where the law requires it.

Children

The app is not directed at children under 14, and we do not knowingly collect their personal information.

Changes to this policy

If we change what we collect or why, we will update this page and ask for your consent again in the app before the change applies to you. The date above shows the latest version.

Contact

Privacy Officer, Plumbmonkey Media, Calgary, Alberta, Canada · plumbmonkey@gmail.com