Privacy Policy

This Privacy Policy explains how WebToolsz ("WebToolsz", "we", "us" or "our") handles information in connection with the Image Toolkit mobile application (package name com.webtoolsz.imagetoolkit) (the "App"). WebToolsz is based in India and offers the App to users worldwide.

1. Who We Are (Data Controller)

WebToolsz is the controller responsible for personal data processed through the App. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we act as a Data Fiduciary. Depending on your location, we also aim to comply with the EU and UK General Data Protection Regulation ("GDPR"/"UK GDPR") and the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA").

For any privacy question you can reach us at imagetoolkit@webtoolsz.com or support@webtoolsz.com.

2. Information We Do Not Collect

We designed Image Toolkit to be privacy-first. We do not:

• Require you to create an account or provide your name, email or phone number to use the App.
• Upload, copy or store your photos or the images you process on our servers. All image processing happens locally on your device.
• Collect your precise location.
• Access your contacts, microphone or camera roll beyond the images you explicitly select.
• Sell your personal information.

3. Information Processed On Device

The following stays on your device and is not transmitted to us:

• Your images and their metadata. When you compress, resize, convert, batch-process, create passport photos, resize for social media or bulk-rename, the App reads the images you select and writes the results back to your device storage.
• Processing history. A record of recent operations is stored locally so you can revisit past work. You can clear this at any time within the App or by uninstalling.
• App settings. Preferences such as default quality, selected language, onboarding status, notification choices and Pro status are stored locally on your device.

4. Information Collected by Third-Party Services

To operate, improve and monetise the App, we use trusted third-party SDKs provided by Google. These services may collect limited technical and device information as described below. Each service processes data under its own privacy policy.

4.1 Firebase Analytics (Google)

We use Firebase Analytics to understand aggregate, anonymous usage such as which features are opened and how often, so we can prioritise improvements. It may collect app instance identifiers, device and OS information, and event data. It does not receive your images. See the Firebase Privacy and Security and Google Privacy Policy.

4.2 Firebase Crashlytics (Google)

Crashlytics collects crash and stability diagnostics (for example, stack traces, device model, OS version and the state of the App at the time of a crash) to help us fix bugs. It does not receive your images. See the Firebase Privacy documentation.

4.3 Google AdMob (Advertising ID)

The free version of the App shows ads via Google AdMob. AdMob may access your device's Advertising ID and collect ad-related and device information to serve and measure ads and limit repetition. Ad personalisation is subject to your device settings and, where required, your consent. See the AdMob data disclosures and Google Advertising policies. Upgrading to Pro removes ads.

4.4 Google Play Billing

If you purchase Pro (monthly or yearly subscription, or a one-time lifetime purchase), the transaction is handled by Google Play Billing. Google processes your payment; we receive a purchase token and status to unlock Pro. We do not receive or store your full payment card details. See the Google Play Terms of Service and Google Privacy Policy.

4.5 Google Play Services

The App relies on Google Play services for in-app updates, in-app review prompts and remote configuration. These may process device and diagnostic information under Google's policies. See the Google Privacy Policy.

5. Device Permissions

The App requests only the permissions it needs. On Android, some are granted at install time and some require your explicit approval at runtime.

• INTERNET and ACCESS_NETWORK_STATE — to load ads, fetch remote configuration, send anonymous analytics/crash reports and check for updates.
• READ_MEDIA_IMAGES — to let you select the images you want to process (Android 13 and above).
• READ_EXTERNAL_STORAGE — to read selected images on older devices (Android 12 and below; maxSdkVersion 32).
• WRITE_EXTERNAL_STORAGE — to save processed images on older devices (Android 9 and below; maxSdkVersion 28).
• POST_NOTIFICATIONS — to show optional notifications such as weekly tips and processing summaries (Android 13 and above; you can decline or turn these off).
• FOREGROUND_SERVICE — to reliably complete scheduled background work such as periodic summaries.
• com.google.android.gms.permission.AD_ID — to access the Advertising ID used by AdMob for ads in the free version.

6. How We Use Information

• To provide the App's core image-processing features on your device.
• To operate and secure the App, diagnose crashes and fix bugs.
• To understand aggregate feature usage and improve the App.
• To display ads in the free version and to process Pro purchases.
• To deliver optional notifications you have allowed.
• To comply with legal obligations and enforce our Terms.

7. Legal Bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Consent — for personalised advertising and, where required, non-essential analytics and notifications. You may withdraw consent at any time.
• Legitimate interests — for essential, aggregated analytics, crash diagnostics, security and improving the App, balanced against your rights.
• Performance of a contract — to provide Pro features you have purchased and process the related transaction.
• Legal obligation — where processing is necessary to comply with applicable law.

8. Sharing & Disclosure

We do not sell your personal information. We share limited data only with:

• Service providers — the Google services described in Section 4, acting as processors or independent controllers under their own policies.
• Legal and safety — where required by law, regulation, legal process or to protect rights, safety and the integrity of the App.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this Policy.

9. International Data Transfers

We are based in India and our third-party providers may process data on servers located in other countries, including the United States. Where personal data is transferred internationally, appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms are relied upon by those providers as required by applicable law.

10. Your Rights & Choices

• Advertising ID — you can reset or delete it, and opt out of ad personalisation, in your device settings (Settings → Google → Ads). Upgrading to Pro removes ads.
• Analytics & notifications — you can turn notifications off in the App or in Android system settings.
• Access, correction, deletion and portability — subject to applicable law, you may request these for any personal data we control. Because images and history are stored only on your device, you can delete them directly in the App or by uninstalling.
• Uninstall — removing the App deletes locally stored data, including your processing history and settings.

To exercise rights that require our action, email imagetoolkit@webtoolsz.com. We may need to verify your request.

11. California Notice (CCPA/CPRA)

If you are a California resident, you have rights to know, access, correct and delete personal information, and to opt out of "sale" or "sharing" of personal information. We do not sell personal information for money. Some ad-related data sharing may be considered "sharing" for cross-context behavioural advertising under the CPRA; you can limit this by resetting your Advertising ID, opting out of ad personalisation, or upgrading to Pro. We do not discriminate against you for exercising your rights.

12. India Notice (DPDP Act 2023)

If you are in India, we process your personal data as a Data Fiduciary under the DPDP Act, 2023. As a Data Principal you have the right to access, correct and erase your personal data, to nominate another person to exercise your rights, and to grievance redressal.

Grievance contact: email imagetoolkit@webtoolsz.com with the subject line "DPDP Grievance". We will respond within the timelines required by law. In line with the DPDP Act, we do not knowingly serve targeted or behavioural advertising to users under 18.

13. Data Retention

Images and processing history remain on your device until you delete them or uninstall the App. Diagnostic and analytics data held by our providers is retained according to their policies and standard retention windows; aggregated data may be kept longer as it is not personally identifying.

14. Data Security

We rely on on-device processing to minimise data exposure, and our providers use industry-standard safeguards such as encryption in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Children's Privacy

The App is not directed to children. We do not knowingly collect personal data from children under 13 (or the minimum age in your jurisdiction). In India, users under 18 are treated as children under the DPDP Act and are not shown targeted advertising. If you believe a child has provided personal data, contact us and we will take appropriate steps.

16. Third-Party Links

The App and this website may link to third-party sites and services (for example, Google's policies). We are not responsible for their content or privacy practices; please review their policies separately.

17. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will provide notice where appropriate within the App. Continued use of the App after changes take effect constitutes acceptance of the updated Policy.

18. Contact Us

For any questions or requests regarding this Privacy Policy:

• Primary: imagetoolkit@webtoolsz.com
• General support: support@webtoolsz.com
• Or use our contact form.