Privacy Policy

This policy explains what personal data we collect through our mobile applications, why we collect it, who we share it with, and what you can do about it. It applies to every app published by Galuxi Outlet SLU on the App Store.

01 Who is responsible for your data

The data controller is:

02 What we collect and why

Diagnostics and usage data

We use Google Firebase (Analytics and Crashlytics) to understand how the app is used and to find bugs. This includes the device model, operating system version, app version, language, approximate region derived from your IP address, the screens you open, and crash reports. The data is tied to a pseudonymous installation identifier, not to your name.

Purchases and subscriptions

We use RevenueCat to manage in-app purchases and subscriptions. It receives an anonymous app user ID, your purchase receipt, subscription status, store country and basic device information. Payments themselves are processed by Apple. We never see or store your card number or billing details.

Advertising

Some of our apps show ads through Google AdMob. Depending on the permission you grant, AdMob may access your device advertising identifier (IDFA), IP address, and information about the ads you see and tap, in order to serve and measure advertising. On iOS we ask for your permission through Apple's App Tracking Transparency prompt before any tracking identifier is used. If you decline, you will still see ads, but they will not be personalised.

AI features

Where an app offers an AI feature, the text or images you submit are sent to OpenAI to generate a response, and the response is sent back to your device. Under OpenAI's API terms, that content is not used to train their models. Please do not enter sensitive personal data, health information or confidential material into these features.

Support emails

If you write to us, we keep your email address and message so we can reply and keep a record of the issue.

03 Legal basis for processing

• Performance of a contract — delivering the app's features, managing your purchases and subscriptions, and providing support.
• Consent — personalised advertising and tracking identifiers, where you have granted permission. You can withdraw consent at any time.
• Legitimate interest — keeping the app stable and secure, diagnosing crashes, and preventing fraud and abuse.
• Legal obligation — retaining transaction and tax records where the law requires it.

04 Who we share data with

We do not sell your personal data. We share it only with the service providers we need to run the apps, each acting under a data processing agreement:

• Google Ireland Limited and Google LLC — Firebase and AdMob. Privacy policy
• RevenueCat, Inc. — subscription management. Privacy policy
• OpenAI, L.L.C. — AI features. Privacy policy
• Apple Inc. — App Store distribution and payment processing. Privacy policy

We may also disclose data where we are legally required to do so by a competent authority.

05 International transfers

Some of these providers are based in the United States. Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses, by the providers' certification under the EU–US Data Privacy Framework, or by both, together with additional technical and organisational safeguards.

06 How long we keep it

Diagnostics and analytics data is retained for up to 14 months. Purchase and subscription records are kept for as long as your account is active and afterwards for the period required by Spanish tax and commercial law. Support emails are kept for up to two years. AI prompts are not stored on our own servers; OpenAI may retain them for a limited period for abuse monitoring under its own policy.

07 Your rights

Under the GDPR you can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, or send it to another provider in a portable format. You can also withdraw any consent you have given, without affecting processing carried out before you withdrew it.

To exercise any of these rights, write to contact@galuxidev.com. We may ask you to confirm your identity, and we will respond within one month.

You can turn off ad personalisation at any time in Settings → Privacy & Security → Tracking on your device, and reset your advertising identifier there.

If you believe we have handled your data incorrectly, you have the right to complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es), or to the authority in your country of residence.

08 Children

Our apps are not directed at children under 14 and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

09 Security

Data is transmitted over encrypted connections and access to it is limited to the people who need it. No system is completely secure, but we take reasonable technical and organisational measures to protect your information.

10 Changes to this policy

We may update this policy as our apps change. The date at the top shows when it was last revised, and we will announce significant changes inside the app.