Privacy Policy

Data controller

Lagodish Tech, Złota 75A, 00-819 Warszawa (Wola), Poland, Poland, Warsaw, is the controller for the processing described here. Contact privacy@voxelio.app for privacy requests. We have not appointed a Data Protection Officer.

1. Scope

This policy covers the Voxelio iOS app, voxelio.app, Voxelio accounts, subscriptions, support, and related services. It explains what is required to operate the service and what is collected only after an optional consent.

2. Data we process

• Account and service data: name, email address, pseudonymous installation identifier, sign-in state, subscription status, and records needed to provide or restore access.
• Scan operations: capture mode, file count, export formats, duration, and delivery status. This operational metadata does not contain the scan itself.
• Optional product analytics: screen views and events across onboarding, capture, save, paywall, purchase, and sharing flows, plus app version and a pseudonymous account identifier.
• Stability diagnostics: minimized crash, hang, CPU, disk-write, performance, device, operating-system, app-version, and stable error-category information. Crash reports do not include an account ID or scan content.
• Optional ad attribution: app opens, completed scans, paywall views, and purchase events sent to Meta after both Voxelio consent and Apple tracking authorization.
• Website data: consent preferences stored locally; optional Google Analytics and Meta Pixel events; campaign parameters and App Store link clicks; and information you submit through the contact form.

3. Scan content stays separate from telemetry

Your scan files, photos, video, depth maps, geometry, textures, local file paths, and scan names are processed and stored on your device unless you deliberately export, share, or start a feature that clearly says it transfers data. They are not sent to Firebase Analytics, Firebase Crashlytics, Meta App Events, Meta Pixel, or Google Analytics.

4. Why we process data

• To provide accounts, subscriptions, downloads, support, security, and requested app features under our contract with you.
• To protect the service, prevent abuse, and diagnose crashes and serious performance problems based on our legitimate interests in operating a reliable and secure product. You can object by disabling diagnostics in the app.
• To understand product and website funnels and measure Meta advertising only when you consent. You may withdraw that consent at any time.

5. Your analytics and advertising choices

In the app, minimized crash diagnostics are enabled automatically and can be disabled at any time in Settings → Privacy & Diagnostics. Firebase Analytics and Meta attribution remain off until you make an affirmative choice. Meta attribution also requires Apple's system tracking permission and stops if that permission is revoked. On the website, use Cookie settings in the footer to accept, reject, or customize Google Analytics and Meta Pixel. Withdrawing consent or objecting to diagnostics stops future collection; it does not retroactively delete data already processed.

6. Service providers and disclosures

We disclose only the data needed for each service:

• Apple: App Store distribution, purchases, subscription entitlement, Sign in with Apple, and device-level tracking permission.
• Google / Firebase: Google sign-in, Remote Config, consented Analytics, and minimized Crashlytics stability diagnostics that you can disable.
• Meta: optional App Events and optional website Pixel for advertising attribution and conversion measurement.
• Telegram: delivery of contact-form messages and, only with website analytics consent, coarse App Store click notifications. Raw IP addresses and user-agent strings are not included in those messages.
• Hosting and infrastructure providers: delivery, security, and operation of the website and backend.

We do not sell personal data. Meta attribution may constitute “sharing” or targeted-ad processing under some privacy laws, so it is disabled unless you consent.

7. Retention and security

We retain account and subscription records while your account is active and as needed for legal, fraud-prevention, and financial obligations. Support messages are retained while needed to resolve and document the request. Analytics and diagnostics follow the configured retention periods in the relevant provider. Consent choices remain on your device or browser until changed or reset. We apply access controls, transport encryption, data minimization, and pseudonymous identifiers where practical.

8. International transfers

Some providers operate outside Poland or the EEA. Where required, transfers use an adequacy decision, Standard Contractual Clauses, or another lawful safeguard. Contact us for information about the safeguards relevant to your data.

9. Your rights

You may request access, correction, deletion, restriction, portability, or object to processing, and you may withdraw consent without affecting earlier lawful processing. Contact privacy@voxelio.app. You may also complain to your local authority or our lead authority, the Urząd Ochrony Danych Osobowych (UODO).

10. Children and changes

The services are not directed to children under 13, or a higher minimum age where local law requires it. We may update this policy as the product or law changes and will revise the date above; material changes will receive an appropriate notice.

11. Contact

Questions and privacy requests: privacy@voxelio.app.