Privacy Policy

1. Who we are

The app MyWalls / Wallpapers 4K: HD Backgrounds (Google Play package com.smartappcraft.mywalls.live.wallpapers, including earlier or alternative store listing names of the same app, the “App”) is published by:

We are the controller of the personal data described in this policy within the meaning of the EU General Data Protection Regulation (“GDPR”). “We”, “us” and “our” refer to the operator named above. We have not appointed a data protection officer, as this is not required for our activities. You can contact us about any privacy matter at the email address above.

2. Scope of this policy

This policy explains what personal data is processed when you use the App, why, on what legal basis, who receives it, and what rights and choices you have. It applies to users worldwide. Where the law of your country gives you additional rights, those rights apply as well.

This policy does not cover third-party websites or services you may reach through the App (for example the Google Play Store or an advertiser’s website after you tap an ad). Those services have their own privacy policies.

3. Data stored only on your device

In the current version of the App, the following information is created and kept locally on your device. We do not have access to it, and it is not sent to our servers:

• App settings and preferences (for example display, playback and language settings);
• your favorites, collections, playlists and the history of wallpapers you have viewed or set;
• wallpapers and live wallpapers you download from the online gallery.

This data stays on your device until you delete it in the App, clear the App’s data in your Android settings, or uninstall the App. Because it is stored only on your device, we cannot restore it for you if it is lost. Depending on your device settings, Android’s own backup service (operated by Google, not by us) may include some app data in your device backup.

4. Data processed by third-party services

The App uses the following services. They receive certain technical data automatically when you use the App. We have chosen these services to operate, secure, improve and finance the App, which is free to use.

4.1 Google Firebase Analytics

Provider: Google Ireland Limited (for users in the EEA and Switzerland) or Google LLC (elsewhere). Firebase Analytics helps us understand how the App is used so we can improve it. It may process:

• an app instance identifier and, where allowed, advertising identifiers;
• usage events (for example screens opened, features used, wallpapers set, session start and length, in-app ad events);
• device and app information (device model, operating system version, language, App version, screen resolution);
• approximate location at country or city level derived from your IP address. Firebase does not give us your full IP address or precise location.

We use this information in aggregated or pseudonymised form. We do not use it to identify you personally. More information: firebase.google.com/support/privacy.

4.2 Google Firebase Crashlytics

Provider: Google (as above). When the App crashes or encounters a serious error, Crashlytics sends a crash report so we can find and fix the problem. A report may contain a crash installation identifier, the stack trace, device model and state (for example available memory and disk space, orientation), operating system and App version, and the time of the crash. Crash reports are not used for advertising.

4.3 Google AdMob

Provider: Google (as above). The App shows advertisements (for example banner, full-screen, app-open or rewarded ads) through Google AdMob. To deliver and measure ads and prevent fraud, AdMob may process:

• the Android Advertising ID or App Set ID;
• IP address and approximate location derived from it;
• device information (model, operating system, language, network type) and App information;
• ad interaction data (ads shown, taps, completed rewarded ads).

Depending on your consent choices and your region, ads may be personalised (based on your interests and activity across apps and websites) or non-personalised (based on general context such as approximate location and the App itself). See section 8. Google may act as an independent controller for some of this processing. More information: How Google uses information from sites or apps that use its services.

4.4 Cloudflare

Provider: Cloudflare, Inc. and its affiliates. We use Cloudflare to store and deliver wallpaper content and App data from our servers, and to protect them against abuse and attacks. When the App requests content, Cloudflare processes technical data such as your IP address, request time, requested file, user agent and technical request headers. This data is used to deliver content, keep the service secure and operate it reliably. More information: cloudflare.com/privacypolicy.

4.5 Google Play

The App is distributed through Google Play. When you download the App, leave a review or (in the future) make a purchase, Google processes your data under its own privacy policy as an independent controller. Google provides us with statistics and, for purchases, the information described in section 9.5. Google Play reviews and ratings are public and are governed by Google’s terms.

We do not ask for your name, email address, phone number or precise location in the current version of the App, and we do not access your contacts.

5. App permissions

Depending on your Android version and the features you use, the App may ask for or use:

• Set wallpaper / live wallpaper service – to apply wallpapers and live wallpapers to your home and lock screen.
• Storage access (on older Android versions, where required) – only to save wallpapers you choose to download to your device.
• Internet and network state – to load the online gallery, show ads, send analytics and crash reports.
• Advertising ID (AD_ID) – used by AdMob and Firebase as described above, subject to your consent choices and device settings.

You can revoke permissions at any time in your Android settings. Some features may then stop working.

6. When you contact us

If you email us, we process your email address, name (if provided), the content of your message, any attachments and, if you provide them, technical details about your device. We use this data only to answer your request, handle complaints, deal with reports of illegal content or infringements, and keep a record of our correspondence where needed to protect our legal interests.

7. Purposes and legal bases

If you are in the EEA, the UK or Switzerland, we rely on the following legal bases under the GDPR (or the equivalent UK and Swiss law):

Where we rely on legitimate interests, you have the right to object (see section 13). Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Planned automated moderation is described in section 9.4.

8. Advertising and your consent choices

In the EEA, the UK and Switzerland, the App uses a consent tool based on Google’s User Messaging Platform, certified under the IAB Transparency & Consent Framework. On first launch it asks whether you agree to the storage of and access to information on your device and to personalised advertising by Google and its ad partners. You can:

• accept, reject or customise your choices in the consent dialog;
• change or withdraw your consent at any time through the privacy or consent settings option in the App (shown where the consent dialog applies to you);
• reset or delete your Advertising ID, or opt out of ads personalisation, in your Android settings (usually Settings › Privacy › Ads or Settings › Google › Ads).

If you do not consent to personalised ads, you may still see ads, but they will be non-personalised or limited. Where US state privacy laws apply, the consent tool may also show you a way to opt out of the “sale” or “sharing” of personal information for targeted advertising (see section 17).

9. Planned features

9.1 User accounts Planned

If you create an account, we will process your email address, username, password (stored only in hashed form) or the identifier from a third-party sign-in provider such as Google, an optional profile picture and bio, account settings, creation date and security logs (for example sign-in times and IP addresses). Accounts may allow your favorites, playlists and preferences to be synchronised between devices; in that case this data will be stored on our servers or those of our service providers. Legal basis: performance of our agreement (Art. 6(1)(b)) and legitimate interests in securing accounts (Art. 6(1)(f)).

9.2 Uploading photos and videos Planned

If you upload content, we will store the files and related information such as title, description, tags, category, upload date, file properties and your account identifier. Photos and videos can contain metadata (for example the location where they were taken or the camera model). We plan to remove location metadata from public files where technically possible, but we recommend that you check your files before uploading. Do not upload content that reveals sensitive information about you or other people. Legal basis: performance of our agreement (Art. 6(1)(b)).

9.3 Public content and link sharing Planned

Content you choose to publish, together with your username, profile picture and public statistics (for example likes or downloads), may be visible to other users of the App and, through shared links, to anyone who has the link, including people who do not use the App. Others may download public content and keep copies we cannot control. Please publish only what you are comfortable making public. You will be able to delete your public content; see section 14.

9.4 Moderation and reporting Planned

To keep the App safe and legal, uploaded content may be checked by automated tools (for example systems that detect nudity, violence, spam or known illegal material) and/or reviewed by people acting on our behalf. When a user or rights holder reports content, we will process the report, the reporter’s contact details, the reported content and information about the accounts involved. We keep records of moderation decisions, statements of reasons and appeals.

Automated tools may flag, hide or restrict content. Decisions to remove content or suspend accounts can be appealed and, on request, reviewed by a person. Where the law requires it, we will report certain illegal content (in particular child sexual abuse material and threats to life or safety) to the competent authorities and preserve the related data. Legal bases: legal obligations, including under the EU Digital Services Act (Art. 6(1)(c)), and legitimate interests in protecting users, rights holders and the service (Art. 6(1)(f)).

9.5 Subscriptions and in-app purchases Planned

Paid features will be sold through Google Play Billing. Payments are processed by Google; we will not receive your full card or bank details. Google will provide us with information needed to deliver and manage your purchase, such as the product purchased, order or purchase token, purchase time, price and currency, country, subscription status, renewal and cancellation information. We will use it to unlock paid features, prevent fraud, handle support requests and meet accounting and tax obligations. Legal bases: performance of our agreement (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)).

10. Who receives your data

We share personal data only as described in this policy:

• Service providers (processors) that process data on our behalf and under our instructions, such as Google (Firebase) and Cloudflare, and in the future hosting, storage, email and moderation providers.
• Independent third parties such as Google in its role as AdMob advertising provider and Google Play operator. Where you consent, Google’s ad partners listed in the consent dialog may also receive data for advertising purposes.
• Authorities, courts and other parties where we are legally required to, or where it is necessary to protect our rights, other users or the public (for example in response to a valid legal order or to report illegal content).
• Rights holders and reporters, in limited form, when needed to handle a notice about illegal or infringing content (for example to tell a reporter what action we took). Planned
• A successor if the App or our business is transferred, merged or sold. The successor will be bound by this policy or will inform you of any changes.

We do not sell your personal data for money.

11. International data transfers

Some of our providers, including Google and Cloudflare, process data in countries outside the European Economic Area, including the United States. Where these countries do not provide an adequate level of protection as recognised by the European Commission, transfers are protected by appropriate safeguards, in particular the EU-US Data Privacy Framework (where the recipient is certified) and/or the European Commission’s Standard Contractual Clauses, together with additional measures where needed. You can request more information about these safeguards by contacting us.

12. How long we keep data

We may keep data longer if it is necessary to comply with a legal obligation, preserve evidence of illegal activity, or establish, exercise or defend legal claims.

13. Your rights

Depending on where you live, and in all cases if the GDPR applies to you, you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict processing;
• data portability – receive data you provided in a structured, machine-readable format;
• object to processing based on legitimate interests, and at any time to processing for direct marketing;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with a data protection authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl). You may also contact the authority in the country where you live or work.

To exercise your rights, email [email protected]. We will respond within one month; in complex cases this may be extended by up to two further months, and we will tell you if so. We may need to ask for information to confirm your identity.

Please note: because the current version of the App has no accounts, we usually cannot link analytics, crash or advertising data to you. If you want us to handle a request about this data, you may need to provide an identifier (for example the Firebase app instance ID, if shown in the App) or we may be unable to identify your data. In that case, the options in section 14 are the most effective way to control it.

14. Deleting your data

Current version

• On-device data (settings, playlists, favorites, downloads): delete items in the App, clear the App’s storage in Android Settings › Apps › [App] › Storage › Clear storage, or uninstall the App. Wallpapers you saved to your device gallery must be deleted separately.
• Advertising data: withdraw consent in the App’s privacy settings and reset or delete your Advertising ID in Android settings.
• Analytics and crash data: this data is deleted automatically after the retention periods in section 12. You can also ask us to delete it by email; see section 13 for the limits on identifying it.
• Emails: ask us by email to delete our correspondence with you, unless we must keep it for legal reasons.

Accounts Planned

When accounts become available, you will be able to delete your account and associated data directly in the App and by sending a request from a web page or by email, without having to reinstall the App, as required by Google Play. Deleting your account will delete or anonymise your profile, uploaded content and synchronised data within the periods listed in section 12, except data we must keep by law. Content others have already downloaded or copied cannot be recalled by us.

15. Children

The App is not directed at children under 13 and we do not knowingly collect personal data from children under 13 (or under the higher age of digital consent in your country, up to 16 in the EU). If you believe a child has provided us with personal data, please contact us and we will delete it.

Planned account, upload and purchase features will be available only to users who meet the minimum age set out in our Terms of Service, and minors will need the consent of a parent or legal guardian where the law requires it. Planned

16. Security

We use appropriate technical and organisational measures to protect personal data, including encryption of data in transit (HTTPS/TLS), access restricted to people who need it, reputable infrastructure providers, and protection against attacks and abuse through Cloudflare. For planned accounts, passwords will be stored only in hashed form and access to administrative tools will be protected.

No system is completely secure. Please keep your device and (in the future) your account credentials safe. If a personal data breach occurs that is likely to result in a high risk to you, we will inform you and the competent authority as required by law.

17. Information for specific regions

United States (California and other states with privacy laws)

In the last 12 months, the App has processed the following categories of personal information: identifiers (such as advertising IDs, app instance IDs and IP addresses), internet or network activity (App usage and ad interactions), approximate geolocation derived from IP address, and device information. We use them for the purposes in section 7. We do not sell personal information for money. However, allowing Google and its partners to use identifiers for personalised (cross-context behavioural) advertising may be considered a “sale” or “sharing” under some state laws. You can opt out through the consent or privacy options in the App (where shown), by opting out of ads personalisation or deleting your Advertising ID in Android settings, or by contacting us. You have the right to know, access, correct and delete your personal information, and not to be discriminated against for exercising your rights. You may use an authorised agent. We do not use or disclose sensitive personal information for purposes that would give rise to a right to limit.

United Kingdom and Switzerland

We process personal data in line with the UK GDPR, the UK Data Protection Act 2018 and the Swiss Federal Act on Data Protection. You have rights equivalent to those described in section 13 and may complain to the UK Information Commissioner’s Office or the Swiss Federal Data Protection and Information Commissioner.

Brazil and other countries

If you are in Brazil, you have the rights under Art. 18 of the LGPD, including confirmation of processing, access, correction, anonymisation, portability, deletion and information about sharing. Users in other countries may have similar rights under local law. We will honour requests as required by the law that applies to you.

18. Changes to this policy

We may update this policy when the App, our service providers or the law change, in particular before launching the planned features. The “Last updated” date at the top shows when the policy was last changed. If changes are significant, we will inform you in the App or by other appropriate means before they take effect and, where required, ask for your consent again.

19. Contact

We handle requests in English and Polish. Please include “Privacy request” in the subject line so we can handle your message faster.