Timestamp Camera Privacy Policy

This Privacy Policy explains how Xeplin Yazılım Hizmetleri Anonim Şirketi (“Xeplin,” “we,” “our,” or “us”) collects, uses, and shares information when you use our mobile application “Timestamp Camera: Work Proof” for iPhone and Android (the “App”). Where the App works differently on iPhone (iOS) and on Android, this Policy says so. This Policy is part of, and incorporated into, our Terms of Use & End-User License Agreement.

1. Data Controller

• Legal name: Xeplin Yazılım Hizmetleri Anonim Şirketi
• Address: Fulya Mah. Büyükdere Cad. Torun Center D Blok No: 74D, İç Kapı No: 43, 34394 Şişli/İstanbul, Türkiye
• Trade Registry No: 1058219 · MERSIS No: 0839126685400001
• Contact: [email protected]

2. Information We Do Not Collect

• No account, no profile. The App does not require you to register or sign in, and the App does not ask for your email address, phone number, or other contact information. Names you type into the App (such as project names, notes, or a company name on your stamp) are stored on your device and are not sent to us.
• Your photos and locations stay on your device. Photos and videos you take, the date, time, address, coordinates and map stamped on them, your projects, notes, logo, and the PDF reports and exports you create are stored locally on your iPhone or Android device (on Android, in the App’s private storage). We do not operate user accounts and do not receive or keep a copy of this content. When you choose to share or export a photo, video, report, or ZIP file, it goes only where you send it (for example, Mail, Messages, Files, or your Photos library on iPhone, or the app you choose in the Android share sheet). On Android, if you choose to save photos or videos to your gallery, a copy is placed in your device gallery (in the “Timestamp Camera” folder under Pictures or Movies).
• Location. Your precise location is used on your device to stamp coordinates, accuracy, and a street address onto your photos and videos, and to draw the small map on the stamp. To turn coordinates into a street address and to draw the map, iOS sends the location to Apple’s mapping services (Apple Maps), under Apple’s privacy policy. On Android, your location is provided by your device’s location services (Google Play services); to look up the street address, the coordinates are sent to your device’s geocoder service (provided by Google Play services), under Google’s privacy policy; and the small map is loaded from OpenFreeMap map tile servers, which receive the requested map area (map data © OpenStreetMap contributors). We do not receive, store, or log your location, and it is not sent to our analytics or subscription providers.
• No advertising identifier, no cross-app tracking. The App does not show third-party ads, does not request Apple’s App Tracking Transparency permission, and does not collect the Identifier for Advertisers (IDFA) on iPhone or the Android advertising ID on Android.
• No payment information. All purchases and subscriptions are processed by Apple through the App Store on iPhone, and by Google through Google Play Billing on Android. We do not receive your payment card or bank account details.

3. Information We Collect

To operate the App, prevent abuse, measure performance, and improve our Services, we and our third-party service providers collect the following limited categories of information:

3.1 Device and Technical Information

Operating system and version (iOS or Android); device model; language and locale settings; time zone; App version and build; and general technical information necessary for the App to function properly.

3.2 Identifiers

A random, anonymous identifier that the App generates for your installation, the Identifier for Vendors (IDFV) provided by iOS on iPhone, and, on Android, the app instance identifier generated by Firebase for your installation. These identifiers do not contain your name, email address, or phone number, and they are not used to track you across other companies’ apps or websites.

3.3 Usage and Analytics Data

Information about how you interact with the App, such as features used, screens viewed, in-app events (for example, taking a photo, creating a project, or creating a report, recorded without the photo, its location, or its address), preferences you select in the App (such as what you will use the App for), session duration, frequency of use, paywall views, and similar product-analytics events. This data is associated with the anonymous identifier described above, not with your name or contact details.

3.4 Diagnostic and Crash Data

If the App crashes or encounters an error, we collect crash reports, error logs, stack traces, device state at the time of the crash, and performance metrics. This information helps us diagnose and fix problems and improve stability.

3.5 Subscription and Purchase Events

When you start a trial, subscribe, renew, cancel, or have a subscription expire, we and our subscription-management provider receive event-level information from Apple on iPhone or from Google Play on Android (such as the product purchased, transaction identifier, currency, country, trial start and end events, renewal and cancellation events). We do not receive your payment card details.

3.6 Network Time Check

To confirm that the time stamped on a photo is accurate even if the phone clock was changed, the App reads the current time from our server (cdn.xeplin.ai, hosted by Cloudflare). This request contains no location, photo, account, or identifier; like any web request it involves your IP address and basic request data, which we do not use to identify you.

3.7 IP Address

Our service providers may automatically collect your IP address when the App communicates with their servers, for security, fraud prevention, and approximate-region inference (country/region level).

3.8 Information You Send Us

If you contact us (for example, by email), we receive the information you choose to provide, such as your email address, your name, and the content of your message. We use it to respond to you and to keep a record of our correspondence.

3.9 Advertising Attribution (Apple Ads)

We may promote the App through Apple Ads. If you install the App after interacting with an Apple Ads advertisement, we and our subscription-management provider may receive campaign attribution information from Apple (such as the campaign or keyword associated with the install) through Apple’s AdServices framework. This information does not include the IDFA and is not used to track you across other companies’ apps or websites. Apple Ads attribution applies to the iPhone version of the App only.

4. Permissions We Request

The App asks for the following permissions on iPhone and Android. You can use the App without location or microphone access.

If you add a logo to your stamp, the system photo picker (on iPhone and Android) gives the App only the image you select, and that image stays on your device. On Android, the App does not request access to your photos or files: saving to the gallery adds a copy through the system media store and does not let the App read your gallery. You can change these permissions at any time in iOS Settings on iPhone, or in Android Settings under Apps > Timestamp Camera > Permissions on Android.

5. How We Use Information

We use the information we collect for the following purposes:

• to provide, operate, maintain, and secure the App;
• to process and manage subscriptions, trials, renewals, and entitlements;
• to diagnose and fix bugs, crashes, and performance issues;
• to understand how the App is used and to improve features, design, and user experience;
• to check the time used on your stamps against network time;
• to measure the performance of our own advertising (such as Apple Ads campaigns);
• to comply with legal obligations, enforce our Terms, and protect our rights and the rights of others.

6. Third-Party Service Providers (SDKs)

We rely on the following third-party service providers, who act as our processors or as independent controllers for the limited purposes described. These providers may collect information automatically through their software development kits (SDKs) integrated in the App. Their use of information is governed by their own privacy policies.

From time to time, we may add additional service providers (for example, additional analytics, advertising, or attribution tools such as Mixpanel) to support our business operations. We will update this Policy and the list above when we do so. Where required by law, we will obtain your consent before integrating new tracking technologies.

7. Sharing and Disclosure

We do not sell your personal information. We share information only:

• With service providers listed in Section 6, who process information on our behalf or as independent controllers for the limited purposes described;
• With our affiliates, meaning companies under common ownership or control with Xeplin, for the purposes described in this Policy;
• With Apple and Google, in connection with App distribution and in-app purchases on iPhone (Apple) and Android (Google);
• To comply with law, when required by applicable law, court order, or governmental request, or to protect the rights, property, or safety of Xeplin, our users, or others;
• In connection with a corporate transaction, such as a merger, acquisition, financing, reorganization, or sale of assets, in which case information may be transferred to the successor entity, subject to commitments consistent with this Policy.

Refunds and fraud prevention. On iPhone, if a refund request is submitted for an in-app purchase, we may share limited purchase-related information with Apple to help prevent fraud and support refund decision processes. This information may include anonymized account identifiers, app usage activity, subscription status, trial usage, purchase consumption status, total spend amount, and refund history. On Android, refunds are handled by Google Play under its own policies.

We may use and share aggregated or de-identified information that cannot reasonably be used to identify you for any lawful purpose and without restriction.

8. International Data Transfers

Xeplin is based in the Republic of Türkiye. Some of our service providers are located outside Türkiye and outside the European Economic Area (EEA), including in the United States. Where personal data is transferred internationally, we rely on appropriate legal mechanisms, including, where applicable, Standard Contractual Clauses approved by the European Commission, adequacy decisions, and equivalent safeguards under Turkish Personal Data Protection Law No. 6698 (“KVKK”). By using the App, you understand that your information may be processed in countries whose data-protection laws may differ from those in your country of residence.

9. Data Retention

We retain information only for as long as reasonably necessary to fulfill the purposes described in this Policy, to operate and secure the App, to comply with our legal, tax, and accounting obligations, to resolve disputes, and to enforce our agreements. Retention periods depend on the type of information and on the settings and practices of our service providers. When information is no longer needed, it is deleted or anonymized.

Deleting your data. Photos, videos, projects and reports are stored only on your device; you can delete them in the App, and uninstalling the App removes the data stored in the App (copies you saved to your photo library or gallery, or shared with others, remain until you delete them there). To request deletion of analytics, crash, or purchase-related data associated with your installation, email us at [email protected].

10. Security

We use commercially reasonable technical and organizational measures designed to protect the limited information we collect against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), restricted access to data, and routine security reviews. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your device secure (for example, by using a strong device passcode and keeping your device’s operating system up to date).

11. Your Rights

11.1 Rights Under GDPR (EEA, UK and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights, subject to applicable conditions and exceptions: the right to access your personal data; the right to rectify inaccurate data; the right to erasure (“right to be forgotten”); the right to restrict or object to processing; the right to data portability; the right to withdraw consent at any time (where processing is based on consent); and the right to lodge a complaint with your local supervisory authority.

The legal bases on which we rely are: (a) legitimate interests for operating, securing, and improving the App, for analytics, advertising measurement, and fraud prevention; (b) performance of a contract for processing subscriptions and entitlements; (c) consent for access to your camera, microphone, and location, which you give through the permission prompts on your iPhone or Android device; and (d) legal obligation where we are required to retain certain information.

11.2 Rights Under CCPA/CPRA (California)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of “sale” or “sharing” of personal information as defined by California law. We do not sell or share personal information as those terms are defined under California law. We do not knowingly collect the personal information of minors under 16 without legally required consent. You may exercise your rights by contacting us at [email protected]. We will not discriminate against you for exercising these rights.

11.3 Other U.S. States

Residents of certain other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) may have the right to confirm whether we process their personal data, to access, correct, or delete it, to obtain a portable copy, and to opt out of targeted advertising, the sale of personal data, and certain profiling. We do not sell personal data and we do not use it for targeted advertising. To exercise these rights, or to appeal a decision we have made about your request, contact us at [email protected]. The scope of these rights varies by state and is subject to exceptions.

11.4 Rights Under KVKK (Türkiye)

If you are located in Türkiye, you have the rights provided under the Personal Data Protection Law No. 6698 (KVKK), including the right to learn whether your personal data is processed, to request information about processing, to request correction or deletion, and to lodge a complaint with the Personal Data Protection Authority (KVKK).

11.5 Exercising Your Rights

To exercise any of the above rights, please contact us at [email protected]. We will respond within the timeframes required by applicable law. Because the App does not require an account, identifying the data associated with you may require additional information (such as the anonymous identifier assigned to your installation of the App). If we cannot verify your identity or locate the data, we may not be able to fulfill your request.

12. Children’s Privacy

The App is not directed to children under 13 years of age (or the equivalent minimum age in the relevant jurisdiction, such as 16 in some EEA countries). We do not knowingly collect personal information from children under that age. If you are a parent or legal guardian and believe that your child has provided us with information without your consent, please contact us at [email protected], and we will take reasonable steps to delete such information.

13. Do Not Track

The App does not respond to browser-based “Do Not Track” signals because such signals are not standardized for mobile applications. The App does not track you across apps or websites owned by other companies and does not request permission to do so.

14. Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated Policy at xeplin.ai/apps/timestamp-camera/privacy-policy and updating the “Effective date” above, and, where appropriate, by in-app notice. Your continued use of the App after the effective date of the revised Policy constitutes your acceptance of the changes.

15. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

• Email: [email protected]
• Postal address: Xeplin Yazılım Hizmetleri Anonim Şirketi, Fulya Mah. Büyükdere Cad. Torun Center D Blok No: 74D, İç Kapı No: 43, 34394 Şişli/İstanbul, Türkiye