Picture Recovery App Privacy Policy

Effective Date: September 25, 2025

Thank you for choosing to use the Picture Recovery App (hereinafter referred to as the "App").

By downloading, installing, or using this App, you acknowledge that you have carefully read, fully understood, and agree to the entire terms of this Privacy Policy. This Policy explains how we collect, use, store, and protect your personal information, and explains your rights with respect to this information. If you disagree with any of the terms in this Policy, please immediately cease using this App.

I. Why Do We Collect Information?

All information collected by this App is centered around the core goal of helping you recover lost photos, videos, and audio files. The following are the specific information collection scenarios and uses:

1. Necessary Information Collected for File Recovery

When you use the "File Recovery" core feature, we will need to obtain some storage-related information. All operations are performed locally on your device. This information is only used to locate recoverable file fragments on your device, determine file recoverability, and ensure the correct format of recovered files.

2. Device Information to Ensure App Operation

To address compatibility issues across different devices, we collect some basic device parameters. This data is only used for model adaptation and bug fixes, and unique device identifiers (such as IMEI and Android ID) are removed, making it impossible to link it to your personal identity.

3. Anonymous Behavior Data Collected to Improve the User Experience

To identify functional shortcomings in the app, we collect anonymized usage behavior data. All identifiers that could be associated with individuals are automatically removed before data collection, and this data is used only for feature optimization and feature prioritization.

4. Permission Usage History for Troubleshooting

When you enable or disable permissions required by this app, we record these changes to help you troubleshoot any issues. For example, if you report "no response after clicking Restore," we can use the permission history to determine if the issue is due to "Storage permission not being enabled." We can then guide you to enable it in "Device Settings - Apps - Permissions" to avoid repeated attempts.

II. What permissions does this app require?

This app only requests permissions necessary for file recovery, and no unnecessary permissions:

Storage permissions are used to read deleted file data from the device's storage for scanning purposes, and to write recovered files to the device's photo album or a designated folder for recovery purposes. If this permission is denied or disabled, the app will be unable to scan any files, and the recovery function will be completely unusable.

The foreground service permission (FOREGROUND_SERVICE_DATA_SYNC) is only available on Android 14 and above. It monitors changes to the device's file system in real time while the app is running in the background (for example, detecting accidental photo deletion) and immediately notifies you that the file can be recovered, preventing it from being overwritten and becoming unrecoverable. If this permission is denied or disabled, the real-time monitoring feature becomes ineffective, requiring you to manually click "Scan" to discover deleted files. Furthermore, on Android 14 and above, the app may experience compatibility issues such as "scanning lag" and "failure to automatically import recovered files into the photo album." Only basic scanning functionality will be available.

III. How is your information stored, secured, and retained?

We promise to store information only to the extent necessary to achieve legitimate purposes and implement multiple security measures to ensure information security. Specific rules are as follows:

1. Storage Method and Location

File recovery information (such as storage path and deletion timestamps) and permission usage records are stored only locally on your device, inaccessible to other applications, and never uploaded to our servers.

Anonymous behavioral data and basic device parameters related to advertising and data analytics are uploaded to partner third-party SDK servers (such as Firebase Analytics and Google AdMob) for ad optimization and data statistics. The specific storage location is determined by the third-party service provider and is anonymized.

2. Data Security Measures

We prioritize the security of your information and use industry-standard encryption protocols (such as SSL/TLS) to encrypt data during transmission to prevent unauthorized interception, tampering, or theft. We also maintain a strict data access permission system, authorizing only essential personnel to access specific data.

It is important to note that the internet environment and technology are inherently risky and are not absolutely secure. Therefore, when using this service, you fully understand and assume all risks. We and our third-party service providers are not responsible for security issues caused by factors beyond our reasonable control.

3. Data Retention Period

We and our third-party service providers strictly adhere to the "minimum necessary" and "minimum period" principles, retaining information only for as long as necessary to achieve the purpose.

IV. What are your privacy rights?

If the processing of your personal data is governed by the GDPR (e.g., if you are located in the EU), you have the following privacy rights, and we will fully cooperate with you in exercising these rights:

Right of Access: You have the right to request access to your personal data we have collected and obtain a complete copy of such data.

Right of Correction: If we discover that your personal information held by us is incomplete, inaccurate, or outdated, you have the right to request that we correct it. We will promptly update the data after verifying its authenticity.

Right to object to processing: You may exercise this right in two situations: if we process your personal data based on our legitimate interests and you have specific legitimate grounds for objecting; or if you object at any time to our use of your personal data for any marketing activities, without providing additional justification.

Right to erasure (also known as the "right to be forgotten"): You have the right to request that we erase all personal data relating to you if:

We or a third party no longer need the data for the purposes for which it was collected;

You withdraw your consent to the processing and there is no other lawful basis for the processing;

You exercise your right to object and there are no overriding legitimate interests to continue the processing;

The processing violates the GDPR or other relevant laws and regulations;

The data is required to be erased to comply with a legal obligation.

Right to data portability: You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service or data processor. This right applies only to two types of data: automated data that you have actively consented to, and data generated during the performance of a contract related to our services.

Right to Withdraw Consent: You may withdraw your prior consent for the processing of your personal data at any time. However, please note that, upon withdrawing your consent, features that relied on that consent may not function properly. Furthermore, such withdrawal does not affect the lawfulness of any data processing we performed based on your consent prior to your withdrawal.

Right to Complain: If you believe our processing of your personal data violates the GDPR, or if your rights described above have not been effectively addressed, you have the right to file a complaint with the official data protection authority (DPA) in your region.

You may submit a request to exercise your rights to us using the contact email address provided at the end of this policy.

To protect the security of your personal information and prevent others from impersonating you to claim rights, we may first require you to provide reasonable identity verification documents and process your request only after your identity has been verified. Upon receipt of your valid request, we will respond promptly in accordance with GDPR requirements and within a reasonable timeframe, and will inform you of the progress of the response if necessary.

V. Will your information be shared with third parties?

To ensure stable app operations, provide advertising services, and optimize the user experience, we may collaborate with third parties and share relevant data under strict compliance regulations. The details are as follows:

1. Advertising Partnership

We collaborate with advertising partners (such as Pangle, Google Admob, and Topon) and only provide them with de-identified information. You can opt out of interest-based targeted advertising at any time by following the steps below:

Select "Opt out of interest-based ads" or "Opt out of ads personalization" on Android devices.

Select "Limit Ad Tracking" on iOS devices.

You can also opt out of the collection of location information from your mobile device by changing your mobile device preferences.

2. Third-Party SDKs

This app integrates necessary third-party SDKs to enable basic functionality, data analysis, or advertising. The functions and data processing rules of these SDKs are as follows:

Firebase Analytics: Used for statistics and analysis of app usage. All data is anonymized and not linked to personally identifiable information. Its privacy policy link: https://firebase.google.com/support/privacy

Google Play Services: Provides basic app functionality and only processes the data necessary to implement functionality. Privacy Policy: https://policies.google.com/privacy?hl=en

Google Admob: Used to load and display ads, collect ad impression/click data to optimize ad performance. This data is de-identified. Privacy Policy: https://transparency.google/our-policies/product-terms/google-admob/

Pangle: Used to provide advertising resources, analyze user ad preferences to deliver personalized ads, and only processes anonymous behavioral data. Privacy Policy: https://www.pangleglobal.com/privacy

Topon: Used to aggregate ad resources, optimize ad loading efficiency, and collect ad-related device parameters. Privacy Policy: https://www.toponad.com/en/privacy-policy

Facebook SDK: Used for ad delivery and performance measurement in certain regions. Only anonymous device and ad data is processed. Privacy Policy link: https://www.facebook.com/about/privacy

3. Legal Circumstances

In addition to the aforementioned cooperation scenarios, we may share your information in accordance with the law and only in the following legal circumstances, strictly adhering to the principle of "minimum necessary":

Responding to requests from competent authorities: Providing information within the necessary scope as required by law, based on legally required documents from legally authorized authorities such as courts, procuratorates, and administrative law enforcement agencies.

Protecting Legal Rights and Interests: In emergencies such as fraud, security attacks, and infringement of user rights, we may share relevant information within a reasonable and necessary scope to protect the legal rights and interests of us, you, or third parties.

Sharing in Response to Business Changes: If we undergo a business change such as a merger, spin-off, acquisition, or asset transfer, we may transfer your information to the new entity. However, we will require the new entity to continue to fulfill its obligations under this Privacy Policy. If the scope of use of your information is expanded, we will obtain your prior consent.

VI. Are we responsible for links to third-party websites in the app?

This app may contain links to third-party websites, applications, and services. Special Notes:

Independence of Third-Party Platforms: These third-party platforms are managed and maintained by their independent operating entities and have no direct operational relationship with this application. We have no control over the frequency of content updates, privacy policy revisions, or data processing mechanisms of third-party platforms, and we assume no responsibility for their information security capabilities, the legality of their operations, or the effectiveness of their data protection measures.

User Responsibility: When clicking on and accessing third-party links, you are responsible for carefully observing and strictly abiding by the user agreement, privacy policy, and other terms and conditions of the third-party platform. To maximize the security of your personal information, we recommend that you carefully read and understand the privacy policy of any third-party platform before providing any personal information to it. You should be aware of the core information regarding the scope of data collection, purpose of use, sharing targets (if any), and protection measures, and exercise due care in deciding whether to provide such information.

Disclaimer of Disputes and Losses: Any disputes or damages arising from your use of third-party websites/services must be resolved between you and the third-party platform, and both parties shall bear the consequences. This app assumes no responsibility for compensation, mediation, or other related liability for such matters.

VII. How do we protect children's privacy?

This app does not target children under the age of 13. We strictly adhere to relevant regulations and explicitly prohibit the collection of personal information from minors under the age of 13.

If, due to special circumstances, personal information is accidentally collected, If we discover the personal information of children under the age of 13, or receive a notification from their legal guardian, we will promptly verify the situation and immediately delete the collected personal information to ensure that data processing complies with information protection requirements.

VIII. Will this Privacy Policy be updated?

This Privacy Policy may change due to the following reasons: updates to laws, regulations, and regulatory requirements, adjustments to app service features, technical architecture upgrades, and changes in business operational needs.

After policy changes are made, we will update this page with the latest version to ensure that it is readily available. The revised policy will take effect from the date of notification. Continued use of the app will be deemed your agreement to the updated policy; if you disagree, you may uninstall the app and discontinue use. To protect your privacy, we recommend that you regularly visit the Privacy Policy page to learn about the latest information handling practices.

IX. How to Contact Us?

If you have any questions about this policy or require assistance with matters related to the information of children under the age of 13, please contact us at [email protected]. We will promptly follow up and handle the matter appropriately.