Privacy Policy

Last updated: 8 November 2026

1. Who we are

DuoWallArt (the "app") is made by Nurihan KAVALCI, an independent developer ("we", "us"). We are responsible (the "controller") for the data described here. Contact: [email protected].

2. What we collect — anonymous statistics

Only while "Share anonymous stats" is turned on (see section 6), the app sends the following to our server:

• Random install ID — a random identifier (UUID) created on your device the first time you open the app. It is not derived from your device hardware, phone number or advertising ID, and you can replace it with a new one at any time (Settings → Reset anonymous ID).
• Usage events with the time they happened (listed below).
• Technical information — app version, platform (iOS or Android) and app language (for example en-US).
• Approximate country — our infrastructure provider Cloudflare derives a two-letter country code (for example US) from the network connection. We store only this country code. We do not read or store your IP address or your device's User-Agent in our database.

From these events our server also keeps one summary record per install ID: first and last day seen, the latest platform, app version, country and language, and whether Pro has been unlocked.

3. What we do not collect

• No account, name, email address, phone number or contacts.
• No advertising identifiers (IDFA, Google Advertising ID), no device fingerprinting, no tracking across other companies' apps or websites. The app contains no third-party analytics or advertising SDKs.
• No photos. Subject detection and photo fitting run entirely on your device. Your photos are never uploaded. The app only saves images to your Photos/gallery when you ask it to.
• No precise location. The app does not request location permission; the country code above is the only location-related data.
• No payment data or receipts. Purchases and subscriptions are handled by Apple or Google (section 8).

4. Content delivery

Whether or not statistics are on, the app downloads the wallpaper catalog and images from our server, which runs on Cloudflare. As with any internet connection, your IP address is processed by Cloudflare in transit to deliver the content and protect the service from abuse. We do not write it to our database.

5. Why we use the data and on what legal basis

We use the anonymous statistics to:

• learn which wallpaper pairs and collections are popular and decide what to create next;
• improve features such as photo fitting and the setup guide;
• see basic product health (active devices, app versions, platforms, countries) and keep the service running reliably and within its free infrastructure limits;
• count Pro unlocks.

We do not use the data for advertising or profiling, and we never sell it.

Legal basis. In the EU/EEA, the United Kingdom, Brazil and South Korea — and whenever your region cannot be determined — the app asks for your consent on first launch and records nothing until you choose "Allow" (GDPR / UK GDPR Art. 6(1)(a); LGPD Art. 7(I); PIPA Art. 15(1)(1)). You can withdraw consent at any time in Settings. In other regions statistics are on by default and rely on our legitimate interest in improving the app (or the equivalent basis under local law); you can turn them off at any time. Content delivery (section 4) is necessary to provide the app you requested.

South Korea and Japan. In South Korea, statistics are collected only after you consent on first launch (see above). We process only the pseudonymous data described above, for the purposes above. We do not provide it to third parties other than our processor Cloudflare, and you can stop the collection at any time in Settings.

6. Your choices and rights

• Settings → Share anonymous stats: turn it off and the app stops recording events; events not yet sent are deleted from your device.
• Settings → Reset anonymous ID: the app creates a new random ID and deletes unsent events of the old one. Data already on our server under the old ID can no longer be connected to your device.
• Uninstalling the app removes the install ID and all unsent events from your device.

Depending on where you live, you may have rights to access, correct or delete your data, to object to or restrict processing, to data portability and to withdraw consent, as well as the right to complain to a data protection authority (for example your local EU supervisory authority, the UK ICO, Brazil's ANPD, Korea's PIPC or Japan's PPC).

Because we hold no name, email or account and the app does not display the install ID, we usually cannot tell which records belong to you (GDPR Art. 11). The most effective controls are therefore the switches above. You can still contact us at [email protected] with any request, and we will help as far as we can identify the data.

7. How long we keep data

• Raw events: 90 days. Before deletion they are summarised into daily statistics without any install ID (for example "pair X was saved 12 times in Germany on day Y"). These aggregate statistics may be kept indefinitely because they no longer relate to any device.
• Summary record per install ID (section 2: the install ID, the latest country, language and app version, and whether Pro has been unlocked): deleted automatically 90 days after the last activity from that install ID, or earlier on request.
• On your device: the install ID and up to 500 unsent events, until they are sent, the ID is reset, statistics are turned off or the app is removed.

8. Who we share data with

• Cloudflare, Inc. hosts our server, database and image storage and processes data on our behalf as a service provider (processor). Cloudflare operates a global network, so data may be processed outside your country, including in the United States; Cloudflare's data processing terms include safeguards such as the EU Standard Contractual Clauses.
• Apple and Google process in-app purchases and subscriptions (DuoWallArt Pro) through the App Store and Google Play under their own privacy policies. We do not receive your payment details, name, store account or receipts, and we run no server-side receipt validation: the app checks your Pro status on your device with the store (StoreKit on iPhone), so information about your purchases and subscriptions stays on your device and with Apple or Google. The only purchase-related data we receive are the purchase / restore events in section 2, if statistics are on. You manage or cancel subscriptions in your App Store or Google Play account settings.
• If you have chosen to share diagnostics with Apple or Google in your device settings, they may give us aggregated crash reports. The app itself contains no crash-reporting SDK.
• We may disclose data if required by law. We do not sell or rent data to anyone.

9. Security

All connections to our server use HTTPS encryption. Access to the statistics is limited to the developer and protected by a secret token. We collect as little as possible in the first place.

10. Children

The app is rated 4+ and is suitable for all ages, but it is not directed at children. It has no accounts, chat or user-generated content, and we do not knowingly collect personal information from children beyond the anonymous statistics described above. Parents can turn statistics off in Settings.

11. This website: cookies and analytics

This section covers only this website, not the app. The website can use Google Analytics 4 (Google Ireland Ltd. / Google LLC) and Microsoft Clarity (Microsoft Corporation) to understand how visitors use it (pages viewed, clicks, scrolling, device and browser type, approximate location derived from the IP address). Clarity can also record anonymised session replays; text you type is masked.

• Only with your consent. Nothing is loaded from Google or Microsoft and no analytics cookies (for example _ga, _clck, _clsk) are set until you choose "Accept" in the cookie banner (GDPR Art. 6(1)(a), ePrivacy rules; in Türkiye KVKK Art. 5(1) explicit consent). Advertising signals stay off.
• Change your mind at any time with "Cookie preferences" at the bottom of every page. Your choice is stored in your browser (localStorage, key duowallart.consent).
• Google and Microsoft process the data as our processors and may transfer it to the United States (EU Standard Contractual Clauses / EU-U.S. Data Privacy Framework). Google Analytics keeps data for up to 14 months; Clarity for up to 13 months.

12. Changes to this policy

If we change how the app handles data, we will update this page and the date above. For significant changes we will also inform users in the app or in the release notes, and ask for consent again where the law requires it.

13. Contact

Nurihan KAVALCI — [email protected]

See also the Terms of Use.