Privacy Policy — Archivr

Last updated: 2026-05-06 · Effective date: 2026-05-06

1. Who we are

Archivr is a mobile app for packing, unpacking, and password-protecting archives (ZIP, 7z, TAR, TAR.GZ, RAR-read). Privacy is fundamental: the app runs locally on your device, your files never leave your phone for our servers, and archive passwords are never stored anywhere — they exist in memory only during the active operation.

Data controller: Maciej Siemiński — the developer of Archivr. Contact: mail@macsiem.dev

For the version of the app distributed via Google Play, the data controller is LICENCEPRO POLSKA Sp. z o.o., ul. Huculska 6, 00-730 Warszawa, Polska.

This Privacy Policy explains what personal data Archivr processes, how, why, and what rights you have.

2. Plain-language summary

Archivr runs entirely on your device — your files and archive passwords never leave your phone. We integrate Google AdMob for ads, Sentry for crash reporting, and Apple / Google billing for in-app purchases. Archive passwords are never stored anywhere — they exist in memory only during the active operation. You have full GDPR rights including access, deletion, and portability.

3. Data we process

3.1 Local-only data

The app stores locally on your device:

• user preferences (theme, language, default formats),
• onboarding completion flag,
• a short history of recent operations (up to 50 entries) as metadata: archive file name, format, size, operation date, whether the operation used a password (yes/no). The history contains no passwords and no file content. You can erase a single history entry or the entire history at any time in Settings.

These data are stored entirely on your device and are never transmitted to our servers.

3.3 Diagnostic data (Sentry)

Archivr integrates Sentry (sentry.io) for crash and error reporting. Sentry collects:

• error stack traces (crash logs),
• device info (model, OS version, locale),
• app version and build number.

Sentry does not collect your content (entries, files, vaccination records, photos, archives), usernames, or other PII. Diagnostic data is retained by Sentry for up to 90 days.

3.4 Advertising (AdMob)

Archivr shows non-invasive ads on Home, Result and Settings (banner) plus interstitial after pack/unpack operations. Ads are delivered by Google AdMob, whose SDK collects:

• the Advertising ID (Android Advertising ID / Apple IDFA), shared with Google to serve ads;
• diagnostic data (device model, country-level location, language).

Default mode is non-personalized ads. On iOS, the App Tracking Transparency (ATT) prompt asks for your consent before any tracking-grade identifier is used; on Android you control the Advertising ID under system Settings. Ads can be permanently disabled via the Lifetime / Premium IAP.

3.5 In-app purchases (IAP)

Archivr offers paid features through Apple In-App Purchase (iOS) and Google Play Billing (Android). When you make a purchase:

• Apple / Google process all card and account data — we never see your card number, billing address, or full account information;
• Apple / Google return a purchase token / transaction receipt that Archivr stores locally to validate entitlement;
• restore purchases re-fetches your existing entitlements from Apple / Google.

Available products: lifetime unlock, premium annual subscription, optional tip jar.

3.6 Device permissions

• Files (READ_EXTERNAL_STORAGE / iOS Files): pick documents/archives (only when you choose a file).
• Photos / Media (READ_MEDIA_IMAGES / PHPhotoLibrary): add or process images from the gallery (optional unless required for app's core function).
• Notifications (POST_NOTIFICATIONS / UNUserNotificationCenter): reminders and operation status (optional).
• Vibrate (VIBRATE): haptic UI feedback (optional).

Each permission is requested contextually. You can deny any permission and still use the core features (where applicable).

3.7 What we do NOT collect

• Your name, email, phone number, address (no account is required).
• Contacts list, calendar, SMS, call logs.
• Precise location.
• Browsing history outside the app.
• Biometric data (Face ID / Touch ID is used only as a system-level lock and never leaves your device).
• Health, financial, or payment card data.

4. Why we process this data (purposes)

• Run the app on your device — local storage and (where present) encryption let your data persist between sessions.
• Improve stability — Sentry diagnostics help fix crashes that affect your usage.
• Sustain the free tier — AdMob delivers non-invasive ads to fund users who do not buy premium.
• Process purchases — Apple / Google billing fulfils premium entitlements you choose to buy.

5. Legal basis (GDPR Article 6)

For users in the European Economic Area, United Kingdom, and Switzerland:

• Performance of a contract (Art. 6(1)(b)) — running the app, processing your purchases.
• Legitimate interest (Art. 6(1)(f)) — Sentry diagnostics, fraud / abuse prevention, non-personalized advertising. Our interest is improving stability and sustaining the free tier; this does not override your fundamental rights.
• Consent (Art. 6(1)(a)) — personalized advertising, where you grant consent via the ATT prompt (iOS) or in-app preference. You may withdraw consent at any time without affecting prior processing.
• Legal obligation (Art. 6(1)(c)) — only when we must respond to a lawful request from authorities.

6. Recipients (with whom we share data)

We do not sell personal data. The categories of recipients are limited to providers strictly required to run the app:

Recipient	Purpose	Data category	Privacy policy
Google LLC (AdMob)	Serve ads	Advertising ID, device & ad metrics	https://policies.google.com/privacy
Functional Software Inc. (Sentry)	Crash reporting	Stack traces, device metadata	https://sentry.io/privacy/
Apple Inc. (App Store / IAP)	In-app purchase processing on iOS	Purchase token, account-level entitlement	https://www.apple.com/legal/privacy/
Google LLC (Play Billing)	In-app purchase processing on Android	Purchase token, account-level entitlement	https://policies.google.com/privacy

We may disclose data if required by a valid court order or other binding legal process, after verifying the request and notifying you where lawful.

7. International transfers

Some of the recipients above are located outside the European Economic Area (mainly in the United States). Where transfers occur, they are protected by:

• the European Commission's adequacy decision (EU-US Data Privacy Framework) for providers certified under the Framework, including Google LLC;
• Standard Contractual Clauses (SCCs) as adopted by the European Commission, supplemented by additional safeguards where applicable;
• the recipients' own published transfer mechanisms (e.g. Apple's binding corporate privacy commitments).

You can request a copy of the relevant safeguards by writing to mail@macsiem.dev.

8. Retention

Data	Where it lives	How long
Your in-app data	Your device only	Until you delete it, uninstall the app, or wipe app data
Advertising ID	Google AdMob systems	Per Google's retention policy (typically up to 14 months for ad metrics)
Sentry crash data	Sentry systems	Up to 90 days from the event
IAP purchase token / receipt	Your device + Apple / Google	Until you uninstall; Apple / Google keep transaction records per their own policies

9. Your rights (GDPR Art. 15–22)

You have the following rights regarding your personal data:

• Right of access (Art. 15) — confirmation whether we process your data and a copy of it. Most of your data is already on your device; export from the app or write to us for the rest.
• Right to rectification (Art. 16) — correct inaccurate data. Edit data directly in the app.
• Right to erasure / "right to be forgotten" (Art. 17) — delete all data via Settings → "Erase all data", or by uninstalling the app.
• Right to restrict processing (Art. 18) — request a temporary halt; write to us.
• Right to data portability (Art. 20) — Settings → "Export data" produces a JSON / Markdown bundle.
• Right to object (Art. 21) — object to processing based on legitimate interest, especially profiling-style ads. Disable personalized ads in app settings or via system controls.
• Right not to be subject to automated decisions (Art. 22) — Archivr does not make automated decisions with legal or similarly significant effect about you.

To exercise any right, write to mail@macsiem.dev. We respond within 30 days (extendable by 60 days for complex requests, with notice).

10. Right to lodge a complaint (GDPR Art. 77)

If you believe we are processing your data unlawfully, you may file a complaint with a supervisory authority. For Polish residents:

Prezes Urzędu Ochrony Danych Osobowych (PUODO) ul. Stawki 2, 00-193 Warszawa, Poland https://uodo.gov.pl

You may also file a complaint with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement in another EEA country.

11. Children's privacy

Archivr is not directed at children under 13 (under 16 where applicable per local law). We do not knowingly collect personal data from children under that age. If you believe a child has provided us personal data without parental consent, contact us at mail@macsiem.dev and we will delete it promptly.

The "Designed for Families" / "Ages 5+" Apple / Google flags are not set on Archivr — the app is rated for general audiences 13+.

12. Security

• Local-only operations — pack, unpack, add password, and remove password operations execute entirely in device memory.
• Passwords never persisted — archive passwords are kept in memory only for the duration of the active operation and are cleared immediately afterwards. They are never written to SecureStore, MMKV, history, or any log.
• Transport security — all network calls (ads, IAP, optional Sentry diagnostics) use HTTPS / TLS 1.2+.
• Minimization — we collect only what is required for the listed purposes.

No system is 100% secure; please keep your device updated and use strong device locks.

13. App Tracking Transparency (iOS) and Advertising ID

On iOS, before any tracking-grade identifier is used by AdMob, Archivr shows the system App Tracking Transparency prompt. If you decline, Archivr serves only non-personalized ads.

On Android, you can reset or limit your Advertising ID under Settings → Google → Ads. Choosing "Delete advertising ID" stops AdMob from using a personal identifier; non-personalized ads continue to be shown.

14. In-app purchases

Archivr offers the following in-app products through Apple App Store and Google Play: lifetime unlock, premium annual subscription, optional tip jar.

All payment data is handled by Apple Inc. (App Store / iTunes account) or Google LLC (Play Billing). We never see your card number, your billing address, or your full Apple ID / Google account. Apple and Google return only an opaque purchase token and entitlement metadata that we use to unlock features. Subscriptions can be cancelled at any time in iOS Settings → Apple ID → Subscriptions or in the Google Play app → Subscriptions; cancellation rules are governed by Apple / Google.

15. Changes to this policy

We may update this policy as the app, third-party SDKs, or applicable law change. Material changes will be announced in-app and the "Last updated" date at the top will change. Continuing to use Archivr after a change constitutes acceptance of the updated policy.

16. Contact

For privacy questions, exercise of rights, or concerns about this policy:

Maciej Siemiński Email: mail@macsiem.dev

Canonical version of this policy: https://macsiem.github.io/archivr-privacy/ Source: https://github.com/MacSiem/archivr-privacy