Regional Privacy Rights
Version 1.0 · Effective 26 July 2026 · Supplements the privacy policy of each Crocodata app and website
Your privacy rights depend on where you live. This page maps them country by country — and we honour the core ones for everybody, everywhere.
Crocodata sp. z o.o. publishes apps worldwide. Our core privacy commitments are the same everywhere — we do not sell personal data for money, we do not use your content to train AI models, and on-device apps keep your data on your device. What changes from country to country is the name of the rights you hold and how you exercise them. This page sets that out.
Read this together with the policy for the product you use: website · FotoPost · Askra · CleanFotos · AppSwipe.
Whatever your country, you can make a request at privacy@crocodata.net. We honour verified access, correction, deletion and opt-out requests from anyone, anywhere, whether or not local law obliges us to.
Universal rights we grant everyone
- Know what we hold about you and why.
- Get a copy of it in a portable format.
- Correct it if it is wrong.
- Delete it — in-app where the app has an account, otherwise by uninstalling or by writing to us.
- Opt out of personalised advertising and withdraw any consent you gave.
- Not be discriminated against for exercising any of these rights. Our apps work the same whether or not you exercise them.
Response times: we aim for 30 days everywhere, and meet shorter statutory deadlines where they apply. We may need to verify your identity, usually by asking you to write from the email or account associated with the data.
United States
California — CCPA as amended by CPRA
If you are a California resident, you have the right to know, delete, correct, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and to limit the use of sensitive personal information.
Do we "sell" or "share" personal information? We never sell personal information for money. However, our free, ad-supported apps (CleanFotos, AppSwipe, and the free tier of Askra) pass advertising identifiers and ad-interaction data to Google AdMob so that ads can be shown. Under California law, sharing identifiers for cross-context behavioural advertising counts as a "sale" or "share" even though no money changes hands. We disclose this rather than rely on a technicality.
How to opt out — Do Not Sell or Share My Personal Information:
- In the app: Settings → Privacy options (or Ad settings) — decline personalised ads. Ads continue but are contextual only.
- On iOS: decline the App Tracking Transparency prompt, or turn off Settings → Privacy & Security → Tracking → Allow Apps to Request to Track.
- On Android: Settings → Google → Ads → Delete advertising ID.
- By email: privacy@crocodata.net with the subject "Do Not Sell or Share".
- Global Privacy Control (GPC): we treat a GPC signal received on crocodata.net as a valid opt-out request.
Categories collected in the last 12 months (see each app's policy for detail): identifiers (advertising IDs, anonymous account IDs); commercial information (purchase and subscription status); internet or network activity (ad interactions, crash and security telemetry); geolocation only in the coarse sense of a delivery address you type or a birth city you choose; and, for Askra, user content you type. We do not collect biometric information, precise geolocation, or government identifiers.
Sensitive personal information: we do not use or disclose sensitive personal information for purposes that would require offering a "Limit the Use" right. Askra birth data is used only to compute your chart.
Retention: as stated in each app policy. Authorised agents may submit requests with written proof of authority. We do not knowingly sell or share the personal information of consumers under 16.
Other US states
Comprehensive state privacy laws are in force in a growing list of states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island. Residents of these states generally have the right to confirm and access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and certain profiling — plus a right to appeal a refused request.
We apply the same process to every state: use the opt-out routes above or email privacy@crocodata.net. We recognise universal opt-out mechanisms such as Global Privacy Control. Appeals: if we decline a request, reply to our decision within 60 days and a different reviewer will reconsider it and respond in writing; if the appeal is denied you may contact your State Attorney General.
Children — COPPA
Our apps are not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has provided personal information, contact privacy@crocodata.net and we will delete it.
United Kingdom
The UK GDPR and the Data Protection Act 2018 give you the same rights listed above. The supervisory authority is the Information Commissioner's Office (ICO), ico.org.uk, and you may complain to it at any time.
Where a service of ours is likely to be accessed by under-18s, we apply the ICO's Age Appropriate Design Code: high-privacy defaults, no personalised advertising to users we believe may be children, and no nudges toward weaker privacy settings.
We are established in the EU and offer services to UK users. Where Art. 27 UK GDPR requires a UK representative, we will appoint one and publish the details here.
Switzerland
The revised Federal Act on Data Protection (revFADP/nFADP) gives you rights of access, correction, deletion and objection, and the right to complain to the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch. Transfers to the United States rely on Standard Contractual Clauses and, where the provider is certified, the Swiss–US Data Privacy Framework.
Where Art. 14 revFADP requires a Swiss representative for our processing of Swiss residents' data, we will appoint one and publish the details here.
Brazil
Under the LGPD (Lei 13.709/2018) you may confirm processing, access, correct, anonymise, block or delete data, request portability, learn with whom we share data, and withdraw consent. The authority is the ANPD, gov.br/anpd. Requests: privacy@crocodata.net, which also serves as our data-protection contact (encarregado) for Brazilian users.
Canada
Under PIPEDA you may access and correct your personal information and complain to the Office of the Privacy Commissioner of Canada. Residents of Quebec have additional rights under Law 25, including data portability, the right to be informed about automated decision-making, and the right to request de-indexing. Askra's "verdict" is entertainment content and is not an automated decision producing legal or similarly significant effects.
Australia and New Zealand
Under the Privacy Act 1988 and the Australian Privacy Principles you may request access to and correction of your personal information, and complain to the OAIC. New Zealand residents have equivalent rights under the Privacy Act 2020 and may complain to the Office of the Privacy Commissioner.
Japan and South Korea
Japan (APPI): you may request disclosure, correction, suspension of use and deletion of your personal data, and complain to the Personal Information Protection Commission.
South Korea (PIPA): you may access, correct, delete and suspend processing of your personal information, and withdraw consent at any time. Consent to marketing and to overseas transfer is sought separately in-app where PIPA requires it. Complaints: Personal Information Protection Commission and the Korea Internet & Security Agency (KISA).
India
Under the Digital Personal Data Protection Act 2023 you have the right to access a summary of your data and our processing, to correction and erasure, to grievance redressal, and to nominate another person to exercise your rights. We process children's data only with verifiable parental consent where the Act requires it, and we do not run behavioural advertising directed at children. Grievance officer contact: privacy@crocodata.net.
Other regions
| Region | Framework | Authority |
|---|---|---|
| Turkey | KVKK (Law 6698) | KVKK Authority |
| South Africa | POPIA | Information Regulator |
| Saudi Arabia | PDPL | SDAIA |
| United Arab Emirates | Federal Decree-Law 45/2021 | UAE Data Office |
| Nigeria | NDPA 2023 | NDPC |
| Mainland China | PIPL — we do not currently distribute our apps in mainland China | CAC |
If your country is not listed, write to us anyway. We will apply the universal rights at the top of this page.
Complaints
If you are unhappy with how we handled a request, tell us first at privacy@crocodata.net. You always keep the right to complain to your own data-protection authority, and to the Polish authority UODO (uodo.gov.pl) as our home regulator.
© 2026 Crocodata sp. z o.o. · Spółka z ograniczoną odpowiedzialnością · KRS 0001241145 · NIP 7582407044