Privacy Policy

This policy explains what Layer (the Android app studio.collage.collageapp, “the app”) does with your information. The app is published by IS Dev(“we”, “us”), who is the controller of the data described here.

The short version

• Your photos never leave your device. Pictures you add to a collage are read, edited and exported entirely on your phone. We have no server that receives them, and we cannot see them.
• There is no account. No sign-up, no login, no name, no email address, no phone number.
• No ads and no analytics or tracking SDKs. The app does not use the Android advertising ID and does not profile you.

What the app processes

Photos and images you choose

You pick images through the Android system photo picker, which hands the app only the files you selected. Editing, layout and export all happen on the device. Finished collages are saved to your gallery or passed to the app you choose in the share sheet. None of this is uploaded to us.

Templates and artwork the app downloads

The app fetches its template, frame and sticker catalog from our server over HTTPS. These are ordinary web requests, so our hosting provider records the usual server log data — IP address, timestamp, requested path, user agent — which is used to operate and secure the service and is not linked to any identity. Downloaded catalog data is cached on your device so the app works offline.

Purchases (Layer Pro)

Subscriptions are sold and charged by Google Play. We never see your card, billing address or Google account. To know whether your subscription is active, the app uses RevenueCat as its subscription infrastructure. RevenueCat receives a randomly generated anonymous user ID, the Google Play purchase receipt and basic device and country information. That anonymous ID is what unlocks Pro features; it is not tied to your name or email.

Fonts

Text styles use typefaces downloaded at runtime from Google Fonts. As with any web request, Google receives your IP address when a font is fetched. See the Google Privacy Policy.

Data stored on your device

Your projects, exported images and the cached catalog are stored in the app’s own storage on your phone. Uninstalling the app deletes all of it. You can also clear it at any time from Android’s Settings → Apps → Layer → Storage.

Who we share data with

We do not sell personal data and we do not share it for advertising. The only third parties involved are the service providers the app depends on:

• Google Play — billing, subscription management and app distribution.
• RevenueCat — subscription status, as described above.
• Vercel and Neon — hosting and database for the template catalog and its server logs.
• Google Fonts — font delivery.

These providers may process data outside your country. We may also disclose information where required by law.

Your rights

Depending on where you live, data protection law (such as the LGPD in Brazil or the GDPR in the EU/UK) gives you the right to access, correct, delete or restrict the processing of your personal data, and to lodge a complaint with a supervisory authority.

Because the app has no account, we hold nothing that identifies you except the anonymous purchase record described above. To exercise any right, or to request deletion of that record, write to devforge4@gmail.com — note that deleting the purchase record may end your access to Pro features, and that Google Play keeps its own transaction records independently. Deleting the app removes everything held on your device.

Children

The app is not directed to children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect their personal data.

Security

All network traffic uses HTTPS. Since your photos and projects stay on your device, their security also depends on your device’s own lock screen and encryption.

Changes

We may update this policy; the effective date above always reflects the current version, and material changes will be announced in the app or on this page.

Contact

IS Dev — devforge4@gmail.com. This is the address for any privacy request, including access and deletion.