Scope and contact
This policy applies to MeasureProof for Android, package com.batuhantomo.measureproof, operated by REKL0W LTD. The existing iOS and iPadOS policy is separate. For privacy questions and applicable access, correction or deletion requests, use MeasureProof Android Support.
Your projects stay on your device
Project names, client text, notes, managed photos, thumbnails, manual measurements, annotations, issues and generated reports stay in private local files and the database. We do not send this content to a MeasureProof server, Google advertising services or RevenueCat. No app account, cloud synchronization, remote AI analysis or developer product-analytics service is included.
Android automatic backup is disabled for managed storage. A deliberate share, export or portable backup sends a copy only to your chosen destination, whose terms and retention then apply. Keep independent backups of important work.
Camera, import and export
Camera permission is contextual: it is requested when you choose capture. Import uses Android's system picker and copies only selected photos into an oriented working asset and thumbnail; the app does not scan the entire photo library. Microphone/audio recording and broad media-library permissions are not used.
PDFs are rendered on your device. Sharing sends the selected file only to the app or service you choose. Deleting a managed copy does not remove the original or an exported copy.
Purchases and RevenueCat
Google Play processes checkout and payment credentials. MeasureProof does not receive full card or bank details. RevenueCat processes an automatically generated app-user identifier, purchase history, product and transaction identifiers, entitlement/subscription state and necessary app/device information to validate purchases, restore access and maintain Pro. Purchase information also supports service reporting and analytics.
We do not provide name/email customer attributes or collect advertising identifiers for RevenueCat attribution. Project text, photos, annotations and reports are not sent to RevenueCat. An anonymous app-user ID does not promise that providers can never associate purchase records with other information.
Active paid Pro removes advertising. Monthly and annual subscriptions renew through Google Play unless canceled. Lifetime is a separate non-renewing purchase. Purchases do not automatically transfer between Apple and Google stores.
Advertising and regional consent
Eligible free users may see one AdMob interstitial only after a changed annotation session or saved issue. At least five minutes must pass before the first opportunity and between later attempts. There are no banner, rewarded, native or app-open ads. An unavailable ad never blocks core features. Initialization/preloading is suppressed for confirmed Pro users and while entitlement is unresolved.
Where applicable, Google User Messaging Platform obtains regional choices before ads can be requested, including in the EEA, United Kingdom and Switzerland. Personalized advertising is eligible only when those choices allow it. Refusal, partial consent, uncertain state or form errors fall back to explicitly non-personalized, limited, technical or no-ad delivery as Google permits. Refusing does not remove core access. Android does not use Apple's ATT permission.
Google Mobile Ads and UMP may process IP addresses (which may indicate approximate location), advertising/device/app-set identifiers, ad and product interactions, crash/performance diagnostics and consent information for delivery, measurement, frequency limits, fraud prevention and service operation. Non-personalized requests do not mean zero processing. We do not supply site photos, client/project text, manually entered addresses or PDFs to Google.
Privacy choices and permissions
When Google requires a privacy-options form, Settings → Privacy & Data → Privacy choices reopens the actual form. The control is hidden when no applicable form exists. Android advertising-identifier controls are independently available in system Settings. Region, device settings and provider configuration affect delivery. You can change camera access in Android Settings without losing access to imported records.
Retention, support and deletion
App-controlled records remain locally until deleted, replaced through a confirmed restore, removed by clearing app data or uninstalled. Local deletion does not erase Google Play transaction history, provider-controlled advertising/purchase records, original photos or exported copies.
If you contact support, we receive the message and attachments you choose to send. Do not send passwords, payment details, confidential backups or unredacted site photos unless necessary. Correspondence is retained as reasonably needed to respond, resolve disputes, protect the service or meet legal obligations.
Contact support for applicable requests concerning operator-controlled correspondence or RevenueCat purchase-record deletion we can process. Google-controlled information follows Google's procedures. Deleting purchase records does not automatically cancel a subscription; use Google Play's subscription controls.
Security, audience and updates
Provider SDKs encrypt their documented network transfers in transit and may process data internationally under their policies and safeguards. No storage or transfer method is risk-free. Protect your device and review export destinations.
MeasureProof is a professional field utility, not directed to children. It has no account or date-of-birth field and does not invent an age. Measurements are user-authored records, not certified physical accuracy or tamper-proof evidence. This policy is updated when actual features, providers or legal obligations change. Effective date: 13 October 2026. Operator: REKL0W LTD.