Privacy Policy 

PRIVACY POLICY – T-Shot

Effective date: 4 November 2026

1. Data controller

The data controller is WKSakač, obrt za izdavanje softvera i računalno programiranje, vl. Dominik Sakač, Grkaveščak 36, Hrvatska.

Privacy and support: support@wksakac.com.

2. Data we process

Depending on your use of T-Shot, we process:

• email address, Firebase user ID, authentication and email verification information;

• photos, videos, scanned documents and associated metadata (file name, format, size, timestamp and metadata already embedded in the file) when stored in the cloud;

• cloud quota, uploads, trash status, plan and subscription status;

• Google Play product identifiers and purchase tokens to verify subscriptions; we do not receive full card numbers;

• technical information necessary for operation and security (such as IP addresses in server logs, request times and errors);

• on-device settings, cache records and links between local and cloud files;

• for advertising: data processed by Google AdMob, potentially including advertising identifiers, approximate location inferred from IP, device information and interactions with ads, depending on settings and consent.

Local First can use an existing matching device original without downloading it again. Local-file matching does not itself send that media file to advertisers.

3. Camera, microphone, gallery and scanning

Camera access enables photos, videos and document scans. The microphone is used for video audio only when enabled. Media stored in T-Shot may remain on your device; if you enable saving to the system gallery, an additional copy is created there. Importing or locally viewing a file does not, by itself, share the file with advertisers. Files uploaded to the cloud may include metadata already present in the originals, including geotags.

4. Cloud storage, web access and local cache

Media, thumbnails and previews are stored in private Backblaze B2 storage. Accounts and file records use Firebase Authentication, Firestore and Cloud Functions. Uploads and downloads use temporary authorized URLs; long-lived B2 credentials are not stored in the app. When a matching local original exists, Local First may display or play it from the device; otherwise the app uses cache or cloud. T-Shot Cloud web access involves sign-in and network requests, and hosting providers may retain technical access logs.

5. Encryption and content access

Data is transferred over protected connections. The hosting provider may use server-side encryption, but T-Shot is not end-to-end encrypted: the backend and cloud infrastructure can technically access stored content where necessary to operate and protect the service, provide support or comply with law. We do not send photos, videos or scanned documents to AdMob to select ads.

6. Purposes and legal bases

Processing needed for the account, camera features, cloud synchronization and paid subscriptions is based on providing the requested service (performance of a contract). Technical and security records may be processed on our legitimate interests in protecting the service and preventing abuse. Data required by law is processed to meet legal obligations. Advertising and identifiers follow your choices and applicable legal bases; where consent is required, you can give, refuse or withdraw it through Google User Messaging Platform (UMP).

7. Providers and international transfers

We use Google Firebase (authentication, Firestore, functions), Google Play (distribution and billing), Backblaze B2 (storage), Google AdMob and Google UMP (advertising and privacy choices for free-plan users), and an email delivery provider for service messages. Some data may be processed outside the EEA, including the United States, subject to appropriate legal transfer safeguards. Although B2 storage is configured in a European region, Firebase Authentication processes data in the United States; not all data stays inside the EU. Provider notices: https://policies.google.com/privacy ; https://firebase.google.com/support/privacy ; https://www.backblaze.com/company/policy/privacy .

8. Advertising and consent

FREE accounts may see Google AdMob banner ads in galleries. An active paid subscription removes in-app ads. AdMob may process advertising identifiers, IP address, device information and ad-view/click events under its own privacy terms. Where required, Google UMP provides consent choices, including refusal and later changes through Settings → Ad privacy, when this option is required for your region. Refusing consent does not remove the free 10 GB allowance or basic app functionality; depending on applicable rules, limited or non-personalized ads, or no ads, may be shown. We do not sell your photos, videos or scanned documents to advertisers.

9. Retention periods

Cloud content and account information remain while the service is used or until account deletion is requested, subject to mandatory legal exceptions. Cloud Trash may retain deleted files for up to 30 days and local Trash for up to 30 days unless permanently deleted sooner. After paid storage entitlement ends, a 60-day period without new cloud uploads allows users to view, download and delete existing content. After day 60, older cloud files exceeding the free 10 GB allowance may be permanently removed after subscription checks and warnings. Actual deletion depends on server-side cleanup being enabled and its safeguards completing. Warning records and technical logs are retained only as needed for their purpose or law. Copies exported to the system gallery are not automatically removed when cloud files are deleted.

10. Account deletion

You can start deletion in Account & cloud within the app, with a security check, or request help at support@wksakac.com. After successful deletion, cloud content, account-related records and private local app files on that device are removed. Separate copies in the system gallery or on other devices are not removed. The backend attempts to stop automatic Google Play renewals first; if this cannot be verified, deletion may be halted to protect the user. Google Play retains its own transaction records under its policies. You can also request account deletion outside the app using the instructions on our account-deletion page or by email at support@wksakac.com.

11. Your rights

Depending on applicable law, you may request access, rectification, erasure, restriction, portability, object to processing or withdraw consent where consent is relied upon. Contact support@wksakac.com; reasonable identity verification may be needed. You may complain to a data protection authority, including the Croatian Personal Data Protection Agency (AZOP, https://azop.hr).

12. Children and minors

T-Shot is not specifically directed at children. Where applicable law requires parental authorization for processing, the user and parent or guardian must ensure it. Advertising consent does not replace child-protection requirements. Contact support@wksakac.com about any suspected inappropriate processing of a child’s data.

13. Security

We apply reasonable technical and organizational measures, including a private cloud bucket, user-separated file paths, server-side limit verification and short-lived authorized URLs. No system is absolutely secure, so we recommend keeping an additional backup of particularly important files.

14. Changes to this policy

This policy may change with the service, providers or law. The current version and publication date should be available in the app and on a public site. We will give appropriate notice of material changes.