1. Controller
Sam Beklik (“we”, “us”) is the data controller for BLUPRNT.
Contact: legal@sambeklik.com

2. What BLUPRNT does
BLUPRNT is a photo editing app. Photo processing (editing, presets, grain) happens on your device.

3. Data we collect
3.1 Photos you edit
• Your photos are processed locally on your device.
• We do not automatically upload your photos to our servers.

3.2 Purchases (Pro unlock)
• Purchases are handled by Apple (StoreKit / App Store).
• We do not receive your payment card details.
• Apple may provide us purchase/entitlement information necessary to unlock Pro on your device.

3.3 Network data (when fetching content)
If the app downloads content from our website (e.g., preset pack JSON, LUT files, Explore content/images), our server may receive standard technical data such as:
• IP address
• device/user-agent information
• requested file paths
• timestamps
This is standard web server logging.

3.4 Support communications
If you contact us (e.g., by email), we process the information you send (email address, message contents, attachments) to respond.

4. Purposes and legal bases (GDPR) 
We process data for:
• Providing the app and requested downloads (Art. 6(1)(b) – contract / service delivery)
• Security and abuse prevention for our web services (Art. 6(1)(f) – legitimate interest)
• Handling support requests (Art. 6(1)(b) or Art. 6(1)(f), depending on context)
• Legal obligations where applicable (Art. 6(1)(c))

5. Sharing / third parties
• Apple / App Store / StoreKit: purchases, entitlement verification, restore purchases.
• Hosting/CDN (sambeklik.com and infrastructure providers): delivering preset JSON/LUTs/Explore content (receives IP + technical logs).
We do not sell personal data.

6. International transfers
If third-party providers process data outside the EEA, transfers may occur. Where required, appropriate safeguards (e.g., standard contractual clauses) are used by the provider.

7. Retention
• App does not upload your edited photos to us.
• Web server logs (for downloads) are retained for a limited period necessary for security and troubleshooting.
• Support emails are kept as long as needed to handle the request and for legal record-keeping.

8. Your rights (GDPR) 
You may have rights to access, rectification, deletion, restriction, objection, and data portability.
To exercise rights: legal@sambeklik.com
You also have the right to lodge a complaint with your supervisory authority (Austria: Datenschutzbehörde).

9. Children
BLUPRNT is not directed to children under 13. If you believe a child provided personal data via support communications, contact us.

10. Changes
We may update this policy. The “Last updated” date indicates the latest version.