Privacy Policy

1. Who We Are and What This Policy Covers

This Privacy Policy concerns 90's Camera (the "Application"), operated by Monova Tech Pvt. Ltd. ("we," "us," "our," or the "Service Provider"). It addresses information processed in connection with the Application and privacy-related communications with us.

This policy is intended to cover the Android and iOS versions of the Application. Any differences in their information practices must be identified in the relevant sections below. It does not describe unrelated applications or services merely because they have a similar name.

2. Information We Access or Collect

The following disclosures distinguish information processed on your device from information sent to us or another organization. Permission to access a device feature is not, by itself, a statement that the associated information is uploaded.

Camera, photos, video, and related information

Confirm media practices: [Describe whether the Application captures, imports, edits, or saves photos or videos; the camera and photo-library access actually used; and whether microphone access is required. Identify what stays on the device, what is transmitted, the recipients, and the purposes. Explain treatment of image metadata, including any location metadata.]

Confirm face and AI processing: [State whether any feature analyzes faces, creates biometric identifiers or face templates, or uses an AI service. Where applicable, explain the information processed, purpose, local or remote processing, recipients, retention, deletion, and any use for model training. Do not claim that these activities occur or do not occur without checking the implementation.]

Device, usage, and diagnostic information

Confirm technical information: [List the information actually accessed or collected by the Application, its backend, and integrated SDKs. Check IP addresses, device or advertising identifiers, operating-system details, app interactions, crash reports, and location. Identify the sources, recipients, and purposes, or accurately state that the relevant category is not collected.]

Information you provide directly

When you choose to send us a privacy inquiry or support message, we receive the information you include in that communication, such as your contact details, message, and attachments. Please do not include passwords or unrelated sensitive information.

Confirm accounts and transactions: [State whether the Application supports registration, sign-in, purchases, subscriptions, or other user submissions. Describe the information received and its sources, including any app-store purchase records. Do not state that an account or payment feature exists unless it is implemented.]

Android and iOS permissions

Confirm platform permissions: [Identify the actual permissions requested on Android and on iOS, the feature requiring each permission, and the consequences of declining or withdrawing access. Explain any platform differences. Include location, microphone, notifications, or tracking only when relevant to the implemented app.]

3. How Information Is Used

Confirm purposes: [For each information category above, state its actual purposes. Distinguish providing requested camera or editing functions from optional analytics, advertising, synchronization, fraud prevention, or other processing. Identify which information is required, which is optional, and what happens when it is not provided.]

Information supplied in a privacy request is used to understand the request, communicate with you, and carry out any necessary verification and response. This does not authorize unrelated advertising or marketing.

Confirm applicable legal bases: [Where relevant law requires a legal basis, identify the basis for each processing purpose and any specific legitimate interests relied on. Do not select consent, contract, or legitimate interests merely as generic boilerplate.]

4. Third-Party Services, Advertising, and Tracking

Confirm service providers and SDKs: [Identify the providers actually integrated into each platform version, the information they receive, their purposes, and verified privacy-policy links. Confirm whether advertising, analytics, crash reporting, cloud processing, or other external services are used. AdMob, AppLovin, Firebase, and Google Play Services must not be listed solely because they appear in another app's policy.]

Confirm advertising and tracking: [State whether the Application displays ads, uses advertising identifiers, personalizes advertising, or performs cross-app or cross-site tracking. Describe the actual consent and opt-out controls separately for Android and iOS. Describe cookies or web-view tracking only where those technologies are used.]

A third party's privacy policy supplements the relevant disclosures here; it does not replace our explanation of information handling within the Application. Third-party processing is not necessarily anonymous merely because a service uses identifiers rather than a person's name.

5. When Information Is Disclosed

Routine disclosures, if any, must be identified in the information and third-party-service sections above. They must specify the relevant information, recipients or recipient categories, and purposes.

Where applicable and legally permitted, information held by us may also be disclosed to comply with a binding legal obligation or valid legal process, investigate suspected unlawful activity, protect people's safety, or establish, exercise, or defend legal claims.

If a reorganization, merger, acquisition, or transfer of business assets involves personal information, its handling will be subject to applicable privacy requirements, including any required notice or consent.

Confirm sale and advertising-related sharing: [State accurately whether any disclosure qualifies as a sale, sharing for cross-context behavioral advertising, or targeted advertising under applicable law. Describe applicable opt-out mechanisms. Do not insert an unverified "we never sell or share data" statement.]

6. Storage and Data Retention

Confirm retention: [Provide the actual retention period or meaningful retention criteria for each relevant category: media and metadata, local temporary files, cloud uploads, account records, diagnostics, advertising data, support correspondence, and privacy-request records. Explain backup retention, automatic deletion, and any justified legal exceptions. Remove categories that do not apply.]

Retention disclosures must distinguish information we control from copies held by independent services or saved elsewhere by the user. No fixed twelve-month, twenty-four-month, or indefinite retention period is established by this draft.

If information must be retained after a deletion request because of an applicable legal obligation or another lawful exception, we will explain the relevant reason to the extent permitted by law.

7. Your Choices, Consent, and Deletion

Confirm available controls: [Describe the actual steps for changing permissions, withdrawing optional consent, changing advertising preferences, deleting locally stored content, and requesting deletion of remotely held information. Where accounts exist, include the implemented account-deletion steps and any applicable external deletion page.]

Where processing relies on consent, you may withdraw that consent. Withdrawal does not retroactively affect processing lawfully carried out before it was withdrawn. A device permission and consent for a separate processing purpose should not be treated as interchangeable.

Do not rely on uninstalling the Application as a substitute for requesting deletion of information held by us. Uninstallation does not itself submit an account-deletion request and may leave copies already saved to a photo library, backup, or external service.

To request deletion of information under our control or raise a privacy concern, use the contact details in Section 13. Do not send passwords or unnecessary identity documents with the initial request.

8. Your Privacy Rights

Your rights depend on your location, the applicable law, and the processing involved. They are subject to the conditions and exceptions established by that law.

European data-protection rights

Where the General Data Protection Regulation applies, rights may include access, correction, erasure, restriction, portability, objection, withdrawal of consent, and safeguards concerning certain automated decisions. You may also complain to the competent supervisory authority. Further information is available from the European Commission.

California privacy rights

Where the California Consumer Privacy Act, as amended, applies to our processing, eligible California residents may have rights to know and access information, correct inaccuracies, request deletion, opt out of sale or qualifying sharing, limit certain uses of sensitive information, and exercise rights without unlawful discrimination. Additional information is available from the California Attorney General.

Making a request

You may contact us using Section 13. Where necessary and legally appropriate, we may request limited information to verify a request to access, correct, or delete personal information. Verification will not be imposed on an opt-out request where the applicable law prohibits it.

We will address requests within the applicable legal time limits. If a request cannot be fulfilled, we will explain the reason and any available review or appeal mechanism required by law.

Confirm regional requirements: [Check the jurisdictions served and whether additional disclosures, authorized-agent procedures, request methods, opt-out signals, appeal rights, representatives, or contact details are required. This section alone does not establish compliance in every jurisdiction.]

9. Children's Privacy

Confirm intended audience: [State the actual intended audience and any justified age restriction. Explain any child-directed features, age screening, and parental-consent process. Do not copy an under-13 or under-16 restriction from another application without checking the actual audience and applicable rules.]

A parent or guardian who believes that a child has provided personal information in circumstances that violate applicable privacy requirements may contact us using Section 13. We will review the concern and take the action required by applicable law, which may include deleting information or obtaining appropriate authorization.

10. International Processing

Confirm processing locations: [Identify relevant countries or regions in which we and our providers store or otherwise process personal information. Where a restricted international transfer occurs, identify the actual applicable safeguards and how information about them may be obtained. Do not claim that Standard Contractual Clauses, an adequacy decision, or another transfer mechanism is in place without verification.]

11. Security and Data Incidents

Confirm safeguards: [Describe the implemented protections relevant to the information processed, such as secure transmission, access restrictions, or protected storage. Include only measures that have been verified. Do not claim security certifications, universal encryption, or security testing that has not occurred.]

No method of electronic transmission or storage can be guaranteed completely secure. If a personal-data incident affecting information under our control requires notification, we will notify the relevant authorities and affected individuals as required by applicable law.

12. Changes to This Privacy Policy

We may revise this Privacy Policy to reflect changes in the Application, our practices, or applicable requirements. The published version will show its last-updated date.

Where applicable law requires additional notice or consent for a material change, we will provide that notice or obtain that consent before the relevant processing begins. Merely continuing to use the Application is not treated as a substitute for consent where affirmative consent is required.