Last updated: September 11, 2026

EXECUTIVE SUMMARY & TRANSPARENCY NOTICE

This Privacy Policy outlines how Rhythmix OÜ ("we", "us", or "our") collects, processes, protects, and shares your personal data when you use Smart Printer App: iPrint ("Service").

By using the Service, you confirm that you are over 18 years of age and agree to the data practices described herein.

Key Highlights: Section 2 (Data Controller Info), Section 3 & 4 (Data Categories & Processing Purposes), Section 5 (Third-Party Cloud Storage Rules), Section 6 (Third-Party Vendors), and Section 10 (Your Regional Legal Rights - EEA, UK, US, Canada).

For any privacy inquiries or to exercise your rights, contact us at general@rhythmix.tech.

1. ACCEPTANCE & LEGAL SCOPE

This Privacy Policy details the personal data we collect, how it is processed, and the legal rights available to you. By accessing or using the Service, you promise that (i) you have read, understood, and agreed to this Privacy Policy, and (ii) you are at least 18 years of age. If you do not agree, you must immediately cancel active subscriptions, request data deletion, and delete the Service from your devices.

Minors Policy: We do not knowingly process personal data from individuals under 18 years of age. If you suspect a minor has provided us with personal data, please report it immediately to general@rhythmix.tech.

2. PERSONAL DATA CONTROLLER

Data Controller	Rhythmix OÜ
Legal Form & Country	Private limited company under the laws of the Republic of Estonia
Registry Code	17398001
Legal Address	Mäealuse 2/1, 12618 Tallinn, Harju maakond, Estonia
Privacy Contact	general@rhythmix.tech

3. CATEGORIES & SOURCES OF PERSONAL DATA

3.1 Data Directly Provided by You

Identifiers: Email address provided during registration, newsletter sign-up, or support correspondence.
Support Communications: Email content, attachments, refund requests, or inquiries sent to our support team.

3.2 Data Collected Automatically

Device & Geolocation: IP address, language settings, time zone, device model/type, OS version, hardware ID, mobile carrier, and unique identifiers (IDFA, GAID).
Usage & Log Data: Page views, feature interactions, session frequency, and duration within the Service.
Diagnostics: Crashlytics, performance metrics, and system log monitoring.
User Acquisition: Referring app, URL, or advertisement leading to app installation.
Cookies & SDKs: Cookies, SDKs, and tracking tools to enhance functionality and analyze traffic.
Meta Pixel & Opt-Out Instructions: We use Meta Pixel to collect data about your actions on our Service (including pages visited, time spent, and actions taken) to measure ad campaign effectiveness and personalize content. Data collected is transmitted to Facebook, establishing a direct connection between your browser and Facebook servers upon consent. Data processing takes place within Facebook's Data Policy. To opt-out from Facebook's interest-based ads, follow these instructions from Facebook

3.3 Data Received from Third Parties

Subscription Details: Subscription terms, ID, purchase date/time/amount, payment method type, and masked card digits. (We do not store full credit card numbers).

3.4 Excluded Data & Data Minimization

We do NOT collect sensitive personal data regarding race, ethnicity, political opinions, religious beliefs, trade union membership, genetic/biometric data, health, sex life, or criminal history. We strictly adhere to data minimization, collecting only data necessary for stated processing purposes.

4. PROCESSING PURPOSES & LEGAL BASES

We process personal data based on four primary legal bases: (1) Performance of Contract, (2) Legitimate Interests, (3) Compliance with Legal Obligations, and (4) User Consent.

Processing Purpose	Data Categories Used	Lawful Bases
User Support & Privacy Requests	Identifiers, support correspondence, email details	Contract Performance; Consent
Service Analytics & Product Development	Device & Geolocation Data, Log & Usage Data	Contract Performance; Legitimate Interests
App Diagnostics & Crash Fixes	Performance & Diagnostics Data (Crashlytics)	Contract Performance; Legitimate Interests
Subscription Management & Tracking	Subscription transaction data, ID, terms	Contract Performance; Consent
Marketing & User Acquisition	User acquisition data (referring URLs/ads)	Consent; Legitimate Interests
Document Camera Scanning	Images captured via device camera at request	Contract Performance; Consent
File Import, Editing & Printing	Access to user-selected device files/photos	Contract Performance; Consent

Legitimate Interest Scope: Our legitimate interests include: promoting our Service appropriately, analyzing user preferences to enhance UX, personalizing ad campaigns, defending against legal claims, and enforcing our Terms of Use.

5. THIRD-PARTY VENDORS & DATA DISCLOSURES

We share data with trusted third-party service providers to support app functionality, analytics, infrastructure, and marketing. All vendors are strictly bound by data protection obligations.

Vendor / Service	Functional Purpose	Privacy Policy Reference
Google LLC (Google Play)	App publishing & distribution	https://policies.google.com/privacy?hl=en-US
Google LLC (Firebase, Analytics)	Auth, analytics, event tracking	https://policies.google.com/privacy?hl=en-US
Amplitude, Inc.	Product analytics & event tracking	https://amplitude.com/privacy
Functional Software (Sentry)	App development & error logs	https://sentry.io/privacy/
AppsFlyer Ltd.	Product analytics & attribution	https://www.appsflyer.com/legal/processing-customer-data/
Meta Platforms (Meta Ads)	Marketing & ad management	https://www.facebook.com/privacy/policy/
TikTok, Snap, Microsoft (Bing)	Marketing management	Respective platform policies
AWS, Supabase, Upstash, CloudAMQP	Cloud infrastructure & data storage	Respective trust & privacy policies
Elastic, Fly.io	Performance monitoring & analytics	Respective corporate privacy policies
Documo	Healthcare document automation	https://www.documo.com/privacy-policy/

Legal & Corporate Disclosures: We disclose data to public/law enforcement authorities when legally required to enforce our legal rights or comply with judicial orders. In corporate transactions (mergers, acquisitions, asset sales), user data may be transferred as a business asset.

7. CROSS-BORDER TRANSFERS & DATA SECURITY

When transferring personal data outside the EEA to countries lacking equivalent data protection laws, we deploy recognized safeguards including European Commission Standard Contractual Clauses (SCCs) or adequacy decisions.

Security Safeguards: We employ administrative, physical, and technical safeguards (including SSL encryption and restricted access controls) to prevent unauthorized data access, loss, or alteration. Suspected breaches will be notified to users and regulators as legally required.

Data Retention: Personal data is retained as long as reasonably required to fulfill operational purposes, maintain active accounts, satisfy legal obligations, and resolve disputes.

8. REGIONAL LEGAL PRIVACY RIGHTS

8.1 EEA & UK Resident Rights (GDPR / UK GDPR)

Residents of the EEA and UK enjoy specific statutory rights:

Right to Access: Request confirmation and explanation of personal data processing.
Right to Rectification: Correct inaccurate or incomplete personal records.
Right to Erasure ('To Be Forgotten'): Request deletion of personal data from our systems.
Restriction & Objection: Restrict or object to specific processing activities.
Data Portability: Obtain and transfer data to another controller in a structured format.
Right to Complain: Lodge complaints with local Data Protection Authorities (e.g., UK ICO at ico.org.uk).

8.2 United States Consumer Privacy Rights

State-specific privacy rights apply across CA, CO, CT, IN, IA, MT, TN, TX, UT, VA, and other jurisdictions:

No Sale of Personal Info (CCPA): We do not sell personal information or use it as a standalone business model. California consumers may submit opt-out requests for future protection.
Shine the Light Disclosure: California residents may request annual disclosures regarding data shared with third parties for direct marketing.
US State Rights Overview: Consumers hold rights to Access, Correct, Delete, Port Data, and Opt-Out of targeted advertising/profiling. Requests are fulfilled within 30-60 days.
Do-Not-Track (DNT) Notice: We currently do not possess technical capabilities to respond to automated browser DNT signals.

8.3 Canadian Resident Rights

Canadian residents hold privacy rights under federal (PIPEDA) and provincial laws, with the right to lodge complaints with the Office of the Privacy Commissioner of Canada.

9. AMENDMENTS & CONTACT INFORMATION

We reserve the right to update this Privacy Policy. Material revisions will be communicated in-app or via email prior to becoming effective. Continued use signifies acceptance.

Contact Us: For privacy inquiries, rights verification, or minor protection concerns, contact our privacy team at general@rhythmix.tech.