ProvashotProvashot Privacy Policy
Provashot is a job-site photo report app published by Xelmes SRL (limited liability company under Belgian law), Place Lt. Graff 15, 1780 Wemmel, Belgium, company/VAT no. BE 0788.703.337, e-mail: [email protected] ("we"). This policy describes exactly what the app processes, and nothing more.
The short version
Your photos, jobs, clients and reports stay on your device. Provashot works without an account and without an application server: we have no access to your photos, jobs, clients or reports.
What stays on your device (and is never transmitted)
- Photos, annotations, shooting positions, jobs, phases, clients.
- Company profile (name, logo, contact details), printed on your reports.
- Generated PDF reports.
For your clients' data appearing in your photos and reports, you are the data controller; we have no access to it. This data is kept until you delete it (gallery, settings, or full data deletion in Settings → My data).
What our processors handle
| Data | Recipient | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Pseudonymous identifier + usage events (no personal data: screens opened, report generated…; no location is derived from your IP address) | PostHog (EU hosting) | Product usage measurement | Your consent (asked at onboarding, revocable anytime in Settings → Privacy) | 12 rolling months |
| Crash reports (device model, OS version, technical trace, install identifier) | Sentry (EU region, Frankfurt) | App reliability | Legitimate interest; you can object by email ([email protected]) | 90 days |
| Anonymous subscription identifier, subscription state, store transaction identifier | RevenueCat (United States, standard contractual clauses) | Pro subscription management | Contract performance | Subscription duration + accounting obligations |
| Your e-mail address, if you contact support | Our mailbox | Support | Legitimate interest | 12 months |
Crash traces are scrubbed before sending: file paths and e-mail addresses are redacted. No data sale, no advertising sharing, no cross-app tracking (no ATT), no transfer outside the EU beyond the processors listed.
Your rights
- Refuse or withdraw analytics consent: Settings → Privacy (refusal stops all sending, immediately).
- Export all your data: Settings → My data → Export (complete, readable archive).
- Delete everything: Settings → My data → Delete (permanent on-device deletion, identifiers reset).
- GDPR rights of access, rectification, erasure, restriction, portability and objection: write to [email protected]. You may lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).
Device permissions
- Camera: take job-site photos. Can be refused; importing from the gallery still works.
- Location (optional): place photos on the job site. Never transmitted.
- Notifications (optional): locally scheduled "after photos" reminders.
Changes
Any change in data collection triggers a synchronized update of this policy (dated and versioned) and of the store listings, before it takes effect.
Contact: [email protected]