Privacy Policy

1. Who we are

The apps and this website are made by Tetiana Kalchenko, an independent developer trading as «Handy Apps» (referred to as «we», «us» or «our»). We are the controller of the personal data described in this policy.

• Email: [email protected]
• Website: handyapps.app

We are a one-person studio and have not appointed a data protection officer. Write to the email above about anything in this policy.

2. Scope

This policy applies to the following iPhone apps published by Tetiana Kalchenko on the Apple App Store, including their extensions, widgets and Live Activities, and to this website:

• Video Compressor — compresses videos on your iPhone;
• PikPik — scans Pokémon Trading Card Game cards and shows market prices;
• Step Counter — counts steps, tracks goals, streaks and GPS walks;
• Tono — converts video and audio files and makes ringtones on your iPhone;
• the website handyapps.app, including its guides and free tools.

It does not cover Apple's services (the App Store, iCloud, Apple Health, Photos and so on) or other websites we link to. Those are governed by their own privacy policies.

3. Summary by app

«On device» means the data is processed and stored on your iPhone and is not sent to us or anyone else.

None of the apps asks for your name, email address, phone number, contacts or a password.

4. Information we collect

4.1 Collected automatically

When you use an app, the services listed in section 7 may receive:

• Device and app information — device model, iOS version, app version, language and region settings, time zone.
• Identifiers — random IDs created for the app installation (for example the Firebase app instance ID and the Adapty profile ID) and Apple's identifier for vendors (IDFV). The advertising identifier (IDFA) is only available if you allow tracking in Step Counter or PikPik (see section 8).
• App usage events — for example that onboarding was completed, a screen or paywall was shown, a compression or scan was done, or a feature was used, together with technical parameters such as file size or the chosen preset. Events do not contain the content of your files or what you see in the camera.
• Crash and performance data — stack traces, device state at the time of a crash (free memory, disk space, orientation) and the app version (Video Compressor and PikPik).
• Purchase status — which subscription or purchase is active, trial status, renewal dates, transaction IDs and the price and currency of the product, as reported by Apple.
• Network information — your IP address is necessarily seen by any server the app connects to. Services may use it to derive an approximate country or city; we do not use it to locate you.
• Choices made in onboarding — some apps store the answers to onboarding questions (for example your collecting goal and card language in PikPik, or which tasks you want Tono for) as attributes of the anonymous Adapty profile, so that we can tailor the paywall and understand which features matter. In Step Counter these are: your daily step goal, whether you allowed Motion & Fitness, connected Apple Health and turned on reminders (and the reminder hour), the onboarding step you skipped at, the number of app sessions and the date of the last one. These answers contain no contact details and never include any data read from Apple Health.

4.2 Information you give us

If you email us, we receive your email address, your message and anything you attach (for example a screenshot or a support ID). We use it only to answer you.

4.3 What we don't collect

• Your name, email address (unless you write to us), phone number, postal address or contacts.
• The content of your videos, audio files and photos. Video Compressor and Tono never upload them; PikPik doesn't upload camera images.
• Your Apple Health data, motion data or walking routes. They stay on your iPhone.
• Your payment card or bank details. Apple handles payments; we never see them.

5. Permissions and on-device data

The apps ask for iOS permissions only when you use a feature that needs them, and every app keeps working, with fewer features, if you say no. You can change any permission at any time in the iPhone Settings app, under the app's name or under Privacy & Security.

Photos — Video Compressor

• You can pick videos with the system picker without giving any access to your library.
• Full access is requested only if you use «Your videos by size» and «Free up space»: the app reads the size and basic properties of your videos to show what can be compressed, saves compressed copies to an album named «Compressed», and can delete the originals — always through Apple's own confirmation dialog, after the copies are saved. Deleted items stay in «Recently Deleted» for 30 days.
• Compressed copies keep the original creation date and, unless you turn on «Remove location», the location stored in the video. You decide whether location metadata is kept or removed.
• If a video is stored in iCloud, iOS downloads it from Apple's iCloud servers before compression. That is between your device and Apple.
• The Share extension lets you compress videos from Photos, Files and other apps. It works on your iPhone, like the main app.

Files — Tono

• Tono opens files you choose in Files, Photos or the Share sheet, converts them on your iPhone and saves results in the «Tono» folder on your iPhone (visible in the Files app). It does not download content from web links.
• Files are not uploaded anywhere. Deleting the app deletes its folder.

Camera — PikPik

• The camera is used only while the scanner is open. Card detection and text recognition (the card number and name) run on your iPhone using Apple's Vision framework and an on-device model. Camera images are not stored or uploaded.
• Your collection, folders, wishlist, the prices you paid and your notes are stored on your iPhone.

Motion & Fitness and Apple Health — Step Counter

• With Motion & Fitness access, Step Counter reads step counts from the iPhone's motion processor.
• If you connect Apple Health, Step Counter reads steps, walking and running distance, active energy, exercise time and workouts to show your history, goals and badges.
• If you choose to save a walk to Apple Health, the app writes it as a workout with its distance, duration, active energy and route. It asks for this write permission separately, only when you first save a walk.
• Health and motion data stay on your iPhone. We do not send them to analytics, advertising, Adapty or any other third party, and we do not use them for advertising or marketing.
• The profile you enter (weight, height, age, gender) is stored on your iPhone and is used only to estimate distance and calories.

Location — Step Counter

• Location is requested when you start your first GPS walk. During a walk, the app records your route to show it on the map and calculate distance and pace. To keep recording when the screen is locked, iOS may ask you to allow location access «Always»; the app uses location in the background only while a walk is in progress.
• Routes are stored on your iPhone. They leave it only if you export them yourself (for example as a GPX file) or save a walk to Apple Health.
• Step counting itself does not use location.

Notifications — Video Compressor, Step Counter

• Video Compressor can tell you when a long compression is finished. Step Counter can send a daily summary, goal and badge alerts, and an evening reminder.
• These are local notifications scheduled on your iPhone. We don't use push notification servers or marketing pushes.

Widgets and Live Activities

Step Counter offers home-screen and lock-screen widgets and a Live Activity for today's steps and walks; Tono can show a Live Activity while a long conversion runs; Video Compressor can show the progress of a background compression. They read data shared between the app and its extensions on your iPhone; nothing is sent elsewhere.

6. Features that use the internet

• PikPik looks up cards and prices on our own server. The request contains the recognised card number and name text, the card language, and your chosen currency or price region — never a camera image, and nothing that identifies you. Our server, like any web server, receives your IP address. It keeps the card catalogue and market prices, which it collects from third-party market data sources (for example data published for TCGplayer and Cardmarket); your requests are not passed on to those sources. Card pictures are loaded directly from the public image hosts that publish them (for example the Pokémon TCG API image host and the Limitless TCG image CDN), which then see your IP address, like any website you open. PikPik can refresh prices in the background with iOS Background App Refresh.
• Video Compressor, Tono and Step Counter work offline for their core features. They connect to the internet for the services in section 7 (analytics, configuration, subscriptions and, in Step Counter's free version, ads), and iOS may download videos stored in iCloud.

7. Third-party services

We use the following service providers. Where they act on our behalf (as «processors»), they may use the data only to provide their service to us. Each has its own privacy policy:

Firebase Analytics (Google) — Video Compressor, PikPik, Step Counter

Counts app usage events so we can see which features are used and where people get stuck. Receives the Firebase app instance ID, IDFV, device and app information, events and an approximate location derived from your IP address. In PikPik, if you allow tracking, it also receives the IDFA. Google Signals and ads personalisation are turned off in our Firebase projects. Firebase privacy information · Google Privacy Policy.

Firebase Crashlytics (Google) — Video Compressor, PikPik, Step Counter

Collects crash reports so we can fix bugs. Receives crash traces, device state and a Crashlytics installation ID. Firebase privacy information.

Firebase Remote Config (Google) — Video Compressor, PikPik, Step Counter

Lets us change settings without an app update (for example size limits for messengers or the paywall layout). Receives the Firebase installation ID and device and app information. Firebase privacy information.

Adapty — all four apps

Manages subscriptions and in-app purchases, shows the right paywall, runs pricing experiments and provides subscription analytics. Receives an anonymous Adapty profile ID, IDFV, device and app information, IP address, purchase and transaction data from Apple (receipts), and onboarding answers described in section 4.1. In PikPik and Step Counter, if you allow tracking, Adapty also receives the IDFA. In Video Compressor, PikPik and Step Counter the Adapty profile is linked to the Firebase app instance ID so that purchase events appear in our analytics. In Tono, collection of the advertising identifier and IP address by Adapty is turned off. Adapty Privacy Policy.

Google AdMob and Google User Messaging Platform — Step Counter (free version)

AdMob shows ads to free users. The User Messaging Platform (UMP) shows Google's consent form where the law requires it (for example in the EEA, the UK and Switzerland) and stores your choice on your iPhone. AdMob receives device and app information, IP address, IDFV, ad interaction data and — only if you allow tracking — the IDFA. How Google uses information from apps that use its services · AdMob and privacy · Google Privacy Policy.

Apple — all apps

Apple distributes the apps, processes payments through StoreKit and the App Store, and provides iCloud, Photos, Apple Health and other system features. If you opted in to share analytics with app developers in iOS, Apple may give us aggregated, anonymous App Analytics and crash reports. Apple's AdServices framework may tell an app whether it was installed from an Apple Search Ads campaign; this does not require tracking permission. Apple Privacy Policy.

Cloudflare — this website

Hosts and protects handyapps.app and provides cookie-free web analytics. See section 10. Cloudflare Privacy Policy.

Our own server — PikPik

The card and price server for PikPik is operated by us on a virtual server rented from Hetzner Online GmbH in Nuremberg, Germany (EU). Hetzner provides the hardware and network and has no access to the data for its own purposes. See section 6. Hetzner Privacy Policy.

8. Advertising and tracking

• Only Step Counter shows ads, and only in its free version. Premium removes the ads. Video Compressor, PikPik and Tono show no ads.
• Consent (Step Counter). On first launch, where required by law, Step Counter shows Google's consent form before any ad is requested. You can change your choice later in the app under Me → Privacy options.
• App Tracking Transparency. Step Counter and PikPik show Apple's «Allow to track» prompt. In Step Counter it lets AdMob use the IDFA for personalised ads and ad measurement, and Adapty use it to measure which campaigns bring new users. In PikPik it is used only to measure which advertising campaigns bring new users; PikPik doesn't show ads; the IDFA goes only to Firebase Analytics and Adapty (section 7). Video Compressor and Tono never ask to track you.
• If you decline, the apps work the same. Step Counter then shows only non-personalised or limited ads, and no app receives your IDFA. You can change your choice at any time in Settings → Privacy & Security → Tracking, or turn off «Allow Apps to Request to Track» for all apps.
• We never use Apple Health data, motion data, location, your files or your collection for advertising.

9. Purchases and subscriptions

All purchases are made through your Apple ID and processed by Apple. We never receive your name, email address or payment details from Apple. Apple tells the app — and Adapty on our behalf — which product was bought, transaction and renewal information, the price and currency, and the storefront country. Adapty links this to the anonymous profile ID of your app installation so that your subscription is recognised and «Restore purchases» works. Billing, refunds and cancellations are handled by Apple (see our Terms of Use).

10. This website

• Hosting. handyapps.app is hosted on Cloudflare Pages. When you visit, Cloudflare processes technical data needed to deliver and protect the site: IP address, browser and device information, the page requested, referrer and time. Cloudflare may keep such logs for a limited time for security and reliability.
• Analytics. We use Cloudflare Web Analytics, which counts page views and visits without cookies, without fingerprinting and without building visitor profiles. We see only aggregated numbers (pages, referrers, countries, browsers).
• Cookies. The website does not set its own cookies and does not use advertising or social-media trackers. Cloudflare may set a strictly necessary security cookie to filter bots.
• Tools. The calculators on the site run in your browser; what you type into them is not sent to us.
• App Store links contain a campaign tag (for example which page the link was on) so that Apple can show us, in aggregate, which pages lead to downloads. Apple's privacy policy applies once you are on the App Store.

11. How we use information

• to provide the apps and their features, including card lookups and prices in PikPik;
• to provide and restore purchases and subscriptions and to show the right offers;
• to understand how the apps are used and improve them, including testing different paywall and onboarding versions;
• to find and fix crashes and bugs;
• to show ads in the free version of Step Counter, with your consent where it is required;
• to answer your emails;
• to keep the apps, our server and the website secure, prevent abuse, and comply with the law.

We do not sell personal information, we do not build advertising profiles of you ourselves, and we do not use automated decision-making that has legal or similarly significant effects on you.

12. Legal bases (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:

• Contract (Art. 6(1)(b)) — providing the app features you use and the purchases and subscriptions you buy, and answering support requests.
• Legitimate interests (Art. 6(1)(f)) — usage analytics, crash reports, remote configuration, keeping the services secure and the website's server logs and cookie-free statistics. Our interest is to keep the apps working and improve them; we keep this data pseudonymous and limited. You can object (see section 16).
• Consent (Art. 6(1)(a)) — personalised ads and ad measurement in Step Counter, use of the IDFA after you allow tracking, and storing or reading information on your device for those purposes where the ePrivacy rules require consent. You can withdraw consent at any time without affecting earlier processing.
• Legal obligation (Art. 6(1)(c)) — where we must keep or disclose information by law.

Data from Apple Health, motion sensors, the camera, your files and your routes is processed only on your device to provide the feature you asked for and is not processed by us.

13. When we share information

We share information only with the service providers listed in section 7, for the purposes described there. We may also disclose information if required by law or a valid request from authorities, to protect our rights, your safety or the safety of others, or to investigate fraud or abuse. If the apps are ever transferred to another developer, the information described here may be transferred with them, and this policy will continue to apply or you will be told about changes.

14. Data retention

• On your iPhone — data stays until you delete it in the app or delete the app. Data saved to Photos, Files or Apple Health stays there until you remove it.
• Firebase Analytics — event data linked to an app instance ID is kept for 2 months, then only aggregated reports remain.
• Firebase Crashlytics — crash reports are kept for 90 days.
• Adapty — purchase and profile data is kept while it is needed to provide your subscription status and for our accounting and tax records, then deleted or anonymised.
• Google AdMob / UMP — according to Google's retention policies; your consent choice is stored on your iPhone.
• Our PikPik server — the server does not keep a log of individual card or price lookups. Its technical logs record only errors and data updates, without IP addresses or identifiers.
• Website — Cloudflare analytics are aggregated; logs are kept by Cloudflare for a limited time.
• Emails — kept as long as needed to resolve your request and keep a record of it, unless you ask us to delete them sooner.

15. International transfers

We are based in Ukraine. The PikPik server is in Germany (EU). Our service providers (Google, Adapty, Cloudflare and Apple) may process data in the United States, the European Union and other countries where they or their sub-processors operate. Where data from the EEA, the UK or Switzerland is transferred to a country without an adequacy decision, these providers use the safeguards they offer, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

16. Your rights

EEA, UK and Switzerland (GDPR)

• Access — ask whether we process your personal data and get a copy.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data.
• Restriction — ask us to limit how we use it.
• Objection — object to processing based on legitimate interests, including analytics.
• Portability — receive data you provided in a machine-readable format.
• Withdraw consent — at any time, for example in Step Counter's privacy options or in Settings → Privacy & Security → Tracking.
• Complain — to the data protection authority where you live or work (a list for the EEA is on the EDPB website; in the UK, the ICO). You can also contact the Ukrainian Parliament Commissioner for Human Rights. We'd appreciate the chance to fix things first — just email us.

California and other US states (CCPA/CPRA and similar laws)

• You have the right to know what personal information we collect, use and disclose, to delete it, and to correct it. We will not discriminate against you for using these rights.
• Categories we collect: identifiers (installation IDs, IDFV, IDFA only with your permission, IP address); commercial information (purchase history); internet or other electronic network activity (app usage events, crash data); approximate location derived from IP address. Sources: the apps on your device and Apple. Purposes and recipients: as described in sections 7 and 11.
• We do not sell personal information for money. The only «sharing» for cross-context behavioural advertising is through Google AdMob in the free version of Step Counter (and the IDFA-based campaign measurement in PikPik), and only if you allow tracking. You can opt out at any time by declining or turning off tracking in Settings → Privacy & Security → Tracking and, in Step Counter, through its privacy options.
• We do not use or disclose sensitive personal information (such as health data or precise location) for purposes other than providing the feature on your device.
• We do not knowingly sell or share the personal information of consumers under 16.

Everyone else

Wherever you live, you can ask us what we hold about you and ask us to delete it. We will honour reasonable requests regardless of where you are.

17. How to exercise your rights

Email [email protected] with the subject «Privacy request», the app you use and what you want us to do. We reply within one month (45 days for US state law requests), and may extend this by the period the law allows if a request is complex — we'll tell you if so.

Because the apps have no accounts and don't show a user ID, we hold no name or email that links data to you. To find your data, tell us the app, your device model, the approximate dates you used it and, for purchases, the Apple transaction or order ID from your purchase receipt email (in Settings → your name → Media & Purchases → View Account → Purchase History). We use this only to locate and verify the request. Where we can't reasonably link any data to you, we will tell you; you can also simply delete the app, which removes its data from your iPhone and stops all collection.

You can also act without contacting us:

• delete the app to remove all its data stored on your iPhone and reset its installation IDs;
• turn off tracking in Settings → Privacy & Security → Tracking;
• revoke Photos, Camera, Motion & Fitness, Health, Location or Notifications access in Settings;
• turn off «Share With App Developers» in Settings → Privacy & Security → Analytics & Improvements.

An authorised agent may submit a request on your behalf with written permission; we may ask you to confirm it.

18. Children

Our apps and website are not directed to children under 13 (or the higher minimum age that applies in your country for consenting to data processing, up to 16 in parts of the EU). We do not knowingly collect personal information from children. If you believe a child has given us personal information, email us and we will delete it.

19. Security

We keep data collection to a minimum and process most data only on your device. Connections to our server and to our service providers are encrypted (HTTPS/TLS). Access to the analytics, subscription and server dashboards is limited to the developer, and we use the security features these services provide. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the authorities of a personal data breach where the law requires it.

20. Changes to this policy

We may update this policy when the apps, the services they use or the law change. We will change the «Last updated» date above and, for significant changes, tell you in the app or on this website before they take effect. Earlier versions are available on request.

21. Contact

Tetiana Kalchenko («Handy Apps»)
Email: [email protected]
Website: handyapps.app

Pokémon is a trademark of Nintendo / The Pokémon Company. PikPik is not affiliated with, endorsed or sponsored by them.