Privacy policy
Last updated 22 October 2026.
Who is responsible
The controller of any personal data described here is BitAlloc d.o.o., Ulica Križnog puta 90, 10000 Zagreb, Croatia (OIB 51729437531), reachable at info@bitalloc.com. We have not appointed a data protection officer; the company is below the thresholds that require one.
The short version
Kadar itself collects no personal data. Photographs, camera frames and motion readings are processed on your device and never leave it. The only data that leaves your phone is what is needed to process a Kadar Pro purchase and, only if you agree, a crash report. This policy explains what that involves.
What the app accesses on your device, and why
- Camera: to show the live picture and take photographs. Frames are processed on the device.
- Photos: to save what you capture, show the last photograph, and open photographs in Review and Photo Lab. Kadar reads only what you open in it and writes only what you capture or export.
- Motion sensors: to draw the level and orient photographs. Readings are used live and never stored.
Kadar asks for each permission when it is first needed and works without the ones you decline, with the matching feature unavailable. None of this data is transmitted to us or to anyone else.
Purchases (Kadar Pro)
Kadar Pro is sold through the Apple App Store and Google Play. Apple and Google are the sellers and handle your payment, invoices, renewals and refunds under their own terms and privacy policies; we never receive your name, address or payment details.
To unlock what you bought, restore it on another phone and keep subscriptions in sync, the app uses RevenueCat (RevenueCat, Inc., 1 Letterman Drive, San Francisco, CA 94129, USA), which processes on our behalf: a random identifier the app creates for your installation, the store’s purchase receipt and transaction identifiers, the product bought, your device type, operating system and app version, your country, and the IP address of each request.
Legal basis: performance of the contract with you (GDPR article 6(1)(b)). Retention: for as long as the purchase or subscription record is needed to grant access and to meet our accounting duties. RevenueCat acts under a data processing agreement with us; transfers to the United States are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses. You cannot buy Kadar Pro without this processing; the free features of Kadar work without it.
Crash reports
If Kadar closes unexpectedly, it records a crash report on your phone. The report is sent only if you agree: on its next launch Kadar asks whether to send it (Send, Always send or Don’t send), and Settings, Privacy, Send crash reports automatically turns automatic sending on or off at any time. Until you agree, nothing is sent.
We use Firebase Crashlytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes on our behalf: where in the app the crash happened and the app’s state at that moment, your device model, operating system and app version, free memory and storage, screen orientation, whether the device is rooted or jailbroken, a random installation identifier created by Firebase, and the IP address of the upload. Crash reports never contain your photographs, and we do not link them to your RevenueCat ID or to any purchase.
Legal basis: your consent (GDPR article 6(1)(a), and, for the identifier stored on your device, article 5(3) of the ePrivacy Directive as implemented in Croatian law). You can withdraw it at any time in Settings; reports already sent are not affected. Retention: crash reports are kept for 90 days, then deleted. Google acts under the Firebase data processing terms; transfers to the United States are covered by the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
When you write to us
If you email info@bitalloc.com, we process your email address and what you write in order to answer. Legal basis: our legitimate interest in handling your request, or the contract if it concerns a purchase. We keep support correspondence for 24 months after the last message, then delete it.
Beta testing
If you join a test version of Kadar through TestFlight or Firebase App Distribution, Apple or Google process your email address to deliver the builds, under their terms. We see the email addresses of the testers we invited and nothing else.
Analytics and advertising
None. Kadar contains no analytics or advertising SDK and does not track you across apps or websites. Crash reports, described above, are sent only with your consent and are used only to fix crashes. This website sets no cookies.
Children
Kadar is a general-audience camera, not directed at children.
Your rights
Under the GDPR you may ask us for access to, rectification or erasure of your personal data, restriction of or objection to its processing, and a copy in a portable format. Because the app identifies you only by a random installation identifier, we may ask you for that identifier (shown in Settings, Purchases, as your RevenueCat ID) to find your record. You have the right to lodge a complaint with a supervisory authority, in Croatia the Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr. We make no decisions about you by automated means.
Changes
If this policy changes, the new version is published here with its date. A change that affected your data would be shown in the app before it took effect.