Privacy Policy

1. Who we are

This Privacy Policy describes how Pentaa Studio ("Pentaa", "we", "us") collects, uses, stores, and shares information when you use our websites, web applications, and mobile applications published on the Apple App Store and Google Play.

2. Scope

This policy covers:

• Our marketing and product websites (including www.pentaa.studio, related Pentaa domains, and client portals we operate such as Pentaa OS)
• Mobile apps published by Pentaa (or under the Pentaa developer accounts) on the App Store and Google Play
• Related support channels (email, scheduling tools)

Individual apps may request only the permissions they need. On-device purpose strings explain each request. Practices can vary by app; see the sections below and any in-app privacy notice.

3. Our apps

Apps currently associated with our store accounts include (non-exhaustive; new apps may be added without changing this list immediately):

• SNiP ((com.pentaa.Snip)
• c0loria (com.c0loria.c0loria)
• 8 Min (com.pentaa.eightminutes)
• Trunks (com.goodbarber.trunks)
• CoproLive (com.jeemclr.coprolive)
• Dallers (com.pentaa.dallers)

4. Websites

4.1 Data we may collect

• Identity and contact details (name, email, phone, company) when you contact us or fill a form
• Project or business information you choose to share
• Scheduling and messaging history with our team
• Technical and usage data (IP address, browser, device, pages viewed, approximate location derived from IP) when analytics are enabled
• Billing-related identifiers when you purchase services (processed by payment providers)

4.2 Why we use it

• Respond to inquiries and provide our services
• Schedule and manage meetings
• Operate client portals and subscriptions
• Improve our websites and services (analytics, with consent where required)
• Security, fraud prevention, and legal compliance
• Marketing communications only with your consent or as otherwise allowed by law

4.3 Cookies and similar technologies

Our sites may use essential cookies (required for the site to work) and, with your consent where required, analytics cookies (for example Google Analytics / GA4). You can refuse non-essential cookies via our cookie banner or your browser settings.

5. Mobile apps (general)

Depending on the app, we may process the following categories. Not every app uses every category.

• Account / contact data: email, display name, profile photo, if the app offers accounts or invites
• User content: text, images, audio, video, or other content you create or upload
• Device permissions: camera, microphone, photo library, notifications, contacts, location, or similar, only when needed for a feature you use
• Purchases: product identifiers and entitlement status via Apple or Google; we do not receive your full payment card details
• Diagnostics: crash or performance data if enabled in a given app

5.1 On-device vs leaving the device

Some data stays only on your device (local storage / app sandbox). Other data may leave the device when a feature requires it (for example sync, sharing, accounts, or analytics). For App Store / Play “privacy nutrition labels”, treat data that never leaves the device as not “collected” by us in the platform sense, unless a feature transmits it.

5.2 Platform services

Apps may rely on Apple or Google infrastructure, including but not limited to: App Store / Google Play billing (StoreKit / Play Billing), push notifications, Sign in with Apple / Google Sign-In, iCloud / CloudKit, or similar. Those providers process data under their own terms and privacy policies.

5.3 Tracking and advertising

We do not sell personal data. By default, our apps do not include third-party advertising trackers used to track you across other companies' apps or websites. If a specific app introduces such tracking, we will disclose it in that app's store listing and update this policy.

6. SNiP (detail)

SNiP is a short-video moments app. Current practices:

• Local storage: your SNiPs and moments stay on your device (app sandbox). Metadata (titles, trim points, order) is stored locally.
• iCloud sharing: if you share a SNiP, Apple CloudKit syncs that content with people you invite. We do not run a separate SNiP account server. Sharing uses your iCloud identity and Apple's infrastructure.
• Camera & microphone: used only while you record a moment. Ambient audio is baked into each clip.
• Photos: SNiP writes to your photo library only when you choose Save to Photos or share an export.
• Purchases: SNiP Pro is processed by Apple. We do not receive your payment card details.
• Analytics & tracking: the current SNiP version does not include third-party ad trackers.

7. Legal bases (GDPR)

Where GDPR applies, we rely on:

• Contract: to provide the services or apps you request
• Legitimate interests: security, product improvement, and non-intrusive operations, balanced against your rights
• Consent: for non-essential cookies/analytics and certain marketing
• Legal obligation: when the law requires us to retain or disclose information

8. Sharing

We do not sell your personal data. We may share information with:

• Service providers acting on our instructions (hosting, analytics, email, scheduling, payments, authentication), under appropriate contracts
• Apple / Google as platform providers for apps and purchases
• Authorities when required by law or to protect rights and safety
• Other parties only with your direction (for example when you share content with collaborators)

9. International transfers

Some providers may process data outside the European Economic Area. Where required, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, or rely on the provider's certified transfer mechanisms.

10. Retention

• Website / client data: for the duration of the relationship and as needed afterward (typically up to 3 years for commercial follow-up; longer for accounting records when legally required)
• Analytics cookies: up to 13 months unless you withdraw consent earlier
• App content on device: until you delete it or uninstall the app
• Synced / account content: until you delete it or close your account, subject to backups and legal holds
• Purchase records: as retained by Apple / Google and as needed for support and compliance

11. Your rights

Depending on your location (including under GDPR), you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, email contact@pentaa.studio with the subject “Privacy request”. You may also lodge a complaint with the CNIL (www.cnil.fr) or your local supervisory authority.

For data stored only on your device, use the in-app controls or delete/uninstall the app. For iCloud / Google account data, use the relevant Apple or Google account settings as well.

12. Children

Our websites and apps are not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children under that age. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

13. Security

We apply technical and organizational measures appropriate to the risk (access controls, encryption in transit where applicable, least-privilege access, and provider security practices). No method of transmission or storage is 100% secure.

14. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated in-app or by email when appropriate. Continued use after an update means you acknowledge the revised policy.

15. Contact