Last updated: 2026-09-14 · Version: 1.1
Applies to: mcpro35mm Android application (package lv.mcprotector.mcpro35mm), distributed via Google Play, Huawei AppGallery, Samsung Galaxy Store, and RuStore.
Related documents: the End-User License Agreement for mcpro35mm (licence terms, offline period, purchase transfer) and the Account and Data Deletion page.
This policy describes what personal data the mcpro35mm app collects, why it is collected, where it is stored, and your rights regarding that data. Sections about store-specific services (sign-in, billing, analytics) apply only to the store the app was downloaded from. If you installed the app from Google Play, the Huawei / Samsung / RuStore sections do not apply, and vice versa.
1. Who we are
| Data controller | CHANTAL PRO SIA |
| Address | 16-34 Bebru iela, Jekabpils, Jekabpils novads, LV-5201, Latvia |
| Contact | info@mcpro24fps.com |
| Application | mcpro35mm — professional manual camera for Android |
| Website | https://mcpro24fps.com |
If you have questions about this policy or your data, write to info@mcpro24fps.com.
2. Summary (what we do and don't collect)
We collect, only when necessary:
- Your Google email address (after you sign in with Google).
- Your Google Play purchase token (only after you buy the app).
- Crash reports — always sent, and usage statistics — can be switched off. The two are not the same switch; see §3.3.
We never collect:
- The photos you take. They stay on your device.
- Your microphone / audio.
- Your contacts, SMS, calendar, call history.
- Your phone number or IMEI.
- An advertising identifier. The app shows no advertising and contains no advertising SDK. On builds that use Google services the advertising ID is not collected on any Android version — the permissions are removed at build time and collection is switched off inside the analytics SDK itself. On the AppGallery build Huawei's own advertising identifier (OAID) is switched off explicitly.
- Your precise location — unless you explicitly enable the "Geolocation" toggle, and even then the coordinates are written only into the EXIF metadata of your photos on your device. They are never uploaded to our servers.
3. What data we collect and why
3.1 Account email (mandatory for license)
What: The email address associated with your store account (Google account on Google Play; Huawei ID on Huawei AppGallery; Samsung account on Galaxy Store; phone/email on RuStore). When: Only after you tap "Sign in" on the first-launch screen. Why: To identify your license (trial, free, or premium) across app reinstalls and devices. Stored on: Our server api.mcpro24fps.com, in a PostgreSQL database hosted in the European Union. Legal basis (GDPR Art. 6): Contract performance — we cannot deliver the license service without identifying the account.
If you skip sign-in, the app runs in free mode with no data transmitted to our server.
What each request carries. Besides your email address and the name of the store, a request includes a freshly generated random value (a nonce, so that a signed answer cannot be replayed on another device) and a header with the signing-certificate fingerprint of the installed app, which lets our server reject tampered copies. Nothing about your photos, your settings or your device contents is sent.
Verification log. Our server records attempts to verify a licence or a purchase: timestamp, the endpoint called, email, store, the outcome, and the IP address the request came from. A raw purchase token is never written to this log — only a short hash of it. The log exists to investigate failed purchases, support requests and abuse. Legal basis: legitimate interest in the security and correct operation of the licence service.
Linked addresses. If your store account becomes unusable — a store leaves your country, an account is blocked — we can attach an additional email address to the same purchase at your request, up to three per purchase. Those addresses are stored alongside the purchase for the same purpose and the same period.
3.2 Purchase data
What: The purchase token (and/or invoice ID / order ID depending on the store), product ID (mcpro35mm_full), and package name. We never see or store your payment card details — those stay with the store operator (Google, Huawei, Samsung, or RuStore). When: Only after you complete a successful in-app purchase. Why: To verify the purchase through the store's purchase-verification API and unlock the premium license on your account. Stored on: Our server api.mcpro24fps.com: the order ID, store name, product ID, package name, licence state and timestamps, and the purchase token itself. The token is kept because a purchase has to be re-checked with the store afterwards — that is how a refunded or reversed purchase stops unlocking the app. It is not used for anything else and is never shared. Legal basis: Contract performance.
The specific purchase-verification API called on our server depends on which store the app was downloaded from:
- Google Play → Google Play Developer API
- Huawei AppGallery → Huawei IAP Server API
- Samsung Galaxy Store → Samsung IAP Server API
- RuStore → RuStore Public Purchase API
3.3 Crash reports and usage statistics
What: Stack traces of crashes and of non-fatal errors, device model and manufacturer, Android version, app version, camera identifiers and a snapshot of the camera configuration at the moment of the fault. We log no usage events of our own — nothing about your settings, your shots or how you use the app is sent by us. What applies is only what the analytics SDK collects by itself: app first open, session start, app version, device model, a coarse region derived from your IP address, language, and an identifier the SDK generates for the installation. How: The analytics provider depends on the store build:
- Google Play build → Firebase Crashlytics + Firebase Analytics (Google).
- Huawei AppGallery build → Huawei Analytics Kit (HUAWEI).
- Samsung Galaxy Store / RuStore builds → no third-party analytics.
Why: To diagnose bugs and improve stability. Stored on: The analytics provider's servers under their data protection (Firebase Privacy / HUAWEI Analytics Privacy). Legal basis: Legitimate interest in maintaining a stable product.
What the switch does. More Menu → Send statistics → off turns off the analytics SDK: no usage statistics are collected while it is off.
Crash reports are not covered by that switch and are always sent. We state this plainly rather than leave it implied: a camera application that fails silently costs you a photograph, and crash reports are what make those failures fixable. A report carries a random installation identifier created by the SDK, not your account, and cannot normally be linked to you. If you want a specific report deleted, write to us with the date, device model and app version (§7).
3.4 Optional geolocation (EXIF, local only)
What: GPS coordinates at the moment of capture. When: Only if you enable the Geolocation toggle in the Photo menu and grant the location permission. Why: Embedded into the metadata of the files you produce — EXIF in JPEG and in DNG — for your own reference. Remember that anyone you later send a file to can read those coordinates; strip the metadata before publishing if that matters. Stored on: Only inside the photo file on your own device. Never uploaded. We do not receive your location on our servers. Legal basis: Consent (you enable the toggle explicitly).
You can revoke location access at any time via Android system settings; the app will silently skip GPS embedding.
3.5 Bluetooth
The app requests Bluetooth permissions only to connect to an optional BLE remote shutter accessory. Scan is declared as neverForLocation — Android will not derive location from scan results. No Bluetooth data is sent to our servers.
3.6 Storage (local)
Photos are saved to your device at DCIM/MCPro35mm/. App settings, the cached licence state and your signed-in email are stored in the app's private storage, which other applications cannot read. The app sets android:allowBackup="false", so Android's cloud backup does not copy any of it off your device.
3.7 Licence checks and the offline period
Once you are signed in, the app asks our server to confirm your licence state at most once every 24 hours. The request carries what §3.1 describes; the answer is signed so the app can tell it came from us.
If the device has no connection, the last confirmed state stays valid for 14 days. After 14 days without a single successful check the app returns to the free mode until it can reach our server again; nothing is deleted and the next successful check restores your licence immediately. The exact licence terms are in the End-User License Agreement for mcpro35mm.
4. Third parties
Which third-party services are used depends on the store build you installed. Only one row of each "Sign-in / Billing / Analytics" group is active for a given install.
4.1 Google Play build
| Service | Data shared | Purpose | Provider |
|---|---|---|---|
| Google Sign-In | Email, OAuth ID token | Authenticate account | |
| Google Play Billing | Purchase token, product ID | Process purchase | |
| Google Play Developer API | Purchase token (from our server) | Verify purchase | |
| Firebase Crashlytics | Crash traces, device info | Diagnostics | |
| Firebase Analytics | Anonymous events | Stability metrics | |
| Google Play In-App Review | App rating prompt | Collect reviews |
4.2 Huawei AppGallery build
| Service | Data shared | Purpose | Provider |
|---|---|---|---|
| Huawei Account Kit (HMS) | Huawei ID email, unionID | Authenticate account | Huawei |
| Huawei IAP | Purchase token, product ID | Process purchase | Huawei |
| Huawei IAP Server API | Purchase token (from our server) | Verify purchase | Huawei |
| Huawei Analytics Kit | Crash traces, anonymous events | Diagnostics | Huawei |
4.3 Samsung Galaxy Store build
| Service | Data shared | Purpose | Provider |
|---|---|---|---|
| Samsung Account | Authenticate account | Samsung | |
| Samsung IAP | Purchase ID, item ID, payment ID | Process purchase | Samsung |
| Samsung IAP Server API | Payment ID (from our server) | Verify purchase | Samsung |
4.4 RuStore build
| Service | Data shared | Purpose | Provider |
|---|---|---|---|
| RuStore auth | Phone or email | Authenticate account | VK / RuStore |
| RuStore Billing | Invoice ID, product ID | Process purchase | VK / RuStore |
| RuStore Public Purchase API | Invoice ID (from our server) | Verify purchase | VK / RuStore |
4.5 Privacy policies of providers
- Google — https://policies.google.com/privacy
- Firebase — https://firebase.google.com/support/privacy
- Huawei — https://consumer.huawei.com/en/privacy/privacy-policy/
- Samsung — https://www.samsung.com/global/privacy/
- RuStore (VK) — https://rustore.ru/help/legal/privacyPolicy
5. Where your data is stored
- Our server (
api.mcpro24fps.com) is hosted in the European Union. Your email, purchase tokens, order records, linked addresses and the verification log are stored there in a PostgreSQL database. - Store operators (Google, Huawei, Samsung, VK/RuStore) store authentication and billing data on their own infrastructure and may transfer it across jurisdictions under their own data-protection safeguards. Only the store you installed the app from is involved.
- Photos you capture stay on your device.
6. How long we keep data
| Data | Retention |
|---|---|
| Email + license state | Until you request deletion, or 3 years after last app launch, whichever comes first. |
| Purchase records | Anonymized on your deletion request, then kept as pseudonymous accounting records for the statutory period (5 years under Latvian Law on Accounting, Art. 10), after which they are automatically deleted. |
| Verification log (§3.1) | Kept while it is needed for support and abuse investigation, and deleted on request together with the rest of your data. |
| Crash reports | Managed by Firebase Crashlytics default retention (typically 90 days for crash details). |
| Analytics events | Managed by Firebase Analytics retention settings (default 14 months). |
| Photos on your device | Kept as long as you keep them; we have no access. |
7. Your rights (GDPR / CCPA)
You have the right to:
- Access — request a copy of the data we hold about you.
- Correct — ask us to fix inaccurate data (e.g. wrong email).
- Delete — ask us to erase your data (subject to accounting retention requirements for purchase records).
- Export (portability) — receive your data in a machine-readable format.
- Object / restrict — ask us to stop processing, where applicable.
- Withdraw consent — for optional features (statistics, location) you can withdraw consent at any time via the app settings.
- Lodge a complaint with the supervisory authority (Data State Inspectorate of Latvia — https://www.dvi.gov.lv/en).
To exercise any of these rights, email info@mcpro24fps.com from the email address associated with your account. We will respond within 30 days.
8. Children
mcpro35mm is a professional photography tool and is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted personal data, write to info@mcpro24fps.com and we will delete it promptly.
9. Security
- Communication between the app and our server uses HTTPS / TLS.
- Server responses from
api.mcpro24fps.comare cryptographically signed (Ed25519) so the app can verify authenticity. - The licence state cached on your device is kept in the app's private storage, which other applications cannot read. It is not additionally encrypted: on a device without root access the private storage is already inaccessible to other apps, and the cached state is re-confirmed by the server, so a locally altered copy does not grant access. We say this explicitly because an earlier version of this page claimed encrypted storage that the app did not actually use.
- The answers our server sends are verified inside a native library, not only in Java, so a redirected or faked
api.mcpro24fps.comcannot unlock the app. - Our server runs in a hardened, non-root Docker container behind a reverse proxy managed by our hosting control panel (Plesk).
No system is 100% secure, but we follow current best practices.
10. Changes to this policy
We may update this policy to reflect changes in the app, in the services we use, or in the law. The "Last updated" date at the top will be bumped and any material change will be announced in the app's release notes.
11. Contact
CHANTAL PRO SIA, registration number 40103332030, VAT LV40103332030
16-34 Bebru iela, Jekabpils, Jekabpils novads, LV-5201, Latvia
info@mcpro24fps.com