Yasal Bilgilendirme

Personal Data Processing Notice (GDPR)

Effective Date: 23 February 2026

Data Controller Histora Lens
GDPR Contact: gdpr@historalens.com

We process your personal data when you use the Histora Lens mobile application in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679).

Categories of Personal Data

  • Account & identification data (display name, email address, avatar)

  • Device & technical data (device ID/UUID, platform, language, time zone)

  • Content data (photos of artifacts you upload or scan, processed thumbnails and AI results)

  • Location data (latitude and longitude – only with your consent)

  • Subscription & payment data (RevenueCat customer ID, credits, subscription status)

  • Technical & diagnostic data (crash reports, push notification token, usage logs)

Purposes and Legal Bases for Processing (GDPR Art. 6)
We process your data for the following purposes:
• Performance of contract (Art. 6(1)(b)) – creating and managing your account, delivering the artifact scanning service, processing subscriptions and credits
• Legitimate interests (Art. 6(1)(f)) – ensuring security, preventing abuse, improving app performance and stability
• Your consent (Art. 6(1)(a)) – processing location data and sending push notifications (you can withdraw consent at any time)
• Compliance with legal obligations (Art. 6(1)(c))

Recipients / Third-Party Processors
Your data may be shared with the following processors (all subject to GDPR-compliant data processing agreements):

  • RevenueCat (subscriptions & wallet)

  • Firebase / FCM (push notifications)

  • Google Sign-In, Apple Sign-In (social login)

  • Google AdMob (advertising & rewards)

  • Sentry (error monitoring)

  • AI/LLM providers (OpenAI, Gemini, DeepSeek – for artifact analysis)

  • TTS providers (Google TTS, ElevenLabs – for audio narration)

International Data Transfers
Some of our processors are located outside the EEA (primarily in the USA). We ensure adequate protection through Standard Contractual Clauses (SCCs) and additional technical/organisational safeguards.

Data Retention
We keep your data only as long as necessary for the purposes above or as required by law.
• Active account data: for the duration of your account
• After account deletion request: maximum 30 days (core data)
• Backups and technical logs: maximum 90 days
• Financial/subscription records: as required by applicable law

Your GDPR Rights
You have the right to:

  • Access, rectify or erase your data

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with your local supervisory data protection authority

To exercise any of these rights, please contact us at gdpr@historalens.com. We will respond within one month (free of charge in most cases).

Children
The app is not intended for children below the digital age of consent in your country (generally 13–16 years). Parental/guardian consent is required for younger users.

Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

By using Histora Lens you acknowledge that you have read and understood this notice.