Your Rights
Depending on your location, you may have the right to:
Access the personal data we process
Request correction or deletion
Object to or restrict certain types of processing
Request data portability
Opt out of the sale or sharing of personal data (we do not sell or share data)
Withdraw consent at any time
To exercise these rights, contact us at legal@greenbubbletech.com. We will respond within the time required by law. [Lawyer: confirm verification steps and response timelines.]
What Personal Data We Process
We process only the information required to provide the App’s core functionality:
Photos and videos you choose to view or back up
Text messages (SMS/MMS) you choose to back up
Contacts — read only on your device, to correctly label who your messages are from; your contact list is not uploaded to us
Files the App creates for your backups
Your email address, for authentication and account identification
Technical data for app performance (device model, OS version, crash logs)
Permissions you grant within the App
We never scan, analyze, sell, or mine your personal content, and we never use it for advertising, profiling, or to train AI.
Where Your Data Is Stored
When you back up, you choose where your content is stored:
Gallery+ storage — our own secure cloud storage, provided through our infrastructure partner, Cloudflare R2. Content is stored on these servers and is never scanned, sold, or mined.
Your own cloud — if you connect Google Drive or Dropbox, your backups are stored in your account with that provider.
Backups are encrypted in transit (HTTPS/TLS) and at rest, whichever storage you choose.
The Gallery+ Vault adds end-to-end encryption for your most sensitive files: they are encrypted on your device with a key only you hold, so we cannot access, decrypt, or recover Vault contents.
Legal Basis for Processing (GDPR)
We process data based on:
Your consent (e.g., enabling backups, connecting a cloud provider, granting permissions)
Performance of a contract (providing the backup and storage service you sign up for)
Legitimate interests (app performance, security, crash diagnostics)
We do not use your data for profiling, marketing, or automated decision-making. [Lawyer: confirm the correct lawful basis mapped to each processing purpose.]
Data Storage & Transfer
Your backup content is stored either on Gallery+ storage (Cloudflare R2) or in the cloud provider you connect, as you choose.
Content is encrypted in transit and at rest.
For content you store with your own provider, that provider may store data in various regions under its own policies.
Vault content is end-to-end encrypted and cannot be decrypted or recovered by us.
When you connect your own cloud, the App accesses only the files and folders it creates and does not access or scan any other files.
International transfers: If you are outside [region], your data may be stored or processed in [region]. [Lawyer: specify R2 region and transfer mechanism, e.g., Standard Contractual Clauses, for EU/UK users.]
Revoking Access & Deleting Data
You may delete your backups at any time from within the App, from Gallery+ storage, or directly from your cloud provider.
If you use your own cloud, you may revoke the App’s access through your provider’s account settings.
Content you delete is removed from Gallery+ storage [confirm timeframe]; content in your own cloud is removed from that provider when you delete it there.
You may request account deletion or data removal through our Account Deletion Request form.
No Selling or Sharing of Personal Data (CCPA)
We do not sell, rent, or share your personal information with third parties. We do not use your data for advertising or for analytics beyond basic crash diagnostics.
Security Measures
Encryption in transit (HTTPS/TLS) and at rest
End-to-end encryption for Vault content, where only you hold the key
Access limited to only the files and folders the App creates in a connected cloud account
No access to other files in your cloud account
Strict internal limits on who can access systems holding user content, and a commitment never to scan, sell, or mine it
Contact for Data Requests
To submit a GDPR or CCPA request, email: legal@greenbubbletech.com