Privacy Policy
Last updated: 19 July 2026
1. Controller
The controller responsible for processing personal data is: Bashar Al Halabi Remstedtstraße 39 22143 Hamburg Germany Email: hello@graphicalize.net
2. Scope
This Privacy Policy applies to the website graphicalize.net, the Wandl application with the package name com.graphicalize.wandl, other applications published by us that expressly link to this Privacy Policy and whose data practices correspond to the statements below, and contact and support requests sent by email. Where an application or feature uses different data practices, this Privacy Policy or supplementary privacy information will be updated accordingly.
3. Hosting and server logs
Our website and email communications are hosted by: ALL-INKL.COM – Neue Medien Münnich Owner: René Münnich Hauptstraße 68 02742 Friedersdorf Germany When a visitor accesses our website, the browser transmits technically necessary information to the web server. This may include: • IP address • date and time of access • requested page or file • amount of data transferred • browser type and version • operating system • previously visited page, where transmitted by the browser • HTTP status code and other technical request information Processing is necessary to deliver the website, maintain its stability and security, detect technical errors and prevent abusive access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of our website. We have entered into a data processing agreement with ALL-INKL.COM in accordance with Article 28 GDPR. According to the provider's contractual information, the web hosting uses storage systems located in Germany. Server logs are retained only for as long as necessary for secure operation, error analysis, the investigation of specific security incidents or compliance with statutory retention obligations.
4. External links
Our website contains ordinary links to Google Play and, in the future, the Apple App Store. A connection to the relevant provider is generally established only when the user actively opens the relevant link. From that point, further processing takes place under the responsibility of the relevant platform operator: Google Ireland Limited Gordon House Barrow Street Dublin 4 Ireland Apple Distribution International Limited Hollyhill Industrial Estate Hollyhill, Cork Ireland The privacy policy of the selected provider applies.
5. Local processing and storage
Our apps are generally designed to process files and content locally on the user's device. Depending on the selected function, our apps may access: • files and documents • images and videos • audio recordings and audio files • PDF files • content captured using the camera • content pasted by the user from the clipboard • locally generated or exported files Access takes place only to perform a function selected by the user. During ordinary application use, content is processed locally on the device. It is not automatically transmitted to us or to a server operated by us. We cannot view, retrieve or restore files selected, processed or generated by the user. To perform selected functions, our apps may store data locally on the device. This may include files selected by the user, temporary processing files, preview files and intermediate results, application settings, and files generated or exported by the user. Temporary data is deleted once it is no longer required for the relevant operation, to the extent technically possible. Local application data may be deleted through the device settings or by uninstalling the application. Exported files stored outside the application's protected storage may remain after the application is uninstalled and must be deleted separately by the user. Depending on the operating system and user settings, local application data may also be included in a device backup. Such backups are managed by the operating system or the relevant backup provider. We do not have access to them.
6. Internet access
The Android versions of our apps currently covered by this Privacy Policy do not require internet permissions for their ordinary core functions. During these functions, user files are not transmitted to us or to servers operated by us. Our apps are generally designed for local processing. Where an app or function downloads data or technical components from the internet or transfers data to an external service, the relevant privacy information will be added before or when that function is released.
7. Permissions and system access
Depending on the selected function, our apps may use: • camera • microphone • photos and videos • files and storage • notifications • clipboard A permission is used only where required for a function selected by the user. Granting a permission does not automatically transmit the relevant information to us. Permissions may be changed or revoked at any time through the operating-system settings. This may restrict or disable the relevant function. Notifications are used exclusively for functional notices, such as the status or completion of an operation initiated by the user. They are not used for advertising or profiling.
8. Support requests from our apps
When a user selects the support function within one of our apps, a message is prepared in the email application configured on the device. The app may include or prepare a diagnostic attachment containing the application version, operating-system version, device model, and technical diagnostic and log information. The email is not sent automatically. Before sending, the user can review the complete message, edit its contents, remove individual information or the diagnostic attachment, and cancel the process entirely. Information is transmitted to us only after the user consciously sends the message. The information is used exclusively to handle the specific request and investigate technical errors. It is not used for advertising, profiling or user tracking.
9. Contact by email
Contact and support requests may be sent to hello@graphicalize.net. Our email communications are processed on servers operated by ALL-INKL.COM. When a user contacts us, the following information may be processed: email address and sender name, subject and message content, voluntarily attached files, and technical information voluntarily supplied or included through a support function. The information is processed to handle and respond to the request. The legal basis is Article 6(1)(b) GDPR where the request concerns a purchase, contract or pre-contractual measures. For general contact and support requests, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is handling enquiries and resolving technical errors. Requests are deleted once conclusively resolved unless statutory retention obligations, warranty matters, security concerns or legal claims require further retention.
10. Android Vitals and store diagnostics
Our apps currently do not include a separate analytics or crash-reporting SDK. Google may automatically provide Android Vitals, stability and crash information through Google Play. This may include information about the application version, Android version, device type and technical cause of an error. We use this information exclusively to investigate technical errors and improve application stability. We do not combine it with support requests to create personal user profiles. Where Google collects information under its own responsibility, Google's privacy policy applies. Following an Apple App Store release, Apple may provide comparable diagnostic or crash information. It will also be used exclusively to improve our apps technically.
11. In-app purchases and app stores
Our apps may offer one-time in-app purchases or voluntary support purchases. Payment is processed through Google Play or, following an iOS release, through the Apple App Store. We do not receive complete credit card, bank account or other payment details. Depending on the store, we may receive technically necessary information, particularly purchase and entitlement status, purchased product, transaction or order reference, and refund information. This information is used only to provide, restore or administer the purchase and comply with legal obligations. When a user views, downloads, purchases or updates an application, Google or Apple may independently process account, device, installation, purchase, payment, diagnostic and review information. The relevant platform operator's privacy policy applies. We may receive aggregated sales, installation, purchase and stability information through the store platforms. We do not use it to create personal user profiles.
12. Recipients and international transfers
Depending on the relevant activity, personal data may be disclosed to ALL-INKL.COM as our hosting and email provider, Google as the operator of Google Play, Apple as the operator of the Apple App Store, external applications or services selected by the user for sharing, storing or sending a file, and public authorities or courts where disclosure is required by law. We do not sell personal data or disclose it for advertising purposes. According to the contractual information provided by ALL-INKL.COM, our website and email communications are hosted in Germany. When international platform providers such as Google or Apple are used, personal data may be processed outside Germany or the European Economic Area. The relevant platform provider is responsible for the processing and the transfer mechanisms it uses.
13. Retention
We retain personal data only for as long as necessary for the relevant processing purpose. Information may be retained for longer where statutory retention obligations apply, a support or warranty case remains unresolved, information is required to establish, exercise or defend legal claims, or a security incident must be investigated. Once the purpose no longer applies and relevant retention periods have expired, the information will be deleted or anonymised. Information stored locally on the device is generally controlled by the user.
14. Data subject rights
Subject to the applicable statutory requirements, individuals may have the following rights: • access under Article 15 GDPR • rectification under Article 16 GDPR • erasure under Article 17 GDPR • restriction under Article 18 GDPR • data portability under Article 20 GDPR • objection under Article 21 GDPR • withdrawal of consent with future effect under Article 7(3) GDPR • lodging a complaint with a supervisory authority under Article 77 GDPR Because files processed by our apps are generally processed exclusively locally and are not available to us, we cannot view, rectify, export or delete them. Users can manage such files directly on their devices. Requests may be sent to hello@graphicalize.net. Where processing is based on Article 6(1)(f) GDPR, the data subject may object on grounds relating to their particular situation.
15. Right to lodge a complaint
Individuals may lodge a complaint with a data protection supervisory authority. The authority generally responsible for our establishment is the Hamburg Commissioner for Data Protection and Freedom of Information. A complaint may also be submitted to another competent supervisory authority, particularly in the individual's place of habitual residence, place of work or place of the alleged infringement.
16. Security and updates
We use appropriate technical and organisational safeguards to protect personal data against loss, manipulation and unauthorised access. Our website is provided using an encrypted HTTPS connection. We will update this Privacy Policy where the actual processing activities of our website or apps, the service providers used or the applicable legal requirements change. The version published on this page is the applicable version.