Privacy Policy

Last updated and effective: 1 November 2026

This policy explains what information WaterMarkIt (“the app,” “we”) collects, how it’s used, and your choices. It covers the mobile app published on Google Play by XP Developer, with package id com.xpdev.watermarkit.

1. Summary (plain English)

• WaterMarkIt puts a watermark on your photos. It doesn’t need a user account. The app doesn’t upload your photos: the watermark is drawn on your phone and the finished photo is saved to your phone’s gallery when you save it. Your templates, logos, settings and a short list of recent exports stay on your phone, and the app doesn’t keep copies of the photos you pick or save. We have no servers of our own apart from a small relay that passes on an app-development request you choose to send (section 2.8), and the app has no analytics or crash reporting of its own.
• The free app shows ads from Google AdMob: a banner on the home screen and an optional video ad. Where the law requires it (the EEA, the UK and Switzerland), the app asks for your consent first, and nothing loads before you agree. AdMob is Google’s software inside the app, and it collects some information itself (section 2.5).
• The app doesn’t contain its fonts. It downloads them from Google Fonts, so Google sees your device’s IP address when a font is downloaded (section 2.4).
• Pro is a one-time purchase made through Google Play, and it removes the ads. Pro users get no ads, and the ad software isn’t started for them. Google’s own terms and privacy policy apply to that purchase.
• Settings → “Need your own app?” lets you ask the developer to build an app for you. Only what you type there (your name if you give it, how to reach you, and what you would like built) is sent, and only when you tap Send (section 2.8).

2. Information we collect

Nothing, ourselves, apart from the app-development request you choose to send (section 2.8). We don’t collect, receive, or store any other information from your use of the app on any server of ours. The app does contain Google’s advertising software (AdMob), which collects some information itself (section 2.5), and it downloads its fonts from Google Fonts (section 2.4). This section also describes what the app keeps on your device and what happens when you use its features.

2.1 Stored on your device

• Your saved watermark templates: the name, the watermark text you typed (which could be a name, a web address or a phone number) and the style settings (font, colour, size, opacity, position and so on).
• Logos you import (Pro): a copy of the picture, scaled down to at most 1,024 pixels on its longest side. A logo stays in the app’s storage while a template, a recent export or your last watermark uses it, and is removed at a later launch once none does.
• Your recent exports: the date, the watermark settings used and a small thumbnail (at most 320 pixels on its longest side) for each of your latest 6 saved photos. Turning off “Save history” in Settings deletes them and stops new ones being kept.
• Temporary photo copies in the app’s private cache: Android’s photo picker and the share sheet make a copy of a photo you pick or share, and saving makes a temporary file. The app deletes each one after use and sweeps any left over the next time it starts. It doesn’t keep copies of your photos.
• Your settings, such as language, theme and your default watermark colour, font and opacity, and your choice about “Save history”.
• Whether Pro is unlocked, and two small values for the rating prompt: a count of your saved exports and whether the prompt has been requested (section 2.7).
• The font files the app downloaded (section 2.4).

All of the above is stored in the app’s private storage on your device and is never sent to us — we don’t have servers for it.

If backup is turned on in your Android settings, Android may include this data in your own Google account backup, so it can come back when you reinstall WaterMarkIt or move to a new phone. Android doesn’t back up an app’s cache folder, so the temporary photo copies and the Recents thumbnails kept there are not part of it. That backup is managed by Android and your Google account, and we can’t see it.

2.2 Photos

When you choose a photo to watermark, pick a logo, or pick photos for Batch (a Pro feature), WaterMarkIt opens Android’s photo picker. The app receives only the photos you pick and does not read the rest of your photo library. It doesn’t use your camera.

The watermark is drawn on your phone. The app doesn’t upload the photo you chose or the finished photo, and it doesn’t send your watermark text anywhere.

2.3 Saving and sharing

When you tap Save to Photos, the finished photo is written to your phone’s gallery, in the Pictures/WaterMarkIt folder (on some versions of Android, in Pictures itself), with “_wm” at the end of its name (the original photo’s name, or the date and time when Android doesn’t share the name). On Android 9 and older, Android asks for permission to write to your storage for this; the app uses it only to save photos. Saved photos are ordinary files in your gallery, outside the app’s private storage.

When you tap Share, the app hands the finished photo to Android’s share sheet. You choose where it goes. The app doesn’t send it anywhere itself, and the app you choose handles it under its own privacy policy.

2.4 Fonts (Google Fonts)

WaterMarkIt doesn’t include its fonts. The first time the app needs a typeface, for its own screens or for a watermark, it downloads that font file from Google Fonts (fonts.gstatic.com) and keeps it on your phone, so the same font isn’t downloaded again.

A download is an ordinary web request, so Google receives your device’s IP address and the usual details of such a request. The request identifies only the font file: it contains nothing about your photos or your watermark text. Google’s handling of it is described in its Privacy Policy and in the Google Fonts FAQ.

2.5 Advertising (Google AdMob)

The free app shows ads served by Google AdMob: a banner at the bottom of the home screen and an optional video ad. When you export a photo, you can watch the video ad to remove the “MADE WITH WATERMARKIT” badge from that photo. The app asks AdMob for this video when the export screen opens, and shows it only if you tap Watch ad. There are no full-screen ads between screens and no app-open ads.

Before any ad is requested, the app asks for your consent through Google’s User Messaging Platform where the law requires it (the EEA, the UK and Switzerland). Until consent is given, no ad loads. In Settings, “Privacy choices” lets you change or withdraw that consent at any time. Buying Pro removes the ads: for a Pro user the app doesn’t ask for consent and doesn’t start the AdMob software.

To show, measure, and protect these ads, AdMob may receive your device’s advertising ID, an approximate location worked out from your IP address, your interactions with ads, and diagnostic information. The ads may be personalised. You can reset or delete your advertising ID, or opt out of ad personalisation, in your Android settings.

Google’s handling of this data is described in its Privacy Policy and in How Google uses information from sites or apps that use our services.

2.6 Purchases (Google Play Billing)

If you buy Pro, the purchase is processed by Google Play. We receive no payment details. The app only asks Google Play whether your account has bought Pro, and keeps a yes/no flag on your device so Pro stays unlocked when Google Play can’t be reached. The purchase screen and the connection to Google Play come from Google’s Play Billing Library, so Google’s own terms and privacy policy apply to that processing: Google Play Terms of Service and Google Privacy Policy.

2.7 Rating prompt

After you have saved a couple of photos, Google Play may show its in-app review sheet. Google handles it, and we receive no rating or review from it. The app only keeps, on your phone, a count of your saved exports and whether the sheet has been requested.

2.8 App-development requests you send

Settings → “Need your own app?” opens a form for asking the developer to build an app for you. Nothing is sent until you tap Send. The app never sends it in the background and never keeps a request to send later.

• What is sent: your name, only if you type one (it is optional); the contact you type so the developer can reply (an email address, a phone number for WhatsApp, or a Telegram username); the description of the app you would like built; and, so the developer knows where the request came from, the app’s name and version and the language the app is shown in.
• What is never sent: anything else from the app or your phone: not your photos, watermarks, templates or logos, no identifier of you or your phone (no install id, no advertising id), and not your location.
• Where it goes: over an encrypted connection to a small relay that the developer runs on Cloudflare Workers, which forwards it to the developer’s Telegram account. Cloudflare and Telegram handle it only to deliver it, under their own terms and privacy policies. The relay does not store or log your request; it keeps only a count of requests per day and a short-lived rate-limit counter tied to your IP address, to stop abuse.
• What it is used for: only to read your request and reply to you through the contact you gave. It is not used for ads, analytics or profiling, it is not added to any mailing list, and it is not shared or sold.
• How long it is kept, and deleting it: the request stays in the developer’s Telegram chat until it is deleted. Ask for its deletion by email to xpnazar@gmail.com, or by replying through the contact you gave, and the developer will delete it within 30 days and confirm.

3. How we use the data

• Draw the watermark on the photos you choose and save the result.
• Show your templates and recent exports, and remember your settings and whether Pro is unlocked.
• Load the fonts the app draws with.
• Decide when an ad may be shown.
• Read and answer the app-development requests you choose to send.

Nothing is used for analytics or profiling by us.

4. Data we never receive

• Your name, email address, or phone number, unless you type them into the app-development request form (section 2.8).
• Your contacts, or your photo library — only the photos you pick.
• Your precise location.
• Your photos, your watermark text, your templates or your logos — they stay on your phone unless you share a photo yourself.
• Payment card or account details. Google Play handles the Pro payment (section 2.6).

What Google AdMob collects (section 2.5) goes to Google, not to us. AdMob only gives us totals, such as how many ads were shown. In the same way, Google Fonts receives the font downloads (section 2.4) and we see nothing of them.

5. Your choices

• Privacy choices — where the law requires consent for ads, Settings shows “Privacy choices”. Open it to see Google’s consent form again and change or withdraw your consent. Ads then follow your new choice.
• Save history — turn it off in Settings to delete your recent exports and their thumbnails and stop keeping new ones.
• Android’s ad settings — reset or delete your advertising ID, or opt out of ad personalisation, in your phone’s settings.
• Pro — a one-time purchase that removes the ads. You can see your purchases in Google Play.
• Your photos — you pick every photo yourself, and no photo leaves the app unless you tap Share.
• Templates — delete any saved template in My templates.
• Photos you saved — they are ordinary files in your gallery, so delete them there. Uninstalling WaterMarkIt does not delete them, or any copy you shared.
• Clear data or uninstall — in your phone’s app settings, clearing the app’s cache removes the temporary photo copies and Recents thumbnails kept there, and clearing its storage or uninstalling WaterMarkIt removes everything else the app keeps on your phone. If you use Android backup, your Google account may keep a backup copy until Android removes it or you delete it in your backup settings.
• App-development requests — nothing is sent unless you tap Send, and your name is optional (section 2.8).

6. Children

WaterMarkIt is a photo tool and is not directed at children. Its target audience is 18 and over. We collect no personal information ourselves, from anyone, apart from what someone chooses to write in an app-development request (section 2.8), and we don’t knowingly collect any from children under 13. If a child has sent us a request, email us and we will delete it.

7. Data retention

The only data we may hold about you is an app-development request you chose to send (section 2.8); we delete it within 30 days when you ask: email xpnazar@gmail.com with roughly when you sent it and the contact you gave, and we reply to confirm. Data the app stores stays on your device (and in your Android backup, if you use it) until you delete it in the app, clear the app’s storage, or uninstall WaterMarkIt. Photos you saved stay in your gallery until you delete them there. Information that Google collects for ads, or receives when it serves fonts, is kept by Google under its own policy; you can reset or delete your advertising ID in your phone’s settings.

8. Third parties and international transfers

WaterMarkIt’s own code sends no data to any server of ours, except an app-development request you choose to send, which goes through Cloudflare to Telegram (section 2.8). The app uses three Google services. AdMob runs inside the app and serves the ads. Google Fonts serves the font files. Google Play handles purchases and the rating prompt. They run on Google’s global infrastructure, including servers in the United States, under Google’s own terms and privacy policy. If you tap Share, the app you choose handles the photo under its own privacy policy.

9. Changes to this policy

We may update this page when we add features or change providers. The “Last updated” date at the top of the page reflects the most recent revision. Material changes will be announced in the app’s Play Store release notes.

10. Contact

Questions, requests to delete data, or anything else:
xpnazar@gmail.com