Privacy Policy

Effective date: 20 February 2026  |  Last updated: 20 February 2026

1. Who We Are

This Privacy Policy is issued by:

• Company name: IKIT DEV s.r.o.
• Registration number: CZ22236490
• Registered address: Žižkovo náměstí 1152/6, Žižkov (Praha 3), 130 00 Praha, Czech Republic
• Contact email: info@ikit.dev
• Website: https://ikit.dev

We act as the data controller for personal data collected through our website and mobile applications, within the meaning of Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll. on personal data processing (Czech Republic).

2. What This Policy Covers

This policy applies to:

• Our website at https://ikit.dev
• Our mobile application: IKITQR (QR code scanner and generator)
• Any other services we operate that link to this policy

It does not cover third-party websites, services, or applications that we do not control, even if you access them through our products.

3. Data We Collect

We may collect the following categories of data, depending on which product you use:

3a. Data you provide directly

• Contact form (website): name, email address, and message content — collected when you submit our contact form at ikit.dev.

3b. Data collected automatically

• Usage data: screens or pages visited, features used, session duration, in-app actions (e.g. QR codes scanned or generated)
• Device information: device model, operating system, OS version, and anonymised device identifiers
• Network information: general geographic location (country/city), connection type
• Performance data: app startup time, response times, feature usage frequency

This data is collected via Firebase Analytics (see Section 5) and is aggregated and anonymised wherever possible.

3c. Data we do NOT collect

• We do not collect sensitive personal data (health, biometric, financial, or government identification).
• We do not store camera images. The IKITQR app processes QR codes in real time using your device camera; no images are saved, uploaded, or transmitted to our servers.
• We do not serve advertisements and do not collect advertising identifiers for ad-targeting purposes.
• We do not sell your personal data to third parties.

4. How We Use Your Data

We use collected data for the following purposes:

• Providing the service: to operate, maintain, and improve our website and applications
• Customer support: to respond to your enquiries submitted via the contact form
• Analytics: to understand how users interact with our products and to improve usability and performance
• Security: to detect and prevent technical issues and abuse
• Legal compliance: to meet obligations under applicable law

Legal basis (GDPR): Processing is based on our legitimate interests in operating a secure, functional service (Art. 6(1)(f) GDPR), performance of a contract / providing a requested service (Art. 6(1)(b)), and your consent where required by law (Art. 6(1)(a)).

5. Third-Party Services

We use the following third-party services that may process your data on our behalf:

• Contact form — GetForm.io: Your name, email address, and message are transmitted to and stored by GetForm.io when you submit our contact form. Please review their Privacy Policy.
• Fonts — Google Fonts (Google LLC): We load the Inter typeface from Google’s servers. Google may log your IP address when the font files are requested.
• Analytics — Firebase Analytics (Google LLC): Our mobile application uses Firebase Analytics to collect aggregated, anonymised usage data (app events, session duration, device type, OS version, and general location). Firebase Analytics does not collect personally identifiable information on its own. Data is processed by Google LLC and may be stored on servers in the United States. Please review Google’s Firebase Privacy information and Google’s Privacy Policy.
• App framework — Flutter (Google LLC): Our mobile application is built with the Flutter SDK (open source, Google LLC). Flutter itself does not collect or transmit personal data; it provides the runtime and UI framework for the app. Platform-level services (Android / iOS) may collect certain device telemetry independently under their own privacy policies.

We do not use crash reporting services, advertising networks, or payment processors.

6. Cookies and Tracking

Website (ikit.dev)

Our website does not use analytics or tracking cookies. The only browser storage used is what may be set by your browser when loading Google Fonts (a technical request to Google’s CDN). No marketing, profiling, or advertising cookies are placed.

Mobile app (IKITQR)

Mobile apps do not use browser cookies. The IKITQR app uses local device storage (Android SharedPreferences / iOS UserDefaults) to save your in-app settings and preferences. This data stays entirely on your device and is not transmitted to our servers.

You can clear all app data at any time through your device’s application settings.

7. Data Retention

• Contact form submissions: retained for up to 12 months to allow us to respond and follow up, then permanently deleted from GetForm.io storage.
• Firebase Analytics data: retained for up to 14 months in accordance with Firebase Analytics default retention settings. You may request earlier deletion — see Section 8.
• Local app data: retained on your device until you uninstall the application or clear app data via device settings.

When retention periods expire, data is securely deleted or anonymised.

8. Your Rights

As a data subject under GDPR (and Czech Act No. 110/2019 Coll.), you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — request a copy of the personal data we hold about you
• Right to rectification (Art. 16) — request correction of inaccurate or incomplete data
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
• Right to restriction of processing (Art. 18) — request that we limit how we process your data
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)) — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, or to request deletion of your data, please contact us at:
info@ikit.dev

We will respond within 30 days of receiving your request (extendable by a further two months for complex cases, with notification).

You also have the right to lodge a complaint with the Czech supervisory authority:
Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7
www.uoou.cz

9. Children’s Privacy

Our services are not directed at children under the age of 16 (the applicable age in the EU/EEA under GDPR). We do not knowingly collect personal data from children, and our applications have no features designed for or targeted at children.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us at info@ikit.dev and we will delete that information promptly.

10. International Data Transfers

We are based in the Czech Republic, European Union. Some of our third-party service providers (Google LLC / Firebase, GetForm.io) may process data outside the EU/EEA, including in the United States. When such transfers occur, they are carried out under appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission (Art. 46(2)(c) GDPR)
• Providers participating in applicable adequacy frameworks recognised by the EU

You can request further information about the specific safeguards applied by contacting us at info@ikit.dev.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make material changes, we will:

• Update the “Last updated” date at the top of this page
• Post a notice within the application where practically feasible

We encourage you to review this page periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please contact us:

• Email: info@ikit.dev
• Company: IKIT DEV s.r.o.
• Registration number: CZ22236490
• Address: Žižkovo náměstí 1152/6, Žižkov (Praha 3), 130 00 Praha, Czech Republic