ActaFoto Pro privacy policy

Status and reviewed version

Draft for the operator’s review, prepared on 6 November 2026 for ActaFoto Pro 1.0.0, versionCode 2, package es.actafoto.pro. The app is an evaluation candidate and a valid public download listing has not been verified.

Carlos Blanco, an individual, is the operator of Carapato Labs, this website and the AnnaLyzer and ActaFoto Pro applications. Address supplied by the operator: Carrer es es migjorn s/n, Ferreries, Menorca, Spain. Contact and privacy: info@carapatolabs.com.

Information you enter

The app can store client names, roles, email addresses, phone numbers, addresses and notes; professional or business details; properties; inspections, areas, observations, photos, inventory, readings and drawn signatures. It also produces reports.

Content depends on what you choose to enter or import. The client directory is internal: no access to the device address book was found. Record and asset identifiers are internal, not device advertising identifiers.

Local processing and external services

The reviewed APK does not have Internet permission and does not include a synchronisation server, accounts or its own network client. Inspection records are managed on your device. No advertising, analytics, purchasing or AI SDKs were found.

Photos are taken through the Android camera app. Image selection, saving and sharing use system controls that you initiate. Your camera, keyboard, file provider, receiving app or Google Play may communicate under their own policies. Choosing cloud storage or sending a report may take content off your device at your request.

The APK does not request its own camera, location or microphone permissions, or broad access to images or storage. It uses access grants for chosen files. It does not track your location.

Photos and metadata

Original images are preserved without modification and may contain EXIF information, including the source camera’s location if present. The absence of a location permission does not remove that information from an original photo.

Derived images and PDFs do not copy original EXIF information in the reviewed flows. ZIP exports and backups can include originals; review their contents before sharing.

Storage and retention

Data is stored in a private Android SQLite database and files, including images, signatures, thumbnails and PDFs. It remains until you delete it. Archiving an inspection keeps it; it does not erase it. Assets used by revisions or other records remain while referenced.

The app uses private cache for work, camera and export files. Temporary files older than 24 hours are cleaned when the app starts; there is no continuous timer guaranteeing deletion exactly after 24 hours. An unexpected shutdown may leave files until the next cleanup.

Backups and security

Automatic Android backup and transfer of private data are disabled. You can create manual .afbackup backups encrypted with a password using AES-256-GCM. The password must have at least 12 characters; it is not stored and the developer cannot recover it. Losing it may mean losing access to the backup.

The local database and working files do not have an additional ActaFoto Pro encryption layer. They rely on Android’s isolation and device security. Exported PDFs and ZIP files are not claimed to be encrypted.

Protect your phone and choose appropriate destinations and recipients. No system guarantees absolute security or recovery of lost data.

Deleting your data

You can delete an inspection from its screen. The general delete control in Settings requires entering ELIMINAR and removes records, unreferenced assets and private exports. It is not guaranteed to immediately clear every camera and working temporary folder.

To remove all local app storage, use Android Settings → Apps → ActaFoto Pro → Storage → Clear data or Clear storage, or uninstall the app.

Deletion does not remove copies, photos or reports saved or sent outside the app. Delete them separately at each destination. Forensic erasure is not promised. As there is no user account, there is no remote account to request deletion of.

Other people’s information and support

When documenting properties or working for clients, consider what information is necessary and the legal basis, information notices, retention and recipients appropriate to your activity. The app does not decide those purposes or verify permissions from photographed people or signatories.

The publisher does not receive your inspection record merely because you use the app. Voluntarily sending files to support is separate. Use anonymised examples and avoid unnecessary signatures, addresses or complete documents.

For support and applicable rights, email info@carapatolabs.com. Messages are forwarded through Cloudflare Email Routing to Gmail. Final retention criteria and legal bases remain subject to review. The developer cannot remotely erase files stored only on your phone. You may complain to the Spanish Data Protection Agency.

Changes

The final policy must match the distributed APK and Google Play declarations. Adding synchronisation, advertising, purchasing, remote diagnostics or other SDKs requires a new review. The distributed build must link to the final published policy.