GDPR Compliance Statement
Last Updated: January 11, 2026
ToneLab Generator is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA), the United Kingdom, and Switzerland.
Data Controller
Data Controller: FLX Code Lab
Contact: flxcodelab@gmail.com
Data We Collect and Process
Analytics Data (Firebase Analytics)
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Device model and OS version | App optimization | Legitimate interest |
| App usage events | Feature improvement | Legitimate interest |
| Session duration | User engagement analysis | Legitimate interest |
| Crash reports | Bug fixing | Legitimate interest |
| Country/region (from IP) | Regional analytics | Legitimate interest |
Note: Firebase Analytics does not store IP addresses. Location data is derived from IP at time of collection only.
Advertising Data (Google AdMob)
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Advertising ID | Ad personalization | Consent |
| IP address | Geographic targeting | Consent |
| Device information | Ad delivery | Consent |
| App usage patterns | Ad relevance | Consent |
Legal Basis for Processing
1. Consent (Article 6(1)(a) GDPR)
For personalized advertising, we request your explicit consent on first launch via the Google User Messaging Platform (UMP). You can:
- Grant consent for personalized ads
- Choose non-personalized ads only
- Withdraw consent at any time
2. Legitimate Interest (Article 6(1)(f) GDPR)
For analytics data that helps us improve the app, we rely on legitimate interest:
- Understanding how users interact with our app
- Identifying and fixing bugs and crashes
- Improving app features and user experience
- Ensuring app security and stability
This data is anonymous, aggregated, and does not identify you personally.
Your Rights Under GDPR
Right of Access (Article 15)
Request information about what personal data we process and receive a copy.
Right to Rectification (Article 16)
Request correction of inaccurate personal data.
Right to Erasure (Article 17)
Request deletion of your personal data ("right to be forgotten").
Right to Restrict Processing (Article 18)
Request that we limit how we use your data.
Right to Data Portability (Article 20)
Receive your data in a structured, machine-readable format.
Right to Object (Article 21)
Object to processing based on legitimate interests.
Right to Withdraw Consent (Article 7)
Withdraw consent for personalized advertising at any time through:
- The consent management dialog in the App
- Your device's advertising settings (Settings > Google > Ads)
- Google's Ad Settings
- Resetting your device's Advertising ID
Right to Lodge a Complaint
File a complaint with a supervisory authority if you believe our processing violates GDPR.
How to Exercise Your Rights
To exercise any of these rights, contact us at: flxcodelab@gmail.com
Please include:
- Your name and contact information
- A clear description of your request
- Any information that helps identify the data
We will respond within 30 days. We may ask for identification to verify your request.
Data Retention
| Data Type | Retention Period |
|---|---|
| Analytics Data | Automatically deleted after 14 months |
| Advertising Data | Subject to Google's retention policies |
| Device/Local Data | Deleted when you uninstall the app |
Data Security
We implement appropriate technical and organizational measures:
- Data transmitted using TLS/SSL encryption
- Reliance on Google's enterprise-grade security infrastructure
- Access to analytics data restricted to authorized personnel only
International Data Transfers
Data may be transferred to the United States by Google. These transfers are protected by:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements with Google
- Technical security measures
Data Processing Agreements
We have Data Processing Agreements (DPAs) in place with:
- Google LLC (Firebase Analytics)
- Google LLC (AdMob)
Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects. Ad personalization by AdMob:
- Does not have legal or similarly significant effects
- Is based on consent, which can be withdrawn
- Can be opted out of through device settings
Children's Data
ToneLab Generator is not directed at children under 16. We do not knowingly collect personal data from children.
Changes to This Statement
We may update this statement periodically. The "Last Updated" date indicates when it was last revised.
Contact Us
Email: flxcodelab@gmail.com
Data Controller: FLX Code Lab