Privacy policy

Last updated: 14 October 2026.

1. Who we are

The Biser Studio service (the biserstudio.com website, the web editor and the mobile apps) is provided by Biser Studio, Chernihiv, Ukraine. Jurisdiction: Ukraine.

For any question about personal data, write to [email protected]. We reply within 30 days.

2. Data we collect

• Account data: name, email, password (stored only as an irreversible hash), interface language, the date you accepted the terms, your plan and its usage limits.
• Your cloud content: patterns you save to the cloud, their previews and reference images, folders, custom palettes, export design profiles (author name, captions, link and logo, if you add them).
• Devices, sessions and sign-in history: device or browser and operating system name, IP address, approximate location (country and city) that our server derives from the IP address using its own local database, last activity time.
• Support requests: name, email, message text and a hash of the IP address; for requests sent from the app, also the build version, platform, language and window size.
• Google Play subscriptions: purchase identifier (stored encrypted), plan, status and expiry date. Google processes payment details; we never receive them.
• App Store subscriptions: original transaction identifier, product, status and expiry date. Apple processes payment details; we never receive them.
• Technical data: sync diagnostics (error code, platform, app version, data sizes), server error reports, suspicious request logs (IP address, requested URL, browser).

We do not collect contacts, precise location, health or payment data. The app has no access to your gallery: an image reaches the app only when you pick it yourself.

3. What stays on your device

• Patterns, palettes and settings are stored locally on your device or in your browser. Without signing in they are not sent anywhere.
• An image you convert into a pattern is processed on the device; the original is not uploaded to the server.
• After you sign out, local data stays on the device. You can remove it with “Clear local cache” in the app settings or by uninstalling the app.

4. How we use data

• Providing the service: account, syncing patterns between devices, export, plan limits. Legal basis: performance of the terms of use.
• Security: protection against abuse and suspicious requests, showing connected devices in the dashboard. Legal basis: our legitimate interest.
• Support and bug fixing. To solve a problem you report, we may view your account data and cloud patterns. Legal basis: your request and our legitimate interest.
• Service emails: email confirmation, password reset, replies to requests. We do not send marketing emails.
• Ads in the free plan of the mobile app — see “Advertising”.

We do not sell personal data.

5. Advertising

• If ads are shown in the free plan of the mobile app, they are served by Google AdMob. Google may receive the device advertising ID, IP address, device information and ad interactions to show and measure ads and to prevent fraud.
• Users in the EEA, the UK and Switzerland see personalised ads only with their consent. You can change your choice in the app settings.
• On Android you can reset or delete the advertising ID in the device settings. On iPhone and iPad the app asks for permission to use the advertising identifier (App Tracking Transparency); you can change your choice anytime in Settings → Privacy & Security → Tracking.
• How Google uses data: https://policies.google.com/technologies/partner-sites
• No ads are shown in the Pro and Premium plans, on the website or in the web editor.

6. Who else receives data

• Infrastructure providers: server hosting and file storage, Cloudflare (protection and delivery of the website and web editor), an email delivery service. They process data only to provide their services to us.
• Google — if ads are shown (see above). Google Play processes subscription payments, as well as data when you install and update the app, under its own policy.
• Apple — the App Store processes subscription payments, as well as data when you install and update the iOS app, under its own policy.
• Telegram: technical server error alerts (internal user number, page URL, error description) go to a private service chat. Passwords and pattern contents are never sent there.
• Public authorities — only when required by law.

Some providers may process data outside Ukraine, including in the EU and the USA, with appropriate safeguards.

7. How long we keep data

• Account and cloud content — while the account exists.
• After an account deletion request — 30 days to recover, then the account and all cloud content are permanently deleted.
• Browser sessions — deleted after 30 days of inactivity.
• Sync diagnostics and suspicious request logs — 30 days.
• Support requests — as long as needed to reply and keep the conversation history. They are not deleted automatically with the account; we delete them on request.

8. Account deletion

You can delete your account in the app, in the website dashboard or by email to [email protected]. Step-by-step instructions: https://biserstudio.com/en/account-deletion

9. Your rights

• Get a copy of your data. Patterns can be exported to JSON at any time; we send other data on request.
• Correct your data: name and email can be changed in your profile.
• Delete your account and data, restrict or object to processing.
• Withdraw consent to personalised ads in the app settings.
• Lodge a complaint: in Ukraine with the Ukrainian Parliament Commissioner for Human Rights, in the EU with the data protection authority of your country.

To exercise your rights, write to [email protected] from the address linked to your account.

10. Security

Data is transferred only over HTTPS, passwords are stored as hashes and pattern files in private storage. Each device signs in with its own token, revoked on sign-out or account deletion. No protection is absolute, so please use a unique password.

11. Cookies

The website uses only essential session and form-security cookies. There are no analytics or advertising cookies on the website.

12. Children

Biser Studio is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to [email protected] and we will delete it.

13. Changes to this policy

We will announce material changes on the website or in the app. The last update date is shown at the top of this page.

Questions about this document: [email protected].