Privacy policy.

1Who we are

DEFTORIX TRADE LIMITED LIABILITY COMPANY ("we", "us") is the controller of personal data processed through the Appitra website (appitra.com) and the Appitra products Playloop, Vidora, Remota and Beamcast (together, the "Services"). Our registered office is at Aleja W Growska 2G, 07-130 Ochów, Poland. You can reach us at support@appitra.com.

This policy explains what we collect, why, how long we keep it, who we share it with and what rights you have. It is written for the General Data Protection Regulation (GDPR) and Polish data protection law.

2What we collect

We collect only what is needed to run the Services and to bill you.

Remota and Beamcast discover TVs and streaming devices on your home network to control or cast to them. Device names and network addresses are used on your phone to make the connection and are not sent to us except as part of an anonymous error report.

3Why we use it and on what legal basis

• To provide the Services and bill you (performance of a contract, Art. 6(1)(b) GDPR): creating your subscription, delivering the product, taking payment, sending receipts and service messages.
• To answer support requests (contract and legitimate interest, Art. 6(1)(b) and (f)).
• To keep the Services working and secure (legitimate interest, Art. 6(1)(f)): error reporting, preventing fraud and abuse, keeping records of consent and cancellation.
• To measure and improve the Services (legitimate interest, Art. 6(1)(f)): aggregated usage statistics.
• To measure our advertising (consent, Art. 6(1)(a)): only where you accepted advertising cookies; you can withdraw at any time as described in the cookie policy.
• To show advertising in the free version of a product (consent where the law requires it, otherwise legitimate interest, Art. 6(1)(a) and (f)): the free version is funded by ads; Premium removes them.
• To meet legal obligations (Art. 6(1)(c)): tax and accounting records, responding to lawful requests.

4Who we share it with

We do not sell personal data. We share it only with providers that process it on our instructions, and with authorities when the law requires it:

• Stripe (payment processing) processes your card and payment data as an independent controller for the payment itself and under its own privacy notice.
• Hosting and email providers that run our servers, store our data and deliver our messages.
• Google and Meta, where you consented to advertising cookies, receive the conversion data described in the cookie policy.
• Advertising networks that serve the ads shown in the free version of a product receive the device identifier or cookie they need to select and measure those ads, under their own privacy notices. Premium removes in-product advertising.

Where a provider is outside the European Economic Area we rely on an adequacy decision or the European Commission's standard contractual clauses.

5How long we keep it

• Account and subscription data: for as long as you have an account, and for a limited period after your last active subscription so that we can answer questions about it, unless you ask us to delete it sooner.
• Payment records and receipts: for the period required by Polish accounting and tax law (currently five years from the end of the tax year).
• Support correspondence: for as long as needed to resolve the matter and any follow-up to it.
• Usage and error data: in identifiable form only for as long as needed to keep the Services working and secure, then in aggregated form.
• Advertising cookie data: as set out in the cookie policy.

6Your rights

Under the GDPR you may ask us to access, correct, delete or restrict your personal data, to receive it in a portable format, and to object to processing based on our legitimate interests. Where processing is based on consent you may withdraw it at any time without affecting what was done before.

To exercise a right, email support@appitra.com from the address linked to your account. We answer within one month, the period the GDPR sets. You also have the right to complain to a supervisory authority; in Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO).

7Children

The Services are sold to adults. Some products, such as family games or tutoring videos, may be used by children under the supervision of the adult who holds the subscription. We do not knowingly collect personal data from children under 16 (the age of digital consent in Poland) without a parent's consent; if you believe we have, contact us and we will delete it.

8Security

Traffic between your device and our services is encrypted in transit. Access to customer data is limited to team members who need it for support and billing. Card details never touch our systems. No method is perfectly secure, so please contact us if you believe your account has been compromised.

9Changes

We may update this policy when the Services or the law change. The date at the top tells you when it was last revised. Material changes will be announced by email to active subscribers or by a notice on this site.