Privacy policy
Last updated:
This policy explains what data iiziticket (the Android and iOS app, the web editor at app.iiziticket.com and the website iiziticket.com) processes, why, where and for how long. It is written under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.
In short
- Without an account, your data stays on your device. Templates, print history, printers and settings are stored only on your phone or tablet.
- We don't use analytics, advertising or tracking tools. No Google Analytics, no Crashlytics, no profiling.
- An account is only needed for the subscription's cloud features (sync, backup, template sharing, web editor). In that case we process your email address and the content you save in the cloud, on servers in the European Union.
- Integrations send prints only where you decide, straight from your device: we never receive them.
- Payments are handled by Apple or Google. We never see your card details.
- You can delete your account from the app at any time (Settings → Account → Delete account), or request it from this page.
1. Data controller
The Coding Cat srls, Via Fontananera 55 / 19038 / Sarzana (SP) / Italy, VAT no. IT01524350111
Email: hello@thecodingcat.it
For any question about this policy or your data, write to the address above.
2. What data we process
2.1 Using the app without an account
The app works without signing up. Templates, images (such as your logo), print history, counters, remembered form values, connected printers and settings stay only on your device: we don't receive them. The operating system may include them in device backups, according to the settings you chose with Apple or Google.
Device permissions
- Bluetooth: only to find the thermal printer, connect to it and print.
- Location (Android 11 and earlier only): on those Android versions the system requires it to scan for nearby Bluetooth devices. The app does not read or store your location. From Android 12 onwards it is not requested.
- Photos: only when you pick an image to use as a logo. The image is converted to black and white and saved in the template; we don't access any other photos.
- USB (Android only): for printers connected by cable.
Print links, quick note, files. iiziticket://print?... links and the quick note work only on the device: the values they contain are not sent to us. When you export a template to a file, you hand it to the app or service you choose (for example email or cloud storage); when you import one, the app reads only the file you select.
Integrations (subscription). If you enter an address in Settings → Integrations, the device sends every print straight to that address: template, form values, counter numbers, date and time, name and random identifier of the device. This data does not go through our servers and we do not receive it: you are the controller of that data, together with the service you chose. The setup and the delivery queue stay on the device. Details in the integrations guide.
2.2 Purchases, subscriptions and lifetime license
Purchases are made through Apple's App Store or Google Play, which process payment data as independent controllers under their own privacy policies. We never receive your card details.
To check which plan you have, we use RevenueCat (RevenueCat, Inc., USA), which receives:
- an anonymous identifier generated by the app or, if you sign in, your account identifier;
- the app's purchase and subscription history, with renewal and expiry dates;
- basic technical information: device model and operating system, app version, store country, IP address.
This is used only to know whether you are entitled to paid features and to restore purchases. When you open the web editor, our server asks RevenueCat whether your account has an active subscription, using only your account identifier; the answer is not stored.
2.3 Account (subscription cloud features)
An account is optional and is used for cloud features. You can sign in with Google or with a link sent to your email. We process:
- account data: email address, name (if you sign in with Google), an account identifier, creation and last sign-in dates;
- cloud content: the templates and images you sync, with their modification and deletion dates.
Print history, counters, printers and device settings are not synced: they stay on the device even with an account.
2.4 Shared templates
When you share a template with a link or QR code, we upload a copy of the template and its images, together with your account identifier and the expiry date. Anyone with the link can read that copy for 30 days; after that the link stops working. Don't share templates that contain other people's personal data.
People who open the link don't need an account and don't send us any data beyond the technical data of the request (see 2.5).
2.5 Web editor and website
The web editor (app.iiziticket.com) and the website (iiziticket.com) are hosted by Vercel (Vercel Inc., USA). The pages for the app's email sign-in links are hosted by Firebase Hosting (Google). Vercel also runs the small function that checks the subscription for the web editor (see 2.2). Like any web service, these providers log technical request data (IP address, date and time, requested page, browser) to run the service and protect it from abuse.
The web editor does not use profiling cookies. Firebase Authentication stores in your browser the data needed to keep you signed in.
3. Why we process it and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Running the app on your device | No data sent to us | — |
| Managing purchases, subscriptions and restores | Data in section 2.2 | Performance of a contract (Art. 6(1)(b) GDPR) |
| Account, sync, backup, web editor | Data in section 2.3 | Performance of a contract (Art. 6(1)(b)) |
| Template sharing | Data in section 2.4 | Performance of a contract, at your request (Art. 6(1)(b)) |
| Security and abuse prevention | Technical data (2.5) | Legitimate interest (Art. 6(1)(f)) |
| Legal obligations (e.g. tax, for purchases) | Purchase data | Legal obligation (Art. 6(1)(c)) |
We don't make automated decisions that produce legal effects concerning you, and we don't do profiling.
4. Who processes data on our behalf
- Google (Google Ireland Limited and Google LLC): Firebase Authentication (sign-in), Cloud Firestore (templates and images: servers in Belgium, europe-west1 region), Firebase Hosting. Sign-in link emails are sent through Firebase.
- RevenueCat, Inc. (USA): verification of purchases and subscriptions.
- Vercel Inc. (USA): hosting of the web editor and the website, and the subscription check for the web editor.
- Apple and Google as store operators, independent controllers for payments.
Some of these providers may process data outside the European Union, in particular in the United States. In those cases the transfer is based on the EU-U.S. Data Privacy Framework, for certified providers, or on the European Commission's standard contractual clauses.
We don't sell your data and we don't share it with third parties for marketing purposes.
5. How long we keep it
- Data on your device: until you delete it or uninstall the app.
- Account and cloud content: as long as the account exists. If you delete a template, it can be recovered from "Deleted templates" in the app for 30 days; it still remains stored in the cloud, marked as deleted, as long as the account exists.
- Account deletion: we immediately delete the cloud copy (templates and images), the templates you shared and the account. Your templates stay on your device.
- Shared templates: readable through the link for 30 days; deleted when you delete your account. If you want a share deleted earlier, write to us.
- If your subscription ends: cloud data remains as long as the account exists; you can delete it at any time.
- Purchase data: for as long as required by law and by the store terms.
- Technical request data: for as long as set by the hosting providers, usually a few days or weeks.
6. Your rights
You can ask at any time to access your data, correct it, delete it, restrict its processing, object to processing based on legitimate interest and receive your data in a readable format (portability). Some of these you can do yourself: in the app you can export your templates to files, edit or delete them, sign out of your account or delete it.
To exercise your rights, write to hello@thecodingcat.it. We reply within one month.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live.
7. Children
iiziticket is designed for businesses, associations and events. It is not intended for children under 14 and we do not knowingly collect their data.
8. Security
Data travels encrypted (HTTPS). In the cloud, each account can read and write only its own data, and shares can be read only by knowing the link. No system is one hundred percent secure: if we discover a breach that affects you, we will notify you as required by the GDPR.
9. Changes
If we change this policy, we update the date at the top. If the changes are significant (for example, new features that send data to external services), we tell you in the app before they take effect.
This is a translation of the Italian original. In case of discrepancy, the Italian version prevails.