Privacy Policy
Last updated:
This policy explains what personal data SafePrint collects when you use the SafePrint app (the “App”) and the website safeprint.app (the “Site”), why, and what you can do about it. SafePrint lets you print documents at copy centers without sending the files to anyone.
SafePrint is run by Aidin Bazarchi, an individual based in Türkiye, who is the controller of the personal data described here. Contact: privacy@safeprint.app.
1. The short version
- Your documents are encrypted on your phone before they are uploaded. We never have the key, so we cannot open them, and neither can the copy center's staff.
- You don't need to give us your name, email or phone number. The App uses an anonymous account.
- Encrypted files are deleted when they print, when you cancel, or after 72 hours if they were never printed.
- The Site uses no cookies, no analytics and no trackers.
- We don't sell your data and we don't use it for advertising.
- If you ask to be told when SafePrint launches, we keep your email for that one message and then delete it.
2. What we collect from customers
- Anonymous account: a random identifier created by Firebase Authentication when you first open the App. It is not linked to your name, email or phone number.
- Encrypted documents: your files, encrypted on your phone with a key wrapped to the chosen copy center's printing device. We store only this encrypted data, which we cannot read.
- Order details: the copy center and printer you chose, file names (shown only to you, never to the copy center), file type and size, page counts, print settings (color, sides, copies, paper size, page range, orientation), the price, your 6-digit release code, how you chose to print (with your code or by staff), the order status and times.
- Approximate area: to list copy centers near you, the App reads your location on your phone and asks our database for copy centers in the surrounding area (a map area of a few kilometers). Your exact location is not sent to us and we don't store your location.
- Store Wi-Fi detection: the App can look for copy center printers on the Wi-Fi you're connected to, to tell you which copy center you're in. This happens on your phone and nothing about your network is sent to us.
- Technical data: like any online service, our servers process your IP address and basic request data to deliver the service and protect it from abuse. Google Cloud keeps these logs for a limited time.
We don't collect your contacts, photos you don't choose to print, advertising identifiers or analytics. The App has no third-party analytics or advertising SDKs.
3. What we collect from copy centers
If you register a copy center in the App's shop mode, we collect what you enter: the copy center's name, address, map location, phone number (optional), opening hours, services and prices, and your copiers' names, models, capabilities and their names on the shop Wi-Fi. Most of this is shown publicly in the App so customers can find you. We also store the public half of your copy center's encryption key (the private half stays on your device), and which anonymous account owns the copy center. That link is never shown publicly or to customers.
4. Who can see what
- You: everything about your orders, including file names.
- The copy center: an order reference, page counts, print settings, price and status. Never your files on a screen, your file names, your identity or your release code. When the order is released (with your code, or by staff if you chose that), the copy center's device downloads the encrypted file, decrypts it in memory, sends it to the copier and discards it.
- SafePrint: the data in sections 2 and 3, but never the content of your documents or the keys to open them.
An honest limit: once a document is printed, it is paper. Someone determined could copy the printout or capture the data sent to the printer, as with any printer. SafePrint stops files being kept in chats, inboxes and shop computers; it cannot control the paper.
5. Why we use your data (legal bases)
- To provide the service you ask for: placing, releasing, printing and cancelling orders, and listing copy centers (performance of a contract).
- To keep the service secure and prevent abuse, for example limiting wrong release-code attempts (our legitimate interest).
- To approve copy centers before customers can see them (our legitimate interest in keeping fake shops out).
- To send the one launch email you asked for (your consent, which you can withdraw at any time by writing to us).
- To meet legal obligations, where they apply.
6. How long we keep it
- Encrypted documents: deleted as soon as the order prints, immediately if you cancel, and when the order expires 72 hours after you placed it. A storage rule also deletes any upload older than 4 days, as a safety net.
- Order details (without the documents): kept so you can see your orders in the App. Email us to have them deleted.
- Copy center profiles: kept while the copy center uses SafePrint, and deleted on request.
- Server logs: kept by Google Cloud for a limited period, then deleted automatically.
- Launch email list: kept until we send the launch email, then deleted.
If you delete the App, your anonymous account can no longer be used and your orders can no longer be reached from your phone. Email us if you want the remaining order details deleted; tell us roughly when and where you printed so we can find them.
7. Service providers and where data is stored
- Google (Firebase and Google Cloud): authentication, database, file storage and server functions, hosted in the europe-west1 region (Belgium, EU).
- Vercel: hosts this Site. It processes visitors' IP addresses to deliver pages.
- Apple App Store and Google Play: distribute the App under their own privacy policies.
Some providers are based in the United States. Where data leaves the EU or Türkiye, they rely on the safeguards the law requires, such as the EU Standard Contractual Clauses.
8. This website
The Site sets no cookies and runs no analytics, advertising or tracking scripts. Fonts are served from our own domain, so your browser doesn't contact third parties. Our host processes your IP address and request details to deliver the pages and protect against attacks.
If you use the “Notify me” form, we store your email, your language and whether you want to print or run a copy center, in our database in the EU (Google Cloud, Belgium). We use it only to send you one email when SafePrint launches, then delete it. We never share it.
9. Your rights
Depending on where you live (for example under the EU and UK GDPR or Türkiye's KVKK), you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and complain to your data protection authority. Write to privacy@safeprint.app. Because we don't know who you are, we may ask for details of an order so we can find your data. We answer within one month.
10. Children
SafePrint is not meant for children under 13, and we don't knowingly collect their data. If you think a child has used the App, contact us and we will delete the related data.
11. Security
Documents are encrypted on your phone with AES-256-GCM, and each document key is wrapped to the copy center's key with X25519. Our storage refuses unencrypted uploads, nobody can download uploads from the App, and access to our systems is limited. No system is perfectly secure, but we designed SafePrint so that even a breach of our servers would not expose the content of your documents.
12. Changes
We will update this policy when the service changes, for example when we add in-app payment or delivery, and change the date above. For important changes we will tell you in the App before they apply.