Betula Studio

Privacy Policy - CropToShape

Effective date: 4 June 2026 · Last updated: 6 July 2026

Short version: The photos you edit are processed locally on your device and are never uploaded to us - we have no access to your images, ever. The app has no accounts and collects no personal data. To understand how the app is used, it sends a small set of anonymous usage events (for example "an export happened", never the image itself) to TelemetryDeck, a privacy-first analytics service hosted in the EU, in a form that cannot be linked back to you. The app also shows one banner ad on the home screen through Google AdMob, which Google operates as an independent data controller.

1. Who we are

CropToShape is a mobile application published by Betula Consulting Łukasz Brzezowski (operating under the brand Betula Studio), a sole proprietorship registered in Poland. For privacy-related questions write to hello@betulastudio.com.

2. What the app does

CropToShape is a single-image editor that cuts a shape - a rectangle, an ellipse, or a regular polygon - out of a photo you choose, and exports the result as a transparent cutout, a sticker, or an image on a solid background. All editing is performed on your device.

3. Your photos and personal data

Betula Studio does not collect, store, share, or transmit any personal data about you. Specifically:

The app does not require any account, sign-in, or registration. The only identifier it holds is a random, anonymous per-install token used for the aggregate usage statistics described in section 5 - it says nothing about who you are.
The app opens only the single image you explicitly select through the Android system photo picker, or one image you share or open with it from another app. It has no broad access to your photo library or device storage.
If you choose "Take photo", the app launches your device's camera to capture one image for editing; the captured image is handled the same way as a picked photo.
Exported images are saved to your device's gallery (under Pictures/CropToShape) only when you ask the app to save or share them.
Your photos never leave your device through the app. Editing and export run entirely on-device; no image, file name, or any information derived from an image's content is ever transmitted. We do not operate any backend that could receive them.

4. Google AdMob (third party)

CropToShape displays a single banner advertisement on its home screen through Google AdMob, an advertising platform operated by Google LLC and Google Ireland Limited. Google acts as an independent data controller for the purposes of ad serving and is solely responsible for the collection, processing, and use of any data gathered through the AdMob SDK that runs inside the app.

Betula Studio does not access, store, or process any data collected by AdMob. We receive only aggregated, anonymised earnings reports from Google about ad impressions and clicks, with no identifying information about individual users.

Categories of data that Google may collect through AdMob, as described in Google's own documentation, include:

Your device's advertising identifier (Android Advertising ID).
Standard device and app information such as model, operating system version, and app version.
Approximate location derived from your IP address.
Ad-interaction events such as impressions, viewability, and clicks.

Google's own privacy documentation governs this processing and provides controls for you to manage it:

5. Anonymous usage statistics (TelemetryDeck)

To understand which features are used and how the app can be improved, CropToShape sends a small number of usage events to TelemetryDeck, a privacy-focused analytics service operated by TelemetryDeck GmbH, Berlin, Germany, and hosted in the European Union. TelemetryDeck processes this data on our behalf and is designed so that neither we nor TelemetryDeck can identify you from it:

Events describe app usage only - for example "a session started", "a crop shape was selected", "an export finished", ad-display counts, and coarse device facts such as model, OS version, app version, and system language. Values are bucketed into broad ranges wherever precision could narrow someone down.
Never about your content: no photos, no thumbnails, no file names, no text you enter, and nothing derived from an image's pixels is ever sent.
The only identifier is a random token generated at install time, which is additionally hashed twice (once on the device with an app salt, once on TelemetryDeck's servers with a separate server-side salt) before storage. The result cannot be reversed to your device or combined with data from other apps. IP addresses are not stored.
If the app was installed through an ad campaign, the app reads the Google Play install referrer once to record the campaign it came from (for example "campaign X, country PL") - aggregate marketing attribution, not a profile of you.
The data is used solely for aggregate product statistics ("what share of sessions export a sticker") and is never sold, shared for advertising, or combined with AdMob's data.

Because this data is anonymous - it is not personal data within the meaning of the GDPR (Recital 26) - it does not require a consent dialog. TelemetryDeck's own privacy policy is available at telemetrydeck.com/privacy.

6. Consent for personalised ads (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the app displays a Google-provided consent dialog on first launch. You can choose whether to consent to personalised advertising or to manage individual options. Your decision is stored locally by the consent SDK on your device and is honored for subsequent ad requests. Until consent allows it, no ads are loaded.

You can revisit the decision at any time through your device's system advertising settings (commonly Settings → Google → Ads on Android) where you can also reset your advertising identifier or opt out of personalised advertising entirely.

7. Children

CropToShape is not directed to children under 13 years of age. The app collects no personal data, and the anonymous usage statistics described in section 5 cannot identify any user, child or adult; there is therefore no data of children that we could knowingly process.

8. Your rights

Betula Studio holds no personal data about you: the usage statistics we receive are anonymous and cannot be linked back to you or your device, which also means there is no record we could look up to access, correct, export, or delete for you (GDPR Article 11). For any data processed by Google through AdMob, you may exercise the rights granted by your jurisdiction (such as the EU/UK GDPR, the Swiss FADP, or US state privacy laws including the CCPA/CPRA) directly through Google's privacy controls linked above.

If you would still like to raise a question or request that you believe applies to Betula Studio, write to hello@betulastudio.com and we will respond.

9. Security

Your photos never leave your device through code written by Betula Studio, so the highest-value data never reaches us at all. The anonymous usage events are transmitted over TLS to EU-hosted infrastructure and are protected by the double-hashing scheme described in section 5. Data handled by Google AdMob is protected by the technical and organizational safeguards described in Google's documentation.

10. Changes to this policy

We may update this policy from time to time, for example to reflect changes in the law, the app's features, or third-party SDKs. When changes are material we will update the "Last updated" date above and, where appropriate, surface a notice inside the app.

11. Contact

Betula Consulting Łukasz Brzezowski
Kielecka 29b, 31-523 Kraków, Poland
Email: hello@betulastudio.com