Effective Date: February 10, 2026
Introduction
This Privacy Policy describes how Fonts Logo Maker ("we," "us," or "our") handles information in connection with your use of the xCanvas mobile application (the "Service"). Your privacy is important to us, and we are committed to being transparent about the data collected by our third-party partners.
Data Controller and Contact Information
Data Controller: Fonts Logo Maker is the data controller responsible for the personal information processed in connection with the Service (as defined under applicable privacy laws, including the GDPR and PIPL).
Contact Details for the Data Controller:
Company Name: Fonts Logo Maker
Email: FontsApp@protonmail.com
Website: https://canvasgraphicdesign.com/
Mailing Address: Xrisostomou Smirnis 33, Larisa, Greece, 41223
Phone Number: +30 6949741939
All privacy-related questions, inquiries, rights requests, or concerns should be directed to the above contact details.
Data Protection Officer (DPO): We have not appointed a formal Data Protection Officer (DPO) because our processing activities do not require one under applicable law. Under GDPR Article 37, a DPO is mandatory only for (a) public authorities, (b) organizations whose core activities involve large-scale regular and systematic monitoring of individuals, or (c) organizations whose core activities involve large-scale processing of special categories of data. Our app does not meet these criteria as we do not directly collect or process personal data on a large scale; instead, data is processed by our third-party partners (Google AdMob and Firebase) in accordance with their own privacy policies.
Privacy Contact: While we do not have a formal DPO, all privacy-related questions should be directed to Fonts Logo Maker as the data controller using the contact information provided above. Our designated privacy contact for all privacy matters is the Fonts Logo Maker Privacy Team, reachable at FontsApp@protonmail.com.
Note: Data processed by our third-party partners (Google AdMob and Google Firebase) is handled by them as independent controllers or processors in accordance with their own privacy policies.
Categories of Data Collected and Purpose of Processing
In connection with your use of the Service, the following categories of personal information may be collected and processed by our third-party partners (Google AdMob and Google Firebase) for the purposes described below. We do not directly collect or store personal data such as your name or email address.
Identifiers (e.g., Advertising ID, Instance ID, IP Address): To serve personalized ads, limit ad frequency, prevent fraud, and for unique user attribution.
Usage and Interaction Data (e.g., features used, session duration, crash reports): To analyze app performance, fix bugs, and improve user experience.
General Location Information (inferred from IP address): To provide advertisements relevant to your country or region.
Legal Basis for Processing (GDPR and Applicable Privacy Laws)
We process personal information based on the following legal bases under applicable privacy laws, including GDPR Article 6(1):
Consent (GDPR Art. 6(1)(a)): When you consent through the in-app consent management interface (Google UMP), we process Advertising IDs, IP addresses, and general location information for personalized/targeted advertising purposes via Google AdMob. You may withdraw your consent at any time through the in-app settings or device settings without affecting the lawfulness of processing before withdrawal.
Legitimate Interests (GDPR Art. 6(1)(f)): We process Usage and Interaction Data (such as crash reports, session duration, features used, and analytics data) through Google Firebase based on our legitimate interest in maintaining, improving, and securing the Service. Our legitimate interests include:
Ensuring the Service functions properly and fixing technical issues
Understanding how users interact with the Service to improve user experience
Preventing fraud and maintaining the security of the Service
Serving non-personalized advertising when consent for personalized ads is not provided
We have conducted a balancing test and determined that these legitimate interests are not overridden by your interests, rights, or freedoms, particularly given the pseudonymous nature of the data collected and the controls available to you (such as resetting your Advertising ID).
Compliance with Legal Obligations (GDPR Art. 6(1)(c)): Where required, we may process personal information to comply with applicable legal obligations, such as responding to valid legal requests from authorities.
For users in jurisdictions where different legal bases apply (such as Brazil under the LGPD, South Africa under POPIA, or China under PIPL), the equivalent legal bases are applied in accordance with local law.
Third-Party Data Sharing and Advertising
We share the categories of personal information listed above with the following third-party service providers to operate and improve the Service:
Google AdMob: To provide, maintain, and improve advertising services, including personalized/targeted advertising.
Google Firebase: To understand app engagement and fix technical issues.
These third parties process data in accordance with their own privacy policies.
We do not sell your personal information. However, serving personalized/targeted ads through Google AdMob involves sharing certain identifiers (such as Advertising ID) with advertising partners, which may constitute "sharing" or "sale" for targeted advertising under certain state laws (e.g., California CCPA/CPRA, Virginia VCDPA). We do not engage in profiling that produces legal or similarly significant effects on users. We do not share personal information with any other third parties.
Your Data Rights
Regardless of your location, you have the following rights regarding your personal information:
Right to Access/Know: You have the right to request information about the categories of personal information collected about you, the purposes for which it is used, the third parties with whom it is shared, and whether your personal information is sold or shared (including for targeted advertising under applicable law). We do not sell your personal information under most definitions, but we do share certain identifiers with Google AdMob for personalized/targeted advertising purposes (which may be considered "sharing" or "sale" under certain state laws).
Right to Deletion: You have the right to request the deletion of your personal information. The most effective way to delete the personal information collected through the Service (such as Advertising ID and associated data) is by resetting your Advertising ID in your device settings. This will prevent further collection and effectively delete prior data for advertising and analytics purposes.
Right to Correction/Rectification: You have the right to request correction of inaccurate personal information about you. Given the nature of the data collected through the Service (primarily pseudonymous identifiers and usage data), this right may have limited applicability, but you may reset your Advertising ID in device settings or contact us for assistance.
Right to Opt-Out of Sale: You have the right to opt-out of the sale of your personal information. We do not sell your personal information under most definitions. Therefore, no specific opt-out mechanism is required beyond the methods below, but you may contact us with any related requests.
Right to Opt-Out of Sharing for Targeted/Cross-Contextual Behavioral Advertising: You have the right to opt-out of the sharing of your personal information for targeted or cross-contextual behavioral advertising. To exercise this right, you can:
Reset your Advertising ID in your device settings.
Enable "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android).
Modify your privacy and consent choices through the in-app settings (where available via Google UMP).
Right to Opt-Out of Targeted Advertising: You have the right to opt-out of targeted advertising. To do so, use the same methods listed above: reset your Advertising ID, enable device-level ad tracking limits, or adjust in-app consent settings.
Right to Opt-Out of Profiling for Legal/Significant Effects: We do not engage in profiling that produces legal or similarly significant effects. Therefore, this right does not apply.
Right to Non-Discrimination: You have the right not to be discriminated against for exercising any of your privacy rights. We will not deny goods/services, charge different prices, or provide a different level/quality of service based on your exercise of these rights.
Right to Lodge a Complaint with a Supervisory Authority: Depending on your location, you may have the right to lodge a complaint with a data protection supervisory authority or regulatory body if you believe our processing of your personal information violates applicable privacy laws. This right is available to users in jurisdictions including (but not limited to) the European Economic Area, United Kingdom, Switzerland, Brazil, and South Africa. For contact information for supervisory authorities in your jurisdiction, please see the region-specific sections below or contact us for assistance.
Your Rights Under the GDPR (European Economic Area, United Kingdom, and Switzerland)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent UK/Swiss laws provide you with comprehensive privacy rights. We are committed to transparency and facilitating the exercise of your rights in accordance with GDPR Article 12.
Information We Provide (GDPR Articles 13 & 14):
This Privacy Policy provides you with clear and transparent information about:
The identity and contact details of the data controller (Fonts Logo Maker)
The purposes of processing and the legal basis for processing (consent, legitimate interests, legal obligations)
The categories of personal data processed
The recipients or categories of recipients of personal data (Google AdMob, Google Firebase)
Information about international data transfers (data may be transferred outside the EEA in accordance with appropriate safeguards)
The retention period or criteria used to determine retention
Your rights under the GDPR and how to exercise them
Your right to lodge a complaint with a supervisory authority
Whether providing personal data is required (it is not required; however, refusing consent for personalized advertising will result in non-personalized ads)
Your Complete GDPR Rights:
Right of Access (GDPR Article 15): You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and information about:
The purposes of the processing
The categories of personal data concerned
The recipients or categories of recipients to whom personal data has been or will be disclosed
The envisaged retention period
The existence of your other GDPR rights
The source of the data (if not collected directly from you)
The existence of automated decision-making, including profiling (we do not engage in automated decision-making with legal or similarly significant effects)
Right to Rectification (GDPR Article 16): You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed. Given the pseudonymous nature of data collected (Advertising IDs, usage data), this right has limited practical applicability, but you may reset your Advertising ID or contact us for assistance.
Right to Erasure/"Right to be Forgotten" (GDPR Article 17): You have the right to obtain the erasure of personal data concerning you without undue delay where one of the following grounds applies:
The personal data is no longer necessary for the purposes for which it was collected
You withdraw consent and there is no other legal ground for processing
You object to processing based on legitimate interests and there are no overriding legitimate grounds
The personal data has been unlawfully processed
Erasure is required for compliance with a legal obligation
The most effective way to exercise this right is by resetting your Advertising ID in your device settings, which effectively deletes prior data associated with that identifier.
Right to Restriction of Processing (GDPR Article 18): You have the right to obtain restriction of processing where one of the following applies:
You contest the accuracy of the personal data (for a period enabling us to verify accuracy)
The processing is unlawful and you oppose erasure and request restriction instead
We no longer need the personal data but you require it for legal claims
You have objected to processing based on legitimate interests (pending verification of whether our legitimate grounds override yours)
Right to Data Portability (GDPR Article 20): Where processing is based on consent or contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. This right has limited applicability as we do not directly store personal data.
Right to Object (GDPR Article 21):
You have the right to object at any time to processing of personal data based on legitimate interests (GDPR Article 6(1)(f)). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
You have the absolute right to object to processing for direct marketing purposes at any time. If you object to processing for direct marketing, we will no longer process your personal data for such purposes.
Right to Withdraw Consent (GDPR Article 7(3)): Where we rely on consent for processing (e.g., personalized advertising via Google AdMob), you have the right to withdraw your consent at any time. You can withdraw consent through:
The in-app consent settings (Google UMP)
Your device settings (reset Advertising ID or enable ad tracking limits)
Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right Not to be Subject to Automated Decision-Making, Including Profiling (GDPR Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. We do not engage in automated decision-making or profiling that produces legal or similarly significant effects.
Right to Lodge a Complaint with a Supervisory Authority (GDPR Article 77): You have the right to lodge a complaint with a data protection supervisory authority, in particular in your EU Member State of residence, place of work, or place of alleged infringement, if you believe our processing of your personal data violates the GDPR.
EEA Supervisory Authorities: A list is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en
UK: Information Commissioner's Office (ICO) - https://ico.org.uk/
Switzerland: Federal Data Protection and Information Commissioner (FDPIC) - https://www.edoeb.admin.ch/edoeb/en/home.html
How to Exercise Your GDPR Rights:
To exercise any of your GDPR rights, please contact us using the following methods:
Email: FontsApp@protonmail.com
Website: https://canvasgraphicdesign.com/
Mailing Address: Xrisostomou Smirnis 33, Larisa, Greece, 41223
Phone Number: +30 6949741939
We will respond to your request without undue delay and in any event within one month of receipt of your request. That period may be extended by two further months where necessary, taking into account the complexity and number of requests. We will inform you of any such extension within one month of receipt of your request, together with the reasons for the delay.
We provide all communications and actions in relation to your GDPR rights free of charge. However, if your requests are manifestly unfounded or excessive, particularly if they are repetitive, we may charge a reasonable fee or refuse to act on the request, in accordance with GDPR Article 12(5).
Due to the nature of the data processed primarily through third-party services (Google AdMob and Firebase), some rights may be most effectively exercised through device settings (e.g., resetting Advertising ID) or directly with the third parties. We will assist you in exercising your rights to the extent possible.
International Data Transfers (GDPR Chapter V):
Personal data processed through our third-party partners (Google AdMob and Google Firebase) may be transferred to and processed in countries outside the EEA, United Kingdom, or Switzerland, including the United States. These transfers are conducted in accordance with appropriate safeguards as required by GDPR Article 46, such as:
Standard Contractual Clauses approved by the European Commission
Adequacy Decisions by the European Commission recognizing certain countries as providing adequate data protection
Privacy Shield Framework (where applicable) or successor frameworks
Google's privacy practices and international data transfer mechanisms are described in Google's Privacy Policy at https://policies.google.com/privacy.
Additional Rights under the CCPA/CPRA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you specific privacy rights. This section describes your rights under the CCPA/CPRA and how to exercise them.
Categories of Personal Information We Collect (CCPA/CPRA):
In the preceding 12 months, we have collected the following categories of personal information (as defined by the CCPA):
Identifiers: Such as Advertising ID, Instance ID, and IP address
Internet or Network Activity Information: Such as app usage data, features used, session duration, and crash reports
Geolocation Data: General location information inferred from IP address (country/region level)
Sources of Personal Information: We collect this information from your device through our third-party service providers (Google AdMob and Google Firebase) when you use the Service.
Business or Commercial Purposes for Collection: We collect personal information for the following purposes:
To provide, maintain, and improve the Service
To serve personalized advertisements (with your consent)
To analyze app performance and user engagement
To detect, prevent, and address technical issues and fraud
To comply with legal obligations
Categories of Third Parties with Whom We Share Personal Information: We share personal information with:
Advertising partners: Google AdMob and its advertising partners (for personalized advertising when you consent)
Analytics providers: Google Firebase (for app analytics and crash reporting)
Sale or Sharing of Personal Information: We do not "sell" personal information as that term is traditionally understood. However, under the CCPA/CPRA, sharing Advertising IDs with Google AdMob for personalized advertising purposes may be considered a "sale" or "sharing" for cross-context behavioral advertising. We do not knowingly sell or share personal information of consumers under 16 years of age.
Your CCPA/CPRA Rights:
Right to Know/Access: You have the right to request that we disclose:
The categories of personal information we have collected about you
The categories of sources from which we collected your personal information
The business or commercial purpose for collecting or selling (if applicable) your personal information
The categories of third parties with whom we share your personal information
The specific pieces of personal information we have collected about you (where applicable)
You may submit a verifiable request for this information up to twice in a 12-month period.
Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions under the CCPA. Given the nature of our Service, the most effective way to delete your personal information is by resetting your Advertising ID in your device settings.
Right to Correct: You have the right to request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: You have the right to opt-out of the sale or sharing of your personal information. To exercise this right:
Reset your Advertising ID in your device settings
Enable "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android)
Modify your consent choices through the in-app settings (Google UMP)
Right to Limit Use of Sensitive Personal Information: We do not collect or use sensitive personal information (as defined under the CPRA) for purposes of inferring characteristics about you. Therefore, this right does not apply.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights, including by:
Denying goods or services
Charging different prices or rates
Providing a different level or quality of service
Suggesting you will receive a different price or level of service
How to Exercise Your CCPA/CPRA Rights:
To exercise your rights to know, delete, or correct your personal information, please contact us at:
Email: FontsApp@protonmail.com
Website: https://canvasgraphicdesign.com/
Mailing Address: Xrisostomou Smirnis 33, Larisa, Greece, 41223
Phone Number: +30 6949741939
Verification Process: When you submit a request, we will verify your identity to protect your privacy and security. We may ask you to provide identifying information or confirm details about your use of the Service. Given that we do not directly collect personal information such as names or email addresses, verification may be limited, and the most effective way to exercise rights is often through device settings (e.g., resetting your Advertising ID).
Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require that you verify your identity directly with us and confirm that you have authorized the agent to act on your behalf.
Response Timing: We will respond to verifiable requests within 45 days of receipt. If we require more time (up to an additional 45 days), we will inform you of the reason and extension period in writing.
No Financial Incentives: We do not offer financial incentives or price or service differences in exchange for the retention, sale, or sharing of your personal information.
Additional Rights under the VCDPA (Virginia Residents)
If you are a Virginia resident, the Virginia Consumer Data Protection Act (VCDPA) grants you specific rights regarding your personal information, many of which overlap with the general rights described above. These include:
Right to confirm whether we are processing your personal data and to access such data
Right to correct inaccuracies in your personal data
Right to delete your personal data
Right to obtain a copy of your personal data in a portable format
Right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects
We do not sell personal information under most definitions and do not engage in profiling that produces legal or similarly significant effects. For targeted advertising opt-out, use the methods described above. Due to the nature of the data processed primarily through third-party services (Google AdMob and Firebase), some of these rights may have limited practical applicability or are best exercised through device settings (e.g., resetting Advertising ID) or directly with the third parties. Please contact us at FontsApp@protonmail.com for assistance in exercising any rights.
If we decline to take action on your request, you may appeal our decision by contacting us at FontsApp@protonmail.com within a reasonable period of time after receiving our decision. We will respond to your appeal within 60 days.
Additional Rights under the LGPD (Brazil)
If you are located in Brazil, the Lei Geral de Proteção de Dados (LGPD) grants you specific rights regarding your personal information, many of which overlap with the general rights described above. These include:
Right to confirmation of the existence of processing
Right to access your personal data
Right to correction of incomplete, inaccurate, or outdated data
Right to anonymization, blocking, or deletion of unnecessary or excessive data (or data processed in non-compliance with the LGPD)
Right to data portability to another service or product provider
Right to deletion of personal data processed based on your consent
Right to information about public and private entities with which we have shared your data
Right to information about the possibility of not providing consent and the consequences of denial
Right to revocation of consent
Right to object to processing in case of non-compliance with the LGPD
Right to review automated decisions
Right to lodge a complaint with the National Data Protection Authority (ANPD) at: https://www.gov.br/anpd/pt-br
Due to the nature of the data processed primarily through third-party services (Google AdMob and Firebase), some of these rights may have limited practical applicability or are best exercised through device settings (e.g., resetting Advertising ID) or directly with the third parties. Please contact us at FontsApp@protonmail.com for assistance in exercising any rights.
Additional Rights under POPIA (South Africa)
If you are located in South Africa, the Protection of Personal Information Act (POPIA) grants you specific rights regarding your personal information, many of which overlap with the general rights described above. These include:
Right to be notified that your personal information is being collected
Right to know whether we hold personal information about you and to request access to that information
Right to request correction or deletion of your personal information
Right to object to the processing of your personal information
Right to lodge a complaint with the Information Regulator (South Africa) if you believe our processing of your personal information violates POPIA. Contact information: https://www.justice.gov.za/inforeg/
The responsible party under POPIA is Fonts Logo Maker, and all privacy inquiries should be directed to FontsApp@protonmail.com.
Due to the nature of the data processed primarily through third-party services (Google AdMob and Firebase), some of these rights may have limited practical applicability or are best exercised through device settings (e.g., resetting Advertising ID) or directly with the third parties. Please contact us at FontsApp@protonmail.com for assistance in exercising any rights.
To exercise any of these rights or request assistance: Please contact us at FontsApp@protonmail.com. We will respond to verifiable requests in accordance with applicable law.
Depending on your location and applicable law, you may have additional privacy rights not listed here (including under other US state privacy laws such as Colorado CPA, Connecticut CTDPA, Utah UCPA, and others). Please contact us for more information.
Data Retention
We do not directly collect or store personal information on our servers, so we do not retain any personal data ourselves. Any personal information collected and processed by our third-party partners (Google AdMob and Google Firebase) is retained by them only for as long as necessary to fulfill the purposes described in this policy (such as providing advertising, analytics, and crash reporting services) or as required by law.
Retention periods are managed by these third parties in accordance with their own privacy policies. For example:
Advertising identifiers and related data are generally retained until you reset your Advertising ID or until no longer needed for advertising purposes.
Analytics and crash data are typically retained for limited periods to improve the Service.
You can effectively limit retention of advertising and analytics data by resetting your Advertising ID in your device settings, which disassociates prior data and starts fresh.
For detailed information on their retention practices, please review Google's Privacy Policy at https://policies.google.com/privacy.
Permissions (Storage)
Our app may request the READ_EXTERNAL_STORAGE permission solely to allow you to import images for your designs. We do not access any files without your explicit interaction, and we recommend users on Android 10+ use the system photo picker where available to enhance privacy.
User Consent (Google UMP)
We use Google's User Messaging Platform (UMP) to manage user consent and privacy choices in applicable regions (including the EEA, UK, and where required for advertising preferences). You can modify your consent choices at any time through the in-app settings, including choices related to personalized advertising.
Children's Privacy
xCanvas is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete such information as soon as possible. If you believe we have collected personal information from a child under 13, please contact us at FontsApp@protonmail.com.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy in the app and updating the "Effective Date" above. For material changes, we may provide additional notice such as an in-app notification.
Contact Information
If you have any questions about this Privacy Policy, your privacy rights, our data practices, or to exercise any of your rights, please contact the data controller (Fonts Logo Maker) at:
Fonts Logo Maker
Email: FontsApp@protonmail.com
Website: https://canvasgraphicdesign.com/
Mailing Address: Xrisostomou Smirnis 33, Larisa, Greece, 41223
Phone Number: +30 6949741939
Privacy Contact: Fonts Logo Maker Privacy Team
We respond to all privacy-related inquiries and requests in accordance with applicable law.
