← Back to stmlabs.net
Google Play 2026 Compliant Apple StoreKit & ATT Standard

Privacy Policy & Data Safety

Official Publisher & Developer Disclosures — Sky Touch Media (STMLabs)

This comprehensive Privacy Policy governs all free (ad-supported), freemium, paid, and subscription mobile applications published by Sky Touch Media (STMLabs) on the Google Play Store, Apple App Store, and associated digital services.

Effective Date: September 1, 2026
•
Last Hardened & Verified: September 18, 2026
•
Jurisdiction: Sirhind, Punjab, India

Executive Privacy & Data Safety Pledge

🔒
100% On-Device UtilitiesPhoto compression, document processing, and calculators execute strictly on your device hardware.
🛡️
Zero Financial Data StorageWe never touch, store, or process raw credit card or bank details. All billing is handled by Google & Apple.
🗑️
Guaranteed 30-Day DeletionFull user right to request complete data erasure processed within 30 days under Google Play compliance.
01

1. Introduction & Operator Identity

This Privacy Policy is issued by Sky Touch Media (STMLabs) ("Company", "we", "us", or "our"), headquartered in Sirhind, Punjab, India, operating the official web domain https://www.stmlabs.net.

We develop, engineer, and publish mobile applications and software utilities for Android (via Google Play Store) and iOS (via Apple App Store). This Privacy Policy transparently details how we collect, handle, safeguard, or refrain from collecting information when you download, install, or use our mobile applications and digital platforms.

By accessing or using any application or service provided by Sky Touch Media, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any provision herein, please discontinue using our applications immediately.

02

2. Local On-Device Data Processing (Utilities Guarantee)

100% On-Device Execution GuaranteeOur utility and productivity tools (such as photo compressors, passport photo makers, ambient audio generators, loan EMI calculators, document compilers, and Vedic compasses) operate strictly on an offline-first, client-side architecture.
  • Zero Server Transmission of User Files: Your private images, gallery photos, document scans, PDF files, audio selections, and financial entries are processed 100% locally within your device's isolated application sandbox memory.
  • No Cloud Storage or Remote Backups: We do not operate or maintain remote file storage servers, cloud databases, or scraping scripts for user media. Once a photo resizing, compression, or calculation is completed, temporary RAM memory is cleared automatically.
  • User-Initiated Permissions Only: Media and file permissions (such as Android Photo Picker or Scoped Storage) are accessed only when you explicitly select a file for processing. Our apps never execute background scans of your photo library or storage directory.
03

3. Free Apps, Google AdMob & Advertising Disclosures

To provide high-quality mobile utilities free of charge to users worldwide, our free application tiers are monetized through third-party digital advertising powered primarily by Google AdMob (Google Mobile Ads SDK).

Data Processed by Google Mobile Ads SDK:
  • Pseudonymous Device Identifiers: Google Advertising ID (GAID) on Android; Apple Identifier for Advertisers (IDFA) on iOS (only if granted by the user).
  • Approximate Geolocation: IP address derived coarse location to deliver geographically appropriate language ads (e.g. region-specific promotions).
  • Diagnostic & Anti-Fraud Telemetry: Ad impression counts, click timestamps, device model, operating system version, and fraud prevention signals to detect automated bot clicks.
Apple App Tracking Transparency (ATT) Framework Compliance:On iOS 14.5 and newer, Sky Touch Media strictly enforces Apple's App Tracking Transparency framework. Our iOS apps do not track you across third-party apps or websites for targeted advertising unless you explicitly grant permission through the native iOS ATT dialog. If you choose "Ask App Not to Track", only non-personalized, contextual advertisements are requested.
How You Can Opt Out of Personalized Advertising:

You maintain full hardware control over ad personalization:
• Android: Go to Settings > Google > Ads > Delete Advertising ID or Reset Advertising ID.
• iOS: Go to Settings > Privacy & Security > Tracking, and toggle off tracking permissions globally or per app.

04

4. Paid Apps, In-App Purchases & Subscriptions

Strict Zero Financial Data Collection Policy:Sky Touch Media DOES NOT collect, receive, store, or process raw credit card numbers, debit card details, UPI PINs, CVV codes, or bank account credentials.

All paid application downloads, feature unlock microtransactions, and recurring auto-renewing subscriptions are handled exclusively through official, PCI-DSS compliant store billing systems:

Android Devices:Processed directly by Google Play In-App Billing. All payment methods, billing receipts, and taxes are securely governed under Google Payments terms.
Apple iOS Devices:Processed directly by Apple In-App Purchase (StoreKit). Transactions are tied directly to your Apple ID account with Touch ID / Face ID authentication.

Our servers only receive cryptographic entitlement tokens (e.g. "Status: Active Subscription" or "Purchase Token: Valid") to immediately grant you access to premium digital features.

05

5. Third-Party SDK Services & Frameworks

In strict accordance with Google Play Data Safety specifications and Apple Developer Guidelines, below is the transparent disclosure of vetted third-party software development kits (SDKs) integrated into our software catalog:

Google Play Services

(Google LLC)
Core Framework

Core operating framework, runtime distribution, device integrity verification, and automatic updates.

View Partner Privacy Framework

Google AdMob / Mobile Ads SDK

(Google LLC)
Monetization

Delivery of non-intrusive banner, interstitial, and rewarded video advertisements within free application tiers.

View Partner Privacy Framework

Firebase Analytics & Crashlytics

(Google LLC)
Diagnostics

Pseudonymous stability metrics, crash diagnostic stack traces, and performance telemetry to detect and fix bugs.

View Partner Privacy Framework

Google Gemini & Cloud Vertex AI

(Google Cloud Platform)
AI Processing

On-demand processing for specific AI features (where explicitly enabled). Data is processed under enterprise confidentiality and never used to train public foundation models.

View Partner Privacy Framework

Apple StoreKit & iOS Frameworks

(Apple Inc.)
Apple Ecosystem

In-app purchase validation, digital subscription management, and native system capabilities on iOS devices.

View Partner Privacy Framework
Mandatory Google Play Requirement

6. User Account & Data Deletion Request

Processed within 30 days

Under Google Play Developer Policy and global data protection regulations (including GDPR & CCPA), you have the absolute right to request full deletion of your account, activity records, and all stored personal data associated with our applications.

Sky Touch Media (STMLabs) honors all legitimate data deletion requests. When you submit a deletion request, our compliance team purges your user profile, server logs, analytics associations, and saved preferences from all active databases.

Note for 100% Offline Utilities: Many of our utility applications (such as PixShrink, ZenFocus, Vastu Shastra, LoanCalc, FormPic) operate strictly with an offline-first architecture and do not maintain any cloud user accounts or remote databases. For these offline utilities, simply uninstalling the application from your device instantly and permanently removes all cached data from your device sandbox.

Submit Deletion Request via Email

Direct Email Trigger

Prefer to email directly? Click the one-click trigger below or write to our dedicated compliance desk:

admin@stmlabs.net
Response within 24–48 hours
Complete purge finalized within 30 days
Zero residual data retained on backup servers
07

7. Children's Privacy (COPPA & Google Families Policy)

The protection of children's digital safety is of paramount importance to Sky Touch Media. In full compliance with the Children's Online Privacy Protection Act (COPPA), the Google Play Families Policy, and European GDPR-K regulations:

  • In compliance with India's DPDP Act 2023, individuals under 18 years of age are strictly defined as children. We do not knowingly collect, harvest, or solicit personally identifiable information (PII) from minors under 18 without verifiable parental consent.
  • Zero Tracking Guarantee: We reaffirm a strict policy of zero behavioral profiling, zero tracking, and zero targeted advertising for children.
  • Our applications are designed for general audiences and utility productivity. If an application is categorized under the Families program, it serves only Google-certified family-safe ad networks with interest-based targeting strictly disabled.
  • Immediate Parental Action: If a parent or legal guardian discovers that their child has provided personal information to us without parental consent, please email our compliance officer immediately at admin@stmlabs.net. We will take prompt steps to verify and permanently eradicate such data within 24–48 hours.
08

8. Security Safeguards, Data Retention & User Rights

Technical Safeguards:All active internet communication uses industry-standard SSL/TLS 256-bit cryptographic encryption in transit. Internal infrastructure is hardened with zero-trust access controls and continuous automated vulnerability scans.
Retention Period:Pseudonymous telemetry logs and diagnostic crash dumps are automatically aggregated or permanently purged after a maximum of 90 days. User data is never retained longer than necessary to fulfill legal or utility duties.
Your International Privacy Rights (GDPR / CCPA / DPDP):

Regardless of your residency, you retain the legal right to:
• Access & Portability: Request confirmation and an export of any personal data linked to your identity.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure: Demand permanent deletion under our 30-day verified erasure mechanism.
• Non-Discrimination: Exercise privacy rights without suffering diminished service access or punitive price changes.

09

9. India Digital Personal Data Protection Act (DPDP) 2023 Compliance

In compliance with India's Digital Personal Data Protection (DPDP) Act 2023, Sky Touch Media operates as a Data Fiduciary.

Data Principal Statutory Rights:
  • Right to Access (Sec 11): Users can request a summary of personal data processed by us and the identities of Data Processors.
  • Right to Correction & Erasure (Sec 12): Users may rectify inaccurate records and demand full deletion of their data.
  • Right of Grievance Redressal (Sec 13): Users have an accessible mechanism to register privacy disputes.
  • Right to Nominate (Sec 14): Users may nominate another individual to manage or exercise data rights in case of death or incapacity.
Nomination Protocol & Incident Response

Nomination Protocol: Users may submit a written electronic notice to admin@stmlabs.net to officially designate a nominee under Section 14.

72-Hour Incident Response Commitment: In the event of a confirmed security breach affecting personal data, Sky Touch Media shall notify the Data Protection Board of India (DPBI) and affected Data Principals without undue delay, and within 72 hours.

10

10. Contact & Grievance Redressal Officer

In compliance with global data protection laws and Indian Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, you may address any inquiries, complaints, or grievance escalations directly to our designated compliance desk:

Legal Publisher & Developer
Grievance Officer
Sky Touch Media (STMLabs)
Sirhind, Punjab, India
Official Compliance Email
admin@stmlabs.net
Resolution SLA: Within 30 calendar days (Maximum statutory limit: 90 days)
Copyright © 2026 Sky Touch Media. All rights reserved.