CutKit – Privacy Policy

Effective date: 12 October 2026 · Last updated: 12 October 2026

This privacy policy explains how the CutKit – Cut List Optimizer app for Android and iPhone ("CutKit", "the app") handles information. The app is published by GGSHOP LIMITED, Rm 856(B), 8/F, Tai King Industrial Building, San Po Kong, Hong Kong, a company registered in Hong Kong ("we", "us", "our"), which is the data controller for the data described in this policy. We have not appointed a data protection officer (we are not required to).

Contact: ggshoplimitedco@gmail.com

1. Summary

  • Your projects, parts, boards, layouts, prices, offcut inventory and company name stay on your device. There is no account and we never receive this content.
  • The free version shows ads from Google AdMob. AdMob collects device identifiers and usage data to show and measure ads (see section 5). Users with Pro or an active trial see no ads.
  • The Android app sends a hashed device ID to our own server to run the free trial and to verify Google Play purchases (see section 4).
  • Purchases are processed by Google Play or the Apple App Store. We never see your payment details.
  • We do not sell your personal information.

2. Information stored only on your device

Everything you enter in the app – projects, parts and their sizes, boards and bars in stock, materials, prices and currency, cutting layouts, the offcut inventory, company name, theme and unit settings – is stored only in the app's private storage on your device. The cutting optimization runs on your device. We do not receive it.

  • PDF and CSV export, CSV import: files are created on your device. A CSV file you import is read on your device only. They leave your device only if you choose to share them (for example by e-mail or a messaging app) through your phone's share sheet; the app you share with handles them under its own privacy policy.
  • Backups: your phone's own backup (Android Auto Backup to your Google account, or iCloud / device backup on iPhone) may include the app's settings and projects. These backups are handled by Google or Apple under their privacy policies; we cannot access them.
  • iPhone free trial: on iPhone you start the 14-day trial yourself with a free in-app item ("14-day Trial") from the App Store. Its start date comes from Apple's signed purchase record and a copy is kept in the device Keychain. This stays on your device and with Apple; nothing is sent to us.
  • Deleting the app deletes this data from the device (except a Keychain entry on iPhone, which iOS may keep, and any phone backups you have made).

3. Permissions the app uses

  • Internet / network state – to load ads, to check purchases with the store and (Android) to reach our trial and purchase server.
  • Advertising ID (Android, AD_ID) – used by Google AdMob in the free version (section 5).
  • Tracking permission (iPhone, App Tracking Transparency) – in the free version, before the first ad, iOS asks whether you allow CutKit to track you. If you allow it, Google AdMob may use your device's advertising identifier (IDFA) to show more relevant ads. If you choose "Ask App Not to Track", ads are still shown, but without the IDFA. You can change this at any time in iOS Settings → Privacy & Security → Tracking. Users with Pro or an active trial are never asked.

The app does not use location, camera, microphone, contacts, photos, files outside its own folder, or any account login.

4. Free trial and purchase verification (Android only)

To prevent the free trial from restarting after "Clear data" or reinstalling, and to confirm Google Play purchases, the Android app connects to our server (apps-api, operated by GGSHOP LIMITED) over an encrypted connection (HTTPS).

What is sent:

  • a device hash – a one-way SHA-256 hash of your device's Android ID combined with the app name. The Android ID itself never leaves your phone and cannot be recovered from the hash;
  • the platform (Android) and the build type;
  • only when you buy Pro: the product ID and the Google Play purchase token.

What our server keeps: the device hash, the trial start date, and – if you buy Pro – the product ID, the purchase token, the purchase status and the devices (as hashes) that use the purchase (up to 6 devices per purchase), with the time each was last used. Like any internet service, the server also receives your IP address when the app connects; it is used only to deliver the response and to protect the service against abuse (for example rate limiting), and it is not used to identify you or for advertising.

Why: to provide the free trial fairly, to restore your Pro purchase on a new or reset device without an account, and to prevent fraud. Reading the Android ID on your device for this purpose is strictly necessary to provide the trial and the purchase you asked for, so no separate consent is requested for it. Without it, the free trial and the automatic restore of Pro on Android cannot work.

Shared with: Google Play only – the purchase token is sent to Google Play's purchase-verification service to check that the purchase is genuine, not refunded and not cancelled. We do not share this data with anyone else and we do not use it for advertising.

How long: while you use the app and for as long as needed to keep your trial and purchase status working (including restoring Pro on a new device), and as required for legal, tax or accounting purposes. Trial records of devices that have not contacted the server for 24 months are deleted. Server logs with IP addresses are kept for at most 30 days. You can ask us to delete it at any time (section 9). If you delete it, the trial protection and automatic purchase restore for that device stop working; a valid purchase can be restored again through Google Play.

The iPhone app does not use this server.

5. Advertising (free version only)

The free version of CutKit shows a small number of ads served by Google AdMob (Google LLC / Google Ireland Limited). Users with Pro or an active free trial see no ads.

Ad types: a small banner on the project list; on Android only, occasionally a full-screen ad when you return to the project list (at most once every 48 hours); and an optional rewarded ad that you can choose to watch to unlock one cutting layout (all boards and its PDF). No ads are shown while you enter parts, optimize or view a result unless you choose to watch one.

Data AdMob may collect: device identifiers – on Android the Advertising ID and the app set ID, on iPhone the IDFA (only if you allow tracking) and identifiers limited to the app or developer (such as the IDFV); your IP address and the approximate location derived from it; device and app information (model, operating system, language, app version); ad interaction data (ads shown, taps, viewing time); and diagnostic data (crash and performance information of the ads SDK). Ads are limited to content suitable for a general audience ("PG") and requests are marked as not directed at children. Google uses this data to show, measure and improve ads, to limit how often you see an ad, and to detect fraud and abuse. Google may use cookies or similar technologies (such as the advertising identifier) for this purpose.

Google acts as an independent controller of this data. Learn more:

  • Google Privacy Policy: https://policies.google.com/privacy
  • How Google uses information from sites or apps that use its services: https://policies.google.com/technologies/partner-sites
  • Google advertising: https://policies.google.com/technologies/ads

Your choices:

  • EEA, UK and Switzerland: before any ad is requested, you are asked for consent through Google's consent form (User Messaging Platform, a Google-certified consent management platform). If you do not consent, ads are limited or non-personalised. You can change or withdraw your choice at any time in the app under Settings → Ad privacy settings.
  • US states with privacy laws (for example California): you can opt out of the "sale" or "sharing" of personal information for targeted advertising under Settings → Ad privacy settings.
  • iPhone: you decide in the App Tracking Transparency prompt whether the IDFA may be used; change it in iOS Settings → Privacy & Security → Tracking.
  • Android: you can reset or delete your advertising ID or opt out of ad personalisation in your device settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on the device).
  • Remove ads completely: buy CutKit Pro.

6. Purchases

CutKit Pro is a one-time in-app purchase processed by Google Play (Android) or the Apple App Store (iPhone). We do not receive your name, e-mail address or payment details. The app asks the store whether Pro has been purchased; on Android, the purchase token is also verified through our server as described in section 4. Refunds are handled by Google or Apple under their policies; a refunded purchase removes Pro.

  • Google Play: https://policies.google.com/privacy
  • Apple: https://www.apple.com/legal/privacy/

7. Legal bases (EEA and UK users)

  • Performance of a contract / providing the app you requested – the free trial, Pro unlock, purchase verification and purchase restore (sections 4 and 6).
  • Legitimate interests – preventing fraud and abuse of the free trial and purchases, keeping the service secure, and showing non-personalised ads that fund the free version.
  • Consent – personalised advertising and the use of the advertising identifier where consent is required (section 5), and on iPhone tracking with the IDFA (App Tracking Transparency). You can withdraw consent at any time in Settings → Ad privacy settings, without affecting earlier processing.
  • Legal obligations – keeping purchase-related records where the law requires it.

8. Sharing, sale and international transfers

We share data only with: Google (AdMob advertising and Google Play purchase verification) and Apple (App Store purchases), as described above, and with our hosting provider, which runs our server on our behalf. We may disclose information if required by law.

We do not sell personal information and we do not use your data for our own advertising profiles. Under some US state laws (for example California), the use of advertising identifiers by AdMob for personalised ads may be considered "sharing" for cross-context behavioural advertising. Categories involved: identifiers (advertising ID, IP address), internet or app activity (ad interactions) and approximate location. You can opt out in Settings → Ad privacy settings, by turning off ad personalisation or deleting/resetting your advertising ID in your device settings (section 5), or by buying Pro. We will not treat you differently for exercising these rights.

Google, Apple and our hosting provider may process data in countries other than your own, including the United States. Where required, these transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the UK equivalent.

9. Your rights

Depending on where you live (for example the EEA, the UK, Switzerland, California and other US states), you may have the right to:

  • access the personal data we hold about you and receive a copy of it;
  • have it corrected or deleted;
  • restrict or object to its processing;
  • data portability;
  • withdraw consent at any time;
  • opt out of the "sale" or "sharing" of personal information and of targeted advertising;
  • not be discriminated against for exercising these rights.

To exercise these rights or to make a complaint, e-mail ggshoplimitedco@gmail.com. We acknowledge complaints within 30 days. Because we do not know who you are, please include the Google Play order number (GPA.xxxx) if you bought Pro so we can find the record; we may ask for information to verify your request. If you did not buy Pro, our server holds only a device hash and a trial date that we cannot link to you without your device; we can explain how to identify it if you want it removed. We reply within one month (or the time the law requires). For data held by Google or Apple, please also use their privacy tools.

You also have the right to complain to a data protection authority – in the UK the Information Commissioner's Office (ico.org.uk), in Bulgaria the Commission for Personal Data Protection (cpdp.bg), elsewhere in the EEA the authority of your country.

10. Security

Data sent between the app and our server is encrypted (HTTPS). The device ID is hashed on your device before it is sent. Our server stores no names, e-mail addresses, payment details, location or advertising identifiers, and access to it is restricted. No method of transmission or storage is 100% secure, but we take reasonable measures to protect the data.

11. Children

CutKit is a professional tool intended for adults (18+) and is not directed at children. Ad requests are marked as not child-directed. We do not knowingly collect personal information from children under 13 (or under 16 where local law sets a higher age). If you believe a child has provided personal information, contact us and we will delete it.

12. No automated decisions

We do not make decisions with legal or similarly significant effects about you based solely on automated processing.

13. Changes to this policy

We may update this policy when the app or the law changes. The "Last updated" date at the top shows the latest version. Significant changes will also be noted in the app's release notes. The policy is also linked in the app under Settings → Legal → Privacy policy and on the Pro screen.

14. Contact

GGSHOP LIMITED – Rm 856(B), 8/F, Tai King Industrial Building, San Po Kong, Hong Kong – ggshoplimitedco@gmail.com

Comments

Post a Comment