Privacy Policy — Papered
Last updated: 7 June 2026
1. Who is responsible for your data
Apposite Labs Ltd ("we", "us", "our") is the data controller for personal data processed through the Papered mobile application ("App"). We are registered in England and Wales (company number 17153038) with our registered office at 321–323 High Road, Chadwell Heath, RM6 6AX, United Kingdom.
For any data-related queries, contact us at info@appositelabs.co.uk
2. What data we collect
We collect only the data necessary to operate the App and fulfil your orders:
- Device and usage data — device type, operating system version, language, and anonymised crash and performance data.
- Advertising identifiers — on iOS, we request permission via the Apple App Tracking Transparency (ATT) prompt before using your advertising identifier to deliver personalised ads. On Android, the advertising identifier is used in accordance with your device settings.
- Order data — when you purchase a poster, your name, shipping address, email address, and payment method details are collected and processed directly by our payment and print partners. We do not store your payment card details.
- Local preferences — your favourites and app settings are stored only on your device and are never transmitted to our servers.
3. How we use your data
We use your data to:
- Provide, maintain, and improve the App and its features
- Generate, fulfil, and track poster print orders
- Diagnose and fix technical issues and crashes
- Display advertisements that fund the free version of the App
- Comply with our legal and tax obligations
We do not sell your personal data.
4. Legal basis for processing (UK GDPR)
| Purpose | Legal basis |
|---|---|
| Fulfilling your poster order | Performance of a contract |
| App improvement, fraud prevention | Legitimate interests |
| Personalised advertising (iOS) | Consent |
| Tax and accounting records | Legal obligation |
5. Who we share your data with
We share data only with the third-party service providers required to operate the App:
- Stripe — payment processing and identity verification
- Printify — order fulfilment and shipping
- Google Firebase — image storage and app backend
- Google AdMob — in-app advertising
- Sentry — crash and error reporting
- Cloudflare — content delivery and infrastructure
Each provider is contractually required to protect your data and has their own privacy policy.
6. International transfers
Some of our service providers are based outside the United Kingdom, notably in the United States and the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards including Standard Contractual Clauses or equivalent mechanisms recognised under UK data protection law.
7. How long we keep your data
- Order records — retained for at least 6 years to comply with UK tax and accounting law
- Crash and analytics data — anonymised data may be retained indefinitely
- Local preferences — stored on your device only; deleted when you uninstall the App
8. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data ("right to be forgotten")
- Restrict or object to certain types of processing
- Data portability — receive your data in a machine-readable format
- Withdraw consent at any time (for advertising tracking, this can also be done via your device settings)
To exercise any of these rights, email info@appositelabs.co.uk.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Children
The App is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us at info@appositelabs.co.uk and we will delete it promptly.
10. Advertising and tracking
The App does not use browser cookies. In-app advertising is provided by Google AdMob.
- iOS — we display the Apple App Tracking Transparency (ATT) prompt before using your advertising identifier for personalised ads. If you decline, non-personalised ads are shown instead.
- Android — advertising identifiers are used in accordance with your device-level ad settings.
Anonymised crash reporting is enabled by default to help us maintain App stability.
11. Changes to this policy
We may update this policy from time to time. The date of the most recent update is shown at the top of this page. Material changes will be notified within the App.
12. Contact us
Apposite Labs Ltd
321–323 High Road, Chadwell Heath, RM6 6AX, United Kingdom
Company number: 17153038
Email: info@appositelabs.co.uk