BulbMatch Privacy Policy

Effective date: July 28, 2026

This Privacy Policy describes how the BulbMatch mobile application (the “Application”), operated by Sergey V. (the “Service Provider”), accesses, processes, and shares information. BulbMatch helps users identify bulb markings and find matching or equivalent light bulbs.

Privacy summary: Photos and text recognition (OCR) are processed locally on your device. BulbMatch does not upload or store your photos or recognized text on the Service Provider's servers. Network data is transmitted only through Yandex Mobile Ads SDK for advertising and Firebase Crashlytics for crash diagnostics, within the scope described below.

1. Photos, Camera Access, and OCR

BulbMatch may request access to your device camera or allow you to select an image so that the Application can read markings printed on a light bulb or its packaging.

You may deny or revoke camera permission in your device settings. Some scanning features may not work without this permission, but other parts of the Application may remain available.

2. Information Collected by the Service Provider

The Service Provider does not require you to create an account and does not directly collect your name, email address, phone number, contacts, precise location, photos, or OCR results through the Application. BulbMatch does not operate a server that receives your bulb scans.

The Application includes third-party SDKs that may automatically process limited device, advertising, network, and diagnostic information as described in Section 3.

3. Third-Party Services and Network Data

BulbMatch uses only the following third-party services that may communicate over the internet:

Yandex Mobile Ads SDK

Yandex Mobile Ads SDK is used to display and measure advertisements. Depending on your device settings, consent choices, applicable law, and SDK configuration, Yandex may process information such as your IP address, advertising identifier, general device information, app interaction or ad event data, and an approximate location inferred from an IP address. The Application does not provide Yandex with your photos or OCR results.

Where required, the Application will request consent before enabling personalized advertising or other non-essential processing. You can also limit ad personalization or reset/delete your advertising identifier through your device settings. Data transmitted by the SDK is encrypted in transit using HTTPS/TLS.

Firebase Crashlytics

Firebase Crashlytics is used to detect, diagnose, and fix crashes and stability problems. Crashlytics may automatically collect crash stack traces, relevant application state at the time of a crash, device and operating-system metadata, app version information, and installation identifiers used to associate crash reports with an app installation. Crash reports are not intended to include your photos or OCR results.

The privacy practices of these providers are governed by their own policies:

4. Purposes of Processing

Information processed through the third-party SDKs is used only for the following purposes:

5. Legal Bases and Consent

Where applicable data-protection law requires a legal basis, processing may be based on your consent, the Service Provider's legitimate interest in maintaining a secure and reliable Application, or the need to comply with legal obligations. Where processing is based on consent, you may withdraw that consent at any time through the choices presented in the Application or your device settings. Withdrawal does not affect processing carried out before consent was withdrawn.

6. Data Sharing and Disclosure

The Service Provider does not sell your photos, OCR results, or personal information. Information is shared only with Yandex Mobile Ads SDK and Firebase Crashlytics for the purposes described in this Policy, or when disclosure is required by law, a valid legal process, or is reasonably necessary to protect users, the Service Provider, or the public from fraud, security threats, or harm.

7. Data Retention and Deletion

Because photos and OCR results are processed locally and are not received by the Service Provider, the Service Provider does not retain or delete such data on a remote server. Temporary in-memory data used for scanning is discarded when it is no longer needed for the active operation or when the Application is closed, subject to normal operating-system behavior.

Yandex and Firebase retain information according to their own retention policies and legal obligations. Firebase states that Crashlytics crash stack traces and associated identifiers are generally retained for 90 days before removal begins. Advertising data retention is controlled by Yandex and may vary according to the data type, SDK configuration, consent status, and applicable law.

You can stop future collection by uninstalling the Application. You may also reset or delete the advertising identifier in your device settings. To submit a privacy request concerning data controlled by the Service Provider, contact the email address below. Requests concerning data independently controlled by Yandex or Google/Firebase may need to be submitted directly to those providers.

8. International Data Transfers

Third-party service providers may process data in countries other than your country of residence. Where required by applicable law, transfers will be subject to appropriate safeguards provided by the relevant service provider, such as adequacy decisions, contractual safeguards, or another legally recognized transfer mechanism.

9. Security

The Service Provider uses reasonable technical and organizational measures appropriate to the nature of the Application. Local processing reduces the need to transmit bulb photos and OCR results. Network transmissions by the integrated SDKs use encrypted connections. However, no method of electronic processing or transmission is completely secure, and absolute security cannot be guaranteed.

10. Children's Privacy

BulbMatch is not directed to children under 13, or a higher minimum age where required by local law. The Service Provider does not knowingly collect personal information directly from children. If you believe a child has provided personal information to the Service Provider, contact the Service Provider so that the matter can be investigated and appropriate action can be taken.

11. Your Privacy Rights

Depending on where you live, you may have rights concerning personal data, including rights to access, correct, delete, restrict, or object to certain processing, withdraw consent, or receive information about data sharing. You may also have the right to lodge a complaint with your local data-protection authority.

Because the Service Provider does not receive photos or OCR results and does not provide user accounts, there may be no scan-related data held by the Service Provider to access or delete. To exercise an applicable right regarding information controlled by the Service Provider, use the contact details below.

12. California Privacy Notice

California residents may have rights to know, access, correct, or delete certain personal information and to opt out of certain forms of sale or sharing. The Service Provider does not sell personal information for monetary consideration. Advertising data processed by Yandex may constitute “sharing” or targeted advertising under some privacy laws, depending on configuration and use. Available consent choices and device advertising settings can be used to limit such processing. The Service Provider will not discriminate against you for exercising applicable privacy rights.

13. Changes to This Policy

This Privacy Policy may be updated to reflect changes to the Application, SDKs, legal requirements, or data practices. The updated version will be posted with a revised effective date. Material changes will be communicated where required by law.

14. Contact Us

For questions or privacy requests related to BulbMatch, contact the Service Provider at info[@]sedsoftware.com