Privacy Policy

The Secrets of Decoupage App

Effective Date: 9 July 2026
Operator: ARAMEDU LTD
Company number: 15538835
Registered office: 14 Manette House, 128 Maidstone Road, Chatham, ME4 6DQ, United Kingdom
Contact email: aramedultd@gmail.com

This Privacy Policy explains how ARAMEDU LTD, trading as The Secrets of Decoupage, collects, uses, shares, stores and protects personal data in connection with The Secrets of Decoupage mobile application, website-connected services, community features, subscriptions, credits, Project Helper, digital content and store-connected services.

This Policy should be read together with our Terms and Conditions of Use, Community Guidelines, Copyright and Intellectual Property Policy, Child Safety Standards, Account and Data Deletion Policy, and any other policy shown inside the App.

1. Who Is Responsible for Your Personal Data

The data controller responsible for personal data processed through the App is ARAMEDU LTD. Privacy requests should be sent to:

• Email: aramedultd@gmail.com (please write "Privacy Request" in the subject line)
• Post: 14 Manette House, 128 Maidstone Road, Chatham, ME4 6DQ, United Kingdom

2. What this Policy Covers

This Policy covers personal data processed when you:

• Create or use an App account
• Sign in through Apple, Google, Shopify or another login method
• Subscribe to, cancel or manage a VIP, PRO or other membership plan
• Use credits, member rewards, VIP Drops, downloads or locked content
• Browse products, connect to the store, view orders or redeem credits
• Upload projects, photos, comments, posts or other community content
• Use Project Helper or other automated assistance features
• Contact customer support, moderation, copyright or child-safety contacts
• Receive emails, push notifications or marketing messages
• Use the App on a phone, tablet or other device

3. Short Summary

• We use account data to operate your App account and membership
• We use subscription, purchase and credit data to manage paid plans, benefits, discounts, credits and store-connected features
• We use community content to show your posts, projects, comments, likes, challenge entries and profile activity inside the App
• We use Project Helper messages to provide automated craft, product and membership guidance, to maintain safety and to improve the service
• We use technical and analytics data to keep the App secure, working and useful
• We do not sell your personal data for money
• We do not knowingly allow children under 16 to create accounts
• You can request access, correction, deletion or restriction of your data, subject to legal exceptions

4. Personal Data We Collect

4.1 Account and Profile Data

We may collect your name, email address, nickname, profile photo, language preference, country or region, login method, account status, membership status, saved preferences and account identifiers.

4.2 Login and Authentication Data

If you sign in using Apple, Google, Shopify or another approved login provider, we may receive information such as your email address, login identifier, authentication token, display name or other information permitted by that provider and authorised by you. We do not receive your Apple, Google or Shopify password.

4.3 Subscription, Membership and Credit Data

We may process information about your plan type, subscription status, renewal status, purchase source, subscription identifiers, billing status, trial eligibility, discounts, credits balance, credit use, rewards, VIP Drops, downloads accessed, locked content accessed and plan benefits. We do not normally receive full payment card numbers from app stores or payment processors.

4.4 Store and Order-Connected Data

Where the App connects with The Secrets of Decoupage store or Shopify-connected services, we may process store account identifiers, order numbers, delivery status, shipping country, product information, credit redemption details, discount use, customer tags, fulfilment status and customer service history.

4.5 Community and User-Generated Content

If you use community features, we may collect and display your posts, project photos, comments, reactions, likes, challenge entries, group activity, reports, moderation history, public profile information and any text or images you choose to upload. You should not upload private information, images of other people, addresses, phone numbers or sensitive information unless you have the legal right and clear reason to do so.

4.6 Photos, Images and File Data

If you upload photos or files, we process those files to publish, store, resize, moderate, display, back up and protect them. Photos may contain metadata, location information or details visible in the image. You are responsible for checking what a photo contains before uploading it.

4.7 Project Helper and Chat Data

When you use Project Helper, we may process the questions, prompts, images, messages, responses, usage limits, timestamps and technical data needed to provide the feature. You should not enter highly sensitive personal data into Project Helper. Project Helper is intended for decoupage, craft, product and membership guidance, not for medical, legal, financial, emergency or highly sensitive personal advice.

4.8 Support, Complaints and Moderation Data

If you contact us, report content, appeal a moderation decision, make a copyright complaint, request child-safety review or complain about the service, we may collect your contact details, message content, account details, screenshots, order details, reports, notes and decisions connected with the case.

4.9 Device, Usage and Technical Data

We may collect technical data such as device type, operating system, App version, language, approximate country or region, device identifiers, IP address, crash logs, performance logs, session information, pages viewed, buttons clicked, time spent, errors, security events and diagnostic information.

4.10 Marketing, Notification and Communication Data

If you sign up to marketing or enable notifications, we may process your email address, notification token, marketing preferences, consent status, unsubscribe status, open and click information, campaign identifiers and communication history.

4.11 Sensitive Data

The App is not designed to collect special category or sensitive personal data such as health information, religion, political opinions, biometric data, precise location, sexual orientation, criminal records or government identity documents. Please do not provide such information through the App unless a specific feature clearly asks for it and explains why it is needed.

5. How We Collect Personal Data

We collect personal data in several ways:

• Directly from you when you create an account, upload content, subscribe, use Project Helper, contact us or change settings
• Automatically when you use the App, through logs, analytics, cookies, SDKs and device information
• From third-party services where you choose to connect or use them, such as Apple, Google, Shopify, payment processors, login providers, app stores, analytics providers, email providers and hosting providers
• From other users where they interact with your public content, report your content, mention you, comment on your posts or participate in the same community features

6. Why We Use Personal Data and Our Legal Bases

Purpose	Examples of data used	Legal basis
Provide the App and account	Account details, login data, profile settings, device data	Contract; legitimate interests
Manage subscriptions and memberships	Plan type, renewal status, purchase identifiers, benefits accessed	Contract; legal obligation; legitimate interests
Manage credits, discounts and rewards	Credit balance, redemptions, eligibility, abuse checks	Contract; legitimate interests
Connect store and order features	Shopify identifiers, orders, product data, delivery status	Contract; legitimate interests
Operate community features	Posts, comments, images, likes, reports, moderation records	Contract; legitimate interests; consent where required
Provide Project Helper	Questions, prompts, responses, usage limits, safety logs	Contract; legitimate interests; consent where required
Customer support and disputes	Messages, screenshots, order details, account history	Contract; legitimate interests; legal obligation
Safety, moderation and child protection	Reports, content, user IDs, logs, moderation decisions	Legitimate interests; legal obligation; vital interests where necessary
Security and fraud prevention	IP address, device data, logs, account activity, payment status	Legitimate interests; legal obligation
Marketing and newsletters	Email, preferences, campaign activity	Consent where required; legitimate interests where permitted
Analytics and improvement	Usage data, crash logs, feature interactions	Legitimate interests; consent where required
Legal compliance and records	Invoices, tax records, notices, complaints, rights requests	Legal obligation; legitimate interests

7. Project Helper and Automated Assistance

Project Helper is an automated assistance feature for decoupage, craft, product and membership guidance. We may use Project Helper data to:

• Respond to your questions and apply question or plan limits
• Recommend guides, products or membership features
• Detect abuse, spam, unsafe content or policy violations
• Improve quality, safety and reliability
• Investigate complaints, copyright issues or child-safety reports

Project Helper is not intended to make legal, medical, financial, safety-critical or professional decisions about you.

8. Community Features and Public Visibility

The App may include public or semi-public community areas. Depending on the feature, other users may see your nickname, profile image, posts, project photos, comments, likes, challenge entries, group activity and other content you choose to share.

You should assume that community content may be visible to other users and may be copied or screenshot by others. Do not post content that you want to keep private.

9. Payments, Apple, Google and Shopify

Where you purchase a subscription or digital item through Apple App Store or Google Play, Apple or Google may process your payment information and account billing data. We receive limited information needed to confirm purchase status, renewal status, cancellation status, refund status, eligibility and access rights.

We do not intentionally collect or store full payment card numbers inside the App.

10. Marketing, Push Notifications, Cookies and Tracking

We may send service messages necessary for your account, subscription, safety, moderation, security or purchase. These are not marketing messages and may be sent even if you opt out of marketing.

Marketing emails, promotional messages and non-essential push notifications will be sent only where permitted by law. You can unsubscribe from marketing emails using the unsubscribe link or by contacting us. You can manage push notifications through your device settings and App settings where available.

11. When We Share Personal Data

We do not sell personal data for money. We may share personal data where needed to operate, protect and improve the App, comply with law or provide requested services. We may share data with:

• Hosting, cloud, database and storage providers
• App store providers, including Apple and Google
• Shopify and store-connected service providers
• Payment processors and fraud-prevention providers
• Email, notification and customer-support providers
• Analytics, crash-reporting and performance providers
• AI, automation and content-processing providers used for Project Helper
• Moderation, safety and security tools
• Professional advisers, including lawyers, accountants, insurers and auditors
• Law enforcement, regulators, child-safety organisations, courts or authorities where legally required or necessary to protect users or our rights
• A buyer, successor or investor in connection with a business sale, merger, restructuring or transfer, subject to appropriate confidentiality and legal safeguards

12. International Transfers

We are based in the United Kingdom, but users and service providers may be located in the UK, European Economic Area, United States, Canada, Australia and other countries. Personal data may therefore be processed outside your country of residence. Where required, we use appropriate safeguards for international transfers, including adequacy regulations, standard contractual clauses, the UK International Data Transfer Addendum or Agreement, data processing agreements and security controls.

13. How Long We Keep Personal Data

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy. Our usual retention approach is:

• Account and profile data: for the life of the account and for a reasonable period after closure where needed for legal, security or dispute reasons
• Subscription, payment status and order records: usually up to 6 years or longer where required for tax, accounting, audit, chargeback, fraud or legal reasons
• Community content: while your account is active or until deleted, unless retained for safety, legal, moderation or backup reasons
• Project Helper messages: for the period needed to provide the service, maintain safety, improve quality, investigate abuse and comply with legal obligations
• Support, complaint, copyright and moderation records: usually up to 6 years where needed for legal defence, enforcement, audit or repeated-abuse prevention
• Marketing data: until you unsubscribe or object, after which we may keep a suppression record
• Backup copies: retained for limited backup cycles and then overwritten or deleted, unless data must be preserved for legal or safety reasons

14. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No online service can be guaranteed to be completely secure. You are responsible for keeping your login details secure and telling us promptly if you believe your account has been accessed without permission.

15. Your Privacy Rights

Depending on your country, state or region, you may have some or all of the following rights:

• Right of access: to ask for a copy of personal data we hold about you
• Right to correction: to ask us to correct inaccurate or incomplete data
• Right to deletion: to ask us to delete personal data, subject to legal exceptions
• Right to restriction: to ask us to restrict use of your data in certain circumstances
• Right to object: to object to certain processing based on legitimate interests or direct marketing
• Right to portability: to receive certain data in a structured, commonly used and machine-readable format
• Right to withdraw consent: where processing is based on consent, you may withdraw consent at any time
• Right to complain: to contact a privacy regulator if you are unhappy with how we handle your data

16. Rights for UK and European Users

If you are in the United Kingdom, European Union or European Economic Area, you may have rights under UK GDPR, EU GDPR or similar local laws. In the United Kingdom, the supervisory authority is the Information Commissioner's Office. You may also contact us first so we can try to resolve your concern.

17. Rights for United States Users

Certain U.S. state privacy laws may give residents additional rights, including the right to know, access, correct, delete or obtain a copy of personal information, and the right to opt out of certain types of sale, sharing, targeted advertising or profiling. We do not sell personal information for money. We will not discriminate against you for exercising privacy rights.

18. Rights for Canadian Users

If you are in Canada, you may have rights under PIPEDA or provincial privacy laws, including the right to know why personal information is collected, used or disclosed, the right to access personal information, the right to challenge accuracy, and the right to withdraw consent where consent is the basis for processing.

19. Rights for Australian Users

If you are in Australia, the Australian Privacy Principles may give you rights to access and correct personal information, and to complain about how personal information is handled. If you are not satisfied with our response, you may be able to contact the Office of the Australian Information Commissioner.

20. Account Deletion and Data Deletion

You may request account deletion through the App where available and by contacting us at the privacy contact email above. When you request account deletion, we will delete or anonymise personal data associated with your App account unless retention is required or permitted for legitimate reasons such as:

• Tax, accounting and transaction records
• Fraud prevention, chargeback handling and payment disputes
• Security investigations and abuse prevention
• Child safety, community safety and moderation records
• Copyright, legal claims and enforcement of our terms
• Regulatory compliance and record-keeping obligations
• Backup systems that are overwritten in normal backup cycles

21. Children and Young Users

The App is intended for users aged 16 or over. We do not knowingly allow children under 16 to create accounts or use community, chat, subscription or upload features. If we reasonably believe that an account belongs to a child under 16, we may suspend or delete the account and associated data.

If you believe a child under 16 has provided personal data to us, please contact us immediately at aramedultd@gmail.com.

22. Child Safety Reports

We have zero tolerance for child sexual abuse material, child sexual exploitation, grooming or conduct that endangers children. Reports involving child safety may be reviewed urgently, preserved where legally appropriate and reported to relevant authorities, hotlines, platforms or law enforcement where required or permitted by law.

23. Copyright, Infringement and Legal Reports

If you send us a copyright complaint, counter-notice, trade mark complaint, legal notice or infringement report, we may process your name, contact details, complaint details, evidence, correspondence and related account data. Where legally required or reasonably necessary, we may share parts of infringement reports with the user who posted the content, our legal advisers, platforms, regulators, courts or other relevant parties.

24. Automated Decision-Making and Profiling

We may use automation to help with spam detection, fraud prevention, credit abuse detection, content moderation, recommendation of content or products, analytics, security alerts and Project Helper responses. We do not intend to use solely automated processing to make decisions about you that produce legal or similarly significant effects, unless permitted by law and accompanied by appropriate safeguards.

25. Do Not Track and Privacy Signals

Some browsers and devices send "Do Not Track" or similar signals. Because there is no single industry standard for all such signals, we may not respond to every signal. Where a legally recognised opt-out preference signal applies to us, we will handle it as required by law.

26. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in the App, technology, legal requirements, platform requirements or our business. Where changes are material, we will take reasonable steps to notify users, such as by in-app notice, email or another appropriate method.

27. Complaints

If you have a privacy concern, please contact us first so we can investigate and try to resolve it.

• UK: You may complain to the Information Commissioner's Office
• EU/EEA: You may complain to your local data protection authority
• Canada/Australia: You may contact the relevant privacy regulator where applicable
• United States: You may have rights under applicable state privacy laws

28. Contact Details

For all privacy requests, account deletion requests, data rights requests and questions about this Policy, contact:

ARAMEDU LTD
Company number: 15538835
14 Manette House, 128 Maidstone Road
Chatham, ME4 6DQ
United Kingdom
Email: aramedultd@gmail.com

Schedule 1 — Data Categories and Use

Data category	Examples	Main uses
Identifiers	Name, email, user ID, account ID, login ID, Shopify/customer ID	Account access, membership, support, store sync, security
Commercial information	Subscriptions, orders, credits, rewards, product views, downloads, purchases	Billing, benefits, credits, fulfilment, refunds, fraud prevention
User content	Project photos, posts, comments, reactions, challenge entries, reports	Community display, moderation, safety, feature operation
Communications	Support messages, complaints, copyright notices, child-safety reports	Customer support, enforcement, legal compliance
App activity	Guides viewed, features used, clicks, session data, search terms	Analytics, recommendations, improvement, security
Device and technical data	IP address, device type, OS, App version, crash logs, diagnostics	Security, troubleshooting, performance, analytics
Project Helper data	Prompts, questions, responses, usage limits, timestamps	Automated assistance, safety, quality, abuse prevention
Approximate location	Country/region inferred from IP, shipping country or account setting	Availability, taxes/shipping context, fraud prevention, localisation
Marketing data	Email preferences, consent, unsubscribes, campaign activity	Marketing communications where permitted, suppression lists
Sensitive data	Not intentionally requested	Avoided unless necessary for safety/legal reasons or provided by the user

Schedule 2 — Practical Privacy Choices

Users can usually control privacy in the following ways:

• Account details: update details in the App where available or contact support
• Marketing emails: use the unsubscribe link or contact us
• Push notifications: change device settings or App settings where available
• Community content: delete content where the App provides that function or contact us
• Project Helper: avoid entering private or sensitive personal information
• Photos: check images for personal information before uploading
• Account deletion: use the in-app deletion path where available or contact us by email
• Data rights: contact us at aramedultd@gmail.com