Bilargo Exit — Privacy Policy

Effective date: September 28, 2026

This Privacy Policy explains how Bilargo — Michał Lipski, a sole proprietorship (jednoosobowa działalność gospodarcza) registered in Poland, with registered address at Aleja Partyzantów 51A, 24-100 Puławy, Poland, NIP 7161515351, REGON 061686949 (“Bilargo”, “we”, “us” or “our”), handles information when you use the Bilargo Exit iOS application (the “App”) and related support materials.

Bilargo is a trade name of the sole proprietorship operated by the natural person Michał Lipski. For the purposes of the EU General Data Protection Regulation (“GDPR”), Bilargo / Michał Lipski is the data controller for personal data we process.

1. Summary

Bilargo Exit is designed to work on your device, without accounts and without our servers.

As currently offered:

• checklists, check history, and confirmation photos are stored locally on your device;
• we operate no Bilargo backend and require no user account;
• the App contains no analytics, advertising identifiers, or third-party tracking SDKs;
• the camera is used to take confirmation and reference photos saved inside the App's own storage;
• location, if you enable leaving-home reminders, is processed on your device only; the App never sends it to us or anyone else;
• purchases (Bilargo Exit Pro — monthly, yearly, or lifetime) are processed by Apple through the App Store / StoreKit.

The App does not use artificial-intelligence models and does not send your content to any AI service.

2. Information processed locally

The App may process and store locally on your device:

• your checklists and checklist items;
• reference photos you choose for checklist items;
• confirmation photos you take during a check;
• check sessions and their history (including timestamps of completed checks);
• local settings and preferences (including your saved home region if you enable leaving-home reminders);
• purchase entitlement state (whether Pro is active).

This local information remains on your device unless you share or export content yourself (Section 5), or your own device/iCloud backup settings copy it as part of a standard device backup.

3. Camera, photo picker, location, and notifications

• Camera. Used only when you take a confirmation photo or a reference photo. Photos are saved in the App's private storage, not to your system photo library, unless you export them yourself.

• Photo picker. If you choose an existing reference image, iOS presents its system photo picker. The App receives only the image you select, without requesting access to your whole photo library.

• Location. Used only if you enable leaving-home reminders. The App registers your saved home region with iOS geofencing on the device. Your location is not transmitted to Bilargo or to any third party by the App; the saved home region is kept with the App’s local settings (Section 2).

• Notifications. Optional leaving-home reminders require notification permission as well as a saved home region and Always location access. Setup requests these separately as you complete its steps.

Camera, location and notification permissions are optional and requested only when you use the corresponding feature. Denying them leaves the core checklist available; you can mark items manually or skip them.

4. Purchase information

If you buy Bilargo Exit Pro (as a monthly or yearly subscription, or as a lifetime purchase) or restore purchases, Apple processes the transaction. We do not receive your payment card details. We may receive or process limited entitlement information from Apple, such as whether an active Pro entitlement is associated with the Apple Account in use. Apple's processing is governed by Apple's own terms and privacy policy.

5. Sharing and export you initiate

If you share a summary card or export a photo, iOS presents the system share sheet and you decide where that content goes. Content you move out of the App is then handled by the destination app or service outside our control.

Pro also lets you export a list or a backup file. You choose whether to include reference photos, check history (including checks in progress), and check photos. A text export contains only the list name and item titles. Files you save or share may leave the device through the destination you choose; they are separate copies and are not removed when you delete data in the App. Exit does not add password encryption to these files. Keep them in a location and share them with recipients you trust. Importing a file stores its selected content in the App.

6. Support communications

If you contact us for support or privacy requests, we may process the information you provide, such as your name or email address, the content of your message, device/app details you choose to include, and attachments you voluntarily send.

Launch notifications. If you write asking to be told when the App is released, we keep your email address for that single purpose and delete it within three months of launch. The legal basis is your own request (Art. 6(1)(a) GDPR); reply to us at any time to be taken off the list.

Please do not send sensitive personal data unless it is necessary for your request.

7. Data we do not intentionally collect

As of the effective date of this Policy, we do not collect your checklists, photos, check history, or location on our own servers. We operate no servers for the App. We do not use analytics or advertising SDKs, we do not sell personal information, and we do not use the App for advertising tracking.

8. Purposes and legal bases for processing

Where GDPR applies, we rely on the following legal bases:

9. Data sharing

We do not sell your personal data.

Relevant third parties may include:

• Apple, for App Store distribution, billing, subscription management and purchase restoration;
• email or support providers, if you contact us by email or through a support channel;
• professional advisers or public authorities, where required by law or necessary to protect legal rights.

10. International data transfers

Some third parties involved in App distribution or support may be located outside the European Economic Area, including in the United States. In particular, Apple may process App Store data in accordance with its own transfer mechanisms (such as Standard Contractual Clauses or an applicable adequacy framework). Where we transfer support-related personal data ourselves, we use an applicable transfer mechanism such as Standard Contractual Clauses.

11. Local storage and retention

Because the App is local-first:

• checklists remain on your device until you delete them or remove the App’s local data;
• completed checks that are not pinned, together with their photos, are automatically deleted after the retention period you choose: 30 days by default, or 7 days, 90 days, or Never; pinned checks are not removed by automatic cleanup;
• settings remain on your device until changed, reset or deleted;
• Erase All Data permanently deletes every local checklist, check, and photo from your iPhone; this cannot be undone, and your Pro purchase is kept;
• support messages are retained only as long as necessary to handle your request and maintain reasonable business/legal records.

If you uninstall the App or remove local data, some or all local information may be deleted, subject to iOS behavior, device/iCloud backups you control, and other system-level storage.

12. Security

We use a local-first architecture to reduce unnecessary data transfer, but no software environment can be guaranteed to be perfectly secure. You are responsible for securing your device, your Apple Account, your exported files, and your device backup settings (including iCloud Backup).

13. Your choices

You may be able to:

• delete checklists, photos, and check history in the App;
• revoke camera, location, or notification permission in iOS Settings;
• remove the App and its local data;
• manage or cancel a Pro subscription and restore purchases through Apple;
• contact us about privacy questions at privacy@bilargo.com.

14. Your GDPR rights

If you are in the EU/EEA or GDPR otherwise applies, you have the right to:

• access personal data we hold about you (Art. 15 GDPR);
• rectify inaccurate personal data (Art. 16 GDPR);
• erase personal data (“right to be forgotten”) (Art. 17 GDPR);
• restrict processing (Art. 18 GDPR);
• data portability (Art. 20 GDPR);
• object to processing based on legitimate interests (Art. 21 GDPR);
• withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR), without affecting processing before withdrawal;
• lodge a complaint with a supervisory authority.

For Poland, the supervisory authority is:

Prezes Urzędu Ochrony Danych Osobowych (PUODO) ul. Stawki 2, 00-193 Warszawa, Poland https://uodo.gov.pl

To exercise your rights, contact us at privacy@bilargo.com. Because App data is stored on your device, we generally cannot access or delete it for you; you can delete it directly on your device.

15. Children

The App is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data through a support or privacy request, contact us at privacy@bilargo.com.

16. Automated decision-making

We do not use personal data for automated decision-making that produces legal or similarly significant effects within the meaning of Art. 22 GDPR.

17. Changes

We may update this Privacy Policy from time to time. If we do, we will update the effective date above and publish the current version at https://exit.bilargo.com/privacy. Where required by law, we will provide appropriate notice.

18. This website

This policy is about the App. The website you are reading it on processes one more thing, and it is worth stating plainly: our hosting provider, Cloudflare, collects standard server logs — IP addresses, request timestamps, and browser user-agent strings — when serving these pages. An IP address is personal data, so here is the full picture. We process it for the security and performance of the site; the legal basis is our legitimate interest, Art. 6(1)(f) GDPR. Cloudflare processes these logs for us, as our processor and on our instructions. On the plan we use, raw request logs are not available to us at all — exporting them is an Enterprise-only feature — and the request-level data we can see, which includes IP addresses, covers the previous seven days and nothing older. We keep no separate copies, and what Cloudflare retains for its own purposes is set out in its own privacy policy. Cloudflare runs a global network: requests are served from its edge servers, while the metadata about those requests is processed in its data centers in the United States and in Europe. Transfers outside the EEA rely on the European Commission's standard contractual clauses in their controller-to-processor module; those clauses form part of Cloudflare's data processing addendum. Cloudflare's Privacy Policy describes its own practices.

This site sets no cookies, runs no analytics, and has no contact forms. Your rights, described above, cover this processing too.

19. Contact

If you have privacy questions, contact:

• Bilargo — Michał Lipski
• Aleja Partyzantów 51A, 24-100 Puławy, Poland
• NIP: 7161515351
• REGON: 061686949
• privacy@bilargo.com
• support@bilargo.com
• https://exit.bilargo.com

We keep both language versions — Polish and English — in substantive alignment. For consumers in Poland the Polish version is the binding one.