1. Summary

2. Who we are

Pack Master (“the app”) is published by Elderlight Studio (“we”, “us”), an independent developer. For the limited processing described here, Elderlight Studio is the data controller. Third parties named below act as independent controllers or processors for the data they handle under their own policies.

Contact: lozanalekseev@gmail.com

3. Data stored on your device

Everything you create in the app is saved in the app’s private storage on your device and is not transmitted to us:

• Lists and trips: title, destination (name, region and, if you picked a search suggestion, its coordinates), trip date, notes, category and colour.
• Packing categories and items, including which items are marked as packed.
• Custom templates you save.
• Reminder times you set.
• Settings: theme, language, metric/imperial units, vibration, and whether PRO is unlocked.

We cannot see this data. There is no Elderlight Studio server behind the app, so we have no copy of your lists.

4. Destination search & 5-day weather forecast

If you enter a destination, the app shows a 5-day weather, wind and wave forecast. To do this it contacts Open-Meteo directly from your device. The following is sent:

• The text you type in the Destination field (to suggest matching places) and the app language code.
• The coordinates of the destination and, when relevant, the trip date range (to fetch the forecast and wave heights).
• Your IP address and standard request headers, as with any internet request.

The app does not request the location permission and never reads your device’s GPS position; the forecast is for the place you typed, not for where you are. No identifier, account or advertising ID is sent to Open-Meteo. If you leave the destination empty, no request is made. Open-Meteo’s handling of requests is described in its terms and privacy information.

Forecast data is provided for general planning only and is not stored by us.

5. Advertising (Google AdMob)

The free version shows a banner ad, and offers optional rewarded video ads that unlock a PRO action once (“Watch Ad to Unlock”). Ads are delivered by Google AdMob (Google Ireland Limited / Google LLC). When ads are requested, the Google Mobile Ads SDK may collect and process:

• Device identifiers, including the Android Advertising ID.
• IP address, which can be used to estimate approximate location (country/city level).
• Device and app information: model, OS version, language, screen size, app version, network type.
• Ad interaction and diagnostic data: impressions, clicks, ad performance and SDK crash data.

Google uses this to serve, measure and – depending on your settings and region – personalise ads, and to prevent fraud. Google acts under its own policies: Google Privacy Policy and How Google uses information from apps that use its services.

Your choices

• Reset or delete your Advertising ID / opt out of personalised ads: Android Settings → Privacy → Ads (on some devices Settings → Google → Ads).
• Remove the ad banner entirely: unlock PRO. When PRO is active the banner is not loaded and no banner ad requests are made.
• Rewarded ads only load when you choose “Watch Ad”.

The contents of your packing lists are never passed to the advertising SDK.

6. Purchases & promo codes

The PRO upgrade is a one-time in-app purchase processed entirely by Google Play Billing. We never receive or store your payment card details, name or billing address. The app only asks Google Play whether the PRO product is owned by the Google account on the device, and stores the result (yes/no) locally.

If you enter a promo code, it is checked on your device against a one-way hash. The code is not sent anywhere.

As the seller of record, Google may share limited order information with us in the Play Console (such as an order ID and country) for accounting and refunds. See the Google Payments Privacy Notice.

7. Sharing a list by link

When you choose Share List, the app builds a link of the form https://elderlightstudio.com/packmaster?data=… and hands it to the Android share sheet. Please note how this works:

• The entire list is encoded inside the link itself (title, destination, date, notes, categories, items and packed state). It is encoded, not encrypted – anyone who has the link can read the list.
• Nothing is uploaded when the link is created. It goes only to the app or person you pick in the share sheet, and is then subject to that service’s privacy policy (for example your messaging app).
• When the recipient opens the link on a device with Pack Master installed, the list is imported locally in their app.
• If the link is opened in a web browser instead, the link – including the encoded list – is transmitted to our website elderlight.art and its hosting / content-delivery providers, where it may appear in standard, short-lived server logs together with the visitor’s IP address. We do not use these logs to build profiles.

Tip: do not put sensitive information (passport numbers, booking codes, addresses) in list notes if you plan to share the list by link.

8. Backup, export & import

• Export / Import Backup (PRO): creates or reads a JSON file at a location you choose through the Android file picker. The app only gets access to that single file. If you save it to a cloud drive, that provider’s policy applies.
• Android Auto Backup: if backup is enabled on your device, Android may include the app’s data in the encrypted backup of your own Google account, so your lists can be restored on a new phone. This is controlled by you in Settings → Google → Backup; we have no access to these backups.

9. Reminders, home-screen widget & app updates

• Reminders are scheduled locally with the Android alarm system and shown as local notifications. Nothing is sent to a push-notification server.
• The widget reads your lists from local storage to display them on your home screen. Anyone who can see your home screen can see what the widget shows.
• In-app updates use the Google Play In-App Update service to check whether a newer version is available. This is handled by Google Play on your device.

10. App permissions

The app does not request access to your location, contacts, camera, microphone, photos, SMS or call logs.

11. Third-party services at a glance

12. Legal bases (EEA, UK & Switzerland)

• Performance of a contract – providing the features you use: forecast requests for the destination you enter, processing the PRO purchase, shared-list links.
• Consent – storing or accessing information on your device for advertising and showing personalised ads, where the law requires it. You can withdraw consent at any time through your device’s ad settings.
• Legitimate interests – showing non-personalised ads to fund the free version, preventing ad fraud, keeping the website secure.
• Legal obligation – accounting and tax records relating to purchases.

13. Retention & deletion

• On-device data stays until you delete a list, clear the app’s storage (Settings → Apps → Pack Master → Storage → Clear storage) or uninstall the app. Any of these removes it permanently from the device.
• Auto Backup copies can be removed from your Google account under Google Drive → Backups.
• Data held by Google or Open-Meteo is retained according to their policies; use the links above to exercise your rights with them.
• We hold no user database, so there is no account to delete on our side. If you e-mail us, we keep the correspondence only as long as needed to answer you.

14. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, or the CCPA/CPRA), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, to withdraw consent, and to lodge a complaint with your local data-protection authority.

Because your lists exist only on your device, you exercise most of these rights directly: you can view, edit, export and delete everything in the app yourself. For data processed by Google (ads, purchases), use your Google Account tools. For anything else, write to us at lozanalekseev@gmail.com and we will reply within 30 days.

California residents: we do not sell personal information and do not share it for cross-context behavioural advertising ourselves. Advertising identifiers processed by Google AdMob can be limited through the device ad settings described in section 5.

15. Children

Pack Master is a general-audience utility and is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has provided personal data through the app, contact us and we will help.

16. Security

App data is kept in the app’s private storage, which Android isolates from other apps. All network requests made by the app use encrypted HTTPS connections. No system is perfectly secure: protect your device with a screen lock, and remember that shared-list links are readable by anyone who receives them.

17. International transfers

Google and the providers hosting our website may process data on servers outside your country, including the United States. Where required, these providers rely on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.

18. Changes to this policy

We will update this page when the app’s features or our practices change, and revise the “Effective” date at the top. Significant changes will also be mentioned in the app’s release notes on Google Play.

Revision history

• 20 September 2026 – Rewritten for version 3.4: added destination search with coordinates, trip-date forecasts and marine data (Open-Meteo), rewarded ads, promo codes, shared-list links, reminders, widget, backup export/import and in-app updates.

19. Contact