Privacy policy

Last updated: 2 November 2026 · Version 11-11-2026

This document applies to Uwe Studio, including its website, public showcase and mobile and web applications.

Service operator: Uwe Studio
Business address: Nigeria
Support and privacy contact: [email protected]

1. Who handles your information

The operator identified above is responsible for personal information used to run Uwe Studio, including account administration, security, subscriptions and the public showcase. For customer and staff records entered by a studio, that studio normally decides why and how the information is used, and we process it to provide the service. The precise legal role depends on the processing involved.

This policy covers website visitors, account holders, studio staff and people whose information a studio enters. Contact the studio first about its customer records or published work, and contact us about your platform account, public-content concerns or assistance with a data-rights request.

2. Information we collect

Account information: name, email, optional phone number and avatar, password verification data, email verification status, sign-in and recovery records, and accepted agreement versions.
Studio and staff information: business name and contact details, country, address, currency, timezone, logo, signature or seal, membership, roles, invitations and permissions.
Customer and work records: customer contact details, tags, measurements, notes, job items, styles, assignments, progress, delivery dates, photos and documents supplied by a studio.
Financial records: invoices, quotations, opening balances, expenses, cash movements, payments recorded by users, credit notes, refunds, receipts and related references. Subscription purchases may include a provider purchase token, product identifier, renewal status and expiry.
Public content: published post text, captions, photos, categories, country information and the studio profile and contact information made public.
Technical and support information: IP address, request time, device or browser information supplied with requests, errors, security events and messages you send to support. Advertising providers may collect additional device information described below.

Most information comes from you, an authorised studio member or your device. A studio may enter a customer's or invited staff member's information before that person has a platform account. We also receive limited information from Google Sign-In, subscription providers and service providers needed to deliver a feature.

3. Google Sign-In, photos and device access

If you choose Google Sign-In, we use Google's verified identity response, such as your Google account identifier, email and available basic profile information, to identify or create your account. Google Sign-In does not give us access to your email inbox or Google contacts.

You choose which photos or files to upload. Camera access is used when you choose to take a photo; system photo/file pickers let you select existing files. We do not need to read your entire photo library to upload a selected image. We may resize uploaded images and create thumbnails for delivery and display.

The app may read your device timezone to suggest a studio setting. You can edit it. Country information is supplied or selected for studio and public-content features; the service does not require precise GPS location for those features.

4. Why we use information

We use information to create and secure accounts, verify email addresses, recover access, provide studio tools, manage authorised staff access, produce documents and reports, display published work, deliver transactional email, administer subscriptions, prevent abuse and respond to support or legal requests.

Where applicable, our legal grounds include performing our agreement with you, meeting legal obligations, your consent for optional processing where required, and legitimate interests such as protecting the service and resolving misuse, balanced against your rights. Studios must establish their own lawful grounds for the customer and staff data they enter. Acknowledging this policy is not blanket consent to marketing or advertising.

5. Private studio records and public work

Private customer, job and financial records are available to studio members according to their access rights. Joining more than one studio does not make one studio's records public to another. Studio administrators choose roles and are responsible for granting appropriate access.

Publishing a post or enabling a public studio profile makes the selected content and public contact details available to visitors without an account, including through the website and mobile Explore feed. Search engines may index it and others may share or download it. Customer measurements and private invoices are not automatically turned into public posts.

Unpublishing removes content from our current public views, but it cannot recall third-party copies, search-engine caches or exports. Obtain any permission needed before publishing a person's image, name or other identifying details.

6. Advertising and privacy choices

Eligible Free-plan mobile screens and public browsing may show ads using Google AdMob. Ad-free paid studio plans suppress the studio ad placements described by the plan. An absence of displayed ads does not mean Google SDKs or other necessary services never process technical information.

Google's advertising services may receive your IP address, device and advertising identifiers, device/app information, approximate location inferred from an IP address, ad interactions and diagnostic information. These services use information for ad delivery, measurement, fraud prevention and other purposes described in their policies. Non-personalised ads can still involve storage or processing of device information.

Our current ad requests do not intentionally supply your studio's customer lists, measurements, job notes or invoice amounts as advertising targeting data. We do not sell those studio records to advertisers. This does not mean Google's processing of advertising/device information has no privacy consequences.

Where required, Google consent messages appear before live ad requests and an Ad privacy choices action lets you revisit available choices. You can also manage advertising identifiers in device settings. Read Google's privacy policy and how Google uses information from partner apps and sites. The current server-rendered website does not itself load AdSense; a future web advertising integration will require an updated disclosure and any applicable consent controls.

7. Who may receive information

Recipients may include authorised studio members; visitors who access content you publish; providers of hosting, file storage, email delivery and technical operations; Google for sign-in, advertising and Play subscriptions; and advisers or authorities where disclosure is legally required or necessary to protect rights, security or prevent fraud.

Authorised platform administrators may access private studio information for support, security, investigating misuse or legal obligations, using their own administrator accounts. They are not impersonating a studio member. We limit use of that access to those purposes.

If a business transfer or restructuring affects the service, relevant information may be transferred subject to applicable law and appropriate notice. We do not give every provider access to every category of data. External websites and services you open, including a messaging app used to share a pickup message, apply their own privacy practices.

8. Payments and subscriptions

Google Play processes Android subscription purchases. Paystack processes subscriptions purchased through our web app. For a Paystack checkout, we send the paying administrator's account email and the selected subscription details to Paystack. Paystack hosts the card form and processes card information under its own terms and privacy policy. We retain checkout references, payer email, agreed amounts, payment confirmations and subscription status to determine studio access, manage renewals and investigate billing problems. We do not collect full card numbers or card security codes in our application. Recording a customer's bank/cash payment in a studio ledger is separate from charging that customer through a payment provider.

Subscription records may need to remain for accounting, dispute handling and legal compliance. Cancel renewal with the purchase provider if you no longer need the subscription; deleting a platform account does not itself cancel it.

9. Storage, security and international processing

Our operator is based in Nigeria. Hosting, email, Google and other service providers may process information in other countries. Applicable cross-border data-protection requirements and safeguards must be observed when arranging those services. Contact us for information about the providers and transfer arrangements applicable to your data.

We use authentication, password hashing, access controls and other technical measures to protect the service. No online service or device is completely secure. Protect your credentials, use device security controls and share studio access carefully. We do not promise that all stored information is end-to-end encrypted.

10. Retention and account deletion

We retain account information while needed to provide the account and retain studio records while needed for the studio's operations, accounting, disputes, security or applicable legal obligations. Different records may have different retention needs; archiving or hiding a record does not necessarily erase it. We do not state a universal deletion period that applies to every financial or shared record.

Request deletion in My account → Delete my account, including through the web app. See Delete my account for instructions and consequences. A six-hour grace period applies. A completed sign-in before background cleanup begins cancels the request, including if cleanup is delayed.

Cleanup removes account identifiers such as your name, email, phone, password and avatar, along with specified account-only records and memberships, and replaces historical user references with a disabled Deleted user account. Shared studio records, accounting history and attached work photos can remain. A sole-member studio's public profile is closed and contact details are removed; shared studios require another active admin where applicable.

This process does not guarantee that every piece of information about you in a shared customer's/job record is removed. Contact us and the responsible studio to request review of remaining personal information. Copies already exported by others and any backups are outside immediate account cleanup. Any retained copies remain subject to the applicable purpose, retention arrangements and deletion obligations.

11. Your rights and choices

Subject to applicable law, you may request information about processing, access to your personal data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Some requests may be limited by financial-record obligations or other people's rights.

Use account/studio controls where available or write to the privacy contact above. We may ask for proportionate information to verify identity and authority before releasing or changing records. Do not send passwords or verification codes. If a studio controls the record, we may refer the request to that studio and assist as appropriate.

You may complain to the Nigeria Data Protection Commission, and to another competent authority where the law permits. Contacting us first may help resolve a concern but does not remove your right to complain.

12. Children and policy changes

The service is intended for adult business users and is not directed at children. Studios must handle any information relating to children lawfully and with the required parent/guardian involvement. Contact us if you believe a child has created an account or personal information has been used improperly.

We will update the date and version when this policy changes, give appropriate notice of material changes and request renewed acknowledgement where applicable. A policy update does not retrospectively authorise a new use that requires consent. Contact the operator above with questions or privacy requests.