Privacy Policy

Privacy Policy

Effective Date: August 27, 2026

This Privacy Policy applies to the SG Skin Tool Pro mobile application and any related services operated by m8gan private limited (collectively, the “Application”).

m8gan private limited is referred to in this Privacy Policy as the “Service Provider,” “we,” “us,” or “our.”

Data Controller Information

Where applicable under data protection laws, m8gan private limited acts as the Data Controller for personal data processed by us.

Name: m8gan private limited

Address: Berhampore, Murshidabad, West Bengal, India

Email: deepdeb81538@gmail.com

For privacy questions, deletion requests, or requests concerning applicable data protection rights, please contact us at the email address above.

Information We Collect

The Application does not require users to create an account or provide personal information such as their name, email address, telephone number, or account credentials.

The Application also does not provide users with a feature to upload personal photographs or other personal content. Photographs and visual content displayed in the Application are provided by the Service Provider and are part of the Application's content.

However, the Application uses third-party advertising services, including Google AdMob and Meta Audience Network. These services may automatically process certain technical and advertising-related information when advertisements are displayed or interacted with.

Depending on the advertising provider, device, operating system, user settings, and applicable law, this information may include:

IP address;

device type and model;

operating system and version;

advertising identifiers or similar device identifiers;

application information;

approximate location derived from IP address, where permitted;

information about advertisements displayed or interacted with;

diagnostics, performance, and fraud-prevention information; and

information necessary to provide, measure, and improve advertising services.

The Service Provider does not use this information to create user accounts.

How We Use Information

Information processed through the Application and its third-party advertising services may be used to:

provide and display advertisements;

measure and report advertising performance;

prevent fraud, abuse, and invalid advertising activity;

maintain the security and functionality of the Application;

comply with applicable legal obligations; and

improve the Application and advertising services.

Where required by applicable law, we will obtain consent before processing information for purposes requiring consent.

Third-Party Advertising Services

The Application uses the following third-party advertising services:

Google AdMob

Google AdMob is an advertising service provided by Google LLC and its affiliates. AdMob may collect and process information about your device, advertising identifiers, IP address, application usage, and interactions with advertisements, subject to Google's policies and applicable law.

Google's privacy policy is available here:

https://policies.google.com/privacy

Meta Audience Network

The Application may use Meta Audience Network to display advertisements. Meta may process certain device, advertising, usage, and advertising-interaction information in accordance with its policies and applicable law.

Meta's privacy policy is available here:

https://www.facebook.com/privacy/policy/

Third-party advertising providers may process information independently in accordance with their own privacy policies. The Service Provider does not control the privacy practices of these third parties.

Advertising Personalization and Consent

Depending on your location, device settings, applicable law, and advertising configuration, advertisements may be personalized or non-personalized.

Where consent is legally required for personalized advertising or other non-essential processing, the Application will use an appropriate consent mechanism.

You may also be able to control advertising preferences through your device settings or through controls provided by the relevant advertising provider.

Automatically Collected Information

The Application itself does not require users to submit personal information.

Nevertheless, the Application and its third-party advertising SDKs may automatically process technical information necessary for the operation of the Application and delivery of advertisements.

Such information may include device information, IP address, advertising identifiers, operating-system information, application information, diagnostics, and advertising-related information.

The exact information processed may vary depending on the third-party SDK, device, operating system, user settings, and applicable law.

Location Information

The Application does not request or collect precise real-time location information from your device.

Third-party advertising providers may derive approximate location information, such as from an IP address, where permitted by their policies and applicable law.

Artificial Intelligence

The Application does not use Artificial Intelligence (AI) technologies to process users' personal data or provide its features.

Photographs and User Content

The Application contains photographs and visual content supplied by the Service Provider.

Users are not required to upload photographs to use the Application, and the Application does not transmit users' personal photographs to the Service Provider.

Legal Bases for Processing Under the GDPR

Where the GDPR applies, the applicable legal basis for processing may include:

Consent: Where you have provided consent for processing that requires consent, including certain advertising or optional processing.

Contract or requested service: Where processing is necessary to provide the Application or a service requested by you.

Legitimate interests: Where processing is necessary for legitimate interests such as maintaining security, preventing fraud and abuse, operating the Application, and improving core functionality, provided that these interests are not overridden by your rights and freedoms.

Legal obligation: Where processing is necessary to comply with applicable laws or legal obligations.

Where consent is used as the legal basis, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

International Data Transfers

The Service Provider and its third-party service providers may process information in countries outside the European Economic Area (EEA), United Kingdom, or your country of residence.

Where applicable, international transfers will be carried out using an appropriate legal mechanism or safeguard required by applicable data protection law, which may include an adequacy decision, Standard Contractual Clauses, or another lawful transfer mechanism.

Third-party providers may have their own international transfer practices as described in their respective privacy policies.

Data Retention

The Service Provider does not maintain user accounts or intentionally retain user-provided personal information through the Application.

Information processed by third-party advertising providers may be retained according to their respective policies and retention practices.

The Service Provider may retain information for as long as reasonably necessary to operate the Application, comply with legal obligations, resolve disputes, prevent fraud, and enforce agreements.

Aggregated information that can no longer reasonably be associated with an identifiable individual may be retained for longer periods.

Your Privacy Choices and Rights

You may stop the Application from collecting information through the Application by uninstalling it. Uninstalling the Application does not automatically delete information that may already have been processed or retained by third-party service providers.

Where applicable law provides you with privacy rights, you may have the right to:

request access to your personal data;

request correction of inaccurate personal data;

request deletion of personal data;

request restriction of processing;

object to certain processing;

request data portability;

withdraw consent where processing is based on consent; and

exercise rights relating to certain automated decision-making or profiling.

To exercise applicable rights, contact us at:

deepdeb81538@gmail.com

We may need to verify your identity before responding to a request.

Children's Privacy

The Application is not directed to children under the minimum age permitted under applicable law, and we do not knowingly collect personal information directly from children in violation of applicable law.

If you believe that a child has provided personal information to us, please contact us at deepdeb81538@gmail.com. If we determine that we have collected personal information from a child in circumstances where collection is not permitted, we will take appropriate steps to delete it.

Advertising services used by the Application may have their own requirements concerning child-directed applications and advertising. The Application's advertising configuration will be operated in accordance with applicable requirements.

California Privacy Rights

If you are a California resident and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), applies to our processing, you may have rights including:

the right to know about personal information collected about you;

the right to request deletion of personal information, subject to applicable exceptions;

the right to correct inaccurate personal information;

the right to opt out of the sale or sharing of personal information where applicable;

the right to limit certain uses of sensitive personal information where applicable; and

the right not to receive discriminatory treatment for exercising applicable privacy rights.

To exercise applicable rights, contact deepdeb81538@gmail.com.

Because the Application uses third-party advertising services, whether particular advertising activities constitute a “sale” or “sharing” under California law depends on the specific services and configuration used.

Data Security

We take reasonable technical and organizational measures designed to protect information processed by us against unauthorized access, loss, misuse, alteration, or disclosure.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Third-party service providers are responsible for the security of information they process under their respective services and policies.

Data Breach

If we become aware of a personal data breach, we will take reasonable steps to investigate, contain, and address the breach and provide notifications where required by applicable law.

Where the GDPR applies, we will notify the relevant supervisory authority within the applicable statutory period where notification is required, and notify affected individuals where required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the “Effective Date” shown at the beginning of this Privacy Policy. Where required by applicable law, we will provide additional notice or obtain consent before material changes take effect.

Your Consent

Where processing requires consent, consent will be requested through an appropriate consent mechanism.

You may withdraw consent where applicable. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Complaints

If you believe your privacy rights have been violated, you may contact us first at:

deepdeb81538@gmail.com

Where applicable, you may also have the right to lodge a complaint with the data protection authority in your country or region.

For individuals in the European Union, information about national data protection authorities is available through the European Data Protection Board:

https://edpb.europa.eu/about-edpb/about-edpb/members_en

For individuals in the United Kingdom, the relevant authority is the Information Commissioner's Office:

https://ico.org.uk/

Contact Us

If you have questions about this Privacy Policy, the Application's privacy practices, or wish to exercise an applicable privacy right, please contact:

m8gan private limited

Berhampore, Murshidabad, West Bengal, India

Email: deepdeb81538@gmail.com

Effective Date: August 27, 2026