Privacy policy

Controller and scope

The publisher and controller for developer-managed processing is Blacksunset OÜ, Estonian registry code 16513658. Contact: info@blacksunset.ee.

Hariduse põik 1, Kõrveküla alevik, Tartu vald, Tartu maakond, 60512, Estonia.

If you email support, the studio processes your email address and message only to answer the request and meet applicable legal obligations.

Data handled by the app

• Local sign data can include passenger or group names, company or hotel names, flight numbers, meeting points, additional text, pickup times and status, branding choices and saved templates.
• The current draft is saved locally so it survives a fresh launch, including when optional recent history is disabled. Group lists and each person’s arrival status are also saved locally.
• Recent sign history is optional, off by default, and limited to 12 entries when enabled. Privacy and visual preferences are stored on your device. A displayed sign is visible to anyone who can see the screen; enter only information you intend to display and are entitled to use.
• ArriveBoard reads only the image or CSV file you choose through an Android system picker. A chosen logo is copied into app-private storage; selected CSV rows can be imported into the pickup list. The source files are not changed or deleted.

Permissions

• ArriveBoard does not request internet, Advertising ID, location, contacts, microphone, camera, notification or broad photo/storage permissions. It does not include a Google Play Billing SDK.
• Android’s system pickers and share menu grant access to only the files or text you select. A cloud photo or document provider may use its own network connection to supply your chosen file. Sharing a sign image temporarily grants the selected receiving app access to that exported image.
• While showing a full-screen sign, ArriveBoard keeps its display awake. If the brightness boost is enabled, it changes only its own window brightness. Closing or leaving the sign restores normal window behaviour; the device-wide brightness setting is not changed.

Storage and security

• Passenger records and settings are kept in Android app-private databases, preference files and local storage. Imported logos and temporary sign exports are stored in the app’s own files or cache.
• Android cloud backup and device transfer are disabled for ArriveBoard app data. The app relies on Android’s app isolation and device security and does not claim a separate custom encryption layer.
• The optional 24-hour cleanup setting applies only to recent sign history. Entries older than 24 hours are removed when the app next opens or resumes. This does not automatically delete the draft, pickup queue, templates, group records, logos or copies shared elsewhere.
• Temporary sign-image exports are kept in the app’s cache. Cleanup runs when the app opens or exports an image, removes files older than 24 hours and retains at most 20 images. Android may also clear cached files. A copy saved by a receiving app or another person is outside ArriveBoard’s control.

Third-party services

• ArriveBoard has no advertising, analytics, crash-reporting, attribution, cloud-sync or account SDK, and it does not send passenger information to Blacksunset or a server.
• Google Play independently processes the upfront app purchase, download and updates under Google’s terms. Google may make order, payment and sales information available to the publisher through Play Console. ArriveBoard does not receive your card or bank-account details. Google Play processing is separate from the app’s local passenger data.
• If you choose to share a sign or contact support, the receiving app or email provider processes the information you send under its own terms. Privacy and support links open a separate browser or email app, which may use the internet. Google Privacy Policy: https://policies.google.com/privacy; Google Play Terms: https://play.google.com/about/play-terms/

Advertising and purchases

• ArriveBoard is purchased once before installation through Google Play. The intended euro-area price is €2.99; Google Play shows the final local price before purchase.
• The purchase includes all app features. There are no advertisements, subscriptions, in-app purchases, paid colour packs or additional feature unlocks.

Retention and deletion

• Use Clear all passenger data in the app to remove the saved and active draft, recent history, pickup queue, templates, group names and check-in records, imported logo copies and cached sign-image exports. Related in-progress entry state is also cleared. The operation prevents earlier pending writes from restoring cleared content and attempts to finish an interrupted clear on the next launch. Visual and privacy preferences may remain.
• Clearing Android app storage or uninstalling removes ArriveBoard’s local app data. Deletion does not remove your original CSV/image files or copies already exported to another app or recipient. Manage those copies separately.
• There is no ArriveBoard account or developer cloud profile to delete. The publisher cannot view, recover or remotely delete passenger records held only on your device. Deleting local data does not cancel or refund the purchase associated with your Google Play account; purchase records and refunds are managed by Google Play.
• If you email info@blacksunset.ee, Blacksunset and its email providers receive your address, message and attachments to answer your request. You may request deletion of developer-held support data at the same address, subject to applicable retention obligations.

Your rights and contact

Where data-protection law applies, you may request access, correction, deletion, restriction or portability of personal data controlled by the publisher, and object to processing. Most product data described here is held only on your device and can be managed there.

You may also lodge a complaint with the Estonian Data Protection Inspectorate.

This policy may be updated when the app or legal requirements change. The revision date above shows the current version.