Privacy Policy

Effective date: October 24, 2026

MTZ Studio helps you import, edit, combine and export Xiaomi theme files. This policy explains what information the app and its supporting service process.

Information we process

  • Account information: email address, Firebase account identifier, account creation and last sign-in times. Password-reset requests use the email address to issue a one-time link.
  • Purchase information: Google Play product, purchase token, entitlement state and verification time. Payment card information is handled by Google Play and is not received by us.
  • Service and diagnostic data: app version, Android API level, app-open events, import/export success, and a technical error code when an operation fails.
  • Advertising data: the free version may use Google AdMob. Consent and advertising identifiers are handled according to your Google consent choices and applicable law.
  • Security data: Play Integrity verdicts and hashed account references used to prevent abuse and verify access. When you request a password reset, Google reCAPTCHA processes the IP address, SDK version, app package and reset action, device integrity response, app interactions, information about some installed apps and device identifiers to assess abuse risk; our server receives the assessment result.
  • Legal acceptance record: the Privacy Policy and Terms versions accepted, server time, app version and selected language.

Your theme files stay on your device

MTZ files, wallpapers, icons, fonts, ringtones, screenshots, file names and the contents of your edits are not uploaded to the MTZ Studio backend. Importing, editing and exporting are performed locally on your device.

Why we use information and legal bases

We process account, access and purchase records to provide the service and perform our agreement with you. We process security, integrity, limited audit and fraud-prevention records for our legitimate interests in protecting users, purchases and the service, and where needed to meet legal obligations. Optional personalized advertising choices are requested separately through Google consent flow and are not bundled with acceptance of these terms.

Online access

An account and internet connection are required to verify access, account status, minimum supported version and PRO entitlement. If verification cannot be completed, the app may remain unavailable until connectivity returns.

Sharing, processors and international transfers

We use Google Firebase for authentication and service data, Google Play for purchases and Play Integrity, Google AdMob for advertising, Google reCAPTCHA to assess password-reset abuse, and Resend to deliver password-reset emails. Resend receives the recipient email address and reset message for that delivery. Google may process information on infrastructure outside your country under its applicable transfer safeguards. Our backend is hosted on our server provider. We do not sell personal information.

Retention and deletion

Account, entitlement, audit and diagnostic records are retained only as needed for security, purchase verification, support and legal obligations. You may request account deletion. Purchase-claim records may be retained in a limited form to prevent a refunded or previously bound purchase from being reused fraudulently.

Security

Administrative access is restricted to verified allowlisted accounts. Sensitive service credentials are stored outside the public web directory. No method of storage or transmission is completely risk-free.

Children

MTZ Studio is not directed to children under 13, or the minimum digital-consent age in their country. We do not knowingly collect children’s personal information.

Your rights, choices and contact

You can manage advertising privacy choices in the app. Depending on your location, you may request access, correction, deletion, restriction, objection or portability, and may complain to your data-protection authority. To exercise a right or request account deletion, email contact@gokhas.site.

Changes

We may update this policy when the app, providers or legal requirements change. The effective date above will be updated when material changes are published.