This End-User License Agreement ("Agreement") is a legal agreement between you and Mateusz Janicki, publishing as EVoApps as an unregistered activity (działalność nierejestrowana, art. 5 of the Polish Entrepreneurs' Law), ul. Opacka 23/62, 80-330 Gdańsk, Poland ("Service Provider") for the EVoLabels application ("Application").

By downloading, installing, or using the Application, you agree to be bound by the terms and conditions of this Agreement. If you do not agree to the terms of this Agreement, do not download, install, or use the Application.

The Service Provider grants you a personal, non-exclusive, non-transferable, limited license to use the Application on any mobile device that you own or control, and as permitted by the Usage Rules set forth in the App Store Terms of Service or Google Play Terms of Service.

You shall not, and shall not permit others to:

• License, sell, rent, lease, assign, distribute, transmit, host, outsource, disclose or otherwise commercially exploit the Application.
• Modify, make derivative works of, disassemble, decrypt, reverse compile or reverse engineer any part of the Application.
• Remove, alter or obscure any proprietary notice (including any notice of copyright or trademark) of the Service Provider or its affiliates, partners, suppliers or the licensors of the Application.

The Application, including without limitation all copyrights, patents, trademarks, trade secrets and other intellectual property rights are, and shall remain, the sole and exclusive property of the Service Provider.

This Agreement shall remain in effect until terminated by you or the Service Provider. The Service Provider may, in its sole discretion, at any time and for any or no reason, suspend or terminate this Agreement with or without prior notice.

To the maximum extent permitted by applicable law, in no event shall the Service Provider be liable for any special, incidental, indirect, or consequential damages whatsoever arising out of or in any way related to your use of or inability to use the Application.

The Service Provider reserves the right, at its sole discretion, to modify or replace this Agreement at any time. By continuing to access or use our Application after those revisions become effective, you agree to be bound by the revised terms.

This annex is the data processing agreement under Art. 28 GDPR between the business customer using the Application ("Customer", controller) and the Service Provider (processor). It applies automatically when a Customer enters personal data of its staff or other persons into the Application.

1. Subject and duration. The Service Provider processes personal data to provide the Application for as long as the Customer's account exists, and afterwards only to delete it as set out in point 9.
2. Nature and purpose. Storing, organising, displaying, printing and deleting data needed for label printing, team and device management, the print journal and, if the Customer enables it, synchronisation with the Customer's Google spreadsheet.
3. Data and data subjects. The Customer's staff and invited users (operators, administrators): names, e-mail addresses, roles, permissions, workstation assignments, device identifiers and names, print journal entries (who printed what, when, on which device). The Customer should not enter special categories of data.
4. Instructions. The Service Provider processes the data only on the Customer's documented instructions - these terms and the Customer's use of the Application's functions - unless EU or member state law requires otherwise, in which case it informs the Customer first unless that law forbids it. It informs the Customer if it believes an instruction infringes data protection law.
5. Confidentiality. Anyone authorised to process the data is bound to confidentiality.
6. Security. The Service Provider takes the measures required by Art. 32 GDPR, including encryption in transit and at rest, isolation of each organisation's data, access control by role and permission, tested access rules, regular backups and monitoring of known vulnerabilities.
7. Sub-processors. The Customer gives general authorisation for the sub-processors listed in the privacy policy (Google, Twilio SendGrid, RevenueCat, Stripe). The Service Provider announces intended additions or replacements at least 14 days in advance on that page and in the Application; the Customer may object, and if no solution is found, terminate the agreement. Sub-processors are bound by equivalent data protection obligations; transfers outside the EEA rely on the EU-US Data Privacy Framework or the Commission's Standard Contractual Clauses.
8. Assistance. The Service Provider helps the Customer, as far as possible through the Application's functions (export, editing, deletion), to answer data subjects' requests and to meet its obligations under Art. 32-36 GDPR. It notifies the Customer of a personal data breach without undue delay, and at the latest within 48 hours of becoming aware of it, with the information then available.
9. End of processing. When the Customer deletes its account, the data is deleted from the active systems immediately and from backups within 16 days, unless law requires keeping it. Before that, the Customer can download its data (Account > Your data) or export its catalogue to Google Sheets.
10. Information and audits. The Service Provider makes available the information needed to demonstrate compliance with Art. 28 GDPR and allows for and contributes to audits by the Customer or an auditor it mandates, with reasonable notice and at the Customer's cost, primarily through written information and its providers' certifications.

If you have any questions about this Agreement, please contact us at contact@evolabels.app.

This agreement is effective as of 2026-05-02; the Data Processing Agreement annex as of 2026-10-05.