Effective date: [to confirm with Dan: effective date]

Lightglass is made by Blue Hour Atelier, a trading name of GLAD WE MADE IT LTD, a company registered in England and Wales (company no. 17322373). Registered office: Prime Apartments, 483 Green Lanes, London, N13 4FG, United Kingdom. In this policy “we”, “us” and “our” mean that company.

This policy covers the Lightglass app for iPhone and iPad. Our website has its own notice at bluehouratelier.com/privacy.

01The short version

• Lightglass has no account and no sign-in. We do not know who you are.
• Your paintings, progress, favorites and settings are stored on your device, not on our servers.
• Purchases go through Apple. We never see your card details.
• Nothing about how you use the app is collected until you turn on Share usage data in Settings. It is off when you install the app.
• When it is on, the app sends anonymous usage figures to a server we run ourselves. No analytics company and no advertising company is involved.
• We never send the verses you read, anything you type, your location, or anything that could describe your beliefs.
• We do not sell your data, and we do not track you across other apps or websites.
• If the app shows ads, they are not based on a profile of you.

02No account, no sign-in

Lightglass does not ask you to create an account, sign in, or give us your name, email address or phone number. We hold no account for you. Deleting the app deletes everything it stored on your device.

03What stays on your device

The app stores the following on your iPhone or iPad only:

• which artworks you have started and finished, and your progress in each
• your favorites, your Profile display, your customization choices (glass, lines, frames, lights, app icon) and any Creative mode colors you saved
• your settings (reminders, color assist, hint style, vibration, appearance)
• your purchase status, as confirmed by Apple
• the artwork and verse library, which ships inside the app

The app does not use iCloud or any sync service of its own. This data is included in your normal device backup (iCloud Backup or a computer backup) if you have that turned on. That is Apple’s backup of your device, under Apple’s privacy terms, and we cannot read it.

The daily reminder is a local notification scheduled by the app on your device. No server is involved.

04What leaves your device, and why

Lightglass works offline. Data leaves your device only in these cases:

When	What is sent	To whom	Why
You buy or restore a purchase	Handled by Apple’s App Store. We learn what was bought, not who you are or how you paid	Apple	To unlock what you bought
Share usage data is on	Anonymous usage figures and speed and crash figures, listed in section 7	Our own server, run on Cloudflare	To see what is used and where people get stuck
You send a report from Settings > Submit an issue	What you write or attach, plus the technical details in section 8	Our bug relay on Cloudflare, then our issue tracker on GitHub	To fix the problem
An ad is shown	What the ad network needs to show and count a non-personalized ad; see section 6	The ad network	To show the ad
You share or save a finished artwork	The image goes where you send it (Photos, Messages, another app)	The app you choose	Because you chose to share it
You open a link from the app	Nothing from us; the link opens in Safari	The website you open	At your request

05Purchases

Lightglass is free to download. Seven artworks are free, with every feature. You can then buy:

• Creative or Creative+, each a one-time lifetime unlock
• an upgrade from Creative to Creative+
• bundles of extra artworks or extra effects, each a one-time purchase

There are no subscriptions.

All purchases are made through Apple’s in-app purchase system. Apple handles payment, receipts and refunds. We learn that a purchase happened and which product it was. We do not receive your name, email address or payment details from Apple. Apple’s privacy policy applies to the payment: apple.com/legal/privacy.

If Share usage data is on, the price and currency of a purchase are included in your usage data (section 7), so we can see what sells. Nothing about how you paid is included.

06Ads

The free artworks show no ads. Creative+ shows no ads. Creative may show a small number of ads.

• Ads are non-personalized. They are chosen by context (the app, the country, the device type), not by a profile of you.
• There are no full-screen ads.
• We do not use Apple’s advertising identifier (IDFA), and we do not ask for permission to track you across other apps and websites.
• To show and count an ad, the ad network receives technical information such as your IP address, device type and operating system version. The ad network’s own privacy policy covers what it does with that.
• Ad network: [to confirm with Dan: ad network]. If the app ships without ads, this section does not apply until ads are added, and we will update this policy first.

To remove ads, buy Creative+ or upgrade to it.

07Usage data, and speed and crash reports

Nothing in this section is stored or sent until you turn on Settings > Share usage data. Before that, the app writes nothing down. Settings > What we collect shows the same list inside the app.

When you turn it on, the app makes a random install ID. It is not linked to your name, your Apple ID, your device’s own identifiers or anything you have reported a problem with. Turning the switch off deletes the ID and everything waiting to be sent. Turning it on again makes a new ID, so the two periods cannot be joined.

What is sent, with that ID:

• which artworks you open, paint and finish, in which style, and how long you spent (active time, not wall-clock time)
• how you painted: taps, swipes, wrong taps, hints, undos, zooming, color choices, and moments of friction (for example several wrong taps in a row)
• Creative mode use
• customizations you apply (glass, lines, frames, lights, app icon) and Profile display saves
• which Library shelves and collections you open, counted by their id, never by anything you typed
• the Store: what was shown, what you tapped, and purchases, with the product, price and currency; failed purchases by reason, never the error text
• settings you change, and whether you allowed reminders
• saves and shares, counted, never the image
• when the app opens and closes, and how long it was on screen
• a summary of your library when you turn sharing on, and then at most once a day: counts of artworks finished, in progress and favorited, your tier and bundles
• with every batch: the app version, whether it is a test build, your language setting, your time zone offset (not its name), the device model and class, the iOS version, and what you own

Every value is a number or a word from a fixed list the app decides in advance. There is nowhere in it to put a sentence you typed.

Speed and crash reports (Apple’s MetricKit). Also only while Share usage data is on, the app sends daily figures about how it ran: launch time, hangs, memory, CPU and screen time, and the number of crashes. If the app crashes or freezes, a machine-written summary (the kind of crash and the code locations involved) goes to our issue tracker the same way a bug report does. No crash-reporting company is used.

Never sent, in any of this: verse text or Bible references, anything you type, your location or time zone name, any advertising or cross-app identifier, your device’s name, images or what is on your canvas, your email, account, contacts, calendar or payment details, every single tap, or error messages.

Where it goes. To our own server, run on Cloudflare under GLAD WE MADE IT LTD’s account. No third-party analytics company receives it. The IP address of the request is thrown away, not stored.

How long. Usage data tied to an install ID is kept for 12 months, then deleted. Daily totals with no person in them are kept.

Deleting it. Settings > Delete my usage data erases everything held under your install ID on our server. Turning off Share usage data deletes what is still on your phone.

08Reporting a problem from inside the app

Settings > Submit an issue lets you send us a report. Nothing is sent unless you tap Send. When you do, we receive:

• the issue type you picked, what you wrote, and any image you chose to attach
• technical details added automatically: device model, iOS version, app version and build, language, time zone, whether the app is a test build, free disk space, and the device’s thermal state
• the state of the app: your settings (color assist, hint style, reminders), how many artworks you have completed and unlocked, your purchase status, and, if you were painting, which artwork, your progress, zoom level and selected color

We use this only to understand and fix the problem. Please do not include personal details in the text unless you want us to have them.

The report goes to a small relay we run on Cloudflare, which creates a ticket in our private issue tracker on GitHub. The relay holds a random per-install number so it can limit reports to 10 an hour per device. That number is not linked to you or to the usage data ID. Never your name or account.

09Who we share data with

Company	What they do for us	Data they handle
Apple Inc.	App Store and in-app purchases	Purchase records, under Apple’s own policy
Cloudflare, Inc.	Hosts our usage data server, the bug relay and our website	Usage data and bug reports in transit and at rest
GitHub, Inc.	Our issue tracker	Bug reports and crash summaries
[to confirm with Dan: ad network]	Ads in Creative, if ads ship	See section 6

Each of these companies is bound by its own contract and privacy policy. We do not sell personal information and we do not share it with data brokers.

We may also disclose information if the law requires it, or to protect our rights or the safety of others.

10How long we keep data

Data	How long
Everything in section 3	On your device until you delete the app
Purchase records	Kept by Apple under Apple’s terms. We keep the record of what was bought for as long as needed to honor your purchase and for our accounting records, which UK tax law requires us to keep for six years
Usage data (section 7)	12 months per install ID, or sooner if you tap Delete my usage data. Daily totals with no person in them are kept
Bug reports and crash summaries	In our issue tracker until the problem is fixed and the ticket closed, then [to confirm with Dan: how long closed bug reports are kept]
Emails to support	Until the matter is closed, then [to confirm with Dan: how long support emails are kept]
Ad-serving data	Held by the ad network under its own policy; we do not receive it

11Your choices and rights

• Usage data: Settings > Share usage data turns it on or off. Settings > Delete my usage data erases what we hold.
• Reminders: in the app’s Settings, or iOS Settings > Notifications > Lightglass.
• Photos: the app asks for permission the first time you save an artwork. Change it in iOS Settings > Lightglass.
• Delete everything on your device: delete the app. We keep no account for you.

Whatever country you are in, you can ask us what personal data we hold about you, ask us to correct or delete it, or object to our use of it. Email support@bluehouratelier.com. Because we hold no account, we cannot find your usage data from your name; use Settings > Delete my usage data, which erases it directly. For a bug report, we may need its date and roughly what you wrote to find it.

12California residents

If you live in California, the California Consumer Privacy Act (CCPA, as amended by the CPRA) gives you rights to know, delete, correct, and to opt out of the sale or sharing of personal information.

• We do not sell personal information and we do not share it for cross-context behavioral advertising, as the CCPA defines those terms. We do not use “sensitive personal information” for anything other than providing the app. There is no “Do Not Sell or Share” link because there is nothing to opt out of.
• Categories of personal information we may collect, in the CCPA’s words: identifiers (a random install ID; a device model), internet or network activity (anonymous app usage, only if you turn it on), and commercial information (what you bought). We collect them from your device and from Apple.
• To exercise your rights, email support@bluehouratelier.com. We will not treat you differently for doing so.

13UK and EU residents

The UK GDPR and the EU GDPR apply to the small amount of personal data described above. The controller is GLAD WE MADE IT LTD, address above.

Processing	Lawful basis
Purchases	Performance of a contract with you
Usage data, speed and crash reports	Your consent, given by turning on Share usage data, which you can withdraw in Settings at any time
Bug reports	Legitimate interests (fixing problems you report), and your action in sending them
Ads in Creative	Legitimate interests (funding the cheaper tier), with no profiling; you can remove ads by upgrading

You have the rights to access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. Email support@bluehouratelier.com. You can also complain to the UK Information Commissioner’s Office (ico.org.uk/make-a-complaint) or to your local EU data protection authority.

Cloudflare and GitHub are US companies. For data that reaches them we rely on the safeguards UK and EU law provide for transfers to the United States (the UK Extension to the EU-US Data Privacy Framework, or standard contract terms).

14Children

Lightglass is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. Lightglass is not in Apple’s Kids Category.

Under the US Children’s Online Privacy Protection Act (COPPA), if we learn that we have collected personal information from a child under 13 without a parent’s consent, we will delete it. If you believe a child has sent us information (for example through a bug report), email support@bluehouratelier.com and we will delete it.

The app’s defaults are the most private ones: no account, no tracking, and usage data off until someone turns it on.

15Security

Data stays on your device wherever possible. Data in transit uses HTTPS (TLS). Access to our server and issue tracker is limited to the people who build the app. No system is perfectly secure, and we cannot promise that unauthorized access will never happen.

16Changes to this policy

We update the “Last updated” date when we change this policy. If a change affects what we collect or how we use it, we tell you in the app before it takes effect.

17Contact

Blue Hour Atelier (GLAD WE MADE IT LTD)
Prime Apartments, 483 Green Lanes, London, N13 4FG, United Kingdom
support@bluehouratelier.com

18Apple App Privacy label summary

This table is the plain-English version of the answers we give Apple for the App Store “App Privacy” section.

Apple category	Data type	Collected?	Linked to you?	Used to track you?	Why
Purchases	Purchase history	Yes: what was bought, with its price, only if Share usage data is on	No	No	Analytics
Identifiers	Device ID	Yes: a random install ID the app makes, not the device’s own ID, only if Share usage data is on	No	No	Analytics
Usage Data	Product interaction	Yes, only if Share usage data is on, or in the counters of a bug report you send	No	No	Analytics, app functionality
Diagnostics	Crash data, performance data	Yes, only if Share usage data is on	No	No	App functionality
Diagnostics	Other diagnostic data	Yes, only when you send a bug report	No	No	App functionality
User Content	Customer support	Yes, only when you send a bug report: what you write or attach	No	No	App functionality
Advertising data	Ad network rows	[to confirm with Dan: ad network]. If ads ship, the network’s own collection is added here	No	No	Third-party advertising
Contact Info, Health, Financial Info, Location, Contacts, Browsing History, Search History, Sensitive Info, Photos	None	No

Expected App Store label: “Data Not Linked to You” for the rows marked Yes, and no “Data Used to Track You” section.