Privacy Policy

1.Your photos and photo library

To do its job, the App asks iOS for permission to access your photo library. You choose whether to grant full access, limited access to selected photos, or no access at all, and you can change that choice at any time in Settings → Privacy & Security → Photos → Chunky Time.

When you grant access:

• Your photos, videos, and their metadata (such as dates and location tags embedded by your camera) are read and processed entirely on your device.
• Albums, groupings, and any organizational data the App creates are stored locally on your device.
• None of this is transmitted to us or to any third party.

Because this data lives only on your device, deleting the App deletes the App’s local data along with it. We have no copy to delete and no way to recover it for you.

2.Information we collect

The limited information we do collect falls into these categories:

Analytics and crash/error reporting in the App are both provided by PostHog. Waitlist emails submitted on the Site, and support requests submitted through the in-app Contact Support form, are processed by Google (Sheets / Forms / Apps Script). The optional public feedback board is powered by Userjot.

3.What we do not collect

• Your photos, videos, or any thumbnails, embeddings, or content derived from them.
• Your name, address, phone number, or date of birth — except a display name you choose to type in if you use the optional feedback board, or your email address if you submit the waitlist or support form.
• Your precise location. The App does not request location permission.
• Your contacts, calendar, microphone, or health data.
• Payment card numbers or billing details — those go to Apple, not to us.
• Your Apple Account email or identifier.

4.How we use information

We use the information described above only to:

• operate, maintain, and improve the App and Site;
• diagnose crashes, fix bugs, and monitor performance and stability;
• understand which features are used so we can decide what to build next;
• deliver and restore paid subscription features;
• send you the launch announcement if you joined the waitlist; and
• comply with law and enforce our Terms of Use.

We do not use your information to build advertising profiles, and we do not make automated decisions about you that produce legal or similarly significant effects.

5.Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process personal data on these legal bases:

• Legitimate interests — for crash reporting, security, and basic product analytics, to keep the App working and improve it.
• Performance of a contract — to deliver the subscription features you purchased.
• Consent — for waitlist emails, and for any analytics that require consent under applicable law. You may withdraw consent at any time.
• Legal obligation — where we must retain or disclose data by law.

6.Who we share information with

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share the limited data described above only with service providers who process it on our behalf, under contract, and only for the purposes we specify:

• Apple — processes subscription purchases and provides App Store analytics.
• RevenueCat — manages subscription status and entitlements on our behalf. We link your random installation identifier to your RevenueCat subscriber record so purchase and product-usage data can be joined for reporting; RevenueCat does not receive your name or payment details.
• PostHog — processes usage analytics and crash/error reports.
• Google — stores waitlist emails submitted on the Site (Google Sheets / Apps Script), and processes support requests submitted through the in-app Contact Support form (Google Forms).
• Userjot — powers our optional, public feedback board. If you open it, Userjot receives your device’s vendor identifier and the display name you enter.
• GitHub — hosts this website (GitHub Pages), which processes standard server request logs including IP addresses.

We may also disclose information if required by law, subpoena, or valid legal process, or to protect the rights, safety, or property of TinyCone or others. If we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we will notify you before your personal information becomes subject to a materially different privacy policy.

7.Tracking and advertising

The App contains no advertising and no third-party ad SDKs. We do not track you across other companies’ apps or websites, so the App does not present Apple’s App Tracking Transparency prompt. We do not respond to browser “Do Not Track” signals because we do not track across sites; on the Site we honor Global Privacy Control signals where technically feasible.

8.How long we keep information

• On-device data (photos, albums, organization) — kept until you delete it or delete the App. We never hold a copy.
• Analytics and crash data — retained for up to 2 years, then deleted or aggregated so it no longer identifies a device.
• Waitlist emails — kept until launch or until you ask us to remove you, whichever comes first, and deleted no later than 12 months after the launch email.
• Purchase records — retained as long as needed to support your subscription and to meet tax and accounting obligations.
• Support requests — kept as long as needed to resolve your request, and no longer than 2 years after your last message.
• Feedback board entries — kept until you ask us to remove them, or per Userjot’s own retention practices for the board.

9.Security

Data the App stores on your device is protected by iOS, including device-level encryption when you have a passcode or biometric lock enabled. Information sent to our service providers travels over encrypted connections (TLS/HTTPS). We keep the data we collect to a minimum, which is itself the strongest protection we can offer. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10.Your privacy rights

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to object to or restrict certain processing, to withdraw consent, and not to be discriminated against for exercising these rights.

Because we hold so little data, you can exercise most of these rights directly:

• Photos and on-device data: revoke photo access in iOS Settings, or delete the App.
• Analytics: this data is tied only to a random installation identifier, never your name or Apple Account. Deleting the App stops further collection tied to that identifier. To request deletion of analytics or crash data already collected, email us.
• Waitlist email: email us and we will delete it, or use the unsubscribe link in any email we send.
• Support requests: email us to request deletion of a past support conversation.
• Feedback board: email us to have a post or your display name removed from the board.

For anything else, email team@tinycone.com. We will respond within the time required by applicable law (generally 30 days, or 45 days in California). We may need to ask for information to verify your request. If you are in the EEA or UK, you also have the right to complain to your local data protection authority.

11.California privacy rights

Under the California Consumer Privacy Act as amended (CCPA/CPRA), we disclose the following for the preceding 12 months:

• Categories collected: identifiers (a random installation identifier; a device vendor identifier if you use the feedback board; an email address if you joined the waitlist or submitted a support request), internet or other electronic network activity information (feature usage, crash diagnostics), commercial information (subscription status), and, only if you choose to provide it, your name and free-text messages (support requests, feedback board).
• Sources: directly from you, and automatically from your device through the App and Site.
• Business purposes: those listed in Section 4.
• Categories disclosed to service providers: those listed in Section 6.
• Sold or shared: none. We have not sold or shared personal information for cross-context behavioral advertising, and we do not do so with the personal information of minors under 16.
• Sensitive personal information: we do not collect or use sensitive personal information for purposes that would require a right to limit.

12.International data transfers

We operate from the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Contact us for a copy of the safeguards we use.

13.Children’s privacy

Chunky Time is rated for general audiences and is not primarily directed to children under 13, but it does not restrict use by age. Core organizing features work without collecting any personal information. The optional features that do involve personal information — the website waitlist form, the in-app Contact Support form, and the public feedback board — are intended to be used by an adult, or by a child only with a parent or guardian’s involvement and consent.

We do not knowingly collect personal information from children under 13 without such consent. If you are a parent or guardian and believe your child has provided us with personal information without your consent, email team@tinycone.com and we will delete it promptly.

14.Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If a change materially affects how we handle your information, we will notify you in the App or by other reasonable means before it takes effect.

15.Contact us

Questions, requests, or concerns about privacy? Email team@tinycone.com, or write to TinyCone LLC, 8401 Mayland Dr Ste A, Richmond, VA 23294-4648, USA.