Privacy Policy

Last updated: August 1, 2026

This policy applies to every app we publish under Privacy In Design (“we,” “us,” “our”).

Privacy is the seed, not the trim

Our name is our design philosophy. Before we write a single line of code for any app, we start with one question: how can we design this app to respect our users’ privacy from its foundation?

That question isn’t a checkbox we tick before shipping, a setting buried three menus deep, or a policy we bolt on once the app is already built. It’s the seed every one of our apps grows from — the first decision we make, not the last one.

The short version

• We do not collect your data.
• We do not sell your data — to anyone, ever.
• Our apps are tracker-free.
• We keep no personal information on our servers.

Everything below explains what that means in practice.

Who we are

Privacy In Design publishes the apps this policy covers, and is the data controller for them under the GDPR. In practice there is very little for a controller to control here — we hold no personal data — but you should always know who stands behind a privacy promise. You can reach us at [email protected].

What we collect

Nothing. Our apps are built to function on your own device. We do not run analytics, we do not embed advertising SDKs, and we do not include third-party tracking libraries of any kind. Where an app needs data to work — your preferences, the content you create, anything else — that data stays on your device. It is never transmitted to us, and we hold no server-side record of it.

Third parties

We have no user data, so we have nothing to share, sell, rent, or trade — and we never will.

The App Store and Play Store, through which our apps are distributed, may independently collect standard operational data (such as download counts, crash logs, or device information) under their own privacy policies. That collection is Apple’s and Google’s, governed by their own terms, and outside our control and the scope of this policy.

Children’s privacy

Our apps are not directed at children under 13. Since we don’t collect personal information from anyone, we don’t knowingly collect it from children either.

Data retention

None. Retention schedules exist to describe how long a company keeps your data before deleting it. We never receive it, so there is nothing to keep and nothing to delete.

Your rights

Privacy laws give you rights over the personal data a company holds about you. We’ve written this section to answer the two most commonly asked about — the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act as amended by the CPRA (CCPA) — regardless of whether their thresholds apply to a company our size. The honest summary for both: these rights are real, and in our case exercising them returns nothing, because there is nothing about you for us to return.

If you are in the EU, EEA, or UK (GDPR)

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable, machine-readable format. Because we do not collect or process personal data, a request under any of these rights comes back empty.

For the same reason, we have no legal basis to declare for processing — Article 6 asks which basis a controller relies on, and we rely on none, because no processing takes place. We use no automated decision-making or profiling. And your data is never transferred outside your country, or anywhere at all, because it never leaves your device to begin with.

You also have the right to lodge a complaint with your local data protection supervisory authority.

If you are in California (CCPA/CPRA)

In the preceding twelve months, we have collected no categories of personal information as defined by the CCPA. We have sold no personal information. We have shared no personal information for cross-context behavioral advertising. We collect and use no sensitive personal information.

You have the right to know what personal information is collected and how it’s used, to delete it, to correct it, to opt out of its sale or sharing, and to limit the use of sensitive personal information — and the right not to be discriminated against for exercising any of them. Because we collect nothing, there is nothing to disclose, delete, or correct, and no sale or sharing to opt out of.

That’s also why you won’t find a “Do Not Sell or Share My Personal Information” link on this site. Such a link exists to switch something off; we never switched it on.

Exercising any of these rights

Write to [email protected] and we’ll respond within the timeframe the applicable law requires. In nearly every case the answer will be that we hold nothing about you — and we would rather tell you that plainly than operate a request process that implies we might.

Security

No personal data leaves your device or reaches our servers, so there is no user database that can be breached, leaked, or misused. The strongest protection we can offer is not collecting the data in the first place.

Changes to this policy

If this policy ever changes, we’ll post the update here with a revised date above. Our approach doesn’t depend on collecting data, so we don’t expect that to change — but if it ever did, you’d read about it here, plainly, before it happened.

Contact

Questions about this policy or any of our apps: [email protected]