Introduction
This Privacy Policy describes how Pixel Island ("we", "us", or "our") collects, uses, and shares information when you use our mobile application (the "App"). We are committed to protecting your privacy and being transparent about our data practices.
Information we collect
1. Information you provide directly
- Account information: the App automatically creates an anonymous account identifier (a random ID tied to your iCloud account) — no sign-in, name or email is required
- Photos you submit: images you choose for AI pet generation are sent to our processing service for the sole purpose of creating your pixel pet; the original photo is not stored on our servers after processing
- Generated pets: the pixel-art pets created for you are stored on your account so they sync across your devices
- Preferences: favorites and pet names you set
2. Information automatically collected
- Purchase information: subscription and purchase status, processed through RevenueCat and Apple's payment system — we never see your payment details
- Usage records: AI generation events (for gem accounting and abuse prevention), including technical metadata such as request time and outcome
- Device information: basic technical information needed to deliver the service (app version, IP address for rate limiting)
- Usage analytics: in-app events (screens viewed, features used) associated with your anonymous account identifier, collected via PostHog to understand how the App is used and improve it
- Session replay: for about half of installs, Pixel Island records the screens you see (not your photos or what you type: all images and text fields are masked) to fix usability problems. You can turn analytics off in Settings.
- Optional source question: if you answer "How did you hear about Pixel Island?", we keep your answer to learn which channels bring people, and share it with our subscription provider (RevenueCat).
- Apple Ads attribution: if you came from one of our Apple Ads, the app asks Apple for an anonymous attribution token that says which campaign brought the install, never who you are.
- Crash & performance data: crash reports and performance traces (device model, OS version, app version — no personal content), collected via Sentry to fix bugs
- Weather (optional): if you enable the weather feature, your device location is used to fetch local weather through Apple WeatherKit, or through Open-Meteo when WeatherKit is unavailable (your coordinates are sent to Open-Meteo only to get the forecast); coordinates are never stored on our servers
- Music (optional): if you use the iPod Music Widget and allow access to Apple Music, the App reads the track you are playing and its artwork on your device to display them. To show lyrics, the track title and artist (no account or device identifier) are sent to LRCLIB, a public lyrics service. Nothing about your music is stored on our servers
3. Information stored only on your device
- Selected pet, widget configurations and display preferences
- Local copies of your pet collection
- Your last location fix for the weather widget (if enabled)
- Photos you choose for the photo widget (if you use it)
How we use your information
- Service delivery: to generate your AI pets, sync your collection, and display your gem balance
- Subscription management: to unlock Premium features and credit gems you purchased
- Abuse prevention: to enforce fair usage limits on the AI generation service
- Customer support: to respond to your requests
- App improvement: to fix bugs and improve features
We do not sell your personal data. We do not use your photos or generated pets to train AI models.
Pets you mark as favorites may be built into a future App update so they animate in the Dynamic Island without the App running; they remain tied to your account and are not shown to other users.
Third-party services
- Apple — payments, App Store, iCloud, WeatherKit. Privacy policy
- Supabase — account database and authentication (hosted in the EU). Privacy policy
- Google Gemini API — AI image processing for pet generation; photos are processed transiently. Privacy policy
- Cloudflare — secure proxy in front of our AI service, including per-IP rate limiting. Privacy policy
- RevenueCat — subscription management. Privacy policy
- PostHog — product analytics (hosted in the US). Privacy policy
- Sentry — crash reporting and performance monitoring. Privacy policy
- Open-Meteo — weather forecast when Apple WeatherKit is unavailable (weather feature only). Terms & privacy
- LRCLIB — song lyrics for the iPod Music Widget (track title and artist only). Website
Data retention and deletion
Your account data (profile, gem balance, generated pets, purchase records) is retained while your account exists. You can permanently delete your account and all associated cloud data at any time from Settings → Erase my data in the App. Deletion is immediate and irreversible.
Your rights
Depending on your location (including under the EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights via the in-app deletion feature or by contacting us. You also have the right to lodge a complaint with your local data protection authority.
Children's privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
Security
Data in transit is encrypted (HTTPS/TLS). Authentication tokens are stored in the iOS Keychain. Server-side access to your data is restricted by row-level security so that only your authenticated account can read it.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above.
Contact
Questions about privacy? Contact us at pixel@refresh-agency.fr.