Introduction
This Privacy Policy describes how Pixel Island ("we", "us", or "our") collects, uses, and shares information when you use our mobile application (the "App"). We are committed to protecting your privacy and being transparent about our data practices.
Information we collect
1. Information you provide directly
- Account information: the App automatically creates an anonymous account identifier (a random ID tied to your iCloud account) — no sign-in, name or email is required
- Photos you submit: images you choose for AI pet generation are sent to our processing service for the sole purpose of creating your pixel pet; the original photo is not stored on our servers after processing
- Generated pets: the pixel-art pets created for you are stored on your account so they sync across your devices
- Preferences: favorites and pet names you set
2. Information automatically collected
- Purchase information: subscription and purchase status, processed through RevenueCat and Apple's payment system — we never see your payment details
- Usage records: AI generation events (for gem accounting and abuse prevention), including technical metadata such as request time and outcome
- Device information: basic technical information needed to deliver the service (app version, IP address for rate limiting)
- Usage analytics: in-app events (screens viewed, features used) associated with your anonymous account identifier, collected via PostHog to understand how the App is used and improve it
- Crash & performance data: crash reports and performance traces (device model, OS version, app version — no personal content), collected via Sentry to fix bugs
- Weather (optional): if you enable the weather feature, your device location is used to fetch local weather through Apple WeatherKit; coordinates are kept on your device and are never stored on our servers
3. Information stored only on your device
- Selected pet, widget configurations and display preferences
- Local copies of your pet collection
- Your last location fix for the weather widget (if enabled)
- Photos you choose for the photo widget
How we use your information
- Service delivery: to generate your AI pets, sync your collection, and display your gem balance
- Subscription management: to unlock Premium features and credit gems you purchased
- Abuse prevention: to enforce fair usage limits on the AI generation service
- Customer support: to respond to your requests
- App improvement: to fix bugs and improve features
We do not sell your personal data. We do not use your photos or generated pets to train AI models.
Third-party services
- Apple — payments, App Store, iCloud, WeatherKit. Privacy policy
- Supabase — account database and authentication (hosted in the EU). Privacy policy
- Google Gemini API — AI image processing for pet generation; photos are processed transiently. Privacy policy
- Cloudflare — secure proxy in front of our AI service, including per-IP rate limiting. Privacy policy
- RevenueCat — subscription management. Privacy policy
- PostHog — product analytics (hosted in the US). Privacy policy
- Sentry — crash reporting and performance monitoring. Privacy policy
Data retention and deletion
Your account data (profile, gem balance, generated pets, purchase records) is retained while your account exists. You can permanently delete your account and all associated cloud data at any time from Settings → Delete my account in the App. Deletion is immediate and irreversible.
Your rights
Depending on your location (including under the EU GDPR), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can exercise these rights via the in-app deletion feature or by contacting us. You also have the right to lodge a complaint with your local data protection authority.
Children's privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.
Security
Data in transit is encrypted (HTTPS/TLS). Authentication tokens are stored in the iOS Keychain. Server-side access to your data is restricted by row-level security so that only your authenticated account can read it.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above.
Contact
Questions about privacy? Contact us at pixel@refresh-agency.fr.