Hueforia Privacy Policy

Last updated: June 8, 2026  ·  App version 1.2

Hueforia is built and operated by Louis Wiyono, the artist and creator behind Whimsy Tales. This policy explains — in plain language — exactly what data the app collects, why, and how it is handled. No legalese, no surprises.

Bottom line, up front: Hueforia does not sell your data, does not track you across other apps or websites, and does not use advertising identifiers. The product analytics we collect are tied to a random, app-only ID — never your name, email, or Apple ID — and you can switch them off in Settings. Photos you pick are processed on your device and never uploaded. Purchases are processed by Apple, not by us.

1. Information We Collect

Product Analytics (PostHog)

Hueforia uses PostHog, a first-party product analytics service, to understand how people use the app so we can fix bugs and improve features. This data is pseudonymous — it is linked to a random, app-generated ID, never to your name, email, or Apple ID. We collect:

  • Which screens you visit and which features you tap
  • Palette generation, save, share, and refresh actions
  • Device model, OS version, app version, and build channel (development / TestFlight / production)
  • General country or region (city-level location is not collected)

A persistent app ID and a usage profile. So we can understand how features are used by the same person over time (for example, whether a new feature actually helps), this analytics data is tied to a persistent identifier — the same random RevenueCat App User ID described below, which is not linked to your real-world identity. Alongside it we record a small profile of non-identifying attributes: your subscription tier (free / Pro / Founding), whether your plan is monthly or annual, your chosen medium (Ohuhu or other), which Ohuhu series you own, and your current streak length. Your display name is deliberately excluded — it never leaves your device.

You can turn this off. Open Settings → Privacy in the app and switch off “Share usage data.” PostHog then stops all collection on your device.

PostHog does not use your device’s advertising identifier (IDFA), and we do not use App Tracking Transparency prompts because we do not track you across other apps or websites.

Crash & Error Reporting (Sentry)

When the app encounters an error or crash, Sentry captures a diagnostic report so we can fix the issue quickly. Sentry receives:

  • A stack trace showing which code path triggered the error
  • Device model, OS version, and app version at the time of the crash
  • Build channel (development / TestFlight / production)

Sentry does not receive your name, email, palette content, or any personally identifiable information. Crash reports are held for 90 days.

Subscription Management (RevenueCat)

If you subscribe to Hueforia Pro or purchase the Founding Colourist lifetime plan, the transaction is handled by Apple’s App Store through RevenueCat, our subscription management layer. RevenueCat receives:

  • An anonymous RevenueCat App User ID (not linked to your Apple ID or identity)
  • Your subscription status and the product you purchased (e.g., “Monthly Pro”)
  • Transaction receipts from Apple (for validation)

RevenueCat does not receive your name, email, payment details, or Apple ID. All payment processing happens directly between you and Apple.

Whimsy Tales Discount Codes (Cloudflare Worker & Shopify)

Hueforia Pro members can claim 40% off Whimsy Tales products (2 codes per month). When you request a discount code:

  • Your anonymous RevenueCat App User ID is sent to a Cloudflare Worker — a small, server-side function that verifies your Pro status and generates a unique discount code
  • The Worker temporarily stores a monthly usage counter in Cloudflare KV (keyed by your anonymous App User ID) to enforce the 2-per-month cap — this counter auto-expires after 45 days
  • The generated discount code is created via Shopify’s Admin API and redeemed when you check out at whimsytales.com

No personal information is sent to Cloudflare or Shopify during this process — only the anonymous RevenueCat App User ID. Shopify’s standard privacy practices apply when you complete a purchase on their platform.

Email Updates (Klaviyo)

If you sign up for Hueforia updates or contact us by email, we may collect your email address through Klaviyo, our email platform. You can unsubscribe at any time using the link in any email we send.

Beta Testing (Apple TestFlight)

If you participate in the Hueforia TestFlight beta, Apple collects certain information as part of the TestFlight service — including your email address and anonymous usage data (crashes, installs, session length). Apple’s privacy policy governs their collection and processing of this data.

Photos You Choose (Processed On Your Device)

Hueforia can build a palette from one of your photos, let you tap a photo to sample an exact colour, or place a photo on a share card. When you do this:

  • The app only ever accesses the single image you explicitly pick — it does not browse or read the rest of your library.
  • The image is analysed entirely on your device to extract its colours. It is never uploaded to us or to any third party, and we never see it.
  • If you add a photo to a share card, it stays on your device until you choose to share or save the finished card through iOS.
  • Saving a share card writes the image to your camera roll only when you tap Save.

Local Data (Your Device Only)

Hueforia stores the following data exclusively on your device using iOS SecureStore and AsyncStorage. This data never leaves your device and is never transmitted to any server:

  • Your onboarding completion state and display name (if you set one)
  • Your colouring goal commitment and media preferences
  • Saved palettes in Palette Box
  • Per-swatch bloom settings (lighting preset and mood overrides)
  • Daily generation count (for free-tier enforcement)

2. What We Do NOT Collect

  • Your name, email address, or contact information through the app itself
  • Your precise location (GPS or city-level)
  • Your microphone or any audio — and we never upload your photos (a photo you pick for a palette is processed on your device and stays there)
  • Your contacts or calendar
  • Health, biometric, or fitness data
  • Your device’s Advertising Identifier (IDFA)
  • Your Apple ID, payment details, or billing address (Apple handles all payments)

3. Third-Party Services

We rely on a small number of trusted services to operate the app. Each is listed below with its purpose and a link to its own privacy policy.

PostHog
Pseudonymous product analytics — screens visited, features used, device info.
Receives: usage events, device metadata, build channel, a persistent random app ID, and a non-identifying usage profile (subscription tier, medium, owned series, streak). No name, email, or Apple ID.
posthog.com/privacy

Sentry
Crash and error reporting — stack traces, device info at crash time.
Receives: error stack traces, device model, OS version, app version. 90-day retention.
sentry.io/privacy

RevenueCat
Subscription management — verifies Pro status, handles purchase receipts.
Receives: anonymous App User ID, transaction receipts from Apple, subscription status.
revenuecat.com/privacy

Cloudflare (Worker + KV + R2)
Generates Whimsy Tales discount codes for Pro members; delivers Founding Colourist PDF downloads.
Receives: anonymous RevenueCat App User ID. Temporarily stores monthly usage count.
cloudflare.com/privacypolicy

Shopify
Creates and redeems discount codes; powers the Whimsy Tales storefront.
Receives: discount code creation requests. Standard Shopify privacy practices apply at checkout.
shopify.com/legal/privacy

Klaviyo
Email updates and marketing communications (opt-in).
Receives: email address (when you opt in) and email engagement metrics.
klaviyo.com/legal/privacy

Apple (App Store + TestFlight)
App distribution, payment processing, and beta testing.
Receives: payment information (Apple only), TestFlight email + usage data.
apple.com/legal/privacy

We do not sell, rent, or share your data with any other third parties. No advertising networks, no data brokers, no trackers.

4. How We Use Your Data

  • To operate and improve the app: Understanding how colourists use Hueforia helps us fix bugs, refine features, and decide what to build next.
  • To fix crashes quickly: Sentry error reports let us identify and resolve bugs without waiting for user reports.
  • To manage subscriptions: RevenueCat verifies your Pro status so premium features unlock correctly.
  • To provide discount perks: The Cloudflare Worker generates one-time Whimsy Tales discount codes for Pro members and enforces the monthly usage cap.
  • To deliver Founding Colourist downloads: Bonus PDF content for Founding Colourist members is served from a Cloudflare R2 bucket via a Worker that verifies your entitlement.
  • To communicate with you: If you’ve opted into email updates, we send launch announcements and product news via Klaviyo.
  • To prevent abuse: Detecting and preventing fraudulent or unauthorized use of the app and its services.

5. Data Retention

  • PostHog analytics: Retained according to PostHog’s data retention policy (default: 2 years for most plans).
  • Sentry crash reports: Automatically deleted after 90 days.
  • RevenueCat subscription data: Retained while your subscription relationship exists.
  • Cloudflare KV usage counters: Auto-expire after 45 days (tied to monthly cap enforcement — resets naturally each month).
  • Klaviyo email data: Retained until you unsubscribe or request deletion.
  • Local device data: Persists until you delete the app or clear app data from your device.

6. Your Rights

Depending on where you live, you may have rights regarding your personal information, including the right to:

  • Access, correct, or delete your data
  • Export your data in a portable format
  • Opt out of marketing communications (unsubscribe link in every email)
  • Turn off product analytics at any time in the app (Settings → Privacy → “Share usage data”)
  • Withdraw consent where processing is consent-based

To exercise any of these rights, contact us using the details in Section 9 below. We will respond within 30 days.

7. Children’s Privacy

Hueforia is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy as Hueforia evolves. When we do, we’ll update the “Last updated” date at the top of this page. For material changes, we’ll notify you through the app or via email (if you’re on our mailing list).

9. Contact

Email: louis@whimsytales.com
Mail: PO Box 20002, RPO Qualicum Centre, Qualicum Beach, BC, V9K 0B1, Canada
Website: hueforia.app · whimsytales.com

This policy applies to the Hueforia iOS application and related services operated by Whimsy Tales Art.