Privacy Policy

Painted Day · Last updated: October 4, 2026 · Version 1.0

One-line summary Painted Day has no account, no ads and no tracking. Your paintings, your moments and their notes stay on your iPhone. The App asks for only two optional permissions — a local end-of-day notification and adding images to Photos when you choose "Save to Photos" — and works the same if you decline them. To improve the App we measure how it is used with our own first-party analytics — for example, which style is painting or whether an export worked, never your notes or your paintings — and that data is never linked to your identity. Purchases are processed by Apple, so we never see your payment details.

1. Who we are

Painted Day (hereinafter, "the App") is developed and operated by Ingeniería.dev, led by Christian Irack (hereinafter, "we", "the Developer").

Contact: [email protected]
Address: Av. Javier Barros Sierra 495, Santa Fe Lomas de Santa Fe Zedec Santa Fé, Álvaro Obregón 01219, Mexico City, CDMX, Mexico

2. What data we collect

The App is designed to work without knowing who you are. It:

Does not require registration or an account, and has no login of any kind
Never asks for your name, email, phone number, or any other personally identifiable information
Lets you type only one thing — an optional one-word note on a moment — and that note stays on your iPhone: it is never sent to us, not even in analytics
Never uploads your paintings, your moments, their notes or your settings (see Section 3)
Has no chat, comments, profiles or other social features, and shows no content created by other users
Contains no advertising, no ad networks and no third-party tracking or attribution SDKs
Does not use the advertising identifier (IDFA) and does not ask for App Tracking Transparency permission, because it does not track you across apps or websites
Asks for only two optional permissions — notifications, for a local end-of-day notice, and adding to your photo library, only when you tap "Save to Photos" — and never reads your photo library (see Section 8)
Does not access your location, contacts, camera, microphone, calendar, health data, or any other personal data on your device

What the App does collect is limited to usage and diagnostics data that is not linked to your identity, through our own first-party analytics. Section 4 lists exactly what that includes and why.

3. What is stored on your device

The App stores locally only what it needs to paint your day and keep your gallery:

Data	Purpose	Location
Your paintings: for each day, its date, the seed it is painted from, its style, the version of the painting engine, the start and end of your day, the painting's number and title, and whether it is finished	Repaint each painting exactly as it was and show it in the Gallery. Paintings are regenerated from these values; full images are not stored	Device (SwiftData)
Your moments: the time of each one, where it sits on the painting, and the optional one-word note you added	Show the gold-leaf moments on the painting and list them with their time	Device (SwiftData)
Small preview images of finished paintings	Show the Gallery quickly. They can be recreated from the painting at any time	Device (cache)
A random value created on your iPhone the first time you open the App, and today's seed, style and day hours	Make your paintings unique to your iPhone, and let the widget show today's painting without opening the App. Shared only between the App and its widget, on the same iPhone	Device (App Group)
Settings: your day's start and end, the style of the day, the end-of-day notice, night dimming and haptic feedback	Remember how you like your day to be painted	Device (UserDefaults)
App preferences: the language you chose and whether you completed the welcome screens	Remember your settings across sessions	Device (UserDefaults)
A cached "Complete Atelier purchased" flag	Show the premium styles instantly at launch. It is only a hint: Apple's record of your purchase is always the source of truth	Device (UserDefaults)
Random installation identifier and pending analytics events	Group usage events by installation (see Section 4) and send them in batches. The identifier is excluded from device backups	Device (app sandbox)

The six painting styles and their palettes are part of the App itself, not your data: they ship inside the App and are the same for everyone. Your paintings, moments, notes and settings are never sent to us, and the App has no iCloud sync. They live inside the App's sandbox on your iPhone and, like the data of any app, are included in your iPhone's own backup if you have backups turned on. You can delete a moment at any time, and deleting the App removes your paintings, moments and settings permanently and irreversibly, together with the widget's data. Images and timelapses you export go only where you choose (see Section 7).

4. First-party analytics

We use our own first-party analytics to understand how Painted Day is used: screens visited, interactions, performance and technical errors, plus technical device data, language and approximate city-level location (we do not store your IP address). The App has no sign-in, so this information is never linked to an account or to your identity. We do not sell or share this data with third parties or use it for advertising. Data is kept for up to 13 months. You can request deletion by emailing [email protected].

4.1 What exactly is measured

Product interaction: the screens you open (the welcome screens, the canvas, the Gallery, a painting's detail, Moments, Export, Settings, About and the Complete Atelier screen) and the actions you take — a day's painting starting (its style, and whether it is your first), keeping a moment (the style and how much of the painting was done, never the note), the day being signed (the style and the number of moments), an export finishing (image at 1080 px or 4K, or timelapse, and whether it worked), choosing a style, turning the end-of-day notice on or off, opening the Complete Atelier screen and from where, the result of a purchase or restore attempt, changing the language, and finishing the welcome screens.
Sessions: when the App opens and closes, and how long it stays in use.
Technical data: App version, iOS version, device model, language, time zone and screen size.
Approximate location: country, region and city, derived by our server from the network connection. Your IP address is not stored, and the App never accesses your device's GPS location.
Diagnostics: performance data (such as launch time), handled technical errors (only the error domain and code), and crash and hang reports provided by Apple's MetricKit.
A random installation identifier generated by the App. It is not derived from your hardware, it is not the advertising identifier, and it is deleted when you delete the App.

It never includes your name, email, phone number, contacts, photos, location coordinates, payment details, the notes on your moments, or your paintings and the images or videos you export.

4.2 Who runs it and why

The analytics service runs at analytics.ingenieria.dev, on a server operated by the Developer. No third-party analytics company receives this data. We use it only to improve the App — for example, to learn which styles people paint with, whether moments and exports are useful, and to find and fix crashes. For users in the European Union, the United Kingdom and Switzerland, the legal basis is our legitimate interest in keeping the App working and improving it; you can object at any time by emailing us.

4.3 This website

The pages at legal.ingenieria.dev/painted-day/ use the same first-party analytics to count visits and clicks on the download button. They set no cookies; a random identifier is kept in your browser's local storage, which you can clear at any time from your browser settings.

5. Apple, StoreKit and In-App Purchases

Painted Day offers one optional In-App Purchase, Complete Atelier. It is processed exclusively by Apple through your Apple Account using StoreKit. Apple acts as the payment processor: we never receive your name, email, payment card, billing address, or any other payment data. The App only asks Apple whether this purchase is active on your Apple Account, in order to unlock the premium styles, choosing the style of each day, 4K export and timelapses without the mark. Apple's handling of your data is governed by Apple's Privacy Policy.

6. Your paintings are made on your iPhone

Every painting is drawn by the App's own algorithms, entirely on your device. The App uses no artificial intelligence and no cloud service to paint: each day's painting is computed from that day's date and the random value created on your iPhone, and how much of it is painted is measured with your iPhone's clock. Painting needs no server and no internet connection. Nothing about your paintings, moments or notes is uploaded, and nothing you do in the App is used to train any artificial intelligence model.

7. External services and links you choose to open

Apart from Apple's App Store services (Section 5), the only data the App sends out is the analytics described in Section 4. There is no other server behind the App, and painting works without an internet connection; analytics events wait on the device and are sent when a connection is available.

Some buttons hand off to another app, to the system or to a website. These are always initiated by you and are governed by that provider's own privacy policy — not ours:

Share: opens the iOS share sheet with the image or timelapse you exported and a caption with the painting's title. It goes only where you choose to send it; we never receive it.
Save to Photos: adds the image or timelapse you exported to your photo library (see Section 8). The App cannot see the rest of your library.
Email: opens your mail app with our address filled in (About tab).
Instagram: opens the developer's Instagram profile (About tab).
Rate on App Store: opens the App Store (About tab).
Privacy Policy, Terms of Use and Support: open these pages, or Apple's Standard EULA, in your browser (About tab and Complete Atelier screen).

8. System permissions

The App asks for only two permissions. Both are optional: the App paints your day the same way if you decline them, and you can change either one at any time in the iOS Settings app.

Notifications (local only): used for one optional notice when today's painting is finished. The App asks at the end of the welcome screens, or when you turn on End-of-day notice in Settings. The notice is scheduled on your iPhone for the end of your day; there is no push notification service and no server sending notifications.
Photos — add only: used only when you tap Save to Photos, to add the image or timelapse you exported to your photo library. The App can only add; it cannot see, read or browse your photos. If you decline, you can still share the file with the share sheet.

The App does not access location, camera, microphone, contacts, calendar, reminders, media library, Bluetooth, motion, health, or biometric data. Keeping the screen awake while the painting is open, the widget and haptic feedback are standard features that need no permission; the screen goes back to normal as soon as you leave the App.

9. Marketing and advertising

The App displays no ads. We do not use data for remarketing, profiling, or advertising. We do not participate in ad networks, and we do not sell, rent, or share information with third parties.

10. Minors

The App is a general-audience lifestyle app and is not directed at children under 13. It requires no registration, shows no ads, has no chat or social features, and collects no personal information that identifies a person, which keeps it consistent with COPPA (United States), LGPD (Brazil) and GDPR (European Union) requirements for minors. In-App Purchases follow Apple's parental controls, including Ask to Buy for Family Sharing groups.

11. User rights (GDPR, CCPA, LFPDPPP, LGPD)

You have the right to access, rectify, delete, and object to the processing of your data. Here is how each one works in this App:

Right to access: Your paintings and moments are visible to you directly in the canvas, Moments and Gallery, and your settings in Settings and the About tab. For analytics data, email us.
Right to rectification: You can delete a moment together with its note, and change your day's hours, your settings and your language at any time.
Right to erasure: You can delete any moment. Uninstalling the App permanently deletes everything stored on your device, including the widget's data and the installation identifier. Analytics data is deleted automatically after 13 months, and you can ask us to delete it sooner by email. Because it is not linked to your identity, we may ask for details (such as the approximate dates you used the App and your iPhone model) to find it.
Right to object and to restrict processing: Email us to object to analytics processing.
Right to portability: You can export any painting as an image or a timelapse from the App at any time. We hold no personal data that identifies you on any server, so there is nothing else to export.
Right not to be subject to automated decisions: No decision affecting your legal rights, employment, credit, or insurance is made from any data the App handles.

For any question about your rights, email [email protected]. We reply within 30 days.

12. Security

Local data is stored inside the iOS sandbox and the App Group shared only with the App's own widget, protected by the operating system and by device-level disk encryption (Apple's Data Protection API). No other app can read it. Analytics events travel to our server over HTTPS, and purchases are handled end to end by Apple.

13. International transfers

The analytics service is operated by the Developer and hosted in the United States, and its traffic passes through Cloudflare's network. Analytics data is therefore processed in the United States. It is not linked to your identity, it is protected in transit with HTTPS, and it is never shared with third parties.

14. Changes to this policy

We may update this Privacy Policy to reflect changes to the App or to applicable law. The current version will always be published at this URL along with the date of the last update. Material changes will also be announced inside the App.

15. Governing law

This Policy is governed by the laws of the United Mexican States, in particular the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), without prejudice to the mandatory rights you have under the data protection laws of your country of residence. Any dispute will be submitted to the competent courts of Mexico City.

16. Contact

Privacy Officer: Christian Irack
Email: [email protected]
Postal address: Av. Javier Barros Sierra 495, Santa Fe Lomas de Santa Fe Zedec Santa Fé, Álvaro Obregón 01219, Mexico City, CDMX, Mexico